Friend who is not a software person sent me this tweet, which amused me as it did them. They asked if “runk” was real, which I assume not.
But what are some good examples of real ones like this? xz became famous for the hack of course, so i then read a bit about how important this compression algorithm is/was.
There is a guy named Arthur David Olson who maintains a small database of all the time zones in the world, including things like leap seconds and such. It’s used by everybody and it is updated several times a year. See here:
I bet he’s paid nothing to do it. Then one day, when a timing attack happens that can be traced to the DB, some knobhead CTOs and tech influencers will start talking about “securing the supply chain”. They’ll want other such bullshit and responsibilities to be shoved unto volunteers.
Two quotes come to mind “Fuck you, pay me” and “Open source maintainers owe you nothing”.
It would make sooo much more sense for the ISO to set something up, and make governments each responsible for keeping it updated, since they’re the ones doing the changing.
Require all participants to amend their law/regulations, so there’s a note to prompt whoever is in power and changes it next.
I’m sure some places would still neglect to do it… Haha
It has organizational support from ICANN, so it’s not done in total isolation.
If we could all just stop making changes to time zones, that would make my job very slightly easier.
Perhaps we’ll move to UTC+10¼, and then move forward 45 minutes in the summer.
If the day number is a prime, then we’ll go back π hours.
Hope that will help!
NTP is the one that comes to mind for me.
Basically every device uses it and until fairly recently was maintained by a single person
The
core-jsstory always makes me sad. Sure, he’s developing an open source project and no one HAS to pay him. But the meager amount of donations and the tons of hate he receives isn’t justifiable.I had seen the hate before and foolishly just assumed he was deserving of it. Its a horrible situation he’s in and he is being cast in a bad light because he reached out for help.
It’s especially sadder when a substantial amount of the donations vanished when Open Collective and others stopped operating to Russians.
Oh dear, that post from the core-js guy made my blood boil. He’s been taken advantage of by the whole world.
Based on my cheatsheet, GNU Coreutils, sed, awk, ImageMagick, exiftool, jdupes, rsync, jq, par2, parallel, tar and xz utils are examples of commands that I frequently use but whose developers I don’t believe receive any significant cashflow despite the huge benefit they provide to software developers. The last one was basically taken over in by a nation-state hacking team until the subtle backdoor for OpenSSH was found in 2024-03 by some Microsoft guy not doing his assigned job.
I heard about that last one on a podcast and it was the first thing I thought of when I saw this post. Genuinely interesting story (if you’re into that sort of thing). The pod was saying how it’s both a flaw of open source that it could happen that way and an advantage because it was discoverable due to the fact that the code is open source.
Which podcast? Sounds like something I’d be interested in listening to
And those are only fully packaged user-facing software.
I’d guess almost all of the Rust code for low level hardware access is maintained by a single person. Most of them once joined forces and created a standard, it had 4 developers last time I checked. The only usable cryptography library for C# has a single developer, and while on crypto, that meme got widespread because of OpenSSL, that had a single developer who spent most of his time on OpenSSH and other BSD user-facing software.
Also, while we are on crypto, the modern algorithms were all created by a single researcher, that got famous for a work on how to decide if you can trust a crypto algorithm. Almost everybody uses his code.
Anyway, that meme first appeared because of Javascript, when a developer removed his library (with ~10 lines of code) from the language’s repository and almost every Javascript software broke.
I mean, it was either Richard Stallman or Dennis Ritchie that created grep in an evening so that a buddy of his could do research on volumes of text that wouldn’t fit in the RAM of a PDP-11 (or similar machine. I’m telling this story from memory). It’s designed to do what you would do with the ancient text editor ed using the commands Global, Regular Expression, and Print. g re p. grep. Probably the most important piece of software ever written in a couple hours.
Curl comes to mind. Libcurl is at the foundation of almost all networking.
curl is most definitely not developed solely by one person though, it has thousands of contributors. in fact, there is so much red tape around curl that you can’t even discuss making a change to it without first writing an RFC and having it approved by a committee.
And they still get emails from randos when some program that uses curl doesn’t work (the Readme is top notch).
I cannot for the life of me find what you’re referencing. I only remember the
sqlite/etilqsfiasco with McAfee.https://github.com/mackyle/sqlite/blob/a009acaca1fe25d909d8b5180c0120af1abc2b82/src/os.h#L56-L79
https://bagder.github.io/emails/ has the email collection.
Here’s an example from NASA
Libcurl is at the foundation of almost all networking.
That’s not remotely true, but it is nevertheless outstanding work and very much deserving of recognition and support.
Sqlite isn’t quite one person, but it is a very small team and is extremely widely used. https://www.sqlite.org/mostdeployed.html
And their website is quirky
As is their code of ethics.
Have something to share?
Jesus Christ
I believe the quintessential example is curl Also here’s the relevant xkcd: https://xkcd.com/2347/
The curl author writes a lot about his struggles, but he’s also employed to maintain curl, so not really a good example
Mark Russanovich was just some guy who had trouble fixing Windows computers so he wrote systernals from scratch including widely used psexec and other required tools if you are forced to be a windows admin. He has since grown up into a very hansom man who runs Azure which sucks.
“He has since grown up into a very hansom man who runs Azure which sucks.”
Thanks for this. Really brightened my day.
I’d say ffmpeg is a good example, it’s used by almost every piece of software that has to manipulate audio or video (including messaging applications), yet not many people know about its existance.
And Fabrice Bellard, the original author of ffmpeg, went on to create qemu which pretty much made open-source virtualization possible. Also TCC (even if I don’t think that one is widely used), he established a world record for computing decimals of Pi using a single machine that had ~2000× less FLOPS than the previous record, and so much more…
Fabric Bellard’s body of work is fairly strong evidence for time travel having happened already.
Or just genius.
Is-even and is-odd on npm.
For a while, openssl was maintained by 1 or 2 people.
Like half of the npm is maintained by a single, arguably awful, person who writes his microprojects into large pieces of software to maximize how often his code gets installed.
Sindre Sorhus?
Just looked them up… holy hell. How does one have so many repos! And all the apps he’s made.
What’s the story on them?Edit: just looked it up myself. Seems to be a well liked person in the open source community. Idk. Regardless, props to them for the work they put in.
Jon Schlinkert, I believe. Sindre has a lot of stuff as well, but has a better reputation afaik
I would love this even more if one depended on the other and just did a “not even” for example.
I thought that was the case tbh, has it changed?
Edit: is-even depends on is-odd.
Well good news! Time to let yourself love again!
Git, by Linus? Maybe even linux itself? Ok actually Linus might just be Steve Wozniak without an annoying Steve Jobs guy next to him, while actually being a lot bigger than Apple maybe?
It’s really hard to imagine a world without Git. If it hadn’t been invented I think it would have been necessary to create it it’s one of those things that’s hard to imagine and then impossible to work out how you can survive without it.
Yet the vast majority of the world probably don’t even know what it is, and wouldn’t even understand it if it was explained to them.
Everybody would use Mercurial, since Fossil completely lost the race, and both Subversion and CVS are unfit for today’s needs.
What is too bad, because Fossil would be much more productive than Git or Mercurial if the software just finished running at all; and Mercurial is way easier to learn than Git.
t’s really hard to imagine a world without Git
I’ve lived it.
- CriticalFile.vbs
- CriticalFile.V2.vbs
- CripicalFile.V2.5.vbs
- CriticalFile.DONOTEDIT.txt
- _Old.CriticalFile.aspx
- LinkToCriticalFilesFold.lnk
- GuideToDeploying.CriticalFliles.doc
- CritFil.bat
Git is not the only version control software out there, and not the first one either.
Facebook for example is famous for not using git. Because their own modified copy of mercurial fits their needs better.
Microsoft didn’t use git until relatively recently either. They had to make some big contributions to make it work for their system.
their own modified copy of mercurial fits their needs better
The version I heard was that hg people were way nicer to them and very much willing to help compared to git.
I feel like Linus got a taste of his own medicine dealing with Gtk and Gnome people while developing Subsurface and that caused them to switch to Qt.
I remember those days. I used mercurial and svn. And file locking in other solutions.
I’m so happy with git.
Man, I remember ancient gmod addons released using (iirc) turtle svn so they could auto update. Was a wild time.
Th devs at my current organization use turtle svn, but that seems to be more down to organizational politics combined with a misunderstanding that git is platform agnostic rather than anything based on merits
Pretty much every basic terminal command for linux. Grep is the one that comes to mind.
The modern man uses
ripgrep👍But it’s three more letters. No deal.
Paul Eggart is the primary maintainer for tzdb, and has been for the past 20 years.
Tzdb is the database that maintains all of the information about timezones, timezone changes, leap whatever’s and everything else. It’s present on just about every computer on the planet and plays an important role in making sure all of the things do time correctly.If he gets hit by a bus, ICANN is responsible for finding someone else to maintain the list.
Sqlite is the most widely used database engine, and is primarily developed by a small handful of people.
ImageMagick is probably the most iconic example. Primarily developed by John Cristy since 1987, it’s used in a hilarious number of places for basic image operations. When a security bug was found in it a bit ago, basically every server needed to be patched because they all do something with images.
I saw a post earlier about Empress returning to game cracking. For modern video games that use Denuvo DRM, she’s the only person who can really crack it, as far as I know. Singlehandedly holding up the AAA game piracy scene.
She is kind of a shithead tbf and fwiw it’s more like she’s the only person who is willing to do it. granted cracking denuvo is something that is extremely difficult and only a small subset of people can do but it’s not like she’s literally the only person on the planet who can. There was that guy who would just release the yearly update of football manager, for one.
It’s far more likely the people who have that skill set just don’t really want to bother with cracking videogames and the potential legal issues that come with distributing them online.
True, but being the only person willing to do something is kind of laudable in it’s own right. Like all of the open source projects relied upon by millions that are sometimes developed primarily by one person in their free time.
but my (not really my) conspiracy theory for this is the opposite of open source: when someone is good at cracking games companies like denuvo track them down and offer them jobs to harden their product and take another cracker out of the scene. like I bet denuvo is just filled with nerds that spent their teenage years in sketchy irc rooms with handles like -DooMSlAyEr- and used to actually be members of razor1911 before they realized they could get game companies to pay them 200k a year
It’s not a conspiracy theory. It’s exactly what Malus did and why it’s harder to root iPhones nowadays (but the EU is seeing to that by forcing them to start opening up their walled garden).
Can’t remember where I read it, but I think it’s the dude who started AsahiLinux that shared part of his story in the scene. And a few dudes were tracked down and had the choice between a lawsuit and employment. Makes the decision pretty easy.
Doesn’t help that they did their thing on Github and other public platforms instead of I2P or something.
I can’t help but laugh at how batshit crazy she is. Didn’t she write a rap at some point??
I’ll never not be convinced that she’s on a fair amount of meth and/or crack.
Writing poetry => meth + crack???
Not for most people no, but Empress? I will believe it straight away.
You should read the rap lol.
