08.18.19

GitHub is a Dagger Inside Free/Open Source Software (FOSS); This is Why Microsoft Bought It

Posted in Free/Libre Software, GPL, Microsoft at 6:30 am by Dr. Roy Schestowitz

Remember that GitHub is proprietary software, it is centralised, and it gives Microsoft control over its foremost rival, which is a movement rather than a company

Summary: A year later it seems pretty evident that Microsoft doesn’t like FOSS but is merely trying to control it, e.g. by buying millions of FOSS projects/repositories at the platform level (the above is what the Linux Foundation‘s Jim Zemlin said to Microsoft at their event while antitrust regulators were still assessing the proposed takeover)

THE PREVIOUS post ended by saying that we would deal separately with Microsoft’s GitHub and the threat it poses to Software Freedom. This threat is unfortunately growing over time as not enough people shun GitHub. They walk right into the trap.

“In its internal documents Microsoft once explained that it needs to attack Software Freedom while ensuring the attacks don’t look as though they come from Microsoft.”Microsoft is still the biggest foe of Software Freedom, which it combats constantly. No other company stands to benefit from the destruction of Software Freedom as much as Microsoft. The same goes for GNU/Linux. Microsoft hates it and if it could destroy it overnight, it would (it already tried many times and failed every time).

In its internal documents Microsoft once explained that it needs to attack Software Freedom while ensuring the attacks don’t look as though they come from Microsoft. This is what the likes of SCO and Black Duck are for. SCO’s case isn’t 100% over (believe it or not!) and Black Duck is still around and still active under another name because it got bought. It’s being amplified by Microsoft allies, a Microsoft-connected FUD bunch with history and ‘pedigree’. In “The license and security risks of using Node.js,” for instance, Black Duck continues to attack FOSS as usual, amplified by the anti-FOSS site Security Boulevard (propaganda front of an anti-FOSS hack). Days ago it also promoted/copy-pasted Black Duck’s “Review of Apache Struts vulnerabilities yields 24 updated advisories”. Security Boulevard is not a news site (though Google News thinks it is). It’s focused on FOSS…

“…Microsoft continues to attack FOSS. It’s just doing that less directly.”…always negative.

…has never mentioned back doors in proprietary software.

This anti-FOSS site is also constantly advertising WhiteSource (e.g. event placements, with a new example here), the ‘new’ Black Duck. They’re Microsoft partners. They co-author papers with Microsoft and they attack FOSS by proxy for Microsoft. What a truly malicious network of hacks. But the point we wish to make is, Microsoft continues to attack FOSS. It’s just doing that less directly. Security and licensing FUD (especially targeted at copyleft/GPL) is rampant. Now imagine how they can leverage GitHub to further amplify such FUD, as they very publicly do. They barely make that a secret. Their managers speak about that in Twitter. It’s all public. They bash the GPL. Consider who Microsoft put in charge of GitHub; past Techrights articles about him would likely be eye-opening [1, 2, 3, 4].

“It’s secret code and much worse things happen behind the scenes (including NSA surveillance; GitHub is in PRISM now).”Any project which takes Software Freedom seriously needs to avoid/reject GitHub and choose something else because GitHub is proprietary software, antithetical not just to FOSS but also to the decentralised nature of Git. It’s secret code and much worse things happen behind the scenes (including NSA surveillance; GitHub is in PRISM now). Days ago we noticed that a decentralised code/content project, Audius, chose GitHub [1, 2]. That’s like a vegetarian choosing to work for a butcher. We also noticed that the New York Times started pushing Microsoft GitHub (which is a proprietary software trap) under the headline “How to Take Your Open Source Project from Good to Great” (as if Microsoft entrapment in a proprietary software platform makes it “Great”!).

“As before, many so-called ‘studies’ or surveys count nothing but data from Microsoft (GitHub). If you’re not on it, you don’t exist or don’t count.”We’ve been observing a disturbing trend lately. As before, many so-called ‘studies’ or surveys count nothing but data from Microsoft (GitHub). If you’re not on it, you don’t exist or don’t count. This way Microsoft can bias statistics about so-called ‘FOSS’ (only what Microsoft controls). This is not a particularly new issue; GitHub has long attracted projects that don’t care so much about freedom. GitHub is strictly centralised and it is proprietary software. GitHub also helps put one heck of a twist on the term “Open Source” (which increasingly means nothing at all, e.g. outsourcing to a proprietary software platform of Microsoft). 2 days ago we saw evidence that Google still makes this mistake by outsourcing its projects to Microsoft. Is Google out of its mind? GitHub is Google’s rival. It’s controlled by company that still blackmails Android using patent lawsuits. Wrong platform for Google’s code, no? Unless they stop outsourcing code (and control) to Microsoft — a company full of criminals (who admit their crimes but never get arrested) — they will simply make Microsoft stronger. Microsoft grossly misuses its control of the platform, based on imperialism and racism. You just know that something has gone very wrong with FOSS (or rather that Microsoft sabotages it for a price) when “going open source” means outsourcing everything to a proprietary software platform of Microsoft, which censors projects, bans developers etc. based on country of birth/origin.

