3 ms·

All they need to do is tell the truth. I.e. edit the README to say "We are not accepting contributions at this time". Or whatever is the actual state of affairs

by jahnu 2y ago

All they need to do is tell the truth. I.e. edit the README to say "We are not accepting contributions at this time". Or whatever is the actual state of affairs instead of misleading people. > Signal is open source for security reasons This seem to be in dispute. You can't distribute your own client. They provide the only binaries that can connect to the Signal network and so it's not possible to know if the source we see in the repo is the source used to build the client.

palata 2y ago
> whatever is the actual state of affairs instead of misleading people How are they misleading people? They are not saying "we will put resources and review all your contributions in the next day, and guarantee that all your feature requests will be implemented", are they? That's a big misconception about open source, and people really need to start understanding how it works. Being open source means that they provide their code under some license. We usually like this license because it means that we can reuse the code, and it also means that we can audit it and debug it and potentially adapt it to our specific needs (like compile it for an unsupported device). This is already great. Open source does NOT mean that they owe you anything at all. What you could have done before sending a contribution is ask them if they are interested and if they would have resources to help you. But I assume you didn't, did you? I will be very honest: I do a lot of open source, and I maintain open source projects. For free, in my free time. Your behaviour is actually very common, and it drives me crazy (because I work for free and people complain about it). To the point where my new projects are actually proprietary. I don't need to open source my code if people complain about it. "Just go buy your proprietary stuff and leave me alone" is where that kind of behaviour has pushed me. > This seem to be in dispute. You can't distribute your own client. You can't distribute it, but you can certainly use it. I run a client I compiled myself. They just don't want to end up in a situation where everybody downloads a third-party Signal because it has fancy features and it eventually turns out that this third-party is a malware. Again that's a valid security concern.
- jahnu 2y ago
  > How are they misleading people? By encouraging contributions but not accepting practically any of them and not communicating this. Go have a poke around yourself in the repo and the community forums and you'll see what I have already described happen many many times. Edit the README and spell out the actual state of affairs and all that wasted effort will stop. It's not entitlement on behalf of contributors, it's Signal org falsely proposing to people and giving the impression to the wider world that they can contribute when in practical terms they cannot. I didn't even say it was deliberate and maybe it's not but it sure as heck is unprofessional.
  - palata 2y ago
    The README says [1]: > If your pull request follows all of the advice above but still has not been merged, this usually means that the developers haven't had time to review it yet. We understand that this might feel frustrating, and we apologize. The Signal team is still small, but we are hiring. Again, this is how open source works. If you need the README to tell you "btw, we don't owe you anything, it is all best effort, and it may be that we don't have time to address your PR", then you haven't (yet) understood open source. Don't take it personally, a ton of people complain like you do. Which is why I don't open source my code anymore. Then people can't benefit from it, but at least they won't feel like they can put pressure on me to work for them for free. Because that's exactly what you are doing: even if you did put efforts into your PR, you are asking them to work for you for free right now. And you don't only put pressure by complaining on their GitHub issues: you go one step further by trying to get the HN community to help you put pressure on them. I have had a lot of people telling me "be careful: if you don't work in your free time to implement that feature for me, I won't use your project for free". And many people say that in a much less polite way. [1]: https://github.com/signalapp/Signal-iOS/blob/main/CONTRIBUTING.md#merging-can-sometimes-take-a-while https://github.com/signalapp/Signal-iOS/blob/main/CONTRIBUTI...
    - deleted 2y ago
      [deleted]
    - deleted 2y ago

by jahnu 2y ago

palata 2y ago

> whatever is the actual state of affairs instead of misleading people How are they misleading people? They are not saying "we will put resources and review all your contributions in the next day, and guarantee that all your feature requests will be implemented", are they? That's a big misconception about open source, and people really need to start understanding how it works. Being open source means that they provide their code under some license. We usually like this license because it means that we can reuse the code, and it also means that we can audit it and debug it and potentially adapt it to our specific needs (like compile it for an unsupported device). This is already great. Open source does NOT mean that they owe you anything at all. What you could have done before sending a contribution is ask them if they are interested and if they would have resources to help you. But I assume you didn't, did you? I will be very honest: I do a lot of open source, and I maintain open source projects. For free, in my free time. Your behaviour is actually very common, and it drives me crazy (because I work for free and people complain about it). To the point where my new projects are actually proprietary. I don't need to open source my code if people complain about it. "Just go buy your proprietary stuff and leave me alone" is where that kind of behaviour has pushed me. > This seem to be in dispute. You can't distribute your own client. You can't distribute it, but you can certainly use it. I run a client I compiled myself. They just don't want to end up in a situation where everybody downloads a third-party Signal because it has fancy features and it eventually turns out that this third-party is a malware. Again that's a valid security concern.

jahnu 2y ago
> How are they misleading people? By encouraging contributions but not accepting practically any of them and not communicating this. Go have a poke around yourself in the repo and the community forums and you'll see what I have already described happen many many times. Edit the README and spell out the actual state of affairs and all that wasted effort will stop. It's not entitlement on behalf of contributors, it's Signal org falsely proposing to people and giving the impression to the wider world that they can contribute when in practical terms they cannot. I didn't even say it was deliberate and maybe it's not but it sure as heck is unprofessional.
- palata 2y ago
  The README says [1]: > If your pull request follows all of the advice above but still has not been merged, this usually means that the developers haven't had time to review it yet. We understand that this might feel frustrating, and we apologize. The Signal team is still small, but we are hiring. Again, this is how open source works. If you need the README to tell you "btw, we don't owe you anything, it is all best effort, and it may be that we don't have time to address your PR", then you haven't (yet) understood open source. Don't take it personally, a ton of people complain like you do. Which is why I don't open source my code anymore. Then people can't benefit from it, but at least they won't feel like they can put pressure on me to work for them for free. Because that's exactly what you are doing: even if you did put efforts into your PR, you are asking them to work for you for free right now. And you don't only put pressure by complaining on their GitHub issues: you go one step further by trying to get the HN community to help you put pressure on them. I have had a lot of people telling me "be careful: if you don't work in your free time to implement that feature for me, I won't use your project for free". And many people say that in a much less polite way. [1]: https://github.com/signalapp/Signal-iOS/blob/main/CONTRIBUTING.md#merging-can-sometimes-take-a-while https://github.com/signalapp/Signal-iOS/blob/main/CONTRIBUTI...
  - deleted 2y ago
    [deleted]
  - deleted 2y ago