News for hackers. Stuff that matters.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by tw04 on Tuesday March 16, 2021 @02:58PM (#26481285)
Keep in mind, back in February of 2020 when Kip Macy first announced that Netgate had hired him to port Wireguard, Jason offered to help. First Kip declines the offer, then seems to warm slightly to it, but ultimately appears to have not actually engaged Jason.

If I'm Jason and I offer my help (for free), they don't take me up on my offer, then try to release code that would make my baby look quite ugly, I would probably also have a pretty severe reaction.

Could Jason have been slightly more professional? Absolutely. But we're all human and I can't entirely blame him, I'm sure he was frustrated that he offered to help multiple times and they both didn't take him up on the offer, and tried to release a hatchet job with his name (indirectly) attached to it.

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by kbenson on Tuesday March 16, 2021 @04:36PM (#26482555)
> Could Jason have been slightly more professional? Absolutely. But we're all human and I can't entirely blame him

Oh, I don't entirely blame him. I just partially blame him for not seeing the obvious way this could devolve into a problem, even if it would (justifiably) seem unlikely to go to this level so fast. That is, he shouldn't be surprised there was a problem with what he said, although the scope of the problem is a bit more than I think most would expect.

Professionalism isn't just about making others feel good, it's about optimizing for useful outcomes, which includes covering yourself. Not taking care with your words is just like not taking care with your code. Sometimes there's a weird interaction and things go boom.

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by Reventlov on Tuesday March 16, 2021 @03:33PM (#26481720)
"Kip Macy" don't you mean Matt Macy ?
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by tw04 on Tuesday March 16, 2021 @03:59PM (#26482055)
There's not a good way for me to respond to that without going off-topic. The following is assuming that wasn't a rhetorical question, if it was rhetorical I guess we may just agree to disagree:

Until he issues a public apology for his actions, I'll refer to him as Kip. Changing your name to run from the google searches is completely understandable, and I support second chances, but you need to show a bit of remorse IMO.

https://abcnews.go.com/US/exclusive-landlord-hell-defends-te...

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by bscphil on Tuesday March 16, 2021 @08:10PM (#26484944)
Wow, I was thinking the headline was underselling the story before I got to the part about him fleeing the country after his parents bailed him out of jail to the tune of half a million.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by Cyph0n on Tuesday March 16, 2021 @07:02PM (#26484353)
Hot damn, that’s one crazy story!
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by jimbob45 on Tuesday March 16, 2021 @05:08PM (#26483000)
Damn that link was an adventure from start to end.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by Reventlov on Wednesday March 17, 2021 @08:08AM (#26489923)
I wasn't aware this was the same person. Thanks.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by generalizations on Tuesday March 16, 2021 @04:25PM (#26482385)
I don't really think that the 'online mob' has the right to hold someone's past actions over their head, and expect some public appeasement before it relents.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by nullnix on Thursday March 25, 2021 @03:38PM (#26584469)
The actions of... pouring ammonia in his tenants' beds, throwing their stuff onto the street in trash bags, cutting holes in their apartments' floors while they were inside, cutting through floor joists under their apartments and physically attacking the building supervisor when he complained, fleeing the country to avoid arrest and sticking his own mother with a half-million-dollar bail forfeit as a result...

... no, no, there's no reason to hold actions like that over someone's head. It's entirely praiseworthy and I'm sure it's really easy to cooperate with such an upstanding character.

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by nindalf on Wednesday March 17, 2021 @02:16AM (#26487228)
His interactions with James have done nothing to convince me that he’s become a decent human being.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by Firehawke on Wednesday March 17, 2021 @03:00AM (#26487466)
What you think has no bearing on reality. They will because they can.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by CameronNemo on Tuesday March 16, 2021 @03:30PM (#26481693)
Sounds like Jason should trademark Wireguard (the name). Or build an alternative brand. That way Netgate's actions, or the actions of other wireguard implementations, will not reflect on the reputation of his project/product/technology.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by tw04 on Tuesday March 16, 2021 @04:06PM (#26482126)
He did trademark the name. I don't think Jason is going to tell the FreeBSD project that they can't use the name "wireguard" for their implementation of "wireguard" just because Netgate put out shoddy code. It's not the FreeBSD project's fault.

https://www.wireguard.com/trademark-policy/

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by CameronNemo on Wednesday March 17, 2021 @12:43PM (#26493603)
I think he should exactly tell the FreeBSD project to not use the mark if they cannot meet the quality requirements (especially if the quality issues were known prior to shipping). That is assuming they actually shipped the known-problematic code, though. Which they did not do.
Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by kaliszad on Tuesday March 16, 2021 @09:51PM (#26485578)
I don't think this is an accurate description of the responsibility hierarchy. If in fact the code by Netgate or associates/ contractors/ employees of Netgate is not of professional quality, it has no place in the FreeBSD codebase ready for a stable release. Ultimately, the FreeBSD core community/ developers are together responsible for the codebase even if you cannot hold them legally accountable because of the license. They together hand out and take back (deny) the commit rights (bit, whatever). If a highly sought after component _in the kernel_ is (at least to Jason's account) not even up to the lowest security and code quality standard it has no place in the code base in preparation for a stable or probably even a beta release. Other developers (and that's where Jason is completely in the right if his account is correct) should protest the inclusion of such possibly very bad code into the codebase more or less in late preparations for a release as I understand it.

So it is first and foremost on Netgate, if Jason is right but right after that it is on the other responsible FreeBSD co-developers. I mean having so obviously bad code in any kernel of a modern operating system release would be really, really bad. There are many people and companies dependent on it that cannot really influence anything but have to endure the consequences either way. I mean, if you buy a storage appliance, a router or a firewall you trust the quality of the product to a degree and cannot really audit much even if you had the skill. You have to take the word for it and make some reasonable accomodations. No insurance is going the replace the full damage due to lost data to an attacker or a bug. Peoples lives sometimes indirectly depend on the full chain of competence and no insurance can resurrect the dead or right the good name of anybody. Remember, most of the time when you have to update anything for security reasons, somebody didn't understand the system fully or just plain messed up. The only exception is when the problem or times / requirements have changed (e.g. the computers got so fast, we have to transition to longer keys/ passwords whatever).

So yeah, if Jason's account is accurate it is bad the code landed in the codebase at all and raises questions about the quality and security of FreeBSD. I mean, it is code directly meant for a secure-as-possible VPN and something that often directly interacts with the open internet. Surely such code should experience extra scrutiny.

From the short personal interaction with Jason he came across as quite thoughtful and knowledgeable. Over the years, he and his supporters were able to convince many not so easy to convince people about the quality of Wireguard and some of its implementations. He and the supporters have shown a long term commitment and I am for these reasons inclined to trust Jason's judgement as well.

Re:In-kernel WireGuard is on its way to FreeBSD and the pfSe... by jamal-kumar on Tuesday March 16, 2021 @10:26PM (#26485793)
I think this is my favorite comment in the whole thread. The reasons you outline are exactly how I feel when it comes to priorities here, and how I feel his conduct was -- Despite everything maintaining friendliness while being attacked for making technical criticisms was incredibly commendable.