Open Source

31197 readers

213 users here now

All about open source! Feel free to ask questions, and share news, and interesting stuff!

Useful Links

Rules

Posts must be relevant to the open source ideology
No NSFW content
No hate speech, bigotry, etc

Related Communities

Community icon from opensource.org, but we are not affiliated with them.

founded 5 years ago

MODERATORS

[email protected]

149

Corporate Open Source is Dead (m.youtube.com)

submitted 6 months ago by [email protected] to c/[email protected]

32 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 58 points 6 months ago (1 children)

Seriously, don't sign a CLA

A contributor license agreement, or CLA, usually (but not always) includes an important clause: a copyright assignment.

This is a strategy employed by commercial companies with one purpose only: to place a rug under the project, so that they can pull at the first sign of a bad quarter. This strategy exists to subvert the open source social contract. These companies wish to enjoy the market appeal of open source and the free labor of their community to improve their product, but do not want to secure these contributors any rights over their work.

List of some companies that use CLAs: https://en.wikipedia.org/wiki/Contributor_License_Agreement#Users

[–] [email protected] 9 points 6 months ago (1 children)

First link gives an SSL warning for me. Here's the WayBackMachine link https://web.archive.org/web/20240425192244/https://drewdevault.com/2023/07/04/Dont-sign-a-CLA-2.html

[–] [email protected] 6 points 6 months ago (1 children)

Maybe your browser doesn’t like Let’s Encrypt certificates.

[–] [email protected] 5 points 6 months ago (1 children)

No issues here whatsoever with other sites, including those that use L.E. certs. Weird. I guess it is a Tor circuit related issue. On another browser without Tor it loads fine.

[–] [email protected] 2 points 6 months ago (1 children)

I clicked it now and it's fine. I think sometimes LE certs haven't renewed yet in their time zone of origin, even tho in the viewers time zone it is expired. As far as I can tell, ssl certs don't have time zone fields for their dates, which seems kinds weird.

[–] [email protected] 2 points 6 months ago

Right. Thanks for sharing that thought. The weird thing was that the warning was about the domain name not being listed except for two other domains including one wildcard. Maybe it has to do with the fact the Drew had to deal with severe DDOS attacks some time ago, and had to move and rebuild services which may have included their blog. I had this with Tor browser, and then tested with LibreWolf configured for Tor and got the same error (I didn't check the details of the two Tor circuits) I made a screenshot of the warning.