this post was submitted on 24 Mar 2025
114 points (94.5% liked)

Linux

52353 readers
989 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 5 years ago
MODERATORS
 

I would understand if Canonical want a new cow to milk, but why are developers even agreeing to this? Are they out of their minds?? Do they actually want companies to steal their code? Or is this some reverse-uno move I don't see yet? I cannot fathom any FOSS project not using the AGPL anymore. It's like they're painting their faces with "here, take my stuff and don't contribute anything back, that's totally fine"

you are viewing a single comment's thread
view the rest of the comments
[–] Ferk@lemmy.ml 1 points 19 hours ago* (last edited 18 hours ago)

Personally, I don't think the problem is the risk of companies not contributing back... I honestly wouldn't mind if they don't contribute at all and instead they just use the community-developed GPL software as-is, without making any changes to it.

In my mind, the problem is that I cannot trust that a piece of non-copyleft software that's provided by a company actually does what I expect it should do, and does not have extra bits doing things I do not want it to do. Like the changes Google does in their Chrome version of Chromium, for example.

If, for example, MacOS / Microsoft Windows include a copy of OpenSSL with the OS, how can I be sure they are not adding their own sort of malicious spice into it? Can I trust that the keys generated with it will be truly secure? How can I audit it?

At least with the GPL there's some level of legal accountability in that any change that is not openly shared would be illegal. But with MIT there are no legal barriers against malicious code, it's totally legal for companies to force feed me totally legal changes that I wouldn't want and/or that I might not even notice they are there.