Bonum Certa Men Certa

IBM Still in Control of Fedora-Legal and FESCo Despite Unpaid Volunteer Labor Picking Up More Fedora Grunt Work



Reprinted with permission from Ryan Farmer

IBM Still In Control Of Fedora-Legal and FESCo Despite Unpaid Volunteer Labor Picking Up More Fedora Grunt Work.



While IBM is purging LibreOffice, a bunch of GNOME, parts of the Bluetooth stack, and everything related to trying to manage an Apple device from file managers and media players, among others, and tossing the work onto unpaid volunteers, spreading FUD about the competition’s Enterprise Linux distros (they are now squarely into full blown paranoid), and promoting Microsoft “Clown Computing” as a replacement for LibreOffice….



IBM Office Space

So Red Hat is essentially killing all work on desktop packages, not just on LibreOffice? Also considering that several of those packages are libraries that cannot just be put on Flathub as LibreOffice can (which was their excuse for terminating all work on LibreOffice packaging). With the layoff and the destruction of the position of the Fedora Program Manager, the termination of public RHEL source releases, and this move, Red Hat is really turning into an unfriendly company, and I really have to wonder whether Fedora is going to be of any use to me in the long run.

-Kevin Kofler


Later on, IBM Red Hat showed up and started doing damage control and pimping Microsoft and Google “Clown Office” programs.



Also a lot use online docs like Office365 or Google docs. I personally used to use Libreoffice a lot but now I mostly use gDocs. […] This sort of comment is off topic, various companies are free to do with their data as they wish, just as you are free to do with it as you please. Frankly it’s often more secure with cloud providers [ed: link mine] than on corporate networks. Either way that comment doesn’t provide useful discourse in this discussion.

-Peter Robinson (IBM Red Hat)


The comment about Clown Computing being more secure was shot down again just several days ago. Microsoft Azure, Office 365, OneDrive, and Outlook all have terrible security records. Just awful. But this time it affected banks and other Azure Clown deployment customers.



 According to data from Google Project Zero, Microsoft products have accounted for an aggregate of 42.5% of all zero-days discovered since 2014.



Microsoft’s lack of transparency applies to breaches, irresponsible security practices and vulnerabilities, all of which expose their customers to risks they are deliberately kept in the dark about.



In March 2023, a member of Tenable’s Research team was investigating Microsoft’s Azure platform and related services. The researcher discovered an issue which would enable an unauthenticated attacker to access cross-tenant applications and sensitive data, such as authentication secrets. To give you an idea of how bad this is, our team very quickly discovered authentication secrets to a bank. They were so concerned about the seriousness and the ethics of the issue that we immediately notified Microsoft.



Did Microsoft quickly fix the issue that could effectively lead to the breach of multiple customers’ networks and services? Of course not. They took more than 90 days to implement a partial fix – and only for new applications loaded in the service.



That means that as of today, the bank I referenced above is still vulnerable, more than 120 days since we reported the issue, as are all of the other organizations that had launched the service prior to the fix. And, to the best of our knowledge, they still have no idea they are at risk and therefore can’t make an informed decision about compensating controls and other risk-mitigating actions. Microsoft claims that they will fix the issue by the end of September, four months after we notified them. That’s grossly irresponsible, if not blatantly negligent. We know about the issue, Microsoft knows about the issue, and hopefully, threat actors don’t.

-Tenable CEO Amit Yoran “Microsoft: The truth Is even worse than you think”


“Clown Computing” is just dumb. Even if we take a sidebar from the security angle for a moment, where Microsoft just leaves critical bugs open while attackers take your banking information and Social Security numbers and file, downloading an ENTIRE OFFICE SUITE into a Web browser every time you need to edit a document, and trusting that you’ll have Internet access, that Microsoft can keep their server running 100% of the time (they don’t), and that they won’t have crashes and lose your files, then how are you supposed to edit your files or even access them if your subscription lapses, or they say you can’t use it anymore?



One of the people on the Fedora Hyperkitty thread mentioned how IBM Red Hat blocks people from getting RHEL or updates for RHEL from countries on the US Export Control List.



