Microsoft acquires Github
blogs.microsoft.com
blogs.microsoft.com
Microsoft was part of the PRISM program. If Microsoft shares SSL certs with NSA they could do MITM attacks. What if in some very specific cases you download dependencies from GitHub and they give you a different version with malicious code?
It's the NSA. They could be smart enough to only deploy those attacks on production servers were nobody is going to manually review npm packages.
Maybe it's time we build our core infrastructure on something else than companies that act irrationally when threatened to be sued ?
True, but I suppose it matters how easy/difficult it is for them to do that.
2048 bit TLS encryption? You mean 2048 bit RSA encryption? Also what source do you have that says the NSA can not crack a 2048 bit RSA key? Last I checked that info was non public and there is no definitive, credible source saying whether they can or can not crack 2048 RSA keys.
Maybe in theory it is safe, but implementations are often not safe.
An oversimplified way to see this is that your software runs on an OS which runs on a processor.
Your processor is backdoored (Intel ME and equivalent), your OS is backdoored, the entropy for your crypto is backdoored (Intel RDRAND instruction), your crypto algorithm implementation is backdoored.
So there are infinite resources for them to hack you at any moment for any reason. You have already gave them the keys to everything.
If only we lived in a world where this was practical.
I don't think it's unreasonable to be concerned about privacy this way, or to take issue with the possibility that this acquisition could make it easier for one to be spied on or surveilled. However, we should also cautious that our tin foil hats do not grow too heavy.
Look, I hated Microsoft in the '90s and '00s. I was there. I grew up in a world where IBM dominated the market though. They've both changed. The market has changed and both of these companies had to deal with that.
The reality is that nowadays people pay with their privacy instead of with currency for a product; they are the product. Does it matter much who owns the product (independent US company, big player like Amazon, Microsoft, Facebook, Amazon, or Apple?)
I understand that people don't trust the NSA/US government. And they shouldn't: the US government will always put its interests above yours and mine, and above those of allied countries.
At the same time, this stuff is bordering on parody. Very few of us (maybe none of us) need to worry about "the NSA MITM-ing our NPM packages". If you're that paranoid then you shouldn't be using github, NPM, or non-local dependencies. And of course you should be reviewing everything manually.
Maybe we can start signing our commits to increase security giving the potential threat. The same way that after the Snowden revelations we started using more and more HTTPS.
We can also think of better ways of sharing/releasing open source code. Debian has a pretty neat system with keys so it's pretty safe to install software from their repos [1]. Maybe there is a better system to be develop than just grabbing whatever from GitHub[2] and running it in your machine.
[1] https://en.wikipedia.org/wiki/Debian#Development_procedures
[2] https://github.com/mklement0/n-install/blob/master/bin/n-ins...
That so many people aren't thinking about security at all is a sad comment on the state of software engineering. But perhaps inevitable, given our cultural history of favoring freedom over security.
I really don't like this line of thinking. It's the same one used by news organizations to plump up their stories, or by politicians to make an improbable threat seem more real. In both of those cases, I think the long-term effect is to cause the public to think that very rare events are a lot more common. The result is not a culture of wariness but a culture of fear.
I'd much rather people present "worst-case potential threats" instead as "likely potential threats."
[1] https://github.com/rails/rails/issues/5228
[2] https://github.com/rails/rails/commit/b83965785db1eec019edf1...
[3] https://arstechnica.com/information-technology/2012/03/hacke...
Let's talk about risks and goals. The language of opportunities.
An approach of `curl | bash` takes a needless amount of risk to accomplish its goals. It can do far too many things, of which it actually needs to do a small subset. It offers a lot of opportunity for bad things to happen to seize the opportunity for the things we want. Maybe there are ways to do the same things, to get the same ends, without taking on so much risk.
How do you feel about this subject?
The happy path is that you have some code to share and I want to get it exactly as you wrote it.
Right now the current issues with just using GitHub to share your code are the following:
1. GitHub app gets hacked and let's someone else do a commit (like the rails hack mentioned above).
2. GitHub employee modifies files in prod servers.
3. GitHub cloud provider gets hacked
4. State actor with lots of resources MITM GitHub.com domain and internet traffic and you fetch something else.
I think all this problems could be solved if:
1. Git enforces that all commits must be signed.
2. There is a decentralized list of usernames and keys.
This feature doesn't exists in git but it would be great if you could run `git clone` and it rejects the cloning if not all commits and tags has been signed.
But what If someone hacked GitHub to add a commit and she or he signed the commit. We need some kind of CA to only accept signed commits from the right people.
So there should be a fixed list of committers allowed in the repo and git would have to enforce that as well.
Then you have the problem that if all public keys are stored in GitHub then you almost get back to all the problems again of GitHub getting hacked. It would be great to have as many copies of usernames and public keys as possible. Something like a blockchain would be a good fit.
To recap, by having a decentralized system of users and public keys, and making git validate that the commits are signed and from the right people, we could have a much more reliable way of sharing code.
Additionally, we could have an "audit" system on top of all this were users can review code and mark it as "good". Then if you have a repo with a tagged version that has 5 reviews you can hope that it's pretty safe to run that version. Because it's a single system of usernames, you can check who are the reviewers.
It might be a bad idea to `curl | bash` a script from an stranger but at least you remove the risks of your code being delivered by a third party.
https://git.scuttlebot.io/%25q5d5Du%2B9WkaSdjc8aJPZm%2BjMrqg...
I can see that you've put some thought into this. I can also see you don't generally spend most of your time thinking about security. This is not a bad thing! Most people don't!
But it does occasionally show up in sloppy thinking about system design, such as when you reflexively conflate a commit being signed by a key with a commit being from the person who is expected to own that key. It means you didn't stop and think about how to integrate rapid key revocation in case of compromise, or how to rotate keys over time.
Or how social review systems tend towards unreliability, as reviews are left by those who are not experts and users trust aggregate numbers from such. How meaningful is a 4.5-star average from five reviewers on a cryptography library, if the reviewers are five random people whose expertise you know nothing about and are ill-equipped to judge?
There is zero reason to believe they do.
The NSA forges Microsoft's SSL keys, they do not need to ask for them.
https://en.wikipedia.org/wiki/Flame_(malware)
Even with the mitigations provided by moving away from MD5, simple integration with a CA would be much more strategically beneficial.
> Even with the mitigations provided by moving away from MD5, simple integration with a CA would be much more strategically beneficial.
Returning to the point, this attack would be unaffected by Microsoft purchasing anything.
I was agreeing with you :)
In regards to MITM, that can happen regardless of who maintains the repositories. If an NSL is issued, compliance is mandatory. A gag order is included. AFAIK there are no large organizations that would fall on that sword.
It is on the individual organizations that utilize public resources to do proper certificate and checksum validation, along with code diff reviews to reduce the risk of tainted packages.
It’s a fair point but I still cannot read this without thinking of someone saying “yeah I did some things in the past but I’ve totally changed I promise. Look, for the whole past week I’ve been really nice to people haven’t I?”
(2) Support OpenDocumentFormat in their office apps. Still remember how they corrupted the ISO certification process by creating OOXML (which is just a wrapper over binary blobs produced by MS-Office)
(3) Stop suing Android OEM's for patent licenses
I know the old .doc format was basically a memory dump of the document; but how does OXML relate to that?
http://slated.org/ooxml_dissecting_the_binary_blob_problem http://ooxmlisdefectivebydesign.blogspot.com/2007/08/microso...
* Drop MSVC for Clang or GCC
* Drop Edge for Firefox or Chromium
because they love open-source, right?
Did you mean to say Direct3D? That's still leave you with input, sound, maths, and 2D missing.
That view is fairly one-sided, to say the least. The history is presented in this StackExchange thread: https://softwareengineering.stackexchange.com/questions/6054....
But to summarize: OpenGL was the standard before D3D was created. D3D has been a step behind OpenGL in features and performance up to about D3Dv7. Then the OpenGL ARB screwed up, with Microsoft among the members (some hypothesize that Microsoft were attempting to sabotage OpenGL).
The argument IE6 was that the web grew too stagnant with a single dominant web renderer. If we all agree that the Web is a better place with multiple competing web renderers, why wish the death of the Edge renderer when it and Firefox are all that are standing in the way (and barely by latest metrics) of forks from the KHTML/WebKit/Blink family dominating?
* Direct3D being open-sourced would have removed the need for Vulkan.
* Many compilers are good for the ecosystem.
* Many browsers are good for the ecosystem.
It's only a choice if we have open standards so you can actually choose between different implementations.
It feels just like yesterday that Microsoft was spying on windows boxes. In my mind, everyone has a "Days since last accident" counter in their head, and Microsoft's number is quite low.
Windows 10 exists. Microsoft is "spying" on Windows boxes right now
* Drop OOXML and make ODF the default format
* Drop the patents
* Drop the telemetry
* Drop Xbox
* Drop DirectX
* Drop the cloud garbage
* Drop or open MSVC
* Drop or open Edge
* Actually open .NET
We don't need to open the .NET Framework... We have .NET Core. It's better, faster, and cross-platform...
So yeah.
It looks okay if you only have one Windows in your boot options but once you have two you realize you have two bootloaders.
That's about the minimum, given their track record.
In the meanwhile we can give them increasing credit, if they do behave nicely, but it's absurd to believe that they've suddenly become a good company and that they'll stay like this for the next decades. I have a hard time believing that anyone not payed by them could think so.
And by the way, they have yet to reverse the decidedly un-nice things they have done with Windows 10 in the last years. Allow everyone to disable the telemetry and to better control the updates, and then we can start the 15 years count. Oh yeah, and maybe also stop astroturfing, that's another extremely un-nice thing that they clearly started doing only recently.
There would be nothing wrong in discussing with the people, if they paid people to do so while stating in every message that they're being paid by Microsoft it would be perfectly ok, but that's very different from what they're doing now.
These things make it clear that they're still motherfuckers, just less then they used to be.
If you change the leadership and change employee incentives, it might as well be a different company.
Sure there's cultural inertia... but incentives trump culture every time.
As soon as a company realizes it can make more $$$ with new strategy B than their original strategy A, then boom -- changed. (Sometimes you have to get rid of the old believers, but that already happened at Microsoft.)
If you look at MSFT's stock price, it's ~tripled since Satya became CEO, after being stagnant for years. He seems incredibly committed to open-source -- because in the long run it will ultimately be more profitable for Microsoft, no?
I agree. They don't actually care about open source it's purely because it's profitable to their business. They'll close it without caring if it's not making them enough money or good will.
But I still hope this works. As long as maintaining open source projects is profitable to Microsoft then it gives incentives for other FLOSS projects to show that if such an anti open source company as Microsoft is willing to embrace it then there's good reasons to join in.
I think it's just because in the short run Microsoft ran a very high risk of getting pushed in a corner.
They are embracing what's hip most of all to improve their image, especially so as to be more attractive for talented technical people.
The "Windows everywhere" vision is not pursuable at this time, so it makes sense to let some things go and focus on what can get you the most money right now (cloud, IA, individual profitable products and services).
And maybe, just maybe, surreptitiously spread your patents everywhere... =0
So yeah, they are "all in on Open source", right.
Exactly. Which is why the idea of "trusting" a corporation, or treating them like you would a human being on any level, is ludicrous. They're a plane crash and a stock dip from becoming a totally different entity.
[1] I thought it was just a cliche until I saw it happen to someone. She went through some things and upended her whole life.
He's just younger and less out of touch than Gates (and particularly Balmer). Many people seem to mistake ascribe this aspect of him (more in touch with modern tech) with some higher moral standards etc than e.g. Gates/Ballmer. I don't see why he should be any less fierce/brutal.
I agree with your assessment. For me MS motives are pretty transparent and in my opinion will have a positive net result for GitHub.
(Never going to happen, not just for philosophical reasons, but I'm sure legal reasons too)
I know for a fact that the ZIP component of the windows shell would be an issue as that is definitely licensed to Microsoft instead of being owned by.
If you told me 5/10 years ago about these developments I would have never believed you.
I don't think it's fair to reason about a (40+ year old, 100k+ employees, public) company's behaviour as if it has a mind. It doesn't.
[0] https://www.zdnet.com/article/top-five-linux-contributor-mic...
[1] https://github.com/Microsoft/vscode/blob/master/CONTRIBUTING...
What we are seeing now is Microsoft reacting to being kicked out of several markets by going back to the embrace phase in an attempt to regain some of the ground lost from Balmers failed attempt to secure a foothold for MS in the mobile and web framework markets.
If they had really been about embracing open source and open standards we would have seen them do something useful for Linux like releasing a version of excel for Linux or opening up the protocols outlook and exchange use to talk to each other, but that kind of openness was never on the table.
What i would expect to see with github is that if/when ms decide they want to utilize their investment for profit is a heavy integration with the azure environment in the form of CI hooks designed around azure api's to the point where other CI platforms become 2nd degree citizens in the ecosystem and i would not be surprised if a github account becomes a add on to an office365 subscription rather then a stand alone product.
Everything said after that is just some cheap PR trick for chumps.
Quickly after they get back into an advantage position again they will abuse it same as before and you will live in an age of digital slavery.
I wouldnt be surprised to see next years release of "Github Pro Platinum with Minecraft 3D and Windows Store integration"
For those looking to move, https://gitlab.com is an excellent open source alternative that can easily import all your github projects. https://gitea.io is also available and runs on as little as a raspberry pi.
> Reasons cited were adoption and users being unhappy with the lack of software available for Linux.
> A report commissioned by Munich and undertaken by Accenture found the most important issues were organizational.
> In 2018, journalistic group Investigate Europe released a video documentary via German public television network ARD, wherein it is claimed that the majority of city workers were satisfied with the operating system, with council members insinuating that the reversal was a personally motivated decision by lord mayor Dieter Reiter.
> Reiter denied that he had initiated the reversal in gratitude for Microsoft moving its German headquarters from Unterschleißheim back to Munich.
It's not as clear-cut as you're painting it.
1: https://mspoweruser.com/microsoft-germany-moves-into-a-new-h...
2: https://www.heise.de/ct/ausgabe/2017-26-Muenchens-Rueckfall-...
https://www.computerweekly.com/news/2240234078/Government-op...
It doesn't seem as if MSFT has entirely changed.
https://www.gruene-muenchen.de/terminliste/termin/freie-fahr...
GitHub?
Started the browser wars? Too bad the browser wars have been too small, because we obviously haven't learned anything from them.
Anecdotally, I stopped using Skype for iOS shortly after it was changed because it went from a solid, reliable internet-calling service to probably the most buggy / laggy interface I could have expected.
[0] - https://www.zdnet.com/article/microsoft-updates-skype-after-...
You have a weird memory. Skype was a very nice thing back in ~2009-2010.
There are some really good arguments as to why we should be worried about Microsoft so can we please stop ruining them by using this complete misquote as a component.
This comment covers it well:
> This is disingenuous. He was referring to the licensing model of certain open-source projects, where the introduction of a single line of code coming from an open source project would require the whole of the Windows stack to be open-source, effectively "contaminating" the rest of the stack. To this day this is still a problem to many companies and legal department must carefully review the licensing of the libraries used by their devs.
> [...] Linux is a cancer that attaches itself in an intellectual property sense to everything it touches. That's the way that the license works.
https://web.archive.org/web/20011108013601/http://www.suntim...
Anyone who uses copyleft really wants to declare the following: "This is not copyrighted and derived works shall never be copyrighted." That is not possible with current copyright law. Copyleft is the only way to get that.
GPL is not about enforcing restrictions, it's about doing what's necessary to neutralise the damaging effects of copyright. The fact that is uses copyright to achieve that makes it one of the greatest hacks of all time.
I'm sure Ballmer also disliked Linux for other reasons, but this line makes for an ambiguous example of it.
Given that Microsoft has been pretty enthusiastic about tools like VSCode and Linux support on Azure, I'm personally cautiously optimistic with Nadella at the helm.
It would be entirely reasonable to find it an objectionable comment nonetheless, but please find objectionable what he actually said, not some alternative version.
This fits pretty well with Microsoft calling Linux a "cancer".
(Note that you also have to carefully review licensing of libraries used with proprietary licenses; that's not a problem caused by open source unlike the quote wants to imply. Proprietary licenses also tend to "contamine" a project and make the entire project non-free, so that is not specific to open source either.)
No, it isn't. It's like saying that Ford is the same company that finds more profitable to let customers burn than to fix a flaw[1].
[1]: https://en.wikibooks.org/wiki/Professionalism/The_Ford_Pinto...
Since becoming backed by a major player is both a blessing (cash reserves to fuel the free offering!) and a curse (drive to increase shareholder value could go against longer-term community interests), I have mixed feelings about this trend.
Slightly tangentially, Gitlab has nearly caught up with GitHub and is arguably ahead in some ways feature-wise. I’m happy having built my small agency’s workflow around it.
I enjoy being able to drop a dotfile into repository root and have the product tested and deployed by CI to (in my case) AWS S3 or EC2, or get an email report if something prevented that from happening, after subsequent commit. On my roadmap is Terraform integration and having the automation provision all resources, but even in its current state I don’t think I can overstate the difference it makes, especially with a smaller team of engineers.
Some features of Gitlab at the moment are objectively inferior to GitHub’s implementation (simpler protected branch model with no way to mandate signed commits comes to mind), but many others appear stronger (issue tracker & boards, milestones, merge requests, the above-mentioned CI).
Feel free to give me a shout if you’re considering moving your business to Gitlab and I’ll share my experience.
I'd love to hear your input on this.
Bingo. It's bizarre to hear people stampeding to GitLab when they're subject to the same financial and revenue pressures as GitHub or any other business. Somebody's paying for those servers and bandwidth and that somebody is expecting a return on their investment.
The whole _point_ of Github was that you didn't have to host anything yourself. Just create an account and, bam, off you go.
On top of that, even if you did want to host Gitlab yourself, it's "open core", not open source. You'd lose a ton of functionality.
So, just like gitlab.com?
> On top of that, even if you did want to host Gitlab yourself, it's "open core", not open source. You'd lose a ton of functionality.
That functionality is geared towards enterprise. If you are one, you should be doing your own risk evaluation. If not, you're probably fine with the open source edition.
> Stay independent so we can preserve our values. Since we took external investment we need a liquidity event. To stay independent we want that to be an IPO instead of being acquired.
One possible caveat is performance. While I haven’t had to deal with this personally, some people reported that Gitlab can be a bit slow to run[0]. This doesn’t matter much if you use their hosted solution (if they have cash now, they can solve it by beefing up their hardware), but could result in higher than anticipated costs of running a self-hosted instance.
[0] Speaking of anecdotal evidence easy to find on HN and elsewhere. I’m yet to see any performance benchmarks comparing self-hosted versions of Gitlab and GitHub Enterprise (the latter starting at about $2500 per year) on similar hardware. It could well be that Gitlab is the fastest product for its maturity and feature set.
https://about.gitlab.com/2016/07/20/gitlab-is-open-core-gith...
They do, it just can't pretend to be a full on computer, see the iPad.
Why aren't people pissed that they cant install Linux on their iPhones and iPads?
Once I'm finally tired of its now anemic performance and replace it, I can probably plug it in and use it as an SSH viewer for journalctl or something, so it can still be of some use.
Of course, if the user's motivation for using Linux is in protest against Microsoft, this won't matter, but for those who work in multiple platforms, Microsoft seems to have the most comprehensive vision of computing: not tied to any particular technology or license but fully integrated and interoperable. This is a good attitude worth supporting, even if you might object to some of their other policies. We're moving toward the era of ubiquitous computing where there's a single ecosystem with multiple technologies powering an integrated whole.
Over the years Apple's laptops are the number one laptop at Linux conferences. As a whole Apple has been the biggest enemy to open source even though they have had some good open source projects. MS has had several years showing that Linux and Open Source makes business sense just like most of us have been saying for years.
Sorry, but these days I feel like there are more anecdotes involving the Surface RT to prove that "Microsoft hates Linux" than there are actual Surface RT devices still in active usage, but yet people still eat this stuff up.
> That's their endgame whenever possible.
Their "endgame" was six years ago and hasn't come back since..?
The current year is 2018, right? Or did I miss something :)
Something about how Microsoft is changed and how unfair it was people were continuing to judge it by it's actions in the past.
What an endlessly forgiving position you have adopted.
No, you can maybe install and boot Linux on SOME arm devices. Furthermore, installation and booting does not guarantee full operation of all attached peripherals. Only those devices that have the blessing of the manufacturer will work properly with Linux. There is no expectation that any random ARM device will be able to install and boot Linux. I would invite you to read up on the topic. ARM hardware compatibility is absolutely nothing like x86.
> Also what do you think a Raspberry Pi is?
I have one on my desk right now. What about it?
> Second, we will accelerate enterprise developers’ use of GitHub, with our direct sales and partner channels and access to Microsoft’s global cloud infrastructure and services.
This is it.
At one time Microsoft used to dominate enterprise software development in certain areas (most of the east coast in the U.S.) to such a degree that it was almost impossible to find a non-.NET developer job.
Their biggest failure was TFS. At one time all .NET shops used it. But then git crept in and the rest is history.
Microsoft is going to sell a lot of enterprise hosting accounts. Look for the on-premises installations to go through the roof, especially.
Mostly agree with the points, but I think it was always just as easy (if not easier) to find an enterprise Java based job than it was a .NET developer job.
TFS certainly used to be a horrible product, and I still hate working with TFVC. But Visual Studio Online, their cloud version of TFS, really is a fantastic product, and even let's you host Git repos. The CI and CD features are extremely powerful too.
GitHub, however, has a business issue of not making money. I think with the resources that Microsoft can provide GitHub can continue to build a great product and tap further into Microsoft's enterprise user base to make sales and release more features that customers want/need.
Congrats to everyone at GitHub for this momentous acquisition!
[1] https://blog.github.com/2016-05-26-diversity-and-inclusion-a... [2] http://i.imgur.com/7YaVYUx.jpg
Rumor has it that Satya is furious he still gets so many LinkedIn emails, but is keeping hands off.
Well, he's exhibiting far more self control than I would be able to. Linked-in has the worst email practices of any legitimate company I can think of.
Maybe it's ageism?!?! ;-)
So long github.
Sadly, being bought out by microsoft completely removes their neutrality. Whether they will abuse the trust of having complete and total access to every private repo and all of the code inside or not remains to be seen. But I certainly don’t view GitHub as neutral site anymore. Sadly, from a business perspective, GitHub just isn’t rational when they’re owned by Microsoft. Even less so when we’ve seen how blatantly evil they have been in the past. For us, at least at this point, it will be better to bite the bullet now and move sooner rather than gamble. As someone else here said, even good community oriented companies are only a rough quarter away from shady business practices.
I truly hope they don’t kill off GitHub, it’s been a truly amazing space and I really hope it works out for the devs who work there — the ones I know are amazing people and true believers, I really do hope this works out well for them, they deserve it. Now off to start the long arduous process of migrating everything to GitLab :/
Plus, from what I've read, MS was perhaps the best possible buyer of GH - and no, a federated distributed model was definitely not a possibility given the huge sums of investor money involved.
This has me very concerned for the open source community.
GitHub wasn’t a non-profit. This was always the endgame for them. They were losing money to acquire a userbase that would be sold when the time is right — just like WhatsApp and numerous other big social SV plays.
The difference for me is that I was supporting Github (by paying) to be an independent company, warts and all. If their goal was to always sell specifically to Microsoft, I would have voiced many concerns very early on. I would much rather they had sold to Mozilla or another in the open source community.
I can definitely see why this would be a desirable acquisition on GitHub's side. They were bleeding money. I can't blame them.
They handled that fairly, promptly and well. Microsoft isn't the same company as ten and twenty years ago.
It's not because you had one positive experience with one small part of MS that it means the whole company's culture has suddenly reversed to be philanthropic or something.
Microsoft is hardly philanthtropic. I'd say it acts like a fairly enlightened bigco these days, that's very different from around y2k. My experiences are such that I did report that bug, I'd never have bothered doing that 20 years ago.
Having MS backing GitHub suddenly makes it a feasible option for a lot of conservative enterprise customers.
The real story here is that nobody wants to host their own services and nobody wants to spend time/money even integrating various hosted solutions. The success of Atlassian and this acquisition confirms that people want to pay a flat monthly fee and get access to a bunch of highly integrated, quality services. The web continues to drive the creation of highly centralized platforms (Amazon, Facebook, Google) and it doesn't look like IT development market is going to be any different.
After all, the people buying the software/service aren't the ones who are going to be using it every day.
IMO, for private repos, VSO is far superior to GitHub.
> Finally, we will bring Microsoft’s developer tools and services to new audiences.
Which one is it ? Those statements are just contradictory .
It's obvious that they will bring all their stuff into Github as it has become a central piece for MS Engineers and has become strategic for them , either to optimize engineers productivity or just to better sell their products and Azure/Visual Studio Services Package.
Meaning whether or not you like MS tools , you will get some "Open in Visual Studio" button , send in "Microsoft Team" buttons etc... and probably more stuff like this that most people didn't wanted in the first place.
This is really a terrible day for Open Source.
Even if you interpret the second one as "new buttons to advertise Microsoft products", it doesn't damage a developer-first stance or independent operation.
Moreover, GitHub has already partnered with dozens of other companies for its Education program for instance [0]. This already compromises independent operation, and displays ads to thousands of students, "whether or not they like these tools" (your words).
MS will integrate Github with MS Ecosystem ( Azure , .NET , VSTS etc.. ) as described in their slides.
From this point there is two possibility
A - They open every single new API they use as well as UI/UX API so other providers can integrate themself to Github
B - They don't open (or partially) those new API and Azure/MS Ecosystem will be the de facto providers for every single stuff that is possible in github. You will end up with a "Open in [Insert Microsoft Products]" buttons and you won't be able to change that , third party providers won't be able to appear here as well. Github would have never done in the first place because they were independant , now every single stuff they do will have to be linked one way or another to MS.
Watch the slides , everything is very well described. https://view.officeapps.live.com/op/view.aspx?src=https://c....
Windows laptops that run Linux well enough for development. VS Code. I now develop on my PC at home using the same workflows that I use on my fancy pants work MacBook.
I have a lot of faith in this acquisition. My software team is growing fast and we have so many little problems that feel like they should be solved at the GitHub layer but the solutions aren't there. Microsoft will fix that.
A third alternative of spying on you while also engaging in ridiculous vendor lock-in tactics? Microsoft is the worst of both worlds.
I'm pretty strongly opposed to the petty naysayers and partisan Microsoft bashing, and I'm definitely firmly embedded in the Microsoft camp from a toolset perspective, but I'm very, very far away from holding the belief that Microsoft will for sure fix the bunch of little things that bother you. On the contrary, despite the near complete 180 in culture under Nadella, lack of attention to fine details, making things "just work", the "little things" in technology.....this is where Microsoft is still just......terrible.
This isn't to say everything is terrible, several teams actually have seemed to change in this respect. Power BI would be a fine example. But many, many more have changed very little, if at all. Skype, MS Office, SQL Server Management Studio (and the T-SQL language), and many others are either horrendously bad, or depressingly so much worse than they could be with some serious, well-intentioned and honest effort.
A lot of this could perhaps be excused by much of this being legacy code, but then you see brand new products, like the abomination that is Microsoft Teams, or consider that 90% the problems with Skype could be fixed with a rewrite of the UI. I continue to believe that much of the shortcomings wouldn't in fact be particularly hard or expensive to fix, and I think the investment would pay off handsomely for Microsoft in the long run. But I see no good reason to believe that there is any intention to fix any of it. I don't know if it's a blind spot in Nadella's vision, or some fundamental underlying principle (maybe it's not considered "strategic", which is probably technically correct), but I think I'm at the point where I've lost hope any of it will change.
What's my point? Microsoft, despite it's dramatic turnaround from a cultural perspective, still has plenty of flaws, with no good excuse. For user's sake, let's hope that these flaws aren't in areas that the future success of Github will rely upon.
People used to think that Apple did, and now there's a post every four weeks about how bad Apple's QA is because there's a bug if you post an obscure character in a language used by < 1% of the world's population.
Google's customer support is famously useless, and Microsoft has a ton of bugs.
At some point someone will find a mythical company which cares about the little things that bother us, but that will probably happen shortly after the AI singularity shows up.
Interesting. Do they do it to precisely the same level? As in, all software organizations, and all individual pieces of software, have the same levels of bugs and usability?
If that's the case, would it also be safe to presume that compared to Github remaining independent, under Microsoft they will (or will not, as the case may be) release the same new features, on the same timeline, with the same number of bugs, etc?
You have no way of knowing what Microsoft will or will not fix. This is just blind hype.
I think you're mistaking your blind hate for my blind hype
I don't hate microsoft, and I've shown no hate in my comment. I'm pointing out that you can't expect all your problems to be solved because of an ownership change. Caution and skepticism will serve you better than wishful thinking and hype.
Now you provide advice when I didn't ask you for any. I don't know you. You don't know me and you certainly don't know what will "serve me better" as readily as I don't know that Microsoft will fix all my problems.
If you've found stability in your world view then good for you, it takes all kinds. Skeptics and optimists and more. Spend less time putting others down and more time melting in the pot.
And let us not forget the EU's efforts to support incumbents and deter new entrants, with their complex, vague and punitive regulations. These also receive much approval here; perhaps a fruitful field for study by some enterprising psychologists!
> To use MT3620 Dev Board for Azure Sphere, you’ll need a Windows 10 PC with the latest Windows Updates, along with the Visual Studio Tools for Azure Sphere (which will be available for download from Microsoft). These tools will include application templates, development tools and the Azure Sphere software development kit (SDK). Terms: This development board can be only used for prototyping, it cannot be built into a product for commercial distribution. It cannot be re-sold or used as part of a production environment.
Dear Microsoft, since IoT is one of the “next big things”, it would be nice to use Microsoft Linux ARM kernel with open hardware (no terms of service for hardware resale) and open software (e.g. use open-source Linux dev tools with the Azure SDK).
I understand the concern of a few companies dominating everything that we use, but time will tell.
I doubt we'll be able to predict how they'll respond. Their own code hosting services are... anemic, in Amazon's case, and dead, in Google's case.
In hindsight, it's amazing the other hyperscale cloud providers didn't buy it.
The reason this happened is to get a payday for the investors. I'm happy they invested, but when you look at GitHub it is a utility, not a commercial enterprise and should be treated like public transport rather than like an oil company.
The only thing that scares me its the power of those all big companies to buy all other companies. We are tending to have a monopoly and strict visions about computers and all the philosophies involved in it.
> And Microsoft is all-in on open source. We have been on a journey with open source, and today we are active in the open source ecosystem, we contribute to open source projects, and some of our most vibrant developer tools and frameworks are open source. When it comes to our commitment to open source, judge us by the actions we have taken in the recent past, our actions today, and in the future.
> [...]
> Going forward, GitHub will remain an open platform, which any developer can plug into and extend. Developers will continue to be able to use the programming languages, tools and operating systems of their choice for their projects – and will still be able to deploy their code on any cloud and any device.
> [...]
> Most importantly, we recognize the responsibility we take on with this agreement. We are committed to being stewards of the GitHub community, which will retain its developer-first ethos, operate independently and remain an open platform.
Does an “open platform” mean “open source” or “a plugin system”? I think making it open source would alleviate a lot of dev concerns.
It's not too much to say that they more or less only have upside here - if they can more or less keep their hands off GitHub's community and mindshare while expanding its capabilities and services, it'll be one more notch in their belt of "See? We're not Gates or Ballmer."
There is one actor I don't trust with that, it is them. I'll move my repos next weekend. Maybe that's the call I needed to self host...
[1] https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...
For example, the phrase "doublespeak" is much older and also especially relevant today.
The year is 2018 and Windows still ships with a single navigator, only supports NTFS and does not know that dual-boot is even a possibility.
But please, please not the slightly less recent past? And not the telemetry stuff? And not the patent extortions? ...
-> Bundle Github Business Plans and Office 365 which includes Microsoft Teams I guess.
-> Better azure integrations and push developers for more Azure usage
-> Push VSCode out to more developers
-> Connect LinkedIn accounts of developers to their GitHub accounts and help companies hire better
No ?
I say that they are the same company, only with different cash cows.
Haven't they spied on Windows 10 users? Do they not engage in patents racketeering? Haven't they killed Nokia and ruined Skype?
"But Mom, some of the other companies are doing it too", well yeah, but some of us don't have double standards, in spite of what you'd think and that doesn't absolve them of anything ;-)
Brilliant marketing campaign though. They needed it I guess, but it's getting obnoxious.
---
That said I'm glad that after the acquisition GitHub will be led by Nat Friedman, the former CEO of Xamarin, which has some credibility.
At least the news isn't all bad.
As for what Elop did, in case you missed the news, he only did what the Nokia board themselves asked him to do, and even gave him a bonus for achieving it.
I only know that because I have one of their awesome scales (https://health.nokia.com/gr/en/scales). I was shocked they were Nokia when I found out about them. They're absolutely awesome, highly recommend them.
They got back many of the former mobile division employees via the partnership with HMD, currently having one of the best deals in Android devices.
Ah and Bell Labs now belongs to Nokia.
Did that include having secret negotiations with Steve Ballmer that the board was unaware of? For a true accounting of what really happened you can find it all in Operation Elop.
https://medium.com/@harrikiljander/operation-elop-6f2b043f52...
If the board hadn't had such bonus (24. The bonus brouhaha boils over) as Helsingin Sanomat discovered, the outcome would be much different.
https://medium.com/@harrikiljander/operation-elop-6f2b043f52...
As someone that used to know the Espoo HQ from inside, Microsoft is not the one I blame.
I think having different cash cows does change a company. If it's in their interest to be a good steward of VSCode, Typescript, Github etc then they're more likely to do it.
I think consolidation is actually as much of an issue as which company it is, the more consolidated, arguably the less direct incentive for intercompatibility and open standards. That's more of an issue here because GitHub is not open-source, so unlike the other examples the developer base has nothing to fall back on.
On privacy, that's never stopped anyone from using Angular or Kubernetes because of Google, or React because of Facebook, unfortunately behaviour towards developers seems to be judged separately from behaviour towards users.
That's not the same though. I host my (company private) code on Github. I can use React or Kubernetes without giving any access to Google or Facebook to my code.
Nokia is still alive. But it's not like it was doing well before Microsoft bought them.
I don't think one can say they killed Nokia. Nokia's phone business was basically doomed after Android gained traction, and Microsoft just helped the company to pivot by overpaying for that part of the business, while leaving Nokia with everything that actually was making money.
diktat just for those wondering
I don’t believe the engineers spent thousands man-years developing in-house Symbian, then significant time working on (mostly) in-house Maemo, then some day they said “screw that, let’s throw away everything we’ve developed and move to Android”.
Finally Nokia managers were full of hubris, and believed Nokias was still the center of mobile, and so important it to change the course of industry by Adopting Windows Phone.
This is a well regurgitated lie that I see posted often. If you would like the truth about what really happened I suggest you read Operation Elop.
According to a source present, Google seemed to really want Nokia to join the Android world. The company assured that Android can be customized more than Nokia understood, especially compared with Windows Phone. Even if Google was criticized continuously for having Samsung, HTC and Sony Android phones differ from each other too much, Nokia would be given leeway to create its own user experience. Google saw that Nokia differentiated from these competitors in that it had a global area of operation. Nokia would be able to create better local services and user experiences for network providers and customers, one person present remembers being discussed. The Nokians also noticed that they had been living partially with misinformation. Nokia could continue with Android with its own maps side-by-side with Google’s maps. The same applied with the app store. Nokia’s music service as well as ovi.com could continue, as long as the phone had Google Play.
The discussions continued at a fast pace after the first visit. Google seemed to really want Nokia.
Some constraints were set by the Open Handset Alliance behind Android, OHA. Unlike Windows Phone, Android is not controlled by one company, rather by an alliance of 84 companies which is led by Google, where the members are able to use Android in an equal manner. Google was in a difficult position. By giving Nokia special privileges, it risked its relationship with other manufacturers. The reactions would be difficult to predict. Creativity was needed.
As the negotiations proceeded, a solution was found. Google offered Nokia, among other things, plenty of say in choosing the direction of Android development. By directing Android development to align with its own competitive goals, Nokia would gain some advantage, even if the changes would be available for everyone at the same time. Now Nokia was interested. Android and Nokia had an area where their interests converged in a brilliant way: Developing countries. If Android could be made to work on cheap hardware, Nokia would be best at getting in through in developing markets. The arrangement was enticing. Google would secure the position it was dreaming of in smartphones, and Nokia would become part of virgin Android markets. The precise details remained hidden, but Nokia was able to learn that Google worked Android into clearly cheaper models than Windows Phone.
Another flexible point of Android was in its predictability. Nokia wanted to publicize the new software features earlier than when the phones go into sales. The reason was brutal: Nokia was more solid than its Korean competitor and needed more time to build a phone. If the information about the new Android features was available earlier, Nokia would have enough time to get them in the first wave, like the others. Google was willing. It promised to make the publicizing of its plans earlier and to release the source code to its partners. The solution would have been useless for other Android manufacturers in relation to Nokia, but would not have broken the OHA rules.
Google made a substantial offer regarding distribution of income. Nokia would have gotten a portion of the income from Google’s search engine, app store, and other services which originate from Nokia phones, and the terms would be in relation to Nokia’s influence in the ecosystem. We don’t have information about precise percentages, but at any rate, Google’s promise was quite exceptional, considering that Nokia would still have been able to keep its own services in its phones.
Contrary to what Nokia has claimed, Google was ready for concessions. It was ready to flex as far as it could in the framework of OHA, and even then some more.
Then some big money stepped into the game, as well as the mysterious Nokia employee with the name Rahul Mewawalla.
https://medium.com/@harrikiljander/operation-elop-6f2b043f52...
Yes there were a few dark years, but I think most IM was struggling years ago.
Now skype is pretty good.
There's no way that Microsoft bought Nokia to concentrate on making that tiny hardware subdivision profitable (MSFT's market cap is $700B+ and they bought Nokia for $7.6B). They wanted a hardware platform to promote Windows Phone. For Microsoft, the dying entity in need of a Hail Mary was Windows Phone, not Nokia.
Furthermore, Nokia wouldn't have shared a successful OS with others like Google did if they had one. That meant all other manufacturers were going to stay with Android, and I greatly doubt that they would've succeeded in building the whole ecosystem alone like Apple did.
But that was exactly the plan. When they cooperated with Intel to build Meego, the resulting OS was available to all other handset manufacturers and there were test suites in the work for vendors to be able to claim Meego compat, just as with Android.
The Meego OS was actually quite solid and very nice to develop for. Its major problem was the unwillingness of most app developers to support additional platforms besides Android and the Iphones. Just as with Windows Phone.
As for the adoption among developers, it never had a wide enough release to even start with that. N9 was available in limited countries only, and after Nokia's WP announcement.
Windows Phone was native and extremely performant on even low end hardware. Microsoft dumped millions into development and couldn’t get traction. No way Maemo was going to displace Android.
Manufacturers literally do not care about anything except selling devices and are uninterested in performance except as it relates to bigger numbers that they can advertise with. Users consistently chose Android over Windows Phone demonstrating that their priorities did not align with picking the phone that would still be snappy in two years.
Nokia’s phone business was doomed. Even if they’d pivoted to Android devices they’d probably have still failed because that’s such a tough market with so much competition willing to sell phones with no margin.
Disclosure: Microsoft employee
They killed msn, skype was always a turd. Nokia was dead well before Microsoft got involved.
Skype could have beat Slack to the punch. Instead Microsoft lost both the business and the consumer market.
Furthermore, I'd see Microsoft's reply:
> I'm not aware of any deliberate copying of the Lerna code, but let me dig into it now and call all the devs on the team to be sure. If there is, we should definitely give correct attribution, so I want to investigate. [...] I checked with the devs, and nobody's aware of any code coming from Lerna. If we inadvertently used something without credit, I really would like to know so that I can fix it.
Unrelated to the rest of the discussion, I just want to clarify that MIT License != 'Do Whatever You Want' License. MIT requires attribution and maintaining the copyright license on existing code. Yes, if you don't adhere to the license's terms when copying code, it is stealing.
To be clear, I'm not saying using MIT-licensed code without attribution is acceptable, but I feel that there is a qualitative difference between this and using code you couldn't use under any circumstances, or silently incorporating MIT code in a commercial product.
> "If they are going to steal code without crediting the original author" which, to me, initially read as saying it's still stealing even if it was credited.
Attribution alone doesn't bring it into compliance. The copyright notices have to be preserved too.
Also, the rewriting of commit history, if true, sounds more shady than mere "Oops, I dropped the license and copyright texts".
Is it? Or is it copyright infringement?
Like I understand if you bought an Xbox, but I dont understand if you are a programmer.
Microsoft has always been a headache. Recently its been a tiny bit better, but they still are a for-profit company that needs to continue to make a profit.
This was to make Microsoft money, nothing to 'help programmers'.
A federated or independent solution is the only way to go for infrastructure like this.
Their developer tools are pretty good for their own platform (but JetBrains actually makes great cross platform tools, some of them are proper free and open source, VSCode is playing catch up). Their C++ stdlib implementation was sucking balls for decades. Their (the dev tools') scriptability was horrible. PowerShell is nice, but it came too late, and it was too server focused.
C# is okay, MS has great teams and people, but they are still very much run by the bean counters.
EDIT: just noticed the article says it was also added to 2013, but my 2015 doesn't support it so idk.
I can conceive PowerShell being good as a scripting language, but as a day to day terminal? That would my hell. And the fact that they are forcing so much on it in win10 doesn't help.
They do produce some great things sometimes, I agree, it just doesn't average out as positive IMO.
I wouldn't consider myself a fan, but their developer tools were (are?) some of the best out there.
I dislike Microsoft a lot. But Apple, just as much. People will take a dump on Microsoft while in the same breath fawn over Apple for identical behaviour.
They're all as bad as each other. Yep. Google included.
Not a Fan, but judging from their recent work, I am giving them the benefits of doubt.
Just want to point out that Github was also a "for-profit" company.
Look at how much data Google has on every single one of us.
MSFT is going through a cultural change right now. It was the case for Google, to make money the had to be an advocate of open source. They didn't do that because they are good-hearted or anything else. It is just like geopolitics. Hit your opponent from the weakest point. And Microsoft weak point was open source at that time.
But the point is neither MSFT, Apple, Google or Facebook does not care about developers or customers. They want to make money. This is nature of corporations. Instead of nagging and being short-sighted we should embrace open source collaboration by MSFT and should hit them when they don't respect customers.
However, with the understanding of what the poster meant, it does make sense. We're talking about the company whose racket produces 10$ avg for each Android phone sold.
I'm talking especially about those FAT patents, which are against the spirit of patenting (independently of being in favour or against patents).
I understand that big companies are big and internally conflicting, however, I see a radical conflict of interest between their newfounded open source responsibility and their ruthless business attitude.
What about the data Microsoft has on you? Their Windows 10 OS is basically a data funnel right to their servers. They operate a tracking based search engine that also builds profiles on people. And they have data centers in China that are run by Chinese state run companies.
>And they have data centers in China that are run by Chinese state run companies.
BTW, tbh I don't trust data centers in USA any more than data centers in China.
1) creating value for their customers
2) maintaining the moat that prevents other people from creating value for their customers
The former is constructive, the latter is destructive. They both contribute revenue.
I haven’t done a full scale analysis of Microsoft, but the argument I would entertain is that Microsoft primarily sells tools for companies and individuals to built moats around themselves.
Meanwhile, they basically invented the "buy your competitor and tank their business" strategy. That's probably what this person is referring to.
How does tanking Github allow Microsoft to sell more copies of Office?
"Buy and trash competitor" isn't a real strategy. When an acquisition fails, it's usually poor management or vision, or just a lack of synergy in the first place, not a purposeful tanking.
I think self-hosting is a better choice for almost any organisation. Remember, 'the cloud' just means 'someone else's computer.'
Of course you don't need to host it all there. Just mirror enough that it gets you the "visibility", while keeping everything else on your own servers.
Then again, there's inertia. And inertia always wins.
This is not mutually exclusive. You need money to keep lights and servers ON
Unlike Microsoft, however, they can't seem to make GUIs where the font metrics are right (eg. can you read the text properly or does the text overlap or end up being too big or too small for the space?) or scrollbars.
Linux is a winner for server apps but on the desktop it seems to get worse over time, not better.
No, not really. The problem is too many people (like you maybe) associate "Linux desktop" with "Gnome (3)". That's false; there's a bunch of different DEs for Linux. Just look at Xfce; it isn't getting worse. KDE seems to be getting no worse too.
Do they still do that?
At home, I use KDE, so of course they're not going to have system utilities binding to GTK. KDE is Qt-centric, so most stuff there is most likely in Qt-flavored C++. Xfce is GTK, but it's known to be fast (I use it at work and it's quick), so I seriously doubt it has system utilities in Python.
Honestly, I think all your complaints are really about Gnome3.
You comment makes no sens, "I don't understand if you are a programmer', no offense but what rock do you live under?
So it's a little disingenuous to say only technology consumers should have positive feelings for Microsoft. Plus, making money & helping programmers are not mutually exclusive; Coupled with their business strategies (good and bad) this has always been MS's strategy to grow and profit from their markets.
How did they treat Nokia employees?
Mhmmm.
I was one of them, and Microsoft treated me very well.
Windows Phone was an amazing platform. I’ve also developed for iOS a lot. Visual studio + expression blend was way ahead of apple’s xCode. Every single piece was much better: language, libraries, compiler, debugger, emulator, UI designer.
The platform is now discontinued so I no longer develop for WP. Meanwhile, most of the skills I’ve obtained working on WP7-8 apps apply to other XAML-based platforms, i.e. WPF, WinRT, and UWP. Fortunately for me, Windows is not going from desktops any time soon.
They killed what small progress they’d made on their ecosystem 2 times, simply because they got bored and decided they didn’t like the technology stack they’d previously mandated and supported. They deserved to get buried in that space.
Meanwhile Apple have kept what is essentially the same technology stack for the past decade. Sure there’s been some pain, but almost all of it had some purpose that moved the development of apps forward.
Looking back on it, they took on an extremely difficult problem having a completely new marketplace and platform against competitors with tremendous amount of pre-existing traction.
There were clearly some pivots towards universal windows compatibility, and possibility of android compatibility as well. Nobody argues there's a ton of tactical failures and the net result was a loss, but I wouldnt conflate the mobile endeavor with something half-baked nor disregard to developers
Trust has two main dimensions in my view, compassion and competence. Microsoft was not competent enough to have a surviving platform in the face of iOS or Android... even though they had roughly a 8 year lead.
That doesn't earn my trust.
What a strange criticism. Of course Microsoft is a for-profit company and they're doing this to make more profit - no one is of the delusion of otherwise. They didn't spend $8b out of the goodness of their heart.
However, one way you make money is to do and make things people like. Here's hoping Microsoft will recognise the value Github can provide and they do right by it. I'm cautiously optimistic.
I definitely agree. Anything Microsoft-related, or even Google-related, is a no from me. Just from a product standpoint, most of there products inherently aren’t that great. And you get that feeling when using their products, a feeling of “oh, this must be a Microsoft product because it feels very corporate.” Plus, there approach to design is subpar — it’s like there’s people out there that actually like Google’s Material Design?
> Like I understand if you bought an Xbox
I have an Xbox, and I just noticed advertisements on the dashboard that are non-gaming related. I also think I saw this when using a friend’s Windows-computer, they have advertisements within their operating system. It’s just bad.
I like Material Design...
Sure, Microsoft is ultimately out to make money, but they're doing a fair bit to "help programmers" and only making money from those efforts indirectly.
Funny that the things you mention all happened under Steve Ballmer too...
Refusing to move on to Android?
There was no real chance Symbian had in the post iPhone world.
Nokia forgot its USP, which was basically durable rugged hardware. Instead they tried to compete with the iPhone in the software department, it didn't work out too well.
Motorola is doing quite good with Android.
You misremember things quite badly. Nokia was the clear leader in all phone segments, smartphones included. At the peak they sold just over 50% of all smartphones in the world. Of course they would try to hold on to that. They were better in software than their hardware competitors (Ericsson/RIM/etc), but of course that didn't amount to much when the field was upended by Google and Apple.
> Motorola is doing quite good with Android.
Motorola is now a Lenovo brand.
1 - https://blog.jetbrains.com/dotnet/2017/02/15/rider-eap-17-nu...
It takes time to break things out from inside a larger closed source project...
There's VSCode (is that OSS?) but that's not an edition of VS but rather a whole different product.
It's not like JetBrains can't build their own debugger based on the ICorDebug interface (which is what Microsoft's implementation is also based on).
I don't even understand what that means. It was never Open Source, it was part of the IDE(s). Microsoft released an update package for their IDE(s) on NuGet which JetBrains used before their native debugger was ready.
If Microsoft are to be shamed for keeping their IDE's debugger closed source then JetBrains should be equally shamed, both have closed source proprietary IDEs.
Truly embracing open-source with .NET core would mean that, yes, even a proprietary product could make use of it. A debugger is extremely core to having a language being open-source and artificially limiting it to your own products is the exact opposite of 'embrace'
Also, JetBrains does have an open-source debugger in their community versions, but this is not what the debate is about.
This is like if Stallman released Emacs under the GPL, but kept the Elisp interpreter proprietary.
My problem is; if you're going to pretend to embrace open-source and then limit a core component this arbitrarily, you're not embracing open-source, you're still the old org afraid of competition.
Credibility of what? He's a Microsoft employee, being paid by Microsoft, and has made a ton of money by selling his company to Microsoft. Follow the money and you'll find nothing but allegiance to Microsoft and it's corporate goals.
For the record - I don't think MS is as nefarious as people here are insinuating, I'm just pointing out facts that people seem to overlook.
Microsoft does have a dark history, it’s also a huge company and Terry Meyerson (windows lead) was an aweful leader.
Things definitely changed. Satya knows that they need the developer mindshare, and that means to go where the developers are.
I hate windows as much as anyone, but a lot of their products are top notch. God I love vscode and Typescript. Just only use their OS products and you’ll be happy.
I think it's just that he wanted to do something Open Source based, rather than what Microsoft was doing at the time.
History.
> Github doesn't have the vendor lock-in that other companies have
There's not much about Github that can't be easily replaced; it uses git at its core. Comments, issues, and wikis are convenient, but relatively simple to implement.
The main value in Github is the de facto community status it has, which it earned by being an open community and good steward of open source projects. The worst MS could do here is shoot themselves in the foot and ruin that value (which they just purchased for 7.5B) by driving developers to other platforms (who will make it all too easy to switch).
I think the M&A teams at MS must have seen this possiblity and have a different plan in mind for Github. Think dead simple (one-click) Azure deployments and integrations. And if you want (or need) that functionality for a different cloud provider, you'll just have to build it yourself on a different site.
[0] https://en.wikipedia.org/wiki/Embrace,_extend,_and_extinguis...
Integration and workflow. Thanks to the various gubbins available in the marketplace[0], CI/CD goodies, hooks into communication and project management tools and so on, for a lot of people migrating away from Github would mean losing access to enough little convenience things that actually it's not feasible for a large organisation with not great process change management techniques.
2 sides, same coin. You assume chaos, they see you assume that. They shape their narrative to fit their perspective with this data in mind. That rationalizes the behavioral pattern from their end, which continues the cycle.
Not saying I know any better solution, just that it's annoying as fuck to actually change when everyone keeps assuming you won't, and treats you as such. Chaos is probably going to happen even if there's a general mutual trust that springs forth. Can't control chaos.
They haven't fooled me since the 1990's and they won't fool me this time.
Dear reader, you should too.
Vendor lock-in is an important concern regardless of who owns the platform you're being locked into.
If we wait for it to happen by then it will be too late
Edit: Actually, I don't think the idea of "Embrace, Extend, Extinguish" even applies to buying out companies. The idea behind that phrase applies to technologies, not companies. You can't "extend" GitHub with proprietary tech, it was never an open source technology in the first place.
If Microsoft starts extending git with new proprietary features that only work with GitHub, _then_ it may be time to start being concerned. As of now though, I don't see how "Embrace, Extend, Extinguish" applies to this situation in the slightest.
As for how EEE applies to this situation: The situation is consistent with an EEE strategy currently being in the "embrace" phase. It's also consistent with a "embrace, be nice, create win-win outcomes" strategy, but that is not usually Microsoft's modus operandi.
Git doesn't support issue tracking and pull requests.
This said, Free Software Devs should never have trusted GitHub in the first place.
There is a wiki, a bug tracker, a platform for pull requests and distribution, etc...
Seriously? Windows 10 is a perfectly usable OS out of the box. I can open up the included web browser and go to whatever website I want. I can install Office, Visual Studio, a Linux subsystem, VLC, a VNC client, VirtualBox, Chrome, Firefox, and every other piece of software I need without any hassle.
Yes, there is something called "Bubble Witch 3 Saga" in my start menu that I did not install. I understand why people are upset about things like that even if I don't care.
Windows 10 has plenty of flaws that are worth pointing out, but using ridiculous hyperbole doesn't add to the conversation in a productive way.
There's a large gap between 'usable' and 'good'.
They destroyed the consistency of their interface (combined desktop/mobile anyone), and added a lot of cruft that literally nobody who's used Win 7 needs.
I do have a problem with people calling it barely usable, which is a much more objective (and incorrect) statement.
My contention is that you implied that Windows 10 does not even meet the low bar of "barely usable" when you said that you have to delete half of the OS to make it barely usable.
That is a lie. Windows 10 is usable out of the box without any modifications. Saying otherwise is spreading misinformation, which I don't support.
Ditto for dozens of Linux distro's.
> Yes, there is something called "Bubble Witch 3 Saga" in my start menu that I did not install. I understand why people are upset about things like that even if I don't care.
What other things have they installed that is difficult to find out about? How about all the spying? Some game you don't use is the tip of the iceberg.
I have no idea what else they've installed, just like I have no idea what MacOS or Linux install. They're all black boxes to me. I see no reason to think Windows is any worse than it's competitors.
I assume by spying, you are referring to Windows 10's telemetry. Personally, I think concerns about it are overblown and calling it spying is misleading at best. It's for diagnostic information. You can set it to only send basic diagnostic data if you so choose. I am in favor of companies collecting diagnostic information about their products to improve them.
When was that? Oracle famously has, but I haven't read Microsoft's version of the same.
So MS contributed to the abysmal court decision.
No, Microsoft did an incredible service to all Nokia shareholders by buying the sorry handset business which had already failed in the market at that point.
You can blame Microsoft for not resurrecting a dead carcass but that's another thing entirely.
Nokia is doing quite fine manufacturing telecoms infrastructure.
The developer side of Microsoft has definitely changed for the better over the last several years.
And even if github fails, so what? It’s the most easily replaceable part of the stack.
The best part of GitHub is the social part and that’s not currently replaceable. Also good luck migrating issues and their history of comments and PRs.
The social part is not that big of a deal, its just because everybody happens to already have a login. Other than that, what's the big social hook? You can have the same exact discussions on the other source code sites, all of which have more features too.
To be fair, Nokia was already dead when Microsoft bought them. MS just pulled the plug.
This is small compared potatoes to the sort of thing Microsoft used to pull before. Microsoft spent years in the courts and narrowly avoided some very drastic government intervention and regulation on both sides of the Atlantic. That doesn't happen because someone might not like the new Skype UI or really misses flip phones.
Nokia, isn't a person. It's another corporation. Patents racketeering...this is literally only going to be fixed with legislation. I'm all for it. There is no such thing as a corporation that won't chase every dollar that it can. That's what they do. Want to stop patent BS? Remove the incentives through legislation.
I like to look at it from the perspective that they are a for-profit public company and are legally required to maximize shareholder value, and they have every right to do so.
Therefore, any plans I make regarding GitHub will not rely on them being friendly and kind-spirited in any way. If they turn out to be great, I'll just be pleasantly surprised.
But their MO is to buy up companies people like or love and run them into the ground, then replace them with a Me Too product that is just enough different that getting out is challenging. To the rest of us that’s indistinguishable from destroying the competition and reducing options.
And here they are buying a company people like, having recently killed off others.
This tiger has the same stripes. When it eats your remaining arm, try to remember people told you so.
How is it spying when they present you with a full screen detailing data collection with the option to turn it off, and have several blog posts providing details.
> Do they not engage in patents racketeering?
It's not much of an excuse, but all tech companies do this.
> Haven't they killed Nokia and ruined Skype?
Didn't they give Windows Mobile one hell of a run? Like they tried for a decade and finally admitted defeat? And Skype, I don't know. I use it in a daily basis. It doesn't seem to be that bad.
The Privacy Panel in the new Settings applet for example has always existed.
Seems like refusing to disclose what is collected would run afoul of GDPR. The law requires that "categories of personal data" be disclosed, and also that Microsoft's European customers have a right to a copy of their personal data. Are you claiming that Microsoft is not or does not intend to comply with GDPR? Or perhaps there is some other qualification implied; such as this only applies to non-European customers? If so what is your basis?
They give you the option to fully inspect all the telemetry data your computer is sending, categorized by use.
https://docs.microsoft.com/en-gb/windows/configuration/diagn...
Likewise. I know they neglected the Linux client (which I used to use) for years and then replaced it with some new browser based thing. This 'ruined Skype' claim has been made several times with each Microsoft buys GitHub story. What exactly do people have in mind when they claim Skype was ruined?
The new UI is absolutely counterintuitive and badly designed. The Linux version is now based on Electron and requires a ridiculous 400MB of RAM just for the login screen. It subjects the CPU to ridiculously high loads, ca. 10 times higher than before when idling (easily saturating one core periodically). It starts to jerk and studder when the chatlog reaches any realistic length, making it unusable with more than 200 to 500 messages in the visible history. The Windows 10 client, which seems mostly identical, cannot get audio from any of my microphones.
I see. By all accounts the Electron based client is garbage. I use the 'classic' Skype client; a.k.a. Skype 7. It isn't based on Electron and works great for me with two different mics. So I guess I've missed out on all the fun with the new client.
Even if the data is anonymous, Microsoft can filter it by range of competitor's IP addresses. Then by stuyding the list of used applications they can learn: how many employees the company has, how many of them use IDE (i.e. are developers), how many use Excel (marketing people), how many use social networks and chats (managers), how many man-hours they spend on development, how many DBAs are there, whether anyone works overnight or on weekends, when they have vacations etc. Now tell me it is not a spyware.
And by the way Google has similar powers because they have advertisement and analytics scripts installed on most websites, so they can spy on their competitors too.
UPD: looked through an article [1] and understood that I underestimated Microsoft. They even collect user account identifiers and hardware details. Microsoft knows about your computers more than your sysadmin.
[1] https://docs.microsoft.com/en-gb/windows/configuration/windo...
If you don't like data collection, then don't use Windows 10. Plenty of Microsoft tools work on macOS and Linux. But don't accuse them of spying on the user when they have made efforts to be transparent about it.
There's a reason the GDPR requires explicit opt-in: companies are expert at making their spyware look harmless and know that most people won't bother to change the defaults or won't understand what's happening.
Also I remember that detailed articles about "data collection" appeared only after it was shipped and caused some negative reaction. While publishing an article is a good idea, it is unlikely that everyone will read it. A better idea would be to display a popup for Windows users saying something like "Hi there! We are going to look what programs you are running and what else do you do at your computer to improve your experience. Hope you are fine with that.".
Technically it might be not a spyware, but if the user doesn't realize that their actions are being tracked, it still would look like a spyware to them. Or should we better call it a "trojan" software? A definition from Wikipedia says "In computing, a Trojan horse, or Trojan, is any malicious computer program which misleads users of its true intent." and Windows telemetry program matches that definition.
For example, in an article about "basic" telemetry [1] they mention that full command line of an application can be recorded, potentially including any private data and passwords.
[1] https://docs.microsoft.com/ru-ru/windows/privacy/basic-level...
Literally every for-profit desktop OS vendor has "spied on users" by the definition you're trying to use. Including OSX and Ubuntu.
>Do they not engage in patents racketeering?
So Google boxes Microsoft out of the phone market by refusing to support any of their services on Windows Phone. And Microsoft is the bad guy for leveraging their patents against vendors selling Android phones? Satya Nadella would be looking for a new job if he weren't leveraging their patent portfolio. End of story.
>Haven't they killed Nokia and ruined Skype?
See comment above. Nokia is dead because they couldn't get a handful of table-stakes apps. Primarily because of google.
Skype... well that was just fumbling the ball, but it wasn't for no-reason. The way Skype was originally architected wasn't going to scale. That was by no means nefarious in nature though. Github has no fundamental flaws that I've seen that they would require them making significant changes.
And on what planet do you live that licensing out patents that are legitimate patents, for a fee, is racketeering? Talk about Torchlighting....
>And on what planet do you live that licensing out patents that are legitimate patents, for a fee, is racketeering?
You should look into the Microsoft vs Barnes and Noble case[1] as well as review their detailed patent racketeering practices at Groklaw. Additionally, the Chinese government made Microsoft expose all of their patents that they wouldn't allow companies they were shaking down to see and, well, they were full of old, obsolete and prior art ridden patents - be sure to look those up too.
[1]http://www.groklaw.net/articlebasic.php?story=20111111222912...
There wasn't much to kill, when they bought it Nokia was still clinging to Symbian and was in a freefall. They tried everything to get Windows Phone running, but were too late to the show. Also Google refused to make any kind of apps to their platform, effectively sabotaging it.
> ruined Skype?
Its still pretty popular. It was crap 5 years ago, but now its on par with the other big messaging apps.
Who knows what would have happened to Nokia's Device division without Microsoft's involvement, but one thing is certain - Windows Phone exclusivity solidified their demise. At least Nokia got 7 billion for their troubles, though.
>They tried everything to get Windows Phone running, but were too late to the show. Also Google refused to make any kind of apps to their platform, effectively sabotaging it.
There's a difference between trying everything and being incompetent and constantly rebooting your platform and expecting a different outcome. As for Google sabotaging their platform - Microsoft was already doing a good job of it so they didn't need help from Google. Also, Google did have a couple of apps on their platform I believe, but let's not try and blame another company for the demise of their OS when they were ultimately responsible.
To be really frank Nokia killed itself in the after math of the iPhone. But that was long time coming. When a company which wasn't even your prime competitor an year or two back, out innovates you to the graveyard, you really were setting yourself up for something like this for a while.
And yes, WhatsApp did the same to Skype.
Companies have to make money, and originally, Microsoft made money just by selling proprietary software licenses. In these conditions, open source is their enemy, and they have to fight it. Now they do a bit of spying, a bit of cloud, a bit of hardware, etc... which mean they can cut open source some slack and focus on other evils.
The Metro version no longer supports copy/paste formatting properly (no timestamps), destroys {code} annotations, does not show alerts properly, does not actually send messages you type into the Windows 10 popup alerts, does not auto scroll to the bottom of a message list, does not let you set your status to AWAY.
The web.skype.com also has broken copy/paste but is better than the absymal Metro version.
The iPad version is probably the most usable (but not tried copy/paste on it) and the Android one is mostly alright when it lets you log in, although still a bit clunky and non-responsive (blatantly a web app in a native wrapper).
I run OOSU10.exe on all my Windows 10 instances to turn off the spyware and run PiHole at home to try and limit the insane amounts of data leakage from all my devices (TV, iPads, Android phones sending buckets of telemetry home, Windows PC and Macs) - it's insane.
Interesting to see this purchase though, but I wanted to say that Skype is getting worse and worse - bring back MSN Messenger which had more features than modern Skype!
Multibillion dollar mergers like this are huge things, especially for with a big player acquiring a smaller beloved brand like GitHub. Makes one wonder how many of those leaks over the past week were planned to get the hate out and pave the way for a "cleaner" coming out like what we're seeing here.
An independent player just got gobbled up by a major one, once again the tech world consolidates...
---
EDIT:
Perhaps HN is just having issues, but right after I made this comment and checked the thread ALL I saw were critiques. HN must be quite happening this morning... anyways, in response to /u/mcknz, some critiques:
Centralization vs Decentralization https://news.ycombinator.com/item?id=17221933
Has MS really changed? https://news.ycombinator.com/item?id=17227370
GH was aa neutral 3rd party https://news.ycombinator.com/item?id=17221640
Wake up call, MS ties to NSA https://news.ycombinator.com/item?id=17228593
Open source community Doesn’t have a say https://news.ycombinator.com/item?id=17229241
----
EDIT 2 - I'm probably wrong here, I see the comment now I claimed was deleted, I most likely just misplaced my reply.
~~I actually made this as a reply to the most upvoted MS + GitHub love posts and it looks like that comment was removed and I was placed onto the main thread. The title of this story also changed a couple times too. The current neutral one "Microsoft acquires Github" is the original I think, but for a bit it was changed to something a bit more pro MS.~~
~~I wonder if we'll get a story in a couple days about what was happening in this thread...~~
This is mostly anti-corporate, anti-monopolistic, anti-cloud, and anti-surveillance ideas. Windows, the development environments, etc is a monolithic platform that has very little in terms of customization due to it's structure and prevents competitive integrations. Think of all of the WMs for Linux, or any other modular component in Linux. Linux provides extensive competition, and Microsoft is seemingly attempting to drag people into an all inclusive "developer" network that prevents anyone from doing anything outside the walled garden of their systems in a meaningful way. LinkedIn accounts are going to become Office365 accounts by their own admission when it was acquired. Governments, small businesses, etc are moving to Office365.
Between LinkedIn, GitHub, Skype, and Xbox, their focus on developers is increasingly looking more like a "we want to see what developers do, how they spend their time, and data-mine them so we can tailor our experience better towards them, and assimilate them into our Borg hivemind". If you're fine with data-mining for these purposes, we're going to have to agree to disagree.
WSL is mostly just a means of getting more Linux users to convert to the Big Brother Borg by providing them useful tools so they don't have to install Cygwin.
For those asking why it's bad for a company to make money, you are missing the point. You can monetize GitHub (and it is), without selling over to another company. Even if GitHub is not profitable, that's just bad business management and pricing that needs to be fixed. You can monetize software while making a competitive platform. This goes to the MBAs approach of "blue ocean strategy" over a "red ocean strategy". People are afraid of competition, and want the comfort of knowing someone else has made those decisions for them. I do not, I want competition in technology otherwise we'll get to a stagnant technology development system. It's already theorized by WSJ analysts and defectors from Google, etc, that Silicon Valley is devoid of all ability to innovate, and they are investing and going elsewhere.
Microsoft went from selling a product (Windows), to selling a product (Windows 10) that serves mountains of advertisements. Xbox is guilty of this as well. Telemetry, despite people's claims of the privacy screen, has an upper bound on the amount you can opt-out of (some telemetry, even in Windows 10 Enterprise, is not opt-out).
From a security perspective, even if the data is silo'd off, this also provides many issues as individuals who are highly skilled in cybersecurity will end up needing access across services (especially incident responders), and they become targets for massive troves of data access and breaches.
Microsoft is still attacking Android device handset manufacturers with lawsuits (but not Google), for Android's uses of FAT file systems, etc. Microsoft is inherently still acting as patent troll against open source.
There are accusations of open source plagiarism (not certain the credibility):
https://twitter.com/jamiebuilds/status/1002696931527700481
GitHub already has issues with pseudo-accounts. You can create a profile that showcases forked repositories that you have not contributed anything to and throw up a neat avatar and it looks like you are a coding god. Not to a skilled developer who understands Git, but to an HR recruiting representative who knows very little in a small business it takes about 5 minutes to create the equivalent of an Instagram fake coding lifestyle.
And I'm really getting sick of the "Google, Apple, Amazon, and Facebook are just as bad, get over it" whataboutisms. Yes they are. It's possible to oppose all of the above.
To be fair, those were the Ballmer days. I'm not really worried about GitHub becoming malware or falling into disrepair; that's beside the point. GitHub was the Romulan neutral zone of the internet, and now we've lost that.
And GitHub is obviously biggest player on market.
File-level encryption is still not for the masses.
Sure is nice knowing the NSA will have easy access to all the private source code hosted on GitHub. I bet they will find so many new vulnerabilities.
Nope. Nope nope nope nope nope.
An investigation is ongoing in Spain since Windows 8 UEFI's practices made competition harder.
Microsoft is still Microsoft. Breaking standards, making interoperability harder. It won't be 6 months before github starts having VS-only or windows-only features.
I wonder what happen to Atom Editor. Although I think most are using Visual Studio Code anyway, so may be it make sense to marge the man power.
I wonder if they would make Coding ( Visual Studio Code ), Code Hosting ( GitHub ), Deploy ( Azure ) all seamless.
Surely now Microsoft has the incentive to make Ruby Rails a first class Citizen on Windows?
At this rate, I wouldn't be surprise in 10 years time Microsoft open sources its Windows Kernel.
Companies that are exploring the option of selling to Microsoft know this quite well, and they exploit it to the fullest.
Both the "real" IDE, Visual Studio, and VS Code already have solid git and Github integration.
How is that patent extortion going then? Still earning you money? Any plans to stop in "the near future"? Didn't think so.
I'm sure Microsoft will improve github. Just like it improved skype.
GitHub wasn't profitable. Would you rather it just disappear?
By combining GitHub's product with Microsoft's sales infrastructure, they can sell in ways that neither could do on their own.
Also Microsoft is basically competing with the entire industry on some level, so I do not see how them buying Github could be a good thing.
As far as competing with the entire industry, everyone competes with everyone and does business with everyone....
Netflix and Amazon Video compete but Netflix hosts its entire infrastructure on AWS.
Apple and Samsung compete, they are involved with lawsuits but Apple is still one of Samsung's largest customers.
Apple and Google compete but Google pays Apple $2 billion a year to be the default search provider on iOS. Apple also reportedly uses Google Cloud Platform for some of its iCloud hosting.
Amazon and Apple compete selling media and streaming boxes but Amazon Prime is on IOS devices.
Microsoft Azure and AWS compete but it is just as easy to deploy to AWS using VSTS as it is to Azure.
Microsoft and Google work together on Angular/Typescript.
Amazon hosts Windows VMs,SqlServer RDS instances and supports VS Code.
I think the answer would be 'a company without a history of ruining things one loved' -- my recent experience of Microsoft is very negative too (though I've seen some awesome tech demos of their's).
GitHub being unprofitable makes the situation worse because one knows then MS intend to make major changes: either to destroy it, or squeeze money from it.
GitHub no longer needs to directly turn a profit now that it is owned by Microsoft. They just need to use GitHub to increase their profits from Azure (or any of Microsoft's other money makers). I don't think they need to make drastic changes to GitHub for that to happen.
I can see that working if they don't meddle with GitHub for the next decade, and keep it running well; then people might be convinced to try MS's other offerings.
Maybe Heroku style "run this project on your own Azure instance now" (perhaps GitHub does this already?)? Is Azure's rep good enough to pull that off?
That is exactly the kind of feature I think they will implement. They will probably add more support in Visual Studio and VSCode for GitHub as well, although their support is already pretty good as far as I know.
They can also throw paid GitHub features in with their Office 365 package, like they currently do with Skype. That would further consolidate companies on the Microsoft platform by ensuring that they don't have to leave it for code hosting.
No: Google is propping it up as a loss-leader and incentive to sweeten the deal by bundling their other more profitable services.
We can expect Microsoft to do the same thing: Github will still lose money, but it will integrate with VScode and Azure and OWA and they'll offer on-prem installations for enterprise customers who are already paying for those other profitable services.
None.
It could be run as a public utility or it could be turned into something federated to absorb the bulk of the hosting costs.
hardly worth it for the investors who want to see a 10x or even 100x ROI for their initial private funding rounds.
Public utility should be started using public funds, for the public good. Private companies can never become this.
You don't.
We are the public. If GitHub did an annual funding drive a-la wikipedia it would definitely keep them afloat.
A-propos, would you be OK with Microsoft buying Wikipedia?
Archive.org?
As for Wikipedia, I feel similarly, except Wikimedia runs a fairly tight ship, and lacking a corporate product offering (or market) means I’m much more happy to donate. They don’t run in the deep red intentionally, which is the key difference. Also, GitHub is extremely easily replaceable (and we -need- diversity in code hosting for FOSS), whereas Wikipedia is not quite so replaceable, and diversity in open encyclopedia platforms doesn’t help anyone...
GitHub was a startup, and that comes with certain expectations and constraints on their future. But, for some crazy reason, avoiding GitHub wasn't a particularly popular position to take a week ago. People who understood the business realities of Facebook dunked on normal people for getting duped, then went around and complained that everyone should just submit to network effects and get on github.
For me, it's not about whose the bigger scarier influence, or who does more evil. It's just based on how practically I see either turning out.
=Microsoft Acquisition=
For a few months to a year, everything is mostly the same, until new features start happening. It starts with something like annotations on particular regions of code, with say all the annotations for the codebase stored in an extra file "git_annotations.tla", which is some zip file collecting together a bunch of random undocumented xml that changes constantly. These annotations are tracked semi-competently by VS Code and MS team enterprise tools, being updated to deal with source changes with each commit, but ultimately just showing up automagically in either the web view, VS Code, or associated enterprise tools. These annotations will start out as minor unimportant things, not even really worth porting to other editors, but will increasingly be abused for code review in enterprisey contexts. People who try to just edit things from the command line or their editor of choice will be constantly breaking other people's annotations at random times since they don't update that file, so file renamings, moving, etc won't be tracked properly. MS provides some xcode/sublime/atom plugins to provide partial support for some other editors, which prompts web developers to adopt them in droves so they can add gif tooltips to comments. At no point is there a great enough reason for anyone still using github to switch, so slowly the remaining open source projects there start making use of these features, and so contributers need to start using the appropriate MS tooling to ensure their commit doesn't break the annotations (or just use one of the supported editors).
=Google Acquisition=
Github user profiles are now linked to a google account. The webclient works better in chrome than other browsers. The webclient is renamed, rebranded and redesigned every 2-4 years by someone looking for a promotion, but ultimately in a way that doesn't affect people just using git from the command line. Github possibly gets a few additional features to support internal usage with Google weird mono-repo lifestyle. Google tries unsuccessfully multiple times to integrate Github into yet another failed team messaging platform or whatever, but again in ways that only affect the webclient. Google more successfully does some data analytics stuff based on searching and indexing all of that code now sitting on servers they own, and this is almost but not quite profitable, but close enough for them to leave it alone and get distracted by something else that's shiny.
To me, neither seems ideal, but all of the annoyance of the google stuff seems avoidable by just using separate accounts for separate things, as usual.
Anyway Skype is a non-issue, it's lost market thanks to pretty much everyone making a chat app / competitor, notably Slack.
I think that's a pretty false statement in the world of big business.
There has been so much excitement from both sides during this process. Our shared values around empowering developers across the globe made this a natural fit
Please. Do you have to start spouting corporate bs right away? I'm happy you guys got your payday but Microsoft and GitHub 'shared values' are so far from each other that I sincerely hope you won't end up regretting this deal in the longer term.
Glad you're having fun.
> We’ll remain focused on putting the developer community first and will stay an open platform to continue to serve developers in all industries.
What's your source of that confidence - what MS execs told you? For how long into the future can you personally swear that statement will be true?
> Our shared values around empowering developers across the globe made this a natural fit.
I really hope there's some nuance in that claim. Otherwise I retroactively regret having a paid Github account.
"Developers, developers, developers!"
"Developers are the builders of this new era, writing the world’s code. And GitHub is their home.", doesn't feel like home anymore. :(
That was when I finally dumped Skype and moved fully to FaceTime/Duo/WhatsApp/Messenger. Thank goodness for competition.
I adore GitHub. My children and I wear their tshirts, we brandish their logo on our laptops and phones. I hope Microsoft doesnt half-abandon this post-merger integration.
Microsoft bought Skype in May 2011 for $8.5 billion. Think about the magnitude of dysfunction for a post-merger integration to only partially succeed despite this price tag!
I've always been very happy about how GitHub supported my participation in the community. Sometimes what I do is directly useful to GitHub, and sometimes it's a matter of keeping the project healthy for everyone. It's always been about contributing, and not trying to control.
Microsoft started contributing to Git about 2 years ago, and in the last six months, we've seen them increase their contributions. From what I've seen they've taken the same approach: give developers the resources and freedom to figure out what the project needs and improve it. I'm excited about some of the performance work they've been doing (e.g., fsmonitor integration, graph optimizations).
So I'm optimistic about this with respect to Git. I think it will mean continued support for the project. And I do feel like Microsoft "gets" open source in a way that most people never would have believed 5 or 10 years ago.
—-
Can anything exist anymore without
A) Getting acquired by a multinational
B) Becoming one
Sure, MS visual code is open but as a few players get more and more power we all become subject to their whims and not them to ours.
MS is pushing their ads within their own OS more and more, will GitHub get the same treatment, or will it’s data be useful to MS for those ads? What sort of integrations can we expect to see with other MS products that encourage a more closed ecosystem?
This may all seem alarmist but with so many companies having so much power this sort of behavior get through unchecked. *For example, MS hasn’t changed all that much: they still force device makers to sell Linux at a higher or equal price to Windows so people won’t jump ship.
The only recourse people suggest is “well then don’t use it” but what options do employees have when higher ups mandate technologies? What about most users who just go with the wind and just let these snowballing large companies skate by? It all makes me very sad...
https://www.imdb.com/title/tt0218817
I am wondering how good their Deep Learning-based code analysis tool prototypes are, if they can identify bleeding edge code in private repos already...
Microsoft was always hated because of their closed source software and now they hold the principal Open Source bastion.
Github helped so many Open Source Developers get their projects out of shadow, thanks to the "star" system, news feed... and sometimes this could change a life (like me that created a startup on top of an open source project that became successful on Github).
I feel ashamed now to work on Github, a platform that is, today, owned by Microsoft, a company which I do not support their philosophy and culture.
For me it's a day of mourning and I pry Microsoft to not touch at what makes Github what it is today.
Issue body: Microsoft open sourced Xamarin after acquisition and it was good for community. Open sourcing Github source will benefit open source community. Github was not open source for its own reason and it could be same reason why Xamarin was not. Now that Github acquired by Microsoft, would this event be an opportunity to re-consider the reason?
I'm not against the company or the founders making money. This is America after all. What is disappointing to me and others in the open source community is that we have zero say over something that we helped build.
This sale to Microsoft is just another reason why we need something new, a new system that can be owned by individuals and not corporations. I would love to see something where the developers and users actually have a stake in what happens, and can in turn profit from it as well.
Github was never a community project; it was never "ours" in that sense. Why should anyone except for the owners have a say?
At the end of the day, Microsoft, a huge billion dollar corporation, bought GitHub because it thinks it'll help its bottom dollar. And sure, of course I can see the business sense in the deal for both parties, but it's yet to be seen if it'll actually improve things for end users.
I'm going to let things play out before judging. They might ramp up investment in the main Github platform, or open source Github because they're not relying on it as a cash cow.
Especially their defensive tone says all.
What a sad day for GitHub and the community.
They had so a huge role in popularizing git IMO, they secured some room and ample time for (non-overbearing) experimentation. Their issue tracking was very basic, and there could be so much work done there they could subsequently sell as something additional to core git repo functionality. Or they could improve code review tools etc.
I am afraid this is what will also happen to StackOverflow eventually with their attempts at Documentation, Jobs and now SO for teams. It looks like they are trying to compete but in the end it might turn out being them signaling their willingness to potential buyers by "moving in the right direction".
It is not the fact that it's Microsoft, it's the fact that the finality is almost always acquisition. I always looked at SO and github as an alternative to Linkedin's walls of enumerations, as a way to speak to other developers instead of HRs, and now it is not so for Github.
http://tom.preston-werner.com/2008/10/18/how-i-turned-down-3...
I was a Microsoft focused developer through the bad years and even I thought they acted horribly against Netscape. They ended up paying a billion dollars for it and we’re forced to change.
I wasn’t a fan of Ballmer either and thought MS had lost its way. Windows Phone started off nice but they just couldn’t get enough developer interested.
Maybe that was the wake up call. If you don’t have the devs and you’re a dev-centric company, you’re doomed.
In comes Satya Nadella, along with Scott Guthrie and other internal proponents of open development and the company has very demonstrably changed its stripes in the last five years.
I judge companies on current behavior and Microsoft seems to be doing far more right than wrong.
This isn't about behavior. This is about product management. As a reminder, Microsoft's current products include TFS (and I don't mean just TFSVC) and Teams.
The PM aspects of TFS are notoriously cumbersome, so I see the Github acquisition as a potential benefit to that side of TFS.
Then again, I think Mingle (Thoughtworks) is the best agile project management tool.
[0] http://tom.preston-werner.com/2008/10/18/how-i-turned-down-3...
> Finally, we will bring Microsoft’s developer tools and services to new audiences.
Does this mean we'll see some sort of VSCode-esque IDE built into GitHub's UI? Or perhaps exposure of VSTS to people who previously weren't aware of it?
Say what you want about their Windows and Office divisions, they put a lot of effort and resources into their development tool side. Being able to direct the development Electron, the way a lot of desktop applications are being written in 201X, is a clear advantage to them commercially. They also have the ability and resources to solve some of the problems that have plagued Electron/NW like resource use and distribution.
What will happen to the github site itself? Not a whole lot. That's all pretty stable. More likely it will stagnate since they won't really know what to do with it.
respond. https://monitor.gitlab.net/dashboard/db/github-importer
Reports of migrations to other sites are real, and Microsoft sees a risk thats legitimate enough to issue a presser. Its going to be hard to head off a github exodus at the pass because git itself is open source and there are numerous alternatives that can quickly and easily (some with no more than the click of a button) spirit the github userbase --which is what Microsoft arguably wants in order to legitimize its cloud/open source push-- away from them.
https://sourceforge.net/ even released a special tool to migrate you away from github. Certainly some of the more business minded users will argue this acquisition from Microsoft is a "good move" but the fact that this is the second presser microsoft has thrown out regarding the nature of its merger in less than 5 hours reflects a pretty sincere push from redmond. Microsofts historic legacy of fear, uncertainty, doubt, and outright hostile action to crush open source and startups in general is a pretty insurmountable.
but why would microsoft buy a money-losing company? either they think they can turn it around - maybe because they can use their own, cheaper hosting infrastructure -, or because it's a ploy to reconcile a mostly microsoft-wary developer community with their new "not so evil as before" image (we all remember the microsoft under gates and ballmer and the damage it did).
the question that remains is: can we trust them to continue to run github as we know (and love?) it? it's not like the company hasn't improved tremendously in the last years, but the windows 10 update and privacy debacle has shown they're not above suspicion.
for me personally, i'll probably continue to use github, as i use it only for non-critical hobby projects anyway.
for important work i'd rely on a self hosting gitlab/gogs/gitea instance. i know it's not the same, as the barrier-to-entry for potential contributors is higher and the added sysop work is a pita for most people. but that's the price to pay for a healthy, robust open source community.
Time to really look into GitLab.
Developers, Developers, Developers, Developers, Developers, Developers, Developers, Developers.
https://news.ycombinator.com/item?id=17225290
History does not help with trusting them.
So let's wait and see.
But I talked about MS PR team before, and I can already see it at work everywhere. Here, the first HN links were not warmly welcomed, so we had another one published, then another one published, until one with a positive top comment for them is here.
Also plenty of comments to defend them by using vague positive things like "they did good things recently" or "they like open source".
If you go on reddit you'll see the same is happening.
The good thing is that it means now they care a lot about what we think of them. They didn't before. So at least, if they haven't changed, they are forced to act like they have.
Another possibility is that HN members are responding favorably to MS's recent moves.
Be careful not to dismiss anything that runs counter to your own narrative as fake. Like you said, we'll see!
How is repeated exposure more likely to increase positive opinion?
(PDF) http://erewhon.superkuh.com/library/Neuroscience/Psychology/...
Parent comment specified the same news, which makes less sense.
If I hear 100x that MS is buying GitHub, that doesn't make me more likely to respond favorably.
The problem with a PR machine is that it never get tired of repeating the same story, while we do. And people eventually listen to the PR machine anyway. That's why it works. Not because it's clever, but because of human nature.
It works with politician, CEO, singers...
But yeah, we'll see.
And granted that's how PR works, but the problem with carrying distrust to defend against it is that is eventually makes one paranoid.
Personally, I aspire to objective reevaluation at the current point in time.
In 2018?
Microsoft historically did terrible things to open source, Balmer was an asshole about casting it as us vs them, and they still have substantial legacy OS and Office revenue streams to protect.
At the same time, their cloud business is rapidly growing, they've realized the only way to compete there is to embrace open source, and that's beginning to permeate the rest of the company. Largely via promoting someone from the dev / server / cloud business as CEO.
In a marketing atmosphere dominated by Siri, Alexa, Cortana, Watson.... how can MicroSