Bonum Certa Men Certa

Features Considered Harmful (Revised)



2020 figosdev



Karmann
Chapter 15: Features Considered Harmful



Summary: "But the benefits of Free software, free candy and new features are all meaningless, if the user isn't in control."

Edsgar Dijkstra is famous for hating on BASIC programming. But it was his editor (Wirth, I believe) who incited decades of clickbait titles by working the infamous line attributed to Dijkstra into the top of his article.



"Basic itself isn’t harmful. Some of its features may lead to worse programming, but I think Torvalds (as a coder) proves that using it doesn’t necessarily prevent you from gaining good programming skills."His stance was reasonable enough, so long as we are talking about the actual arguments that were made -- which applied more to the original line-numbered versions of Basic than today's versions, which look like Pascal by comparison. It was good enough as a first language for Linus Torvalds. Dijkstra actually had a number of great ideas that BASIC once lacked. And in more ways than one, it doesn't bother me that software evolves.

Whether it was his intention to save Basic or get people to use a better language instead, Basic itself isn't harmful. Some of its features may lead to worse programming, but I think Torvalds (as a coder) proves that using it doesn't necessarily prevent you from gaining good programming skills. Some languages indeed will teach better discipline, but if you're determined to be lazy, you'll probably find (or create) tools that suit your preferences.

I am not against features, per se. I'm also against prohibition and the drug war. But the great harm done by heroin cannot be dismissed -- it kills people, and although there is no law that says you must try heroin, getting away from it isn't always as simple as "just don't use it". Fortunately, while I did find Basic somewhat addictive in practice, I have not tried heroin. Though I've certainly lived in places where it was a problem. In fact, it's a problem that tends to increase when the alternatives are fought harder against.

GitHub could arguably be the heroin of the Free software world. We know the harm it does, we've been warned about it for years, there's absolutely no mandate to use it at all -- yet people keep finding themselves addicted to it. GitHub isn't known so much for killing people, but it poses a great threat to projects that use it. What GitHub actually kills, is software freedom.

I've written a lot about GitHub lately, but in this article it is just one example of a larger problem. Like with Basic, it is not "GitHub" itself, but some of its features that we should worry about. And the warnings against it have come from Torvalds and Stallman alike.

The complaints from Torvalds against GitHub are closer to Dijkstra's complaints about Basic -- GitHub encourages bad practices in Git management, and breaks existing features. It trains you to be a worse Git user. I think this is a minor problem next to the others. But just as Dijkstra is a pioneer of structured programming, Torvalds is the original author of Git. That makes the critique much more notable.

The fact that GitHub breaks Git the way that it does, fits in with a larger complaint of my own -- even if Torvalds decides (or is paid to) change his mind about it. It was developed by Chris Wanstrath, but it was developed along lines that are not entirely different from Microsoft's EEE tactics -- which today I will offer a new acronym and description for:

1. Steal 2. Add Bloat 3. Original Trashed

It's difficult conceptually to "steal" Free software, because it (sort of, effectively) belongs to everyone. It's not always Public Domain -- copyleft is meant to prevent that. The only way you can "steal" free software is by taking it from everyone and restricting it again. That's like "stealing" the ocean or the sky, and putting it somewhere that people can't get to it. But this is what non-free software does. (You could also simply go against the license terms, but I doubt Stallman would go for the word "stealing" or "theft" as a first choice to describe non-compliance).

I came up with this SABOTage acronym when I was going to sleep, and originally it was Steal, Add Bloat, Attack -- I guess spelling isn't a strong point when I'm tired. But this is what people do even in the Free software world today; they take away compatibility (as GitHub did with some Git features Torvalds thinks should work properly), they add stuff that is easier for a large corporation to host (Gitlab too, is terribly bloated I'm afraid -- but it can be self-hosted at least) and they attack the original -- by dragging everyone into GitHub (as it's "better").

I really do understand the appeal of GitHub -- I'm a former user as well. While the complaints of Torvalds are relevant to this discussion, the complaints by Richard Stallman are more important to me. In 2015, he said to GNUstep developers:

"GitHub does things that are quite bad for free software and is not interested in changing them. If you want to move off Savannah, please pick some other place."

This led to a shallow debate on the merits of GitHub vs. alternatives, and Stallman argued that GitHub negatively affects the license choices people make. One person replied that he was having an unrealistic expectation of GitHub, but this was the thing -- we can make it about the design of GitHub, or we can look at the effects. In effect, GitHub successfully gets people away from making choices that are good for free software.

Expecting a platform for free software hosting (if that's what you intend to use it for) to not be designed in a way that harms free software is a completely reasonable expectation! Particularly when the response to it not being suited to free software's goals is "Don't use this, it's bad for what we do".

It also includes non-free Javascript, which many people are willing to forgive or overlook sometimes. But this discussion was about code hosting for the GNU Project itself! If any project should not rely on GitHub and non-free Javascript, it's the flagship project of Free Software itself.

"But it still works if you turn Javascript off" they said... again, this is one situation where many of us are willing to overlook non-free Javascript: if the website still works when you disable it. This is still wildly inappropriate for the GNU Project to endorse, because they're still encouraging users to run it.

Other than the fact that running and promoting only Free software (yes, I'm familiar with Stallman's latest article on the topic) is one of the goals of the GNU Project, I think there are worse things about GitHub. And I think that GNU projects that continue to use it unapologetically, such as GNU Radio and GNUstep, are proving that their developers DON'T care about your freedom, and do not represent (nor achieve) the goals of the GNU Project.

And the fact that Microsoft has spent decades trying to co-opt and control Free software? Who honestly cares about that?

But I am aware that such Microsoft-neutral or Pro-Microsoft developers are not necessarily agreed with by every developer on these projects. In the instance of GNUstep, we are talking about the leader of the project who doesn't care about your freedom.

I did say that GitHub was just an example; it's a very big example, though not the only one. Microsoft is taking over Python as well. And the way it's taking over Python does have the aim (and the success) in dragging it into the GitHub trap, because GitHub is perfect for that sort of thing -- but the tactics being used would hurt Python with or without GitHub as well. It conquers projects the same way as empires conquer nations -- by planting flags in whatever they want to own:

This Techrights article is from 2010, and though they have done this farther back than that, and continue to do the same, Microsoft is still planting flags all over the place. It wants to run your conferences. It wants to host your code. It wants you to agree to its terms. It wants you to adjust your development to its heavily contrived, self-serving "standards" from OOXML all the way back to Rich Text Format.

Again and again, Microsoft "Steals" or "Steers" the development process itself so it can gain control (pronounced: "ownership") of the software. It is a gradual process, where Microsoft has more and more influence until they dominate the project and with it, the user. This is similar to the process where cults (or drug addiction) take over people's lives, and similar to the process where narcissists interfere in the lives of others -- by staking a claim and gradually dominating the person or project.

Then they Add Bloat -- more features. GitHub is friendly to use, you don't have to care about how Git works to use it (this is true of many GitHub clones as well, as even I do not really care how Git works very much. It took a long time for someone to even drag me towards GitHub for code hosting, until they were acquired and I stopped using it).

Due to its GLOBAL size, nobody can (or ought to) reproduce Microsoft's network effects.

I understand the draw of network effects. That's why larger federated instances of code hosts are going to be more popular than smaller instances. We really need a mix -- smaller instances to be easy to host and autonomous, larger instances to draw people away from even more gigantic code silos. We can't get away from network effects (just like the War on Drugs will never work) but we can make them easier and less troublesome (or safer) to deal with.

Finally, the Original is trashed, and the SABOTage is complete. This has happened with Python against Python 2, despite protests from seasoned and professional developers, it was deliberately attempted with Systemd against not just sysvinit but ALL alternatives -- Free software acts like proprietary software when it treats the existence of alternatives as a problem to be solved. I personally never trust a project with developers as arrogant as that.

It's difficult for me to get excited about these "next generation" tools, when I spent several years working to GET AWAY from Microsoft, and they want me to get all my software from GitHub. If I wanted to get all my software from Microsoft and the rest of GIAFAM, I'd just use Windows.

And speaking of, the coup continues this week, with the new COO at Microzilla: Adam Seligman -- "formerly of Google, Salesforce, and Microsoft."

GREAT! That's also how they gradually took over Nokia, Apache Software Foundation and became the boss of Linus. [Roy added to this: Even the COO of GitHub now bosses Linus]

Corporate takeover, disguised as an upgrade.

