I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
-
@Gina My main question would be why they think their approach would work better than what Tidelift does (this is not taking a position on whether or not what Tidelift does is particularly effective at improving open source sustainability, it's just the main existing instance of a comparable concept that I am aware of)
@ancoghlan I wasn't familiar with Tidelift yet, will look into them now, thanks!
-
@Gina I like the concept, not the idea.
1. No part of this proposal needs a blockchain or Ethereum. Proposing this idea is a marketing effort by stapling an attractive idea to the side of an unattractive one.
2. Deriving a contribution-splitting model from an SBOM is interestingly difficult! Even more so if you try to walk a dependency tree instead of a flat list. How are contributions split? Equally among dependencies? Does every library dependency contribute equal value? To whom?
1/2
@Gina presumably that "value to whom?" question is where smart contacts come in, allowing users to express their personal policy about distribution across SBOMs or dependency trees.
But the mechanism for expressing that policy doesn't exist. Will users write their own smart contracts for each project? They'll need more insight into program construction than the developers to make those decisions! The idea doesn't pass muster.
Let projects support their own dependencies. No blockchain.
2/2
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina @ethereumfoundation I get the idea, but there are so many strange problems folded into it. E.g. how do you distribute the money?
E.g. if you have a node application and you have a dependency like expressjs (a full webserver thingy) and the "isEven" package, do both get the same amount of money? Do you set percentages?
And the questions with all things Blockchain:
1. How does it become real money again?
2. What happens with unclaimed dependencies?
3. How does it attract attackers? -
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
I have a gut feeling that this might be trying to wedge a blockchain into something where no blockchain is needed.
But if there is a way for going beyond individual developers / projects asking donations, and Tidelift in the more corporate space, excellent!
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina @ethereumfoundation
I’d say this seems like a legitimate blockchain use case. open source maintainers are globally distributed across jurisdictions/countries.automatic dependency splits across hundreds of recipients with no trusted intermediary is genuinely hard to replicate with traditional payment rails.
Using mandate-generated SBOM data as the funding graph is elegant. The hard unsolved piece is the SBOM to wallet mapping, but that's an identity problem, not a blockchain problem.
-
I have a gut feeling that this might be trying to wedge a blockchain into something where no blockchain is needed.
But if there is a way for going beyond individual developers / projects asking donations, and Tidelift in the more corporate space, excellent!
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina @ethereumfoundation you lost me at blockchain.
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina @ethereumfoundation based on my knowledge of the history of music royalties, a well-meaning system won by a massive labor organizing effort, I am extremely skeptical of this idea being effective in practice. There are too many ways to game complicated systems like this and it ends up benefitting the people who have the resources to understand all the complicated pieces (in this case, coders)
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina @ethereumfoundation Sounds like a good use case for smart contracts. Theoretically it would allow anyone donating to a project to know how the funds get split. Practically, per transaction fees are extremely volatile, but apparently cheap now. Most people wouldn't know how to decipher a smart contact and even people who should know have been scammed in the past.
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina blockchain no thanks
-
Doesn't paint Cloudflare as a raging behemoth destroying privacy, torturing innocents, and ruining everything at any costs so they can have complete control.\
CC: @neil@mastodon.neilzone.co.uk @Gina@fosstodon.org -
@Gina @ethereumfoundation
My feeling is, "blockchain" strongly implies it's a grift, not above-board.@jannem @Gina @ethereumfoundation "blockchain" implies grifting. "Ethereum" essentially screams it from the rooftops.
Blockchain is one of those sorts of technologies that does in fact have some very interesting uses, but it's been so widely used for fraud that legitimate uses generally avoid admitting to it by name.
Look at people bending over backward to claim that git isn't blockchain, for example: https://stackoverflow.com/questions/46192377/why-is-git-not-considered-a-block-chain
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina @ethereumfoundation i stopped reading when I saw the word blockchain
-
@pitrh omg, what a fucking work of art. It's like the original xkcd had a baby with the old org chart meme:
-
@becomethewaifu @jannem @Gina I'm familiar with that argument--that "Blockchain" doesn't count unless it's "distributed"--and counter that this is an example of *exactly* the kind of NO WAIT THIS ISN'T BLOCKCHAIN! NOT REALLY! PLEASE DON'T WALK AWAY! that I'm talking about.
-
I had such an interesting call today with someone from @ethereumfoundation about funding the #opensource ecosystem.
Basically, connecting a blockchain based funding system to a Software Bill of Materials (SBOM) to fund not just the sexy top project, but also the underlying libraries. Aka when you donate to or pay for a project, it would automatically donate to its dependencies as well (like the random person in Nebraska).
What do we think, #fediverse?
@Gina @ethereumfoundation i cant find the reference any more, but this sounds like something which i heard of a couple of years back. that was an overdesigned concept where people would pour money in one end and it would magically distribute it "fairly" by relevance.
such a system will never work, and it never needs a blockchain.
the blockchain people still seem desperate to find a applications and still seem to think that their magic would save the world. won't work.
-
@Gina @ethereumfoundation i cant find the reference any more, but this sounds like something which i heard of a couple of years back. that was an overdesigned concept where people would pour money in one end and it would magically distribute it "fairly" by relevance.
such a system will never work, and it never needs a blockchain.
the blockchain people still seem desperate to find a applications and still seem to think that their magic would save the world. won't work.
@Gina @ethereumfoundation what does work is this: pay the devs who develop the software you rely on.
we do not have a problem of distributing funds more fairly, we habe a problem of funds.
-
@Gina @ethereumfoundation what does work is this: pay the devs who develop the software you rely on.
we do not have a problem of distributing funds more fairly, we habe a problem of funds.
@Gina @ethereumfoundation the sexy top project should fund its dependencies
-
@Gina Generally, the idea of a donation hitting a bill of materials so the underlying tools get funded seems like a good idea. Doing it through the blockchain feels like a scam.
@bryanredeagle @Gina yup, and there are existing projects that do it sans blockchain like https://thanks.dev
-
@pitrh omg, what a fucking work of art. It's like the original xkcd had a baby with the old org chart meme:
@jimsalter
How have I never seen this before‽
@pitrh
