Friend who is not a software person sent me this tweet, which amused me as it did them. They asked if “runk” was real, which I assume not.
But what are some good examples of real ones like this? xz became famous for the hack of course, so i then read a bit about how important this compression algorithm is/was.
Is-even 😤
And isUneven which just calls isEven and returns the opposite lmao
Huh… My dad is a software engineer and his name is Ronald. He also secured several software patents when he worked for a big chip wafer manufacturer. He might actually be the Ronald in this meme… 🤔
Curl comes to mind. Libcurl is at the foundation of almost all networking.
Libcurl is at the foundation of almost all networking.
That’s not remotely true, but it is nevertheless outstanding work and very much deserving of recognition and support.
And they still get emails from randos when some program that uses curl doesn’t work (the Readme is top notch).
I cannot for the life of me find what you’re referencing. I only remember the
sqlite/etilqsfiasco with McAfee.https://github.com/mackyle/sqlite/blob/a009acaca1fe25d909d8b5180c0120af1abc2b82/src/os.h#L56-L79
Here’s an example from NASA
deleted by creator
https://daniel.haxx.se/blog/2020/12/17/curl-supports-nasa/
https://daniel.haxx.se/blog/2023/02/07/closing-the-nasa-loop/
Their process for validating software doesn’t have a box for “open source”, and basically assumes it’s either purchased, or contracted. So someone in risk assessment just gets a list of software libraries and goes down it checking that they have the required forms.
As the referenced talk mentions, the people using the software understand that all the testing and everything is entirely on them, and that sending these messages is bothersome and unfair, and they’re working on it. Unfortunately, NASA is also a massive government bureaucracy and so process changes are slow, at best.
The TLAs don’t generally help NASA, and getting them involved would unfortunately only result in more messages being sent.As for contributions, I think that turns into an even worse can of worms, since generally software developed by or for the US government isn’t just open source, but public domain. I think you’d end up with a big mess of licensing horror if you tried to get money or official relationships involved. It’s why sqlite is public domain, since it was developed at the behest of the US.
Mostly just context for what you said. NASA isn’t being arrogant, they’re being gigantic. Doing their due diligence in-house while another branch goes down a checklist, sees they don’t have a form and pops of an email and embarrassing the hell out of the first group.
The time limit thing is weird, but it’s a common practice in bureaucracies, public or private. You stick a timeline on the request to convey your level of urgency and the establish some manner of timeline for the other person to work with. Read the line again, but extremely literally: “we have a time frame of 5 days for a response”. “Our audit timeline guessed that it would take a business week for you to reply, so if you take longer we’re behind schedule”. The threatening version is “your response is required on or before five business days from the date of this message”.
The presumption is that the person on the other end is also working through a task queue that they don’t have much personal investment in, and is generally good natured, so you’re telling them “I don’t expect you to jump on this immediately, but wherever you can find a moment to reply this week would keep anyone from bothering me, and me from needing to send another email or trying to find a phone number”
https://bagder.github.io/emails/ has the email collection.
Thanks for sharing these gems. I can almost feel the exasperation in some of the emails and their replies.
Thank you!! I knew I must have been missing something.
curl is most definitely not developed solely by one person though, it has thousands of contributors. in fact, there is so much red tape around curl that you can’t even discuss making a change to it without first writing an RFC and having it approved by a committee.
NTP is the one that comes to mind for me.
Basically every device uses it and until fairly recently was maintained by a single person
Though OpenNTPD, Chrony or timesyncd if you’re on Systemd, are usually better suited.
Network Time Protocol? Cool, didn’t know that!
So they have a donation/support page?
Is-even and is-odd on npm.
For a while, openssl was maintained by 1 or 2 people.
Like half of the npm is maintained by a single, arguably awful, person who writes his microprojects into large pieces of software to maximize how often his code gets installed.
Sounds like a fork is in order
Sindre Sorhus?
That’s them, yup!
Just looked them up… holy hell. How does one have so many repos! And all the apps he’s made. What’s the story on them?
Jon Schlinkert, I believe. Sindre has a lot of stuff as well, but has a better reputation afaik
The popularity of these two packages shows that something is very wrong with JavaScript.
No, it shows people are lazy.
Well, that as well, but it’s an also bit tricky to safely check if a number is even because JavaScript uses floats for numbers.
It’s not tricky. Modulus operator works fine.
I would love this even more if one depended on the other and just did a “not even” for example.
I thought that was the case tbh, has it changed?
Edit: is-even depends on is-odd.
It would be even better if each one depended on the other.
Well good news! Time to let yourself love again!
Is-even and is-odd are the stupidest packages ever written. Except for all the others that guy wrote.
deleted
left-pad
left-pad was the first thing that came to mind for me
Yeah that debacle still pisses me off. Especially the fact that someone could possibly trademark and enforce a trademark a name that’s already in use. It’s made even worse that the package that now uses the stolen name is defunct.
I hope all of the bad actors burn in Hell.
What pisses me off is that NPM thought it would be okay to remove something from their repository.
What did NPM remove? My understanding is that NPM restored the deleted package. If you’re referring to giving the author the ability to delete their packages, I’m on the fence about that. On the one hand, if it’s open source, it’s a part of the community. On the other hand, it’s also still the author’s code, and if they are the only author, then it’s their sole decision if they want to host their code under their account.
Azer did nothing wrong.
Laurie Voss made a bad call and should feel bad.
The principals of free software was, is, and always will be more important than every single dollar in silicon valley combined.
No arguments there, if you’re gonna depend on a piece of code, you better own it or have a rock solid plan b.
I think he overreacted a bit, not to having his package name forcibly taken from him, but to being asked to give it up in the first place. Kik explained to him that they have to fight this or lose their tradmark because thats how trademark law works. His response was basically “haha fuck you”. He probably could’ve asked for a couple thousand and just changed the name of his project and everything would’ve been fine.
being asked to give it up in the first place. Kik explained to him that they have to fight this or lose their tradmark because thats how trademark law works.
I’m not a lawyer but from what I know that’s a load of shit. There’s nothing stopping a trademark holder from granting licensing rights to third parties, without charge, to use their trademark in specific ways.
They chose not to because its easier, and most people won’t know better, so they roll over.
His response was basically “haha fuck you”. He probably could’ve asked for a couple thousand and just changed the name of his project and everything would’ve been fine.
This is the correct response, even if Kik would’ve given him money. It’s his package, he got the name first. Corpos can eat shit, just because its not the easy choice, or the choice you would’ve made doesn’t mean it was wrong. That package should’ve stayed down on principal.
Sqlite isn’t quite one person, but it is a very small team and is extremely widely used. https://www.sqlite.org/mostdeployed.html
Damn, I wanted to metion sql lite.
It’s not too late. Mention it!
And their website is quirky
It looks pretty decent to me, at least on mobile. Definitely better than 95% of websites.
As is their code of ethics.
Have something to share?
SQLite devs are trolls to their suppliers that’s great 😂
They said they’re quite serious about it, actually. While it’s quirky, I don’t see anything wrong with it. It’s… weirdly charming? I’d never use anything like it, but it’s fun to see something different amidst a world of copy-pasted contributor covenants.
I mean, to make such a point that the only point of the page was simply to satisfy a requirement of someone else’s volition and yet creating that page and apparently saying what you’re saying—seems like there’s something misaligning here :P
Also I no doubt that they hate people who talk too much and hate making jokes — there’s some seriously unserious stuff inside of the rules they posted. They are serious folks who have zero tolerance for laughter apparently :D
My headcanon is they’re a bunch of people who have a super religious supplier with strict checkbox rules and they are fucking with them.
Lmao yo wtf
Jesus Christ
I see you like the first rule.
“be not drowsy”
- Be a stranger to the world’s ways.
one out of 72 isn’t bad
curl
The
core-jsstory always makes me sad. Sure, he’s developing an open source project and no one HAS to pay him. But the meager amount of donations and the tons of hate he receives isn’t justifiable either.I had seen the hate before and foolishly just assumed he was deserving of it. Its a horrible situation he’s in and he is being cast in a bad light because he reached out for help.
It’s especially sadder when a substantial amount of the donations vanished when Open Collective and others stopped operating to Russians.
Oh dear, that post from the core-js guy made my blood boil. He’s been taken advantage of by the whole world.
The guy that runs Rufus.
Furthermore, “RUNK” was originally made in the 1980s to take over from a program written on punch cards in the 1960s. Finally, it’s missing some important functions that the original 60s program had because "RUNK"s developer doesn’t see the purpose of those functions and refuses to add them; and no one has publically released a fork of “RUNK” that adds those functions back in, so you have to do it yourself. Thank God it’s open source.
Edit: oh yeah, and back in 2005 there was an effort to make a GUI for it, but “RUNK’s” sole developer got mad because “back in the 80s we didn’t need GUIs; command line is infinitely faster” and kept intentionally breaking support for the GUI with each bug fix, leading to the project eventually being abandoned.
that really sounds like a case where someone ultimately says “fuck you, runk’s developer”. why didn’t that happen?
Because frankly, Ronald (the current maintainer, not the original author) is very competent. I say this as somebody who has personally been yelled at by Ronald at a kernel summit; I didn’t deserve it, but none of his technical points were wrong. I like to think of myself as the kind of person that, given enough time and documentation, can maintain anything; I think it’d still take three of me to do Ronald’s job. (Well, “job.” I think he technically works for Red Hat or something?) Not to excuse his conduct, just to explain why he’s not been replaced yet.
Wait if it stands for Ronald’s Universal Number Kounter, does that mean both the creator and current maintainer are named Ronald? Is it a dread pirate kinda deal where whoever holds the hat takes the name?
it’s a case where he knows a guy just like Ronald but he’s not naming him, so he’s just talking about “Ronald”
I’d love to link you to their Wikipedia pages, but both of them are redlinked. As far as I can tell, Dr. V. Ronald was an educator who moved from Canada to the USA as part of the whole Xerox PARC thing and probably was valued for mainframe experience; does anybody have a full bio? The current maintainer is Ron Sunk, who did a full run at MIT up through postdoc before going to Red Hat. The names are a coincidence;
runkimplements what we now call Sunk summation, after Sunk’s thesis. (As you might guess, that’s an instance of Stigler’s law, since clearly Dr. Ronald discovered Sunk summation first!)Also, as long as we’re here, I want to empathize a little with Sunk. The GUIs that folks have placed on
runk, like GNOME’s Gunk or Enlightenment’senk, look very cool, and there’s rumors of an upcoming unified number-counting protocol that will put them all on equal ground. But @[email protected] wasn’t joking; Dr. Arnold’s code literally only reads punch cards, and there’s a façade to make it work on modern Linux and BSD transparently. It predates X11, if that’s any help. The tech debt is real.Fun fact, there was actually a man named Ronald Numbers.
I saw a post earlier about Empress returning to game cracking. For modern video games that use Denuvo DRM, she’s the only person who can really crack it, as far as I know. Singlehandedly holding up the AAA game piracy scene.
I can’t help but laugh at how batshit crazy she is. Didn’t she write a rap at some point??
I’ll never not be convinced that she’s on a fair amount of meth and/or crack.
Writing poetry => meth + crack???
Not for most people no, but Empress? I will believe it straight away.
You should read the rap lol.
It was somewhat weird waiting for the HP release on her TG channel.
Like I’ve seen my fair share of terf transphobes, but she’s honestly best described as a hater.
There were so many rants.
But like with Harry Potter, I like to separate the artist from the art.
She is kind of a shithead tbf and fwiw it’s more like she’s the only person who is willing to do it. granted cracking denuvo is something that is extremely difficult and only a small subset of people can do but it’s not like she’s literally the only person on the planet who can. There was that guy who would just release the yearly update of football manager, for one.
It’s far more likely the people who have that skill set just don’t really want to bother with cracking videogames and the potential legal issues that come with distributing them online.
True, but being the only person willing to do something is kind of laudable in it’s own right. Like all of the open source projects relied upon by millions that are sometimes developed primarily by one person in their free time.
but my (not really my) conspiracy theory for this is the opposite of open source: when someone is good at cracking games companies like denuvo track them down and offer them jobs to harden their product and take another cracker out of the scene. like I bet denuvo is just filled with nerds that spent their teenage years in sketchy irc rooms with handles like -DooMSlAyEr- and used to actually be members of razor1911 before they realized they could get game companies to pay them 200k a year
It’s not a conspiracy theory. It’s exactly what Malus did and why it’s harder to root iPhones nowadays (but the EU is seeing to that by forcing them to start opening up their walled garden).
Can’t remember where I read it, but I think it’s the dude who started AsahiLinux that shared part of his story in the scene. And a few dudes were tracked down and had the choice between a lawsuit and employment. Makes the decision pretty easy.
Doesn’t help that they did their thing on Github and other public platforms instead of I2P or something.
I ain’t gotta laud that transphobic fascist for shit
In other words, the Scene is Dead
I nominate Paul Eggert, and Arthur Olson before him, for the tz database, which we all depend upon whenever the time at which something happens (or did happen or will happen) matters.
Edit: Tom Scott touches on the subject here.
When the US came close to going on permanent daylight savings time there were interesting discussions there.
holy shit that was nuts
Although it’s now a larger organization, Redis was started and maintained by some guy that just wanted to make his website faster. It’s very widely deployed.
Isn’t that something that was basically taken over by corporate people?
Yup… IIRC they basically started a company with a similar name when they didn’t really have any association with the project then slowly consumed it.
runk is the thomas ladder of our era
I agree