Here's something else to consider -- the way that websites subtly (and sometimes innocently) add to the problem with handy Share icons (which I'm not entirely against). A colleague informs me that one of the things that draws people to GitHub is the way that other websites make it easier to integrate with it. I can't fault his logic, he's right. But here's the reality of that. Such tie-in features will always be implemented for the largest option first, and typically the largest option only.

They're not going to bother reinforcing smaller choices usually, they're going to reinforce the largest one. So this practice itself -- while technically and theoretically neutral (as it could offer several options for code repos) actually encourages monopoly in practice most of the time. These are network effects, compounded.

There's a meme about creepy vans with "FREE CANDY" painted on the side, which I took one of the photos from and edited it so that it said "FEATURES" instead. This is more or less how I feel about new features in general, given my experience with their abuse in development, marketing and the takeover of formerly good software projects.

People then accuse me of being against features, of course. As with the Dijkstra article, the real problem isn't Basic itself. The problem isn't features per se (though they do play a very key role in this problem) and I'm not really against features -- or candy, for that matter.

I'm against these things being used as bait, to entrap people in an unpleasant situation that makes escape difficult. You know, "lock-in". Don't get in the van -- don't even go NEAR the van.

Candy is nice, and some features are nice too. But we would all be better off if we could get the candy safely, and delete the creepy horrible van that comes with it. That's true whether the creepy van is GitHub, or surveillance by GIAFAM, or a Leviathan "init" system, or just breaking decades of perfectly good Python code, to try to force people to develop differently because Google or Microsoft (who both have had heavy influence over newer Python development) want to try to force you to -- all while using "free" software.

If all that makes free software "free" is the license -- (yes, it's the primary and key part, it's a necessary ingredient) then putting "free" software on GitHub shouldn't be a problem, right? Not if you're running LibreJS, at least.

In practice, software that is "Free in license only" sidesteps the implication of effectively free software, which is that its users are also effectively free. If free software development gets dragged into doing the bidding of non-free software companies and starts creating lock-in for the user, even if its external or peripheral, then they simply found an effective way around the true goal of the license. They did it with Tivoisation, so we know that its possible. They've done this in a number of ways, and they're doing it now.

If people are trying to make the user less free, and they're effectively making the user less free, maybe the license isn't an effective monolithic solution. The cost of freedom is eternal vigilance. They never said "The cost of freedom is slapping a free license on things", as far as I know. This really isn't a straw man, so much as a rebuttal to the extremely glib take on software freedom in general that permeates development communities these days.

But the benefits of Free software, free candy and new features are all meaningless, if the user isn't in control.

Don't get in the van.

"The freedom to NOT run the software, to be free to avoid vendor lock-in through appropriate modularization/encapsulation and minimized dependencies; meaning any free software can be replaced with a user’s preferred alternatives (freedom 4)." – Peter Boughton

Licence: Creative Commons Attribution-ShareAlike 3.0 Unported (CC BY-SA 3.0)

Recent Techrights' Posts

UEFI 9/11 Aftermath - Part III: Mr. 'Secure Boot' (Shim) and His Fake 'Holiday' (Sending My Wife and I Threatening E-mails on 9/11)
despite being on holiday, according to him, he finds time to instruct lawyers to contact my wife
Ron Wyden: Microsoft Should be Held Accountable for Security Breaches (He Has Said This for Years Already, It Never Happens)
Negative media coverage isn't a fine and it does nothing to compensate Microsoft's billions of victims
Disable 'Secure Boot' (If It Lets You)
it doesn't put you in control
Longtime Red Hat Staff: Maybe Just Disable 'Secure Boot'
A refreshing take from Adam Williamson
A Dozen Observations About "UEFI 9/11" Deflections
What we are expected to see, tentatively
The World's Richest Ponzi Scheme (Faking Value Using Net Waste)
The higher they go the harder they fall
We Could Dual-Boot Back in the 1990s, Why Has This Become So Difficult?
And prone to breakage
Slopwatch: Google News is Still Promoting Many Fake Articles About "Linux", in Effect Rewarding Misinformation and Plagiarism
things continue to deteriorate
 
Links 11/09/2025: Windows TCO and Russian Drones Invading Poland (EU/NATO)
Links for the day
Gemini Links 11/09/2025: xkcd, misfin, and Alhena 5.3.2
Links for the day
Repetition of Last Summer (Microsoft Breaking Dual-Boot Systems)
UEFI 9/11 is about to kick in
UEFI 'Secure Boot' Boiling Frogs (Cannot Turn Off 'Secure Boot')
"MSI laptop is locked on Secure Boot and doesn't allow me to turn it off"
UEFI 9/11 Aftermath - Part IV: The 'Hulk Hogan of UEFI' and His 'Hideout' Holiday (Retreat From Reality)
Let's keep an eye on what matters
UEFI 9/11 Aftermath - Part II: "The SecureBoot Thing Got Out of Hand."
The next few weeks might be... interesting
UEFI 9/11 Aftermath - Part I: "I Believe This Affects Thousands of Devices... Because Multiple Devices I Checked, Whether Client or Server [...] Affected."
Most people aren't even aware that this is happening or about to happen
The UEFI 9/11 - Part X - An Outline of the Series About Microsoft Sabotaging GNU/Linux (With Ramifications to Unfold Online in Coming Weeks as People Reboot)
Today is UEFI 9/11 (9/11/2025)
Culture of silence: Ubisoft harassment convictions, Mozilla, Sylvestre Ledru & Debian make no comment
Reprinted with permission from Daniel Pocock
Links 11/09/2025: "Hey Hi" Ponzi Schemes at Oracle (Unpaid Contracts) and Cindy Cohn is Leaving the EFF
Links for the day
Gemini Links 11/09/2025: Playdate Console, Dichotomy between the Real and the Digital
Links for the day
The Microsoft AstroTurfing and Microsoft-Led Blame-Shifting Tactics Are Ahead of Us
Of course it has nothing to do with security, it's about control, i.e. them controlling everything
Celebrating Assassination is Bad Because It Legitimises Assassination of the People You Like, Too
Condoning or even celebrating political assassinations is bad optics (and taste)
Being Conditioned to Accept Unreliable Computer Systems That Fail With Black Screen of Death (BSoD)
Welcome to 2025
New Series: The Coup Against GNU/Linux Has Begun
today, this year in particular, we shall also focus on Secure Boot, which is sold based on a lie and tortures many computer user
New Paper on "BYOVD, but in firmware. Signed UEFI shells, vulnerable modules offer new paths for Secure Boot bypasses."
One might say digital "security theatre"
Links 11/09/2025: Oracle Layoffs, Drunk Pilots in Japan Airlines, US-Korea Tensions Grow
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 10, 2025
IRC logs for Wednesday, September 10, 2025
Xubuntu Site Compromised
Let's hope it is not a security breach
Links 10/09/2025: Retaliation at Facebook and Microsoft Reveals Almost 100 Security Holes
Links for the day
Gemini Links 10/09/2025: Annihilation of Self, The Future Eaters, and Leaving Academia
Links for the day
They Say That People Are Afraid of or Worried About "Hey Hi", But the Worriers Should be the Fools Who Invested in It
At the end of the day nobody should worry more than those who invested their money in this bubble
Harassment evidence: franceinfo's Clara Lainé report on Ubisoft prosecution
Reprinted with permission from Daniel Pocock
Links 10/09/2025: Microsoft Layoffs in "RTO" Clothing and Windows TCO, GitHub TCO
Links for the day
Blaming Everything on China
TikTok works for China. GAFAM works for fascists.
People Get Tired of "Hey Hi" (AI), Unlike the Subservient Money-Obsessed Media That Gets Paid to Pretend This Bubble Still Matters
"crash will be way bigger than dot.com burst in 90s. and that was Internet, actually transformative technology, not this expensive AI toy with direct dependency on the energy input which is not scalable"
Brett Wilson LLP Accepts That the Serial Strangler From Microsoft Filed a Case That Also Implicates My Wife (Everything is Connected)
They used to pretend that there were two separate cases
10 Reasons to Disable (or Enable) UEFI Secure Boot
Tomorrow the "trusted corporation" Microsoft will see a certificate expire
Gemini Links 10/09/2025: Hospital and Large Feeds
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 09, 2025
IRC logs for Tuesday, September 09, 2025
The Bluewashing of Red Hat is Being Completed, Many Staff Understand They'll be Made Redundant
Jim AllowHurst (Whitehurst) is meanwhile promoting Microsoft's agenda from within other companies
Throwing Away "Old" Computers (Mozilla and Other Climate Deniers)
Mozilla is not leftist
statCounter Sees GNU/Linux Exceeding 10% in Bulgaria This Month
What can Microsoft still do to stop GNU/Linux?
Dark Patterns
Microsoft saying "security" is like a Convicted Felon in the White House saying "law and order".
It's Almost Fall (Autumn)
To "Facebook prison" you are bound
Bruce Schneier About "Secure Boot"
Bruce Schneier isn't a fan of "Secure Boot"
Links 09/09/2025: Microsoft Mass Layoffs Again and "RTO" (Timed Like It Serves as a Distraction From the Mass Layoffs)
Links for the day
RMS Told Microsoft to Stop 'Secure Boot' (He Even Went There to Say That), But They Didn't Listen
Dr. Stallman (RMS) assumed that speaking to sociopaths would work
What Richard Stallman Told Me About 'Secure' Boot in 2012
"if the user doesn't control the keys, then it's a kind of shackle"
Those Who Helped Microsoft Weaponise "Secure Boot" Against GNU/Linux and BSDs Are Fleeing
Microsofters doing what they do best: they evade accountability
Simple is Better, Simplicity is Power
That is "the advantage of having commodity GNU/Linux systems," an associate notes
Much Ado About Nonsense
Microsoft Lunduke is still all dramatisation and sensationalism
Current Events in France
It needs to dump Microsoft and other GAFAM (US) giants, move to Free software
Further Media Cut-downs
media reporting about the media being cut
Links 09/09/2025: US-Korea Tensions and Meta Whistleblowers
Links for the day
Gemini Links 09/09/2025: Moon Eclipse and ROOPHLOCH Reports
Links for the day
Links 09/09/2025: “Torrents of Hate” and Political Crisis in France
Links for the day
Gemini Links 09/09/2025: "Dedigitizing" and Forgejo on FreeBSD
Links for the day
Google News (Not Just Google Search) Lets Itself by Gamed by One Slopfarm - to the Point Almost Half of "Linux" News is Bot-Produced Plagiarism (LLM Slop With Slop Images)
That says a lot about what Google thinks of quality, even in Google News
Bill Gates-Funded Media Inadvertently Refutes the Microsoft Lie That in 2025 Microsoft Had Just Two Waves of Layoffs
There were about 12 rounds of layoffs so far in 2025
Official SUSE Blog Still Uses LLM Slop (Bots) to Make Fake Articles (Marketing)
The company is all about sound bites
Companies Realise That Slop Doesn't Work as Advertised, Accordingly Dump It
"Hype dims as a country-wide survey of US corporations shows a sudden drop-off in AI use among firms with more than 250 employees."
Microsoft-Funded Lawsuits Against Critics of UEFI 'Secure Boot'
Remember that no company (or law firm) ever survives collaborations with Microsoft
From theregister.co.uk to theregister.com (US) to The Register MS (Run by Microsoft Operatives) and theregister.ai
The best way to break this racket (or cycle of hype and harm) is to break the chains of funding
Open Source Initiative (OSI) Culture of Censorship Necessitates More Speech
The OSI bans dissent or people who merely point out that the OSI is abusive
How to Reach Us Discreetly (Other Than Encrypted E-mail)
We're still managing to maintain a 100% source protection record. We soon turn 19.
LLMs Are Vastly Worse Than a Waste of Energy and the Externalities Are Huge
Worse than just higher power bills for everybody
LLMs Versus Search (Not Replacing Search But Engaging in DDoS Attacks Against Web Sites That Permit Searching)
The state of the Web isn't just bad; it's utterly terrible
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 08, 2025
IRC logs for Monday, September 08, 2025
It's Only the Second Week of September and Already Two Waves of Layoffs at Microsoft, Slopfarms and Microsoft-Funded Sites Spin It as "AI Investments" Rather Than Commercial Failure
A very large third one expected next week
The UEFI 9/11 - Part IX - Shunning Old Computers (in 2023 the Certificate Was Updated/Overridden, Underlying Aim May Be Herding/Forcing People to Get TPM and Other 'Novel' Restrictions)
the "upgrade treadmill"