Do you know that your country won’t be added to the list at some point? Then how do you get your “Clown data”?



Also raised was the obvious issue of foreign governments, businesses, and citizens storing their data on Microsoft servers in the United States. This is not only stupid, it’s actually against the law in some cases.



Clearly IBM is only worrying about customers in the United States, and even then only barely.



It encourages them to do foolish things with their data, even something as stupid as editing documents. Then the guy says it’s “easier to share” in the Clown. Like, you can’t email a document to someone?



Most of the rest is just chatter about unpaid volunteers doing work in IBM’s GULAG, that will benefit IBM, and they won’t even be paid for it. Then in return, IBM won’t even necessarily show you the code when it ends up in RHEL.



IBM is making decisions for RHEL customers and the remainder of the Fedora “community” that are not in the best interests of those customers or the community.



About the only contribution IBM makes anymore to Fedora is hosting and build bots, and that’s about it.



In exchange for that, IBM lawyers and IBM employees on FESCo decide what will happen in Fedora.



To an extent, that’s always been true, but it was also true that Red Hat (before and after IBM) was doing more of the grunt work.



I’m amazed that Kevin Kofler even managed to post on Hyperkitty. He was banned by decree of IBM from Fedora-KDE, which they don’t even care about and which is now rotting away.



At one point, Kofler was on FESCo, and he generally got outvoted 8-1 on things, because Red Hat (now IBM) has basically all of the seats. They set it up so they always get what they want. It’s like the Illinois legislature, but the only people who get to decide anything are Chicago politicians.



There is certainly nothing wrong with making money selling Free Software, but IBM’s actions lately have made it an “unreliable” partner to their customers and to Fedora’s users (which have value as testers and package integrators, not that IBM cares).



Their decisions have been chaotic and announced as they were being implemented.



If you are a RHEL customer, you presumably want predictability.

Why settle for this?



Recent Techrights' Posts

Trying to Silence Techrights Was a Huge Mistake
Peter Thiel attacked a publisher for asserting, correctly, that he was gay. Now everyone knows it.
The Register Bill
The Register MS - putting the "MS" in your centre of the universe
 
Certificate Authority Let's Encrypt Has Almost Gone Down to Zero, Nearly Totally Extinct in Geminispace, the Few Capsules Still Using It Are Spam/Dead/Stagnant
This represents another decrease for Let's Encrypt; the last decrease was last week
Not Much Left in News Cycles
To be very clear, this does not describe "Linux" anything; it's true in just about every facet of news, except the paid-for fake "journalism" about "hey hi" (sites getting paid explicitly to maintain or rekindle hype)
Throwing Away "Old" Computers (Mozilla and Other Climate Deniers)
Mozilla is not leftist
The UEFI 9/11 - Part VIII - Denial of Service and Selling Us WSL (Windows) Instead of "Risky" (Prone by Breakage by Microsoft) GNU/Linux
Restricted Boot (so-called 'SecureBoot') does not improve security. It is nothing but trouble. It's meant to trouble non-Windows users. In dual-boot setups, SecureBoot is a recipe for disaster because Microsoft keeps erasing or tampering with the boot sector, to paraphrase an associate
Slop is Extremely Rare in Geminispace, Slop Images Are Unheard Of (Despite Images Being Supported)
As long as Geminispace grows in terms of domains it's safe to predict the protocol will still be used in 2029 and hence Geminispace will turn 10
Links 07/09/2025: Robodebt Class Action, Fines, and Copyright Settlement
Links for the day
Links 07/09/2025: Yle Impersonated in Social Control Media, Boat-Attacking Orcas, Midjourney Sued Again
Links for the day
Slopwatch: LinuxSecurity, Linux Journal, and the Serial Slopper
Google won't tackle the issue because Google participates not only in relaying slop but also in generating lots of it
Links 07/09/2025: Google Fines in EU and "Your Internet Access Is at Risk"
Links for the day
Gemini Links 07/09/2025: Little Brother and Corporate Theatre
Links for the day
Links 07/09/2025: More Harms of Slop and Anthropic's Nightmare Scenario (Huge Legal Liabilities for Slop)
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 06, 2025
IRC logs for Saturday, September 06, 2025
Microsoft Sites Now Talking About September's Mass Layoffs at Microsoft
It's noteworthy that even Microsoft's MSN now covers the latest revelations about mass layoffs
Gemini Links 06/09/2025: SpellBinding Moving and "The Cloud" Ridiculed
Links for the day
Slopwatch: On "the Apology Industry", Chatbots (Punchbag for Customers), and Fake Articles About "Linux"
"news reporting priorities changed"
Links 06/09/2025: "Covid Incidence on the Rise" and Many Attacks on the Press Worldwide
Links for the day
Analogies for "Memory Safety" in Rust
Don't worry, it's Rust! It can do anything!
Nobody Denies That SecureBoot Will Cause Problems After September 11
Not even Microsoft
Gemini Links 06/09/2025: Infinite Scrolling and Posting from Emacs
Links for the day
Links 06/09/2025: GitHub Meltdown Over Slop, "U.S. Jury Says Google Should Pay $425 Million in Privacy Lawsuit"
Links for the day
Despite Its Severe Financial Problems Gnome Foundation Inc Paid Rosanna Yuen Over 100,000 Dollars Last Year
maybe relocation should be considered
The "Left" and the Right"
It poisons everything
Mozilla and Rust Are Not Leftists
they're part of the mass consumerism machine
Disposable to Microsoft
There is an extensive set of people who got used by Microsoft, only to be thrown away a month later or a year later or a decade later
The UEFI 9/11 - Part VII - This Coming Week Many PCs Will Refuse to Boot "Linux" (Because of Microsoft's Expired Certificate)
The real solution is, disable "secure boot" or "SecureBoot" while it's still possible. [...] Just like submarine patents, a lot of this problem was "hibernating" for a while
The Thing Nobody in Red Hat Wants to Talk About Openly
There is a real sentiment or worry among Red Hatters, Europeans and Americans in particulars (because of higher salary expectations)
Slopwatch: Small Parade of Fake News About "Linux" and Scams Borrowing the Name (or Word) "Linux"
In practice, LLMs are a risk
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 05, 2025
IRC logs for Friday, September 05, 2025
Genini Links 05/09/2025: Community, ROOPHLOCH, and PITkit
Links for the day
Links 05/09/2025: Vaccine Sceptics Poison the Well, Two Exploited Vulnerabilities Patched in Android
Links for the day
Gemini Links 05/09/2025: Logitech Lift and DIY Gemini Servers
Links for the day
Links 05/09/2025: Sainsbury's Caught Spying on In-Store Shoppers and Microsoft "OpenAI is Using Legal Threats to Harass its Critics"
Links for the day
BASIC Predates Microsoft by Over a Decade, Microsoft-Controlled Sites Like The Register MS Don't Want You to Know This
The state of the media is really bad when it relies a lot on oligarchs' money and is appointing editors who are working for oligarchs
Brian Kernighan, "Only Third to Dennis Richie and Ken Thompson" (UNIX), Agreed With Someone Who Said Rust Was Just Hype, Should Not Replace C
17 hours ago
Reminder: Microsoft's "Secure Boot" Certificate for "Linux" Will be Expired in One Week
Many PCs won't manage to 'rotate' to another certificate
"Many of the Red Hat Employees Are Still Looking for Work"
Shame on IBM's CEO
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, September 04, 2025
IRC logs for Thursday, September 04, 2025
Microsoft Started With Code Literally From The Trash, Nothing Has Improved Since
The reality is, there are systems and code that are reliable. But they're not Microsoft's.
Hypothesis That New McKinsey/Microsoft Executive Inside Red Hat Will Outsource Research and Development Operations to India (Like They Do in IBM)
IBM is floundering
Slopwatch: Scams, Fake Articles About "Linux", Plagiarism, and Worse
Perhaps some time soon the LLMs or the "Big LLMs" will run out of money (to borrow) and go offline, leaving those slopfarms in a tough place