Bonum Certa Men Certa

Microsoft Continues to Attack and Steal From the Open Source/Free Software Communities

Law-breakers won't change their ways; they only optimise their PR strategy (and bribe more of the media to play along)

Microsoft Loved Linux.



Summary: Microsoft cannot be trusted and there's no "new Microsoft," as another fairly new story serves to show

"Shocked, Roy!"



So said a reader of ours, who used to work for Microsoft.

"Microsoft copies/steals lerna," our reader summarised, pointing to this archived copy/snapshot of a page that's now gone (although the Web site is still there).

We are gratified to see that more people from inside Microsoft are starting to see just how evil the company really us. I know of several such people, some of whom I speak to regularly. They have inside information and leads/tips.

It will be good for Techrights to make a copy anyone can find by searching. The original was removed. Sometimes Microsoft bribes or threatens to make this happen (e.g. threatening through one's boss/customers). We covered examples of that in past years.

With the original deleted we think it would only be fair to reproduce the full message (the emphasis below is ours for the "tl;dr" crowd):

I think it's time I publicly shared about how Microsoft stole my code and then spit on it.

I'd been waiting for them to do something about it, but that is clearly never happening.

When we were working on Babel 6, one of the big changes was to split everything up in to nice little plugin packages. However, this created a need to manage dozens of packages. Thus @lernajs was born I picked up Lerna a little while later and focused on making it work well for design systems. I rewrote it like 5 times to try and get the architecture right. Lerna then started getting picked up by others who also contributed back and added features. I enjoyed watching it grow and so I started looking out for users. One day I came across a new design system from a team at Microsoft. I saw that it was made up of lots of small packages. I was excited and wondered "ooh is MS using Lerna?" It turns out, no they were not. They were using this other thing called "Rush". I hadn't heard of it, but I was interested in seeing how it differed from Lerna. I found the repo and started exploring. The first thing I noticed was how familiar all the code was. I could navigate the file structure very easily. I realised that it was almost a mirror of Lerna's code base. Files and directories were named the same things, it had many of the same core functions with code that I distinctly remembered writing. But no big deal right? It must be a fork. I was actually flattered at first. So I went back in the git history. I got all the way back to the first commit, and looked at the date. Turns out Rush was created a couple weeks after Lerna was announced. I continued working through the commit history and looked at commits that added features, it all felt so familiar and now I was getting suspicious. Comparing dates of commits, it looked like Rush kept copying changes from Lerna days after they were made. Rewritten using this weird event system they added. It left a bad taste in my mouth, I could tell this was my code. I looked at the license, no mention. I looked at the readme... Oh wait In the readme they acknowledge the fact that there are "other solutions" and say that they are bad. No mention of the fact that Rush was taken directly from one of these bad other solutions. You know if it were anyone else, I would have been mildly annoyed and ignored it. But Microsoft is a multi billion dollar corporation. If they are going to steal code without crediting the original author I'm gonna be pissed. So I reached out to people I knew at Microsoft. This was probably a year ago now. They were shocked and apologized. But since then nothing has happened. Oh wait yeah, something did happen. The commit history of Rush was messed with and a lot of the code was moved around, functions renamed, rewritten. It still feels familiar, but it's more scrambled. Instead of just updating a license or even just adding a footnote, they went through all that trouble. Anyways, it's really annoyed me to listen to all these people give Microsoft free good press about open source when clearly their product org is still happy to be dicks to open source communities I don't trust Microsoft (or Google or Facebook or Amazon) to be good shepherds of open source communities.

Just because we've made it impossible to compete with their old closed source stacks doesn't mean they'll act in the best interest of open source And just because there are great people at Microsoft who love open source and want to do the right thing does not mean that they'll be able to stop Microsoft from doing shitty things when there's money involved. I know plenty of people at big corporations who want to change things but can't because millions of dollars are in the way. A few years back we were able to petition GitHub to start improving the tools the offered to open source maintainers.

later on at a @maintainerati event, GitHub acknowledged that this letter had a huge impact on how they worked with open source communities Imagine a couple hundred people signing a letter to try and change things at Microsoft/Google/Facebook and it actually working. These companies deal with stuff like that on a daily basis and it doesn't make them trip up for even a second The consolidation of our infrastructure is dangerous. Having lots of small companies or even medium sized corporations forces them to work together without much effort which prevents any one of them from ever totally fucking us over The tech industry has so many monopolies right now. Building more everyday. It's only going to hurt consumers more and more. And when it comes to infrastructure, we're going to be those fucked over consumers If you trust a handful of corporations with your entire toolchain and expect them not to fuck you over I've got a bridge to sell you



As recently as this year we wrote about another such example. People, watch out. The warnings are there.

