Bonum Certa Men Certa

Microsoft Continues to Attack and Steal From the Open Source/Free Software Communities

Law-breakers won't change their ways; they only optimise their PR strategy (and bribe more of the media to play along)

Microsoft Loved Linux.



Summary: Microsoft cannot be trusted and there's no "new Microsoft," as another fairly new story serves to show

"Shocked, Roy!"



So said a reader of ours, who used to work for Microsoft.

"Microsoft copies/steals lerna," our reader summarised, pointing to this archived copy/snapshot of a page that's now gone (although the Web site is still there).

We are gratified to see that more people from inside Microsoft are starting to see just how evil the company really us. I know of several such people, some of whom I speak to regularly. They have inside information and leads/tips.

It will be good for Techrights to make a copy anyone can find by searching. The original was removed. Sometimes Microsoft bribes or threatens to make this happen (e.g. threatening through one's boss/customers). We covered examples of that in past years.

With the original deleted we think it would only be fair to reproduce the full message (the emphasis below is ours for the "tl;dr" crowd):

I think it's time I publicly shared about how Microsoft stole my code and then spit on it.

I'd been waiting for them to do something about it, but that is clearly never happening.

When we were working on Babel 6, one of the big changes was to split everything up in to nice little plugin packages. However, this created a need to manage dozens of packages. Thus @lernajs was born I picked up Lerna a little while later and focused on making it work well for design systems. I rewrote it like 5 times to try and get the architecture right. Lerna then started getting picked up by others who also contributed back and added features. I enjoyed watching it grow and so I started looking out for users. One day I came across a new design system from a team at Microsoft. I saw that it was made up of lots of small packages. I was excited and wondered "ooh is MS using Lerna?" It turns out, no they were not. They were using this other thing called "Rush". I hadn't heard of it, but I was interested in seeing how it differed from Lerna. I found the repo and started exploring. The first thing I noticed was how familiar all the code was. I could navigate the file structure very easily. I realised that it was almost a mirror of Lerna's code base. Files and directories were named the same things, it had many of the same core functions with code that I distinctly remembered writing. But no big deal right? It must be a fork. I was actually flattered at first. So I went back in the git history. I got all the way back to the first commit, and looked at the date. Turns out Rush was created a couple weeks after Lerna was announced. I continued working through the commit history and looked at commits that added features, it all felt so familiar and now I was getting suspicious. Comparing dates of commits, it looked like Rush kept copying changes from Lerna days after they were made. Rewritten using this weird event system they added. It left a bad taste in my mouth, I could tell this was my code. I looked at the license, no mention. I looked at the readme... Oh wait In the readme they acknowledge the fact that there are "other solutions" and say that they are bad. No mention of the fact that Rush was taken directly from one of these bad other solutions. You know if it were anyone else, I would have been mildly annoyed and ignored it. But Microsoft is a multi billion dollar corporation. If they are going to steal code without crediting the original author I'm gonna be pissed. So I reached out to people I knew at Microsoft. This was probably a year ago now. They were shocked and apologized. But since then nothing has happened. Oh wait yeah, something did happen. The commit history of Rush was messed with and a lot of the code was moved around, functions renamed, rewritten. It still feels familiar, but it's more scrambled. Instead of just updating a license or even just adding a footnote, they went through all that trouble. Anyways, it's really annoyed me to listen to all these people give Microsoft free good press about open source when clearly their product org is still happy to be dicks to open source communities I don't trust Microsoft (or Google or Facebook or Amazon) to be good shepherds of open source communities.

Just because we've made it impossible to compete with their old closed source stacks doesn't mean they'll act in the best interest of open source And just because there are great people at Microsoft who love open source and want to do the right thing does not mean that they'll be able to stop Microsoft from doing shitty things when there's money involved. I know plenty of people at big corporations who want to change things but can't because millions of dollars are in the way. A few years back we were able to petition GitHub to start improving the tools the offered to open source maintainers.

later on at a @maintainerati event, GitHub acknowledged that this letter had a huge impact on how they worked with open source communities Imagine a couple hundred people signing a letter to try and change things at Microsoft/Google/Facebook and it actually working. These companies deal with stuff like that on a daily basis and it doesn't make them trip up for even a second The consolidation of our infrastructure is dangerous. Having lots of small companies or even medium sized corporations forces them to work together without much effort which prevents any one of them from ever totally fucking us over The tech industry has so many monopolies right now. Building more everyday. It's only going to hurt consumers more and more. And when it comes to infrastructure, we're going to be those fucked over consumers If you trust a handful of corporations with your entire toolchain and expect them not to fuck you over I've got a bridge to sell you



As recently as this year we wrote about another such example. People, watch out. The warnings are there.

Recent Techrights' Posts

What Happened to the Open Source Initiative (OSI) Elections: The Purge, the Cover-up, and the Witch-hunts
OSI has gone "full Microsoft"
What's Very Vexing to GAFAM, EPO and Others Is That It's Incredibly Hard to Censor Us (and Nobody Ever Successfully Did That Before)
resist, do not capitulate
Receiving SLAPPs and Collecting Them Like Trophies (the SLAPPs Always Fail)
People who file lawsuits bring even more attention to themselves (or to embarrassing statements about them)
 
In 24 Countries Observed by statCounter Vista 11 is Still Less Than a Quarter of Windows Users Despite All Other Versions Being 'Expired'
They ought to move to GNU/Linux
Ensuring That Every Computer User Anywhere in the World Can Take Control of All His or Her Computers
We must fight the people who attack general-purpose computing, in particular those who push this agenda very aggressively inside Linux
Links 27/04/2025: Pope Goodbyes, "Politics of Fear", Slop Redux and More Google Shutdowns (Google Debt Had Grown This Year)
Links for the day
Links 27/04/2025: Serenity Dialectics, Hockey Jersey Ethics, and More
Links for the day
Links 27/04/2025: Death of Nest Thermostats, Death of Metaverse
Links for the day
Links 27/04/2025: Projects Workflow and Discovering Technology
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, April 26, 2025
IRC logs for Saturday, April 26, 2025
Microsoft Isn't on the Map in USSR
To them, it's either Google or Yandex
In Central America Windows Became a Small Force
These are countries where Windows used to have well over 95% of the "market"
Site May be Even Faster Now
It basically takes less than a tenth of a second to serve the page
Year of GNU/Linux on the Laptop?
It's not happening only in Lenovo
What People Must Understand About the Open Source Initiative (OSI)
some facts about the Open Source Initiative (OSI)
Many of the Scandals Are Interconnected (Overlapping People and Corporations)
We're only getting started
More Copyright Lawsuits Against LLM Slop Providers and Suppliers of LLM Slopfarms Would Benefit Society
It's not just bad for the Web and for society; it's also legally dangerous
Links 26/04/2025: General Assassinated in the Town of Balashikha, US Promoting Seafloor Mining
Links for the day
Links 26/04/2025: Facebook Layoffs Again, Remembering What's Real, and Say No to Mass Surveillance
Links for the day
Links 26/04/2025: NOAA Budget Cuts and "Dog Days Ahead"
Links for the day
In defence of JD Vance, death of Pope Francis
Reprinted with permission from Daniel Pocock
Three Years in Prison for Disney Employee’s ‘Menu Hacking’: The Economic Fallout of Digital Menus
Reprinted with permission from Ryan Farmer
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, April 25, 2025
IRC logs for Friday, April 25, 2025
Links 25/04/2025: Slop Fatigue and Patent Judges Flocking to Fake, Unconstitutional and Illegal Kangaroo Court (UPC, Captured 'Justice')
Links for the day
Gemini Links 25/04/2025: Night Manager and Devuan in Hosting
Links for the day
Approaching 10,000 Articles/Pages Since Going Static
Trying to silence or derail the site was always a dumb strategy
Windows Falls to New Lows in Nicaragua, Now Below a Quarter (It Used to be Almost 100%)
Another all-time low for Windows
Microsoft is Shedding Off Loads of Staff and That Can be Dangerous Too
Working for Microsoft is a choice; nobody forces you to do it
Richard Stallman and the Unix Philosophy
When asked about systemd people must remember that RMS speaks as an active Board member of the FSF and also the founder of the FSF
The Cost (to Linux) of LLM Slop
Slop 'artists' like Fagioli are far from harmless
Links 25/04/2025: Ubisoft Spyware, Hegseth Fails at Tech on Every Level
Links for the day
Gemini Links 25/04/2025: Food Forest Update and Facebook Destroying the Net
Links for the day
Get Rid of Back Doors, Don't Obsess Over Bounties and Other Corporate PR Stunts (or Needless Reboot Rituals)
Security as a term has mostly lost its meaning due to repeated misuse for many years
Serial Sloppers Are Killing the Web (They Probably Don't Care, Either)
Slop is a disease on the Web
Streaming Apps Are “Investor Fraud” That Kills the Planet
Reprinted with permission from Ryan Farmer
Things Get Increasingly Nasty at Microsoft Ahead of the Fake Results and May's Mass Layoffs Wave
They try to get people to 'resign' so that they won't count as layoffs and the company's 'wellbeing' will seem better
IBM's Debt Ballooned by 8.5 Billion Dollars in Just 3 Months!
Hallmark of a company in a state of disarray, trying to spend its way out of trouble
Big Trouble in GNOME
even GNOME people admit the CoC went wrong
Slopping the Trough: Disney Plus Loses Billions and the Decline of Physical Media in America
Reprinted with permission from Ryan Farmer
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, April 24, 2025
IRC logs for Thursday, April 24, 2025