EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

08.18.19

GitHub is a Dagger Inside Free/Open Source Software (FOSS); This is Why Microsoft Bought It

Posted in Free/Libre Software, GPL, Microsoft at 6:30 am by Dr. Roy Schestowitz

Remember that GitHub is proprietary software, it is centralised, and it gives Microsoft control over its foremost rival, which is a movement rather than a company

Summary: A year later it seems pretty evident that Microsoft doesn’t like FOSS but is merely trying to control it, e.g. by buying millions of FOSS projects/repositories at the platform level (the above is what the Linux Foundation‘s Jim Zemlin said to Microsoft at their event while antitrust regulators were still assessing the proposed takeover)

THE PREVIOUS post ended by saying that we would deal separately with Microsoft’s GitHub and the threat it poses to Software Freedom. This threat is unfortunately growing over time as not enough people shun GitHub. They walk right into the trap.

“In its internal documents Microsoft once explained that it needs to attack Software Freedom while ensuring the attacks don’t look as though they come from Microsoft.”Microsoft is still the biggest foe of Software Freedom, which it combats constantly. No other company stands to benefit from the destruction of Software Freedom as much as Microsoft. The same goes for GNU/Linux. Microsoft hates it and if it could destroy it overnight, it would (it already tried many times and failed every time).

In its internal documents Microsoft once explained that it needs to attack Software Freedom while ensuring the attacks don’t look as though they come from Microsoft. This is what the likes of SCO and Black Duck are for. SCO’s case isn’t 100% over (believe it or not!) and Black Duck is still around and still active under another name because it got bought. It’s being amplified by Microsoft allies, a Microsoft-connected FUD bunch with history and ‘pedigree’. In “The license and security risks of using Node.js,” for instance, Black Duck continues to attack FOSS as usual, amplified by the anti-FOSS site Security Boulevard (propaganda front of an anti-FOSS hack). Days ago it also promoted/copy-pasted Black Duck’s “Review of Apache Struts vulnerabilities yields 24 updated advisories”. Security Boulevard is not a news site (though Google News thinks it is). It’s focused on FOSS…

“…Microsoft continues to attack FOSS. It’s just doing that less directly.”…always negative.

…has never mentioned back doors in proprietary software.

This anti-FOSS site is also constantly advertising WhiteSource (e.g. event placements, with a new example here), the ‘new’ Black Duck. They’re Microsoft partners. They co-author papers with Microsoft and they attack FOSS by proxy for Microsoft. What a truly malicious network of hacks. But the point we wish to make is, Microsoft continues to attack FOSS. It’s just doing that less directly. Security and licensing FUD (especially targeted at copyleft/GPL) is rampant. Now imagine how they can leverage GitHub to further amplify such FUD, as they very publicly do. They barely make that a secret. Their managers speak about that in Twitter. It’s all public. They bash the GPL. Consider who Microsoft put in charge of GitHub; past Techrights articles about him would likely be eye-opening [1, 2, 3, 4].

“It’s secret code and much worse things happen behind the scenes (including NSA surveillance; GitHub is in PRISM now).”Any project which takes Software Freedom seriously needs to avoid/reject GitHub and choose something else because GitHub is proprietary software, antithetical not just to FOSS but also to the decentralised nature of Git. It’s secret code and much worse things happen behind the scenes (including NSA surveillance; GitHub is in PRISM now). Days ago we noticed that a decentralised code/content project, Audius, chose GitHub [1, 2]. That’s like a vegetarian choosing to work for a butcher. We also noticed that the New York Times started pushing Microsoft GitHub (which is a proprietary software trap) under the headline “How to Take Your Open Source Project from Good to Great” (as if Microsoft entrapment in a proprietary software platform makes it “Great”!).

“As before, many so-called ‘studies’ or surveys count nothing but data from Microsoft (GitHub). If you’re not on it, you don’t exist or don’t count.”We’ve been observing a disturbing trend lately. As before, many so-called ‘studies’ or surveys count nothing but data from Microsoft (GitHub). If you’re not on it, you don’t exist or don’t count. This way Microsoft can bias statistics about so-called ‘FOSS’ (only what Microsoft controls). This is not a particularly new issue; GitHub has long attracted projects that don’t care so much about freedom. GitHub is strictly centralised and it is proprietary software. GitHub also helps put one heck of a twist on the term “Open Source” (which increasingly means nothing at all, e.g. outsourcing to a proprietary software platform of Microsoft). 2 days ago we saw evidence that Google still makes this mistake by outsourcing its projects to Microsoft. Is Google out of its mind? GitHub is Google’s rival. It’s controlled by company that still blackmails Android using patent lawsuits. Wrong platform for Google’s code, no? Unless they stop outsourcing code (and control) to Microsoft — a company full of criminals (who admit their crimes but never get arrested) — they will simply make Microsoft stronger. Microsoft grossly misuses its control of the platform, based on imperialism and racism. You just know that something has gone very wrong with FOSS (or rather that Microsoft sabotages it for a price) when “going open source” means outsourcing everything to a proprietary software platform of Microsoft, which censors projects, bans developers etc. based on country of birth/origin.

Belatedly, or perhaps too late, countries realise that GitHub is a danger and a risk factor. Days ago JAXenter wrote:

At the end of July, GitHub enforced access blocks for its software repositories in line with United States trade controls, including U.S. Export Administration Regulations, on sanctioned countries. Instantly this made it difficult for developers based in countries such as Cuba, Iran, North Korea, and Syria to access private repository services, private organisational accounts or GitHub Marketplace Services. However, this also limited access to public repository services for personal communications only.

It’s important to stress that the individual developers themselves had no say over this decision. GitHub has to follow the rules around selling software to specific countries, yet the software itself is neither sold or bought. For open source projects, copying and distribution are important for building up community and use of the software. Blocking GitHub access – one of the main distribution methods for these software assets – therefore has an impact on the community building activity and makes it more difficult over time.

GitHub has become a central resource for downloading the latest official release code for projects and developers who use these repositories for building their own applications. Suddenly blocking access to GitHub repositories has meant that developers based in those countries were cut off and unable to work with many components, which highlights a key issue for open source software developers: if you don’t want your software to be restricted by international politics you had better choose self-hosted solutions, such as GitLab.

Business Times (Chinese site) explained that this motivated China to bypass GitHub altogether:

China will officially be forming the country’s first-ever open-source software foundation to bolster its open-source software community. The plan was unveiled by Huawei Technologies, which plans to partner with domestic software firms to achieve the ambitious plan. Huawei also revealed that it plans to establish the infrastructure in as early as one or two months.

The plan to establish the country’s first open-source software hub was put into place following the ban imposed by GitHub, the world’s largest host of open-source software, on sanctioned nations by the United States. The US-based company began blocking access to its services in July, starting with the removal of Iranian accounts.

The incident itself has highlighted the increasing dangers of geopolitical interference on the open-source community. China likely felt that it needed to establish its own community as a precaution if the US government does decide to sanction the nation as trade disputes escalate.

The Phnom Penh Post and other Asian sites said this:

The plan for the software foundation came after GitHub, the world’s largest host of source code, last month prevented users in Iran and other nations sanctioned by the US government from accessing portions of its service.

Last but not least, ITWeb wrote the following some days ago:

This follows an acknowledgement from GitHub, the world’s largest open source code host, that it has to prevent users in nations sanctioned by the US government – potentially including China as well as Iran and Crimea – from accessing portions of its service.

[...]

While it is not yet clear whether Huawei or any other Chinese organisation has been impacted by GitHub’s actions, Wang lamented that although it had long been the de facto open source position that open source communities were supposed to be fair and equitable for all, the American position, and GitHub’s compliance with its government’s dictates, meant that open source had become a pawn in the power play between countries.

As we explained some days ago in relation to bogus foundations, it’s not clear whether Huawei is serious about FOSS and BGR published “Huawei’s long-awaited mobile OS elicits mixed reactions in China”. It quotes Torvalds as saying: “Talk is cheap. Show me the code.”

On it goes: “That user’s skepticism about the OS would seem to stem from its viability as a replacement for Android, which continues to be talked up given that the ban remains in place that prevents US companies (like Google) from working with Huawei. Accordingly, Huawei’s billionaire founder Ren Zhengfei sent out an internal memo in recent days spelling out his ambition of building an “iron army” over the next three to five years that can withstand the US ban — the “iron army,” being a generalized reference to a Huawei overhaul that puts more of the company’s fate in its own hands.”

The bottom line is, a lot of what’s being characterised as Open Source is nowadays neither “Open Source” (as per OSD) nor Free software. We’ll deal with that in our next post which is dedicated solely to openwashing.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Links 8/12/2019: Debian Init Systems GR, NomadBSD 1.3

    Links for the day



  2. Can We Quit Celebrating DRM in GNU/Linux?

    Over the past couple of days various news sites and "Linux" sites expressed great satisfaction [1-5] over the passive embrace of Disney's DRM ploy (Disney+), even when Disney itself rejects DRM, seeing the harms practically caused by it [6,7]



  3. You Know WSL is Bad for GNU/Linux Because Anti-Linux People, Microsoft and Its Propagandists, Want People to Use That

    Microsoft and its boosters (and media partners) haven’t grown tired of spreading falsehoods to stigmatise and take control of GNU/Linux by creating their own versions and traps for it



  4. IRC Proceedings: Saturday, December 07, 2019

    IRC logs for Saturday, December 07, 2019



  5. 5 Years Ago the Linux Foundation Turned Linux.com Into a Non-Linux Site

    One can leverage the Internet Archive’s Wayback Machine to better understand how, over time, the Foundation called “Linux” deviated or diverged away from its mission statement for the sole purpose of raising corporate funds and selling influence to corporations (passing the community’s hard work to them — a form of tacit privatisation)



  6. Microsoft Redefining Ownership and Identity of GNU/Linux

    The idea that “Microsoft loves Linux” is as insane as it gets; but the lie which is “Microsoft loves Linux” is a powerful enabler of Microsoft entryism, e.g. if Greg steps down, does a Microsoft employee become the deputy of Linus Torvalds?



  7. Things That Cannot Be Said

    The limits on what we can say are mostly defined by what sources permit us to say publicly (for the sake of source protection)



  8. Fake European Patents (on Algorithms) Leading to Fake Embargoes

    Law firms have gotten their way in Germany; instead of supporting the productive workers the patent system is nowadays promoting the litigation 'industry' and it ought to be corrected



  9. From Moderate Advice to FUD and Misinformation: The Case of a VPN Vulnerability (CVE-2019-14899)

    What should have been a trivial bugfix in a variety of operating systems and bits of software — both proprietary and Free software — somehow became anti-Linux FUD, clickbait and worse



  10. Dangerous Thinker

    Society oughtn't be alarmed by people who say unusual things; it should be wary and sceptical of those corporations ever so eager to silence such people



  11. Unitary Patent (UPC) Died Along With the Credibility of Managing IP and the Rest of the UPC Lobby

    It is pretty astounding that Team UPC (collective term for people who crafted and lobby for this illegal construct) is still telling us lies, even in the absence of underlying supportive facts, and pressure groups disguised as "news sites" latch onto anything to perpetuate an illusion of progress (even in the face of a growing number of major barriers)



  12. IRC Proceedings: Friday, December 06, 2019

    IRC logs for Friday, December 06, 2019



  13. Links 7/12/2019: Fedora 31 Elections Results, Lots of Media Drama Over VPN Bug

    Links for the day



  14. Links 6/12/2019: DRM in GNU/Linux and Sparky Bonsai

    Links for the day



  15. The EPO Rejects Innovation

    The EPO ceased caring about the needs of scientists whose work involves invention; instead, EPO management crafts increasingly lenient guidelines that yield illegal European Patents (not compatible with the EPC) that heavily-besieged EPO judges are unable to stop



  16. Startpage CEO Robert Beens in 'Damage Control' Mode, Trying to Get Startpage Relisted After Selling to a Massive Surveillance Company

    PrivacytoolsIO is being lobbied by the CEO of Startpage to relist Startpage, based on no actual refutations at all



  17. IRC Proceedings: Thursday, December 05, 2019

    IRC logs for Thursday, December 05, 2019



  18. Links 5/12/2019: qBittorrent 4.2.0, Expensive Librem 5 and OpenBSD Bugs

    Links for the day



  19. Microsoft Staff Repeatedly Refuses to Tell How Many People Use WSL, Defends Patent Extortion and Blackmail of Linux Instead

    The people who develop WSL (mostly Microsoft employees) get easily irritated when asked how many people actually use this thing; but more interestingly, however, they reveal their disdain for GNU/Linux and support for Microsoft blackmail (for 'Linux patent tax')



  20. IRC Proceedings: Wednesday, December 04, 2019

    IRC logs for Wednesday, December 04, 2019



  21. Links 4/12/2019: Tails 4.1, UCS 4.4-3 and Proxmox VE 6.1

    Links for the day



  22. Google Tightens Its Noose

    Now it’s official! Google is just a bunch of shareholders looking to appease the Pentagon at all costs



  23. Europeans Still Need to Save the European Patent Office From Those Who Attack Its Patent Quality

    Patent quality is of utmost interest; without it, as we're seeing at the EPO and have already seen at the USPTO for a number of years, legal disputes will arise where neither side wins (only the lawyers win) and small, impoverished inventors or businesses will be forced to settle outside the courts over baseless allegations, often made by parasitic patent trolls (possessing low-quality patents they don't want scrutinised by courts)



  24. We Never Accepted and Will Never Accept Corporate Money

    Corporate money is a unique problem because of its magnitude and the fact that it's impersonal; shareholders can only ever accept its supposed justifications if they're receiving something in return (of proportional worth to the payment/transaction)



  25. IRC Proceedings: Tuesday, December 03, 2019

    IRC logs for Tuesday, December 03, 2019



  26. Links 3/12/2019: elementary OS 5.1 Hera, Plasma 5.17.4, Firefox 71

    Links for the day



  27. Laundering the Reputation of Criminals: That's an Actual Job

    An important reminder that the manufactured, paid-for (media is being bribed) image of Bill Gates is the product of the PR industry he enlisted to distract from his endless crimes



  28. 'Priceless' Tickets to the EPO's Back End and Team UPC

    CIPA's and the EPO's event (later this week) is more of the same; the EPO exists not to serve European businesses but a bunch of law firms and their biggest clients (which usually aren't even European)



  29. IRC Proceedings: Monday, December 02, 2019

    IRC logs for Monday, December 02, 2019



  30. New EPO Leak Shows That the Rumours and Jokes Are Partly True and We Know Who 'Runs the Show'

    Europe’s second-largest institution is so profoundly dysfunctional, a reprehensible kakistocracy of tribalism, money-grabbing career-climbing autocrats and possibly major fraud; today’s leak looks at what motivated and enabled the formation and latest incarnation of “Team Campinos”


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts