For me it's primarily the ability to run a full TCP/IP stack. For hobby projects, I'd rather use a Pi or a Beaglebone with IRC or HTTP for data egress than, say, I2C or SPI. The ease of debugging alone makes it worth it.
>I feel like for the first time in our lives we might have seen peak technology for the next few years.
This happened for a while with CPUs in 2004 or 2005, IIRC. At the end of the Pentium 4 era clock speeds and TDPs were so high that we hit a wall. Nobody was pushing past 4 GHz even with watercooling (I tried).
Dual-core processors were neither widely available nor mainstream yet, and those that were available had much lower clock speeds. It definitely felt like we hit a lull, or a stagnation, in those years. It picked back up with a fury when Intel released the Core 2 Duo in 2006, though.
if you make an exception to obeying licenses because "that person/company/country are bad" or whatever, exceptions start sneaking in all over the place, and the entire fabric deteriorates quickly afterwards.
edit: did not expect people to be in favor of blatantly ignoring licenses. huh.
anyone want to tell me how we determine who the bad people are that we can ignore their licenses, and who the good people are where we will honor them? what is the criteria?
We could have reciprocity laws. If a country won't respect software licences, or permits hacking gangs as long as they don't rob from their own, then they should get the same treatment in return.
The argument is that we should only obey the rule of law with counterparties who reciprocate, rather than voluntarily hamstring ourselves for no benefit other than moral purity.
right, damn pesky morals are always hamstringing human progress.
my thinking is that once you start selectively applying rule of law to "good guys" and "bad guys" (or whatever criteria you pick), you have lost something really important. fingers crossed no one ever alters the criteria such that you fall on the "wrong" side!
i did not expect people to advocate for ignoring licenses, and further, arguing that the rule of law should be selectively applied. but, i am too old to expend energy trying to convince people that the rule of law loses all meaning if it is selectively applied.
so, sure, fuck licenses. if someone pisses you off, just say they were born in the wrong country and steal their shit. thankfully i am retiring soon, so i probably wont see the winners of this race to the bottom.
I think you're entirely right. I also think that what you're warning about is already in the past, due to the practicalities of globalization.
There are so many laws around the world that apply to "websites", that currently, you can't operate any sort of online presence anymore without at least implicitly picking and choosing which laws on the planet that you're going to follow. Nobody hires hundreds of lawyers in every country of the world to comply with every website law on the planet, and if you did, I bet you'd find you probably can't practically operate one.
there is some interesting and nuanced discussion to be had with your main point, but
>This isn't to say that you should ignore software licenses, [...]
the main/only reason that i started this comment chain, and continued it, is that the other commenters are saying you should (if they are from the "wrong" country, anyways).
>i did not expect people to advocate for ignoring licenses
> am too old to expend energy trying to convince people that the rule of law loses all meaning if it is selectively applied.
Again, for what feels like the third or fourth time, this is already happening all over the globe.
It's an open secret, for example, that the AI companies trained their models on pirated textbooks. It's not even an open secret, just the bare-faced truth, that the AI companies trained and continue to train on source-available software without regards for license. It's common knowledge that Russian and Chinese companies (among others) benefit from state-sponsored corporate espionage and sanctioned software piracy. The Rule of Law is dead in many countries, including the United States.
There's literally nothing to be gained by not following suit. You can't pay your rent with ethics.
>fictional idealized world we wistfully discuss in classrooms.
you can live in the real world without stealing software from people and justifying it because they were born in the "wrong" country.
i have done it my entire life.
"two wrongs dont make a right" is a pretty simple rule to live by, even in the real world. perhaps unsurprisingly, it is also good for ones mental health.
The software in question is, IIUC, a bastardized AGPL. You'll have to clarify for me how forking it constitutes stealing. Explain it like I'm in kindergarten.
I mean, that sort of already did happen quickly in Feb 2022, with contracts a lot more significant than open source software... like when leases for 400 commercial jets were terminated over night, and Russia responded by seizing them. And the US started seizing yachts, real estate, and bank accounts of oligarchs.
I'm not in favor of ignoring licenses, but practically speaking, they require legal nexus to function.
China has been at this for centuries and is doing just fine. I can imagine Russia has too for a while and this in particular seems to have had very few negative consequences for them.
> the entire fabric deteriorates quickly afterwards.
It just disproves this entirely. China has been at it for decades, which entire fabric has detoriated? Have licenses been meaningless for decades because of the existence of China?
the moral fabric of not stealing software and ignoring licenses.
>Have licenses been meaningless for decades because of the existence of China?
uh, in china? apparently yes!
if that is how you want the rest of the world to operate too, that is your opinion. i think it will suck, but whatever.
selectively applied law is fun when the laws are selectively applied against people you dont like. just gotta make sure you never get put in the wrong pile.
Adherence to licenses is completely meaningless if it's a one-way street. The whole concept of them is based on reciprocality. Since there's zero chance a Russian court is going to hold up a Western entity's complaint about a Russian entity's violation of their license, reciprocality is dead.
This is a very mainstream concept so I'm not sure why you're so worked up about it.
I am actively building non-magical human verification technology that doesn't require you uploading your retinal scans or ID to billionaires or incompetent outsourcing firms.
Not parent poster but I am a maintainer of software powering significant portions of the internet and prove my humanity with a 16 year old PGP key with thousands of transitive trust signatures formed through mostly in-person meetings, using IETF standards and keychain smartcards, as is the case for everyone I work with.
But, I do not have an Android or iOS device as I do not use proprietary software, so a smartphone based solution would not work for me.
Why re-invent the wheel? Invest in making PGP easier and keep the decades of trust building going anchoring humans to a web of trust that long predates human-impersonation-capable AI.
So, you haven't thought about it yet? Your counterquestion is insufficient to get any further, because "use" is a very relative term. If I can "use" a smartphone depends on the way you code your app. If you use inherently inaccessible UI elements, I can't "use" your app, no matter if I own a smartphone or not.
I might reply with a similarily useless question: Can you write accessible smartphone apps?
We already have it and we use it to validate the trusted human maintainer involvement behind the linux packages that power the entire internet: PGP Web Of Trust. Still works as designed and I still go to keysigning parties in person.
Say a regular human wanted to join and prove their humanhood status (expanding the web of trust). How would they go about that? What is the theoretical ceiling on the rate of expansion of this implementation?
They need to go to generate their key, ideally offline with an offline CA backup on and subkeys on a nitrokey or yubikey smartcard with touch requirement enabled for all key operations for safe workstation use. One can use keyfork on AirgapOS to do this safely, as a once-ever operation.
From there they set up their workstation tools to sign every ssh connection, git push, commit, merge, review, secret decryption, and release signature with their PGP smartcard which is all very well supported. This offers massive damage control if you get malware on their system, in addition to preventing online impersonation.
From there they ideally link it to all their online accounts with keyoxide to make it easy to verify as a single long lived identity, then start seeking out key signing parties locally or at tech conferences, hackerspaces etc.
We run one at CCC most years at the Church Of Cryptography.
Think of it like a long term digital passport that requires a few signatures by an international set of human notarys before anyone significantly trusts it.
Yes it requires a manual set of human steps anchored to human reputation online and offline, which is a doorway swarms of made up AI bot identities cannot pass through.
Do I expect most humans to do this? Absolutely not. However I consider it _negligent_ for any maintainer of a widely used open source software project to _not_ do this or they risk an impersonator pushing malware to their users.
No idea on theoretical rate of expansion but all the major security conscious classic linux distros mandate this for all maintainers. There are only maybe 20k people on earth that significantly contribute to FOSS internet foundations and Linux distros, so it scales just fine there.
Note: with the exception of stagex, most modern distros like alpine and nix have a yolo wikipedia style trust model, so never ever use those in production.
I ended up with Roboto Mono, a font I used to use before I switched from Linux to Mac for my daily drivers. I'm not the kind of person who can identify a font by name simply by looking at it, so I was pleasantly surprised! I chose it more or less at random back in 2012.
Microsoft, who has owned LinkedIn since 2016, has recently been making headlines because recently they fired a lot of their engineers and QA staff and are now essentially vibecoding huge chunks of their enterprise.
What's more, Microsoft never paid the really big bucks like the FAANG companies, and so it's more or less an open secret that at the height of the tech hiring frenzy Microsoft had to fight for B-tier engineers that weren't good enough to work at e.g. Apple.
So, it's been 10 years, which is long enough for that trademark Microsoft mediocrity to seep into LinkedIn. And they're probably vibe coding everything. That's how you get to gigs.
"What's more, Microsoft never paid the really big bucks like the FAANG companies"
I never knew this open secret. In my day msft was very glamorous and I guess something like oracle played the role you're ascribing to msft now. I wonder what their strategy was? (I tend to doubt this was a careless/unexamined decision.) Maybe they figured that paying extra for individuals doesn't get you much if you have enough structure in place? A Bill Bellichik approach to hiring. Is the relationship you're making (FAANG salaries == better products) accepted as true?
I only have my own observations of their products and secondhand info but my understanding is Microsoft simply doesn’t care about engineering. They have a sales pitch (product idea), then they build and ship the MVP that can earn money. If something sells, they figure they can solve scaling by throwing enough money at it. Classic b-tier tech company (and startup) garbage. They never work out the unit economics, etc.
FAANG (at least the few I’m familiar with) tend to be engineering companies. They hire talented engineers who can work from first principles and build products with profitable unit economics that solve interesting new problems. I don’t think Microsoft even knows what software engineering would mean.
Good question. For a long time I think the justification was location: Microsoft is in Seattle, and it’s only the Bay Area that is getting inflated salaries.
You can usually find libraries for your language of choice to speak GPIO and expose the pin's state as a variable in your code.