the security industry is a machine that turns
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND

into
YOU ARE PART OF A SUPPLY CHAIN ATTACK, SHAME ON YOU

@alexia it really does doesn’t it 🤭

@alexia while providing no assistance to said supply chain.

@alexia It's probably time to reconsider the whole throw code into the world and assume zero responsibility thing. I get why it was important to have that for free software to be protected and take off, but as a general attitude it's become problematic.

@axx @alexia counterpoint: anybody who wants guarantees from me gets to pay me

@axx

@alexia the problem is picking code found in the code-dumpster (the internet) and assuming that it comes with warranties

@axx @alexia This seems like misallocating the responsibility. It wasn't the people publishing the code who decided to integrate it into major commercial systems without acquiring any sort of guarantee for its functioning

@joepie91 @alexia oh I agree with that, but sadly the issue is not limited to that. The "don't care about the users, they get it for free" attitude is sadly quite common, even for projects that are clearly much bigger than just scratching the developer's own itch, so to speak.

@axx @alexia This is a very weird line of reasoning, especially since it has little to do with the original post. If you're talking about companies taking no responsibility for the software they put out into the world, then that has nothing to do with FOSS at all.

And if that's not what you mean, then you should probably be clearer about what you *do* mean, because as it stands, it just sounds like you're trying to not-quite-say-out-loud that you *do* feel entitled to labour from people who never signed up for any of that.

@charlotte @axx @alexia LLM scraping is the same pattern writ larger with even less oversight, so I wouldn't say I'm hopeful for the direction of the trend here

more OSS needs "no commercial use" clauses. does that make it non-free? yes. but I think we have ample evidence that letting commercial users lift community work is a net negative

@LionsPhil @charlotte @axx @alexia

You cannot have "more OSS" be non-commercial, exactly because it makes it non-free. Want to advocate for NC software? Fine, but don't call it OSS.

@LionsPhil
@axx @alexia LLM scrapers at least don't expect extra free unpaid labor on my end