Don't be too hard on Collin. Looking back on the threads it's fairly clear he's been the victim of a social engineering attack on an overworked maintainer. People were pressuring him to hand over maintainership while expressing disappointment at the slow pace of development. The off-list contact by Jia must have seemed like a helpful enthusiastic solution to a burnt out developer.
this post was submitted on 30 Mar 2024
325 points (98.5% liked)
Linux
46794 readers
918 users here now
From Wikipedia, the free encyclopedia
Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).
Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.
Rules
- Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
- No misinformation
- No NSFW content
- No hate speech, bigotry, etc
Related Communities
Community icon by Alpár-Etele Méder, licensed under CC BY 3.0
founded 5 years ago
MODERATORS
People were pressuring him to hand over maintainership while expressing disappointment at the slow pace of development.
Very likely that was part of the attack as well.
Definitely sounds like it. This happened to me in a real company as well. It was butal.
I agree with that assessment, I'm not accusing Collin of anything. If it is what it seems to be then I feel very bad for him. Just being cautious with wording until things are more settled/until we know more is all.
I just made a similar comment in another thread here:
I read a lot about how we should double, triple check all the code. But what we shouldn't forget is to check up on our people too.
I think if you read through this and take it at face value, there is a pretty clear picture of what happened: https://robmensching.com/blog/posts/2024/03/30/a-microcosm-of-the-interactions-in-open-source-projects/
”Finding a co-maintainer or passing the projects completely to someone else has been in my mind a long time but it’s not a trivial thing to do. For example, someone would need to have the skills, time, and enough long-term interest specifically for this.” - https://www.mail-archive.com/[email protected]/msg00571.html
As someone who runs a charity almost completely solo because of a lack of volunteers, I feel this so much in my bones. It's one thing to say, "Hey folks, I can't run this on my own, I need help" but it's another to find people who actually have the level of skill, committent, passion and integrity to contribute in a meaningful way. I can get people putting their hands up but I've lost count of the number of people who have then turned around and said, "Oh, actually I realise now I don't have time for this" or start in great and then just ghost me. It also takes more of my own time and energy, on top of what I'm already doing' to onboard and train people and it sucks so hard when I do that and then people disappear shortly after - I constantly have to question whether the time it takes to do that will be worth it vs just continuing the struggle by myself.
When you get consumers being arrogant and demanding, getting angry at you for taking too long to respond to their messages or not work fast enough.... it's soul crushing. Way too many people take volunteer work for granted or assume you're getting paid for your time and can therefore treat you like a working-class pleb or are plain just fucking rude and entitled. :( APPRECIATE YOUR VOLUNTEERS FOLKS! We need more volunteers, and appreciation. Many hands makes light work.
Damn. The amount of unpaid work for something so crucial to todays communication is staggering. I always make sure to pass parts if the donations I receive (not a lot) upstream.
I have the horrible feeling that very few people who use FOSS software and could actually donate some money at least dont do this. Do we have any numbers for this?
Reading that made me sad, angry and scared. Great article, but terrifying.
That's a heartbreaking read, and I can't imagine how it feels now to know that someone who finally helped lighten the load may be involved with such an egregious breach of trust and safety.
I think this is why I can't get behind Linus-style takedowns, even if the prospective maintainer has made bad a mistake. Entitled consumers make things hard enough already with direct access to the developers, they don't need any help getting burned out.
Nothing so far seems to indicate Lasse Collin knew what was going on.
I feel sorry for him. Must suck working on an open source project for free and then get sucked into something nefarious like this. He must be under tremendous stress.
Just a reminder - I'm sure we have all seen it: https://xkcd.com/2347/
I hadn't seen that particular one before, so thanks! I guess I was one of the lucky 10,000.
Thanks for commenting. I'm going to keep posting these.
The lucky 10000 is such a wonderful concept.
The endgame is going to be those who rely on this software paying to maintain it.
Can someone give me a TLDR please
Its best you actually find an info dump on the situation as it's not really something that can be tldr'd