Belatedly, or perhaps too late, countries realise that GitHub is a danger and a risk factor. Days ago JAXenter wrote:

At the end of July, GitHub enforced access blocks for its software repositories in line with United States trade controls, including U.S. Export Administration Regulations, on sanctioned countries. Instantly this made it difficult for developers based in countries such as Cuba, Iran, North Korea, and Syria to access private repository services, private organisational accounts or GitHub Marketplace Services. However, this also limited access to public repository services for personal communications only.

It’s important to stress that the individual developers themselves had no say over this decision. GitHub has to follow the rules around selling software to specific countries, yet the software itself is neither sold or bought. For open source projects, copying and distribution are important for building up community and use of the software. Blocking GitHub access – one of the main distribution methods for these software assets – therefore has an impact on the community building activity and makes it more difficult over time.

GitHub has become a central resource for downloading the latest official release code for projects and developers who use these repositories for building their own applications. Suddenly blocking access to GitHub repositories has meant that developers based in those countries were cut off and unable to work with many components, which highlights a key issue for open source software developers: if you don’t want your software to be restricted by international politics you had better choose self-hosted solutions, such as GitLab.

Business Times (Chinese site) explained that this motivated China to bypass GitHub altogether:

China will officially be forming the country’s first-ever open-source software foundation to bolster its open-source software community. The plan was unveiled by Huawei Technologies, which plans to partner with domestic software firms to achieve the ambitious plan. Huawei also revealed that it plans to establish the infrastructure in as early as one or two months.

The plan to establish the country’s first open-source software hub was put into place following the ban imposed by GitHub, the world’s largest host of open-source software, on sanctioned nations by the United States. The US-based company began blocking access to its services in July, starting with the removal of Iranian accounts.

The incident itself has highlighted the increasing dangers of geopolitical interference on the open-source community. China likely felt that it needed to establish its own community as a precaution if the US government does decide to sanction the nation as trade disputes escalate.

The Phnom Penh Post and other Asian sites said this:

The plan for the software foundation came after GitHub, the world’s largest host of source code, last month prevented users in Iran and other nations sanctioned by the US government from accessing portions of its service.

Last but not least, ITWeb wrote the following some days ago:

This follows an acknowledgement from GitHub, the world’s largest open source code host, that it has to prevent users in nations sanctioned by the US government – potentially including China as well as Iran and Crimea – from accessing portions of its service.

[...]

While it is not yet clear whether Huawei or any other Chinese organisation has been impacted by GitHub’s actions, Wang lamented that although it had long been the de facto open source position that open source communities were supposed to be fair and equitable for all, the American position, and GitHub’s compliance with its government’s dictates, meant that open source had become a pawn in the power play between countries.

As we explained some days ago in relation to bogus foundations, it’s not clear whether Huawei is serious about FOSS and BGR published “Huawei’s long-awaited mobile OS elicits mixed reactions in China”. It quotes Torvalds as saying: “Talk is cheap. Show me the code.”

On it goes: “That user’s skepticism about the OS would seem to stem from its viability as a replacement for Android, which continues to be talked up given that the ban remains in place that prevents US companies (like Google) from working with Huawei. Accordingly, Huawei’s billionaire founder Ren Zhengfei sent out an internal memo in recent days spelling out his ambition of building an “iron army” over the next three to five years that can withstand the US ban — the “iron army,” being a generalized reference to a Huawei overhaul that puts more of the company’s fate in its own hands.”

The bottom line is, a lot of what’s being characterised as Open Source is nowadays neither “Open Source” (as per OSD) nor Free software. We’ll deal with that in our next post which is dedicated solely to openwashing.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email
  • Slashdot

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Living in a State of Constant and Never-Ending Fear Will Harm Software Freedom

    "Freedom" or "liberty" may seem to have been co-opted by extreme right-wing and COVID-denying (or COVID-minimising) elements, but at the moment we do stand to lose many "tech rights" (in the name of "protecting" us)



  2. [Meme] Mozilla's 2020 Vision

    Mozilla does not seem to understand that proprietary Azure and proprietary GitHub won't offer Mozilla a way/path out of the mess it's in



  3. Techrights Done With Maintenance For Now, Will Resume Posting at a Higher Publication Pace

    With a few new features added to the site we can finally resume normal operations (more articles per day)



  4. Moving to Phones Won't Liberate Users

    A so-called 'phone' (or 'smart' phone) with Linux under the bonnet isn't freedom; it's a branding war being won, but principles are being abandoned



  5. Links 29/10/2020: LibreOffice 7.0.3, Linux 5.9.2, NVIDIA 455.38 Linux Driver

    Links for the day



  6. Links 29/10/2020: Istio 1.6.13, Krita 4.4.1 and PyPI Key-Signing Ceremony

    Links for the day



  7. IRC Proceedings: Wednesday, October 28, 2020

    IRC logs for Wednesday, October 28, 2020



  8. Links 28/10/2020: Linux Dropping WiMAX Support, Istio 1.7.4, Ubuntu is “Hirsute Hippo”

    Links for the day



  9. Linux Foundation (Men for Monopolies) Once Again Hijacking Women's (and Minorities') Voices for Public Relations

    Diversity and tolerance are absolutely essential, but those who preach or lecture us about it most loudly (their financial means or privilege enable media reach) set a bad example and are mostly opportunistic hypocrites who perpetuate the status quo



  10. In a State of Flux Due to Maintenance and Improvements

    For the first time since summer of 2019 we're investing time and effort improving the site in a number of ways



  11. Links 28/10/2020: Torvalds on Succession, PyTorch 1.7.0

    Links for the day



  12. [Meme] Stealing the Competition

    After the fall (and fail) of CodePlex Microsoft decided to grab the Linux Foundation and most Git-based projects (through GitHub) — a strategy even Microsoft can learn to love



  13. IRC Proceedings: Tuesday, October 27, 2020

    IRC logs for Tuesday, October 27, 2020



  14. Links 28/10/2020: FreeBSD 12.2, NixOS 20.09 and WordPress 5.6 Beta 2

    Links for the day



  15. Taking Our Efforts to the Next Level in an Increasingly Proprietary and Hostile Web

    Web users are being repressed by mechanisms of mass manipulation, control and restrictions; the Web may not be going away any time soon, but architectural and topological issues need to be overcome (the sooner, the better)



  16. Read Techrights Without a Web Browser

    Any text editor can now be used to read Techrights, owing to a daily bulletin we've set up and will maintain every day



  17. [Meme] Torvalds Assimilated

    People belatedly realise that Microsoft’s plan for Git (and for Linux) isn't for the betterment of those projects but for Microsoft monopoly



  18. Links 27/10/2020: FuguIta 6.8, Fedora 33, Red Hat Satellite 6.8, KDE Plasma 5.20.2 and GStreamer 1.18.1

    Links for the day



  19. Site Changes Ahead of Anniversary

    We’re making some changes to the presentation and function of the site — changes that will become more prominent over the coming days



  20. IRC Proceedings: Monday, October 26, 2020

    IRC logs for Monday, October 26, 2020



  21. Links 26/10/2020: rpminspect 1.2, Open Source Hardware Certification and LibreOffice Conference

    Links for the day



  22. Links 26/10/2020: Debian "Bullseye" Artwork, Fwupd 1.5 Released

    Links for the day



  23. [Meme] Satya Na-DL

    Microsoft has shown its real priorities (just before the weekend when many people might not notice)



  24. Jonathan Wiltshire and Debian, Falsified Harassment Claims, Tiger Computing and GCHQ

    Reprinted with permission from Debian Community News



  25. Links 26/10/2020: Linux 5.10 RC1 and Loongsoon Laptops

    Links for the day



  26. The Downfall of Free Software Leaders (and Their Projects or Missions)

    "Cancel George Orwell, and happy hacking."



  27. IRC Proceedings: Sunday, October 25, 2020

    IRC logs for Sunday, October 25, 2020



  28. Links 25/10/2020: Kodi 18.9, ScummVM Android Love, Cutelyst 2.13

    Links for the day



  29. [Meme] Captain Zemlin and Neil McGovern's Ugly Legacy in GNOME (His Predecessors Work for Microsoft Directly Now)

    The Linux Foundation is already ‘sold’ and Microsoft Tim‘s interview with Neil McGovern, published a few days ago, was rather revealing (comments on the article/interview were also harsh)



  30. How Microsoft is Still Worse Than Google

    "I have decided that we should not publish these extensions. We should wait until we have a way to do a high level of integration that will be harder for the likes of Notes, Wordperfect to achieve, and which will give Office a real advantage."


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts