News for hackers. Stuff that matters.
Re:Microsoft is a national security threat: ex-White House c... by bbarnett on Sunday April 21, 2024 @12:24PM (#40106971)
Open Source != GPL. Nor on Github. I don't know what the parent fully meant, but I do know that some agencies have full access to some Microsoft source code.

From where I sit, I find it absurd that everything we use isn't open source. Again, not free, but the code given to purchasers.

You don't need closed source to protect IP, and the proof is in all of these API lawsuits, and copyright law.

I don't want my missiles to not have code I cannot edit, and stepping back from the top secret sphere, tangential I am appalled at how crappy car firmwares are closed source.

In the old days, a country's national transport agencies could look at evey linkage, every rod, every part of a car design.

Now 90% of the design is hidden. And with electric cars, it's even more firmware.

And the idea that OTA updates are a thing for cars. The madness. The absolute madness.

How much do you want to bet that charging firmwares are remotely updatable?

Now imagine that 9am on Monday, every electric car explodes?

Even today, that would mean an immense number of houses on fire. How could the fire department handle it?

And how could it be handled as the fires spread? And what if lots of other infra goes up?

And that's today. What about when 90% of transportationn is electric? Even if not a single house or building burned, or person was hurt, how would you replace all those buses, trucks, delivery vehicles, and cars? As COVID showed us, you cannot ramp up and down overnight.

And what if it happened to all our allies? Would they still sell part to us?

What of all the tractors are electric, and we miss corn and wheat planting season?

My point in this tangent is... no one is even looking at the important bits. And to reiterate, how much do you want to bet charging firmwares are remotely updated? Really, they should be air gapped from the entire rest of the car.

Letting potential hackers have access in this way, is just plain lazy and reckless.

Re:Microsoft is a national security threat: ex-White House c... by prepend on Sunday April 21, 2024 @12:44PM (#40107151)
> I do know that some agencies have full access to some Microsoft source code.

Access does not mean open source. Open source = OSI and what I think GP meant. And I hold the sentiment that government funded development should be open source.

Re:Microsoft is a national security threat: ex-White House c... by bbarnett on Sunday April 21, 2024 @12:59PM (#40107276)
Open source goes back almost a century, and does mean access to the source code. GPL was created, and other licenses, to allow more than personal use.
Re:Microsoft is a national security threat: ex-White House c... by prepend on Sunday April 21, 2024 @01:54PM (#40107709)
GPL is one kind of open source, not all. That’s why I specified OSI.

For government work, I care about OSI, not if people can just see and not legally change, contribute, and redistribute.

I think government should fund global goods and want to be precise in my language. So when I say “open source” I specifically mean OSI-licensed stuff.

Re:Microsoft is a national security threat: ex-White House c... by bbarnett on Sunday April 21, 2024 @02:33PM (#40108044)
I specifically said "and other licenses", so why would you respond, as if I acted as if GPL was the only license?

No matter. One entity doesn't get to unilaterally redefine a century old term. You claim you want precision, well then specify OSI, a subset of open source.

(And yes, the licenses it approves are indeed a subset.)

Re:Microsoft is a national security threat: ex-White House c... by prepend on Monday April 22, 2024 @07:42AM (#40113359)
One entity is the de facto organization that I, and many others trust to shepard this important definition for society.

Using precise language is useful for building software (and in general life).

I like that OSI exists and helps people understand a specific and desired definition for open source.

There’s a lot of thought on this topic by really smart and skilled people. The aspects of open source that I think are most important are captured in OSI.

For me, I don’t care if I can see the source, if it’s not free and usable. I can decompile code and patch for myself without a license. And I can pay for code in escrow.

But what’s important is that I can modify and redistribute. And that I can be part of a virtuous community creating things together.

Re:Microsoft is a national security threat: ex-White House c... by bongodongobob on Sunday April 21, 2024 @12:29PM (#40107020)
That's all fine and good but I don't want missiles with code you can edit. I didn't vote for you, nor do I trust you.
Re:Microsoft is a national security threat: ex-White House c... by yjftsjthsd-h on Sunday April 21, 2024 @12:40PM (#40107108)
Nobody said random users should be able to edit. FOSS means the code is available, not that they're going to take patches. (See sqlite for an extreme case - code is public domain, but they more or less don't take contributions)
Re:Microsoft is a national security threat: ex-White House c... by giantrobot on Sunday April 21, 2024 @01:55PM (#40107727)
Code available means everyone else has a leg up developing their own weapon system or finding flaws in yours. You don't really want adversaries looking through the source code of your targeting and guidance systems.
Re:Microsoft is a national security threat: ex-White House c... by bongodongobob on Sunday April 21, 2024 @01:34PM (#40107530)
Parent literally said "I don't want my missiles to not have code I cannot edit"
Re:Microsoft is a national security threat: ex-White House c... by yjftsjthsd-h on Sunday April 21, 2024 @02:43PM (#40108115)
Since the line was

> I don't want my missiles to not have code I cannot edit, and stepping back from the top secret sphere, tangential I am appalled at how crappy car firmwares are closed source.

I read that as that whoever's missiles they are should have full visibility and control of their code; I am assuming that "my missiles" means the government, not that the poster personally owns missiles.