News for hackers. Stuff that matters.
Re:Mitigating Memory Safety Issues in Open Source Software by Miner49er on Thursday February 18, 2021 @08:00AM (#26179300)
Your missing what the two parent comments are driving at. Google says that's what it is doing, but this money is going to "an organization" that will seemingly get it's money from Google, giving Google control over whatever open source projects they target.
Re:Mitigating Memory Safety Issues in Open Source Software by tptacek on Thursday February 18, 2021 @02:07PM (#26184088)
You're scare-quoting "an organization", which suggests you don't know what the ISRG is. You might look them up. They're pretty well-liked.
Re:Mitigating Memory Safety Issues in Open Source Software by Miner49er on Friday February 19, 2021 @08:10AM (#26192726)
I was quoting OP.
Re:Mitigating Memory Safety Issues in Open Source Software by chii on Thursday February 18, 2021 @08:20AM (#26179478)
> control over whatever open source projects they target.

but if they rewrite the project in rust, why _shouldn't_ they control that project? If other people choose to switch, then it's not wrong for them to move, and not wrong for to google gain control of those users.

The original project maintainers is a third party to this whole process, and i would argue, is uninvolved tbh. It is up to the users of the project to decide to trust google's rewrite (and their tendencies to abandon projects...), vs the original maintainer's version, balanced against the security aspect.

Re:Mitigating Memory Safety Issues in Open Source Software by cnfhsg on Thursday February 18, 2021 @12:13PM (#26182531)
If you translate an existing project into Rust, it is a derivative work and should retain the original license.

If the rewritten project gets more successful than the original (perhaps due to corporate promotion), you have morally stolen the work of the original authors.

If you write a project from scratch without looking, this of course does not apply. But I doubt that is how Rust rewrites actually happen, the temptation is too great.

Re:Mitigating Memory Safety Issues in Open Source Software by aaomidi on Thursday February 18, 2021 @12:44PM (#26182991)
> If the rewritten project gets more successful than the original (perhaps due to corporate promotion), you have morally stolen the work of the original authors.

Ownership is by "moral" definition something completely arbitrary and made up.

If you work in open-source you most likely have different views on ownership than others.

Re:Mitigating Memory Safety Issues in Open Source Software by adrianN on Thursday February 18, 2021 @12:55PM (#26183131)
Now you only need a lawyer army bigger than Google's to win your case.
Re:Mitigating Memory Safety Issues in Open Source Software by TheReverend403 on Thursday February 18, 2021 @12:42PM (#26182942)
> If you translate an existing project into Rust, it is a derivative work and should retain the original license.

By this logic, WINE is a derivative of Windows and should retain their license.

Re:Mitigating Memory Safety Issues in Open Source Software by rcxdude on Thursday February 18, 2021 @01:17PM (#26183416)
WINE goes to some length to avoid any reverse engineering of windows components and certainly any glimpse of the source code (such as the leaks which have happened over the years: if you have seen any of them then WINE does not want your code). They do this to avoid any accusations of their code being a derivative work. If you re-implement an open-source project on the same terms then it does not qualify as a derivative work. However if you look at the source code and use that to develop your new implementation, then that qualifies.
Re:Mitigating Memory Safety Issues in Open Source Software by ardy42 on Thursday February 18, 2021 @11:46AM (#26182105)
>> control over whatever open source projects they target.

> but if they rewrite the project in rust, why _shouldn't_ they control that project? If other people choose to switch, then it's not wrong for them to move, and not wrong for to google gain control of those users.

I think the issue is the more critical projects Google controls, the more they can make decisions by fiat. Those decisions will favor Google's interests, and could sacrifice everyone else's interests in some way.

It's sort of like web browsers. My understanding is that Chrome is so dominant that Google can basically dictate HTML standards at this point, or at least effectively push them in directions that are favorable to its ad-based business.

Re:Mitigating Memory Safety Issues in Open Source Software by emteycz on Thursday February 18, 2021 @08:01AM (#26179312)
And? Google can't decide to fund organization that rewrites open source projects, or what? How is that different from forking the projects - apart from Google not taking anything at all?
[dead]
Re:Mitigating Memory Safety Issues in Open Source Software by tptacek on Thursday February 18, 2021 @02:08PM (#26184098)
This is like the archetypical lowbrow dismissal, since the ED of ISRG is literally on this thread saying that their M.O. is to fund project maintainers directly to get this work done. These workers control the means of production.
Re:Mitigating Memory Safety Issues in Open Source Software by emteycz on Thursday February 18, 2021 @08:23AM (#26179504)
They're literally funding an organization that will take software to the next level and share it with the world, what more do you want?
Re:Mitigating Memory Safety Issues in Open Source Software by bachmeier on Thursday February 18, 2021 @08:59AM (#26179853)
A rewrite is not taking it "to the next level". It provides a new version in a new language that does the same things, and if things go according to plan, will have fewer safety issues. There's nothing that binds them to maintain any of these projects. Given Google's history, it's irresponsible to not consider long-term maintenance and other issues.
Re:Mitigating Memory Safety Issues in Open Source Software by emteycz on Thursday February 18, 2021 @09:23AM (#26180079)
No, C and Rust definitely don't do the same things. If the project is open source, I don't see how any maintenance concerns are relevant - everybody can judge for themselves.
Re:Mitigating Memory Safety Issues in Open Source Software by gordian-mind on Thursday February 18, 2021 @10:53AM (#26181279)
It's not that smart to mistake the purpose or specification of a program, with its implementation.

Anyway, if everybody can judge for themselves, then I guess it's cool to judge that giving Google an inch over many critical open source projects is a horrible idea.

Re:Mitigating Memory Safety Issues in Open Source Software by cycloptic on Thursday February 18, 2021 @02:03PM (#26184034)
You speak as if it's impossible for someone outside Google to maintain a project that isn't written in C++ or C...
Re:Mitigating Memory Safety Issues in Open Source Software by emteycz on Thursday February 18, 2021 @10:58AM (#26181356)
Sure, nobody says you have to use their software. But don't claim that they don't give back or that it's purposeless.