News for hackers. Stuff that matters.
Re:You may finally use JSHint for evil by iandanforth on Tuesday August 04, 2020 @03:45PM (#24053758)
Writing software is not a neutral act. You are morally responsible for its uses. Restricting those uses is both a responsibility and a good. Circumventing this restriction is itself an immoral act.
Re:You may finally use JSHint for evil by fennecfoxen on Tuesday August 04, 2020 @04:13PM (#24054033)
You know what? I’d like a world where people don’t decide that software licensing is an ideal place to wage ideological war and inflict harm on their enemies. I want collaboration and communication between people not in perfect agreement. I understand this is an overtly political stance; I am willing to commit to it as a positive and trust that it will benefit communities and the world at large, and that fragmentation into polarized ideological splinters will harm communities and the world at large (and enable our well resourced enemies to strike us in our weakness).

Because this is a linter, that will help coders code well, and not a facial recognition suite that will facilitate totalitarian regimes as they crack down on dissidents.

Re:You may finally use JSHint for evil by DSMan195276 on Tuesday August 04, 2020 @04:38PM (#24054260)
I think it's worth pointing out that software licenses are what enable the kind of world you're describing. Unless you're suggesting massively changing copyright law (Which may be a fair thing to suggest), the typical well known software licenses enable lots of code sharing and contributions by making it very easy to understand the terms on which you can use it. Without them, you could never easily share or take code contributions without potentially having tons of copyright issues.

Put another way, the issue here is not software licenses in general, it's the fact the author picked an obscure one with with dubious requirements. Picking no license would have actually been worse than the license he had.

Re:You may finally use JSHint for evil by TimTheTinker on Tuesday August 04, 2020 @04:16PM (#24054056)
> Writing software is not a neutral act. You are morally responsible for its uses.

That's an unsound argument - it suffers from a confusion of agency. The most I can be responsible for as an author is the intent of my software.

If I'm a wrench manufacturer, I have no moral obligation to attempt to control how people will use my wrenches. They are amoral tools with a good intent (to help with construction projects). Whether my wrenches or those projects will end up being used for evil is beyond my purview.

Re:You may finally use JSHint for evil by yunruse on Tuesday August 04, 2020 @04:35PM (#24054223)
This I would generally agree with. However, care should be taken with powerful tools – deepfake software, explosive material, and so on. The laissez-faire “guns don’t kill people” attitude isn’t wrong, per se, but it can be inconsiderate if used blindly.
Re:You may finally use JSHint for evil by TimTheTinker on Tuesday August 04, 2020 @05:22PM (#24054633)
True, but I think your caveat is covered by my assertion regarding the intent of the tool.

The intent of deepfake software is clearly either fraud or development of deepfake detection tools. If you're a vendor and your intent is the latter, it would be morally commendable to do your best to sell to reputable customers only... but with security tools like this the authorial intent almost doesn't (and shouldn't) factor in. Unfortunately, if you try to go soft so it won't "hurt someone" then the fraud detection R&D can't be as robust.

Regarding guns, they're either for killing people, killing varmints/animals, or defending oneself against bad guys. As a salesperson, you can reserve the right to refuse sales to known crooks -- that would be morally commendable (as far as it's possible). But it's your decision based on your own judgment. As far as the gun itself is concerned, if as a manufacturer your intent is defense against bad guys (or legal hunting/varmint control) and your product reflects that intent, then you're morally in the clear.

Incidentally, I'm strongly against sales of surplus military gear to police departments, because of the mixing of intentions that are at-odds. The intent of military gear is to fight foreign armies commanded by bad guys -- which is an intent that police departments should never have, as they're dealing with civilians. That's why in the US, we have the National Guard if an army of bad guys ever appears within our borders--it's different from the police, with different training and different intent.

Re:You may finally use JSHint for evil by robbrown451 on Tuesday August 04, 2020 @05:36PM (#24054749)
"The intent of deepfake software is clearly either fraud or development of deepfake detection tools. "

I think there are a ton of positive, creative uses of it. For instance de-aging an actor for a flashback sequence, with their permission. Deepfake software can potentially do this way cheaper than the state of the art, such as the young Tony Stark / Peter Quill's dad / Leia. And eventually, it should be able to do it better. When the technology is truly indetectable, it will be used all over the place in filmmaking and even video games.

Re:You may finally use JSHint for evil by savingsPossible on Sunday August 09, 2020 @11:31AM (#24100216)
Do we need to consider only intent, or can we extrapolate probable futures?

Because then I worry about deepfakes making actors obsolete (as we have made obsolete so many other professions)

Re:You may finally use JSHint for evil by robbrown451 on Sunday August 09, 2020 @05:28PM (#24103065)
Maybe I'm older than you, but I remember being worried about those newfangled bulldozers making us ditchdiggers obsolete. :)

Or how about movies making stage actors (and set builders, etc) obsolete? I mean, when you only have to act it out once and millions can see your performance, as opposed to actors performing shows every night in small venues in towns all over the country, it puts a lot of people out of work. There are pretty few people today making a living as actors.

And of course photography put portrait painters out of work. And high quality cameras in cell phones probably put a lot of photographers out of work.

What might happen is that there will still be actors, but all they have to do is act, not be beautiful. They can use a model for the beautiful part. And then you can have talented people on computers merging it all together.

I do like the idea of bedroom production of movies, which can happen if you don't need actors. Previously, if you want to be a film director, you needed to be born into a rich family, and then after extremely expensive film school, you needed to get big money to finance your movies. So there's that.

Re:You may finally use JSHint for evil by TimTheTinker on Tuesday August 04, 2020 @05:42PM (#24054787)
I stand corrected -- you're clearly right.
Re:You may finally use JSHint for evil by umvi on Tuesday August 04, 2020 @07:09PM (#24055495)
> Regarding guns, they're either for killing people, killing varmints/animals, or defending oneself against bad guys.

Also just shooting inanimate targets for sport because it's fun.

Re:You may finally use JSHint for evil by umvi on Tuesday August 04, 2020 @05:02PM (#24054460)
deepfake software will eventually be so easy that script kiddies can and will flood the internet with deep fakes. That will hopefully "cheapen" the value of online video and audio clips and force people to learn where reliable sources of truth come from.
Re:You may finally use JSHint for evil by zapzupnz on Tuesday August 04, 2020 @05:45PM (#24054811)
In a world where people still get fooled by Onion or Onion-like articles, I'm not holding my breath for it.
Re:You may finally use JSHint for evil by wolco on Tuesday August 04, 2020 @05:24PM (#24054649)
Verified instagram/twitter accounts with text?
Re:You may finally use JSHint for evil by iandanforth on Tuesday August 04, 2020 @04:37PM (#24054246)
You're buying a wrench. The checkout person says, "I hope you're not going to murder someone with this!" You say, "actually I am." The checker then refuses to sell you the wrench.

Freely provided software unifies the producer and distributor into one agent. That person has responsibility. The absolute minimum they are morally responsible for is restricting the uses of their product to ones they do not find morally objectionable.

Re:You may finally use JSHint for evil by sterkekoffie on Tuesday August 04, 2020 @05:07PM (#24054515)
You're buying a wrench. The checkout clerk disappears in a cloud of sulfur and reappears as a demon. She tells you she will sell you the wrench, but if it's ever used for evil, your soul will be bound to her for eternity. She then holds up a virtually identical wrench and says "this one is fine, though, do whatever you want with it." You really just need it to tighten some fittings under your sink. Which wrench do you buy?
Re:You may finally use JSHint for evil by umvi on Tuesday August 04, 2020 @04:45PM (#24054311)
You're buying a wrench online. You add it to your cart. Dang, 5 day holding period while the manufacturer does a background check. Ugh, you need to fix your toilet. You head over to a hardware store and get a wrench. The checkout person jokes "I hope you're not going to murder someone with this!" You roll your eyes and say "ya got me!" and put your hands up like Walter White. The checkout person suddenly gets serious and refuses to sell you the wrench to legally cover the store's hide. You go to a second hardware store. This time you've learned your lesson. You buy the wrench without saying a word. You do not respond or interact with employees and you keep your purpose a secret. The End.

What an ideal world.

Re:You may finally use JSHint for evil by nathanaldensr on Tuesday August 04, 2020 @04:01PM (#24053930)
No, you're not. This is an argument that doesn't hold water. Why am I morally responsible but none of the abstractions below my code are not? What about chip manufacturers? The developers of CPU instruction sets? Compiler developers?
Re:You may finally use JSHint for evil by DSMan195276 on Tuesday August 04, 2020 @04:27PM (#24054162)
I think adding the term to the license doesn't solve this problem (and were silly), but I think your argument is the wrong way to look at it. People should take a moral responsibility for the code they write, and refuse to write code if they view its uses as immoral, but you have to weigh for yourself what that means and what those criteria are, and adding a license requirement doesn't solve this problem.

It's not hard to justify developing a compiler or CPU (or a JS lintier) and deciding that it's just a generic tool and you have no control over the code compiled with it - and that's perfectly fine. You might however find it harder to justify writing functionality that's designed to track people or that you know is intended to be used for nefarious purposes, and in those situations you should be willing to hold yourself to whatever moral standard you have determined. Just because everyone below you hasn't prevented you from doing it isn't a reason to go along with it, you know more directly what your software is going to be used for than they do and they're effectively trusting you to make these decisions.

Again though, a JS linter doesn't exactly have these concerns ;)

Re:You may finally use JSHint for evil by wolco on Tuesday August 04, 2020 @05:31PM (#24054715)
Tracking someone isn't evil. Killing someone isn't evil. Pushing a kid into the bushes isn't evil either.

Your tracking someone explore a new cave and recording paths found. You kill someone who is about to kill other innocent people. Pushing a kid into bushes to avoid a car could save their life.

Evil depends on context. What's evil to you is not evil to me either.

Courts generally throw out clauses like these unless the definition of evil is part of the agreement.

Re:You may finally use JSHint for evil by DSMan195276 on Tuesday August 04, 2020 @05:52PM (#24054886)
I think it's worth pointing out I agree the clause is silly. I was talking on a more broader context of software development.
Re:You may finally use JSHint for evil by iandanforth on Tuesday August 04, 2020 @04:27PM (#24054159)
They are. Why wouldn't they be? We put people in jail for distributing potentially harmful tools to people who are known to desire to harm others. This is not a new or controversial idea.
Re:You may finally use JSHint for evil by umvi on Tuesday August 04, 2020 @04:37PM (#24054247)
Name one tool that has not been used to kill someone or commit an immoral act
Re:You may finally use JSHint for evil by iandanforth on Tuesday August 04, 2020 @04:47PM (#24054333)
This attitude disturbs me, it tries to absolve responsibility by denying the possibility that responsible behavior is possible. That's not just obviously false, whole troves of law cover exactly this point, individuals and corporations have responsibility that follows their products.
Re:You may finally use JSHint for evil by DSMan195276 on Tuesday August 04, 2020 @05:13PM (#24054558)
I just want to say I agree 100%. All these arguments that people are making that you can just absolve yourself from responsibility for anything you create because "you don't know what they'll do with it" worries me. Sure, a JS Linter is probably not a thing to be worried about, and adding an entry to your software license doesn't really help, but people (and developers) are asked to do arguably bad things, and we should encourage people to use their moral judgement in deciding whether to do something rather than just decide "I'm not responsible, so it doesn't matter".

I think it's also somewhat interesting to compare these comments against the ones on articles where we find out a company is helping China (or a different country) censor their website, either locally or globally. In those situations people are upset they were willing to do it - but why wouldn't they if they have no moral responsibility for what they're making and it brings in more dollars? Someone in those companies had to approve it and eventually add those lines of code or those entries in a database, and good or bad they should be willing to stand up for those decisions and say no if they truly disagree with what they're doing. They are, quite literally, our last line of defense against such actions - and it might not be "fair" to them, but it is reality.

Re:You may finally use JSHint for evil by umvi on Tuesday August 04, 2020 @05:16PM (#24054579)
I don't think Linus Torvalds loses sleep at night just because North Korea has created a controlled linux distribution for use in their country[0]. Would you if you were the creator of Linux? If so, what would you have done that Linus Torvalds didn't do?

[0] https://en.wikipedia.org/wiki/Red_Star_OS

Re:You may finally use JSHint for evil by DSMan195276 on Tuesday August 04, 2020 @05:49PM (#24054857)
Your example is so simplistic, not all situations are so passive and indirect. Here's some better ones:

Do you think Linus would be willing to adding a driver for a USB device developed by North Korea that could or would be used by them for nefarious purposes?

Do you think he would be willing to adding code that would make it easier for the NSA to spy on Linux users?

Do you think he would be willing to add code to track Linux usage?

Do you think he would continue to develop and work on Linux if it turned out North Korea was the only user of it? Not just one of, but the sole consumer?

The real world involves actual hard problems and questions, and in some cases (In Linus's case, probably more often than not) your choices will have a direct impact on people. And while I can't tell you Linus's answers for those questions, it's not the answers that matter. What's important is that he should be willing to stand up for those decisions. It shouldn't be acceptable to us or him for him to simply throw his hands in the air and say "well I don't have any responsibility here so who cares how this software is used".

Re:You may finally use JSHint for evil by umvi on Tuesday August 04, 2020 @06:38PM (#24055264)
That's the beauty of GPL. Linus doesn't get to decide whether or not people can add stuff to a Linux fork. And thus, Linus is not encumbered with being a moral gatekeeper. North Korea can add a driver to their own linux kernel that makes it easier to control torture devices if they want and Linus can reject that same driver from being merged to the upstream master copy if he wants.

Software that is morally gatekept by its creator is not free (as in freedom) software. I value freedom more than I value "preventing harm" or whatever you're worried about. The whole world is trending toward less freedom (of speech, etc.) in the name of "preventing harm" which I think is a big mistake.

Re:You may finally use JSHint for evil by DSMan195276 on Tuesday August 04, 2020 @08:54PM (#24056132)
> Linus can reject that same driver from being merged to the upstream master copy if he wants.

You really missed the point. Yes, anybody can maintain a fork, but Linus still has to make the judgement on whether to add such a driver to Linux. And making such a call is a big deal, it means he and the kernel developers are committing to maintaining it (to some degree) and makes it easier for North Korea to keep it up to date and functioning. And Linus's tree is the tree people get their Linux Kernel from, just because forks exist does not mean he doesn't need to think about what he adds to his. Linus is a "moral gatekeeper" whether he wants to be one or not, and in some cases he has to answer such questions, the only relevant part is how he chooses to answer them.

> Software that is morally gatekept by its creator is not free (as in freedom) software. I value freedom more than I value "preventing harm" or whatever you're worried about. The whole world is trending toward less freedom (of speech, etc.) in the name of "preventing harm" which I think is a big mistake.

These are two completely different things. There's a big difference between "I'm not going to prevent you from writing X" and "Here's X, it's only used by you and I wrote it or I'm keeping it up to date for you". That was the whole point of the example questions I gave. At some point it's not just some theoretical boogeyman, at some point you are aiding those who are doing things you don't consider OK. Just because they can fork Linux doesn't mean Linus has no responsibility for what he puts into his fork and develops.

> I value freedom more than I value "preventing harm" or whatever you're worried about.

And what's your point? Refusing to develop software or maintain software for someone is expressing freedom, I would argue that very thing is what will protect freedom from various nefarious actors. Or do you suggest such people (like Linus) should just blindly develop whatever they're told without any concern for what the results may be?

The real irony here is that some of the software I'm talking about is software that is currently restricting the freedom of people across the world. And I can guarantee you that some of the people who go on Hacker News help develop it, and justify it via "It's not my responsibility, it's just code and I get paid to do it" - and that shouldn't be acceptable to them or us. My whole point is that they should have a higher standard and realization of the affect the code they write has on other people, and I think we're actually in agreement on this part.

Re:You may finally use JSHint for evil by umvi on Tuesday August 04, 2020 @05:06PM (#24054503)
Your attitude disturbs me. You want the ability to yank the rug out from under individuals and corporations if they ever do something that runs afoul of your personal morality system. How do I know your sense of morality isn't capricious and subject to the whims of twitter mobs? You could destroy my whole business if you arbitrarily deem my current or past actions immoral.

For that reason, I will never, ever use software with a license like that. Therefore, I will never, ever create software with a license like that.

Re:You may finally use JSHint for evil by tkzed49 on Tuesday August 04, 2020 @03:47PM (#24053775)
So if I just write "you're not allowed to do bad things with this" in the license agreement, I'm covered?
Re:You may finally use JSHint for evil by falcor84 on Tuesday August 04, 2020 @04:17PM (#24054064)
Is a vegetable farmer responsible that people who eat the veggies only do good deeds?

I suppose if you really wanted to, with GMO seeds sold as a service, you could conceivably enforce that.

Re:You may finally use JSHint for evil by frenchyatwork on Tuesday August 04, 2020 @04:43PM (#24054293)
You're not entirely wrong, but looking at things this way will take you down the wrong path. The big question here is who decides what is right and wrong? Is it the author of JSHint? Is the the random dev tasked with adding a lintier to a project? Is it the lawyer who's vetting the organization's licenses?

Ultimately, these questions of how we translate morality into a system of rules, that we use to punish people, shouldn't be decided by a few technical experts, but by the everyone, and we already have a system for that.

Re:You may finally use JSHint for evil by xen0 on Tuesday August 04, 2020 @04:17PM (#24054067)
This is too simplistic and requires an objective sense of morality.

I have to accept that some of my work may be used for things I do not agree with. I do not believe this is a stain upon my honour.

Re:You may finally use JSHint for evil by iandanforth on Tuesday August 04, 2020 @04:53PM (#24054387)
Asking software authors to make moral considerations is less simple than saying, "You're free to ignore them." precisely because morality is subjective. Being irresponsible is much easier than being responsible after all.
Re:You may finally use JSHint for evil by xen0 on Tuesday August 04, 2020 @05:25PM (#24054665)
There is some nuance. If I were writing software to control missiles then I had better be comfortable with how those missiles get used.

But if I were writing a compiler for a mainstream programming language, then I don't think I could be expected to lose sleep over the fact that _someone_ might be using it to write missile control systems.

Re:You may finally use JSHint for evil by wolco on Tuesday August 04, 2020 @05:47PM (#24054829)
It goes further. Unless you stop the project the missile control will be built with less qualified developers. If a missiles keep hitting buses of average citizens you are at fault because you could have prevented that by finishing the project.

Then you can even extend and say because the missile system wasn't built (because you left) when another country bombs and kills kids you are at fault.

You could even say because the missile control wasn't built the next Hitler was born and all of those deaths are your fault.

It's no wonder all presidents age so rapidly for those 4/8 years.

Re:You may finally use JSHint for evil by kelnos on Tuesday August 04, 2020 @06:09PM (#24055012)
I think it's reasonable to expect people to refuse to write software that has only or mainly immoral uses.

But suggesting that a software developer is responsible for any and all possible uses of their software, whether they could have reasonably thought of all of those uses, is absurd.

Regardless, a tool is a tool. If something has, say 60% good use and 40% bad use, should it not be built? Where is the cutoff? 90%/10%? 99%/1%?

Should hammer manufacturers be responsible for murder done using their hammers?

Re:You may finally use JSHint for evil by foxrider on Tuesday August 04, 2020 @04:13PM (#24054031)
A license is not a pact with a demon, known as the original developer. A license is a legal document to be enforced by many different courts across the world.
Re:You may finally use JSHint for evil by zzo38computer on Wednesday August 05, 2020 @01:47AM (#24057624)
I disagree. If someone publishes something, or otherwise makes something available, then it is not available. It is not the author's/inventor's job to decide who is going to use it and how; they only decide how they will use it by themself. That includes money, too: they can charge money to provide a copy to someone else (or refuse to provide a copy at all), if they want to do, but it should not be their job to stop the customer from making additional copies with or without any kinds of payment and with or without modification. I think copyright and patents is bad. Of course something can be used immorally, but that does not necessarily make the author immoral. If you write a program or a book or whatever and you think bad things will be made from it, then you might consider to not write it at all (if that is your choice), but you might also have a different consideration, such as, that good things will be made from it, or whatever other consideration it might be.
Re:You may finally use JSHint for evil by jahewson on Tuesday August 04, 2020 @05:01PM (#24054445)
This makes no sense. If I write a todo list app I bare no responsibility for what people put on their list.
Re:You may finally use JSHint for evil by mhh__ on Wednesday August 05, 2020 @12:57AM (#24057387)
There's a difference between writing a spreadsheet program that ends up being used in a concentration camp to writing the AI that decides who is sub-human.

Neutrality doesn't mean much, although I agree as an industry software can be very naive ethically.