Recent Techrights' Posts

Links 02/02/2025: Website Revamps, Blogging About Blogging, and Self-Harming Tariff Wars (Higher Prices)
Links for the day
 
Yandex Has Nearly Caught Up With Microsoft Internationally, Bing Falls to Pre-LLM Hype Levels
Of course we've been saying all along that this would happen
Germany's 'Share' of GNU/Linux Rises to All-Time High Based on This Surveyor
Many public services have made the move to GNU/Linux
Microsoft Uses the Mindset of Drug Dealers and Pays 'News' Sites to Sell 'Drugs'
Microsoft pays publishers to spread the illusion that the only viable option for developers and non-developers is "drugs" like Visual Studio and Microsoft Office, respectively
Windows Going South in the "Global South" (Africa and More)
Microsoft has long been shameless about using the tactics of drug dealers
Sharp Drop for Microsoft Windows This Month, Based on statCounter
Facebook meanwhile censors GNU/Linux advocacy
3 Months Ago Lupa Saw 4,200+ Unique Gemini Capsules; Now It Sees Nearly 4,400
many bots target our capsule (129,152 Gemini requests yesterday alone)
Gemini Links 02/02/2025: Geminispace Targeted by Chatbots, Gabbro 0.1.1 Released
Links for the day
Oracle's Debt Soars to 100 Billion Dollars (12 Billion Added in Just 9 Months!) While Larry Ellison Backs Fascism for Bailouts, Graft, and "Contracts"
Including attempts to gain control of TikTok, owing to the corrupt dictator long promoted by Larry Ellison (also via Twitter takeover)
Links 02/02/2025: Union-Busting and Censorship by Executions
Links for the day
Gemini Links 02/02/2025: Limits Pushing, Free Software Absolutism, and Why Gemini Matters
Links for the day
Slopwatch: BetaNews and linuxsecurity.com Have Just Published More Fake 'Articles' About "Linux"
There's probably more "Linux" slop out there, but we do our best to identify it on a daily basis
Richard Stallman Has Another Talk in India Tomorrow, at Least Fourth India Talks in Recent Days
In the past month he has given at least half a dozen talks
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, February 01, 2025
IRC logs for Saturday, February 01, 2025
Links 01/02/2025: Chinese and American Censorship, Cloud-[sic]Native Targeted by Software Patents
Links for the day
Links 01/02/2025: Belated Happy New Year 2025 and Gabbro 0.1.2
Links for the day
Hiring for Tech Roles Based on Perceived Loyalty is No Better Than Hiring to Meet Diversity Quotas
What we're seeing right now is a national security disaster and it is almost purely about technology
S.E.O. SPAM by Serial Sloppers With L.L.M. Garbage is Hurting Linux
We continue to run Slopwatch
Links 01/02/2025: Administrative Chaos and Aviation Disasters Persist
Links for the day
Arrested: Albanian Outreachy whistleblowers, Sonny Piers GNOME & Debian connections
Reprinted with permission from Daniel Pocock
Links 1/2/2025: LLM Hype Revisited, Linuxwashing by Oumi
Links for the day
Growing Evidence That the Patent Industry Has Become a Major Scam
Seeing that the patent "industry" has turned to serious crimes (sometimes to cover up corruption) and seeing that the net negative is clearer for all to see, people who argue for abolition of all patents will have a field day
IBM Says That Half of Its "Assets" is Basically Pure Fiction ("Goodwill")
It times get tough, IBM can sell "Goodwill" at the local pawn shop and pay back the lenders, right?
Planet Ubuntu Overrun by LLM Slop? Faizul "Piju" 9M2PJU Seems to be Publishing Fake Articles About "Linux"...
Maybe it is "assisted" by LLM slop, but slop is slop and it introduces many problems
Gemini Links 01/02/2025: LLMs, Analog Computer, and BorgBackup
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, January 31, 2025
IRC logs for Friday, January 31, 2025
Links 31/01/2025: Mass Layoffs at Amazon and Microsoft, Sweden Again Fails to Protect Critics of Violence
Links for the day
Slopwatch: Fake Articles About "Linux" and More (Latest Roundup Featuring BetaNews, Janus Atienza, and Brittany Day From Guardian Digital, Inc)
LLM slop season
Microsoft Staff Explains How Microsoft Swindled Employees and Avoided Paying Out Severance Pay (Microsoft Hasn't Much Money Left in the Bank)
This is a classic way to avoid paying workers
"Not one of us" by Dr. Andy Farnell
Elon Musk has brought embarrassment to nerds and technologists
Gemini Links 31/01/2025: "Bulletin Buble" and "Why Blog?"
Links for the day
Static Site Generators (SSGs) Pay Off: Vastly Faster Sites, Much Smaller Hosting Bills
success story for SSGs
Of Note: Linux Foundation Has Already Let Linux.com Rot for About 4 Months (No Activity)
there's no campaign aside from marketing spam there
Techrights Should be Even Faster Now
We're now better off
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, January 30, 2025
IRC logs for Thursday, January 30, 2025
Richard Stallman (RMS) Gave 3 Talks in India in Less Than a Week
In India this month we've not seen a single negative comment about RMS
Indian Data Biases statCounter For or Against "Linux"
In statCounter, the GNU/Linux increases and decreases are deeply tied to what it does with data collected in India
The Corporate Media Pretends That Facebook ("Meta") Has Performed Well, But Its Debt Doubles Every 2 Years Despite Mass Layoffs
That same media also helps parrot misleading financial claims
Microsoft's Debt Surged by More Than 6,000,000,000 Dollars in Just 3 Months
numbers released hours ago
The Sheer Irony of Microsoft Proxy Accusing Others of 'Stealing'
Wherever DeepSick's data came from, Microsoft (or its proxy) is in no position to issue criticism.
The Difference a Decade (and GAFAM Money) Makes
Credibility cannot be purchased
[Meme] The Free Software Foundation (FSF) Has Critics Because Its Message is Effective
Applying to others the same standards one is willing to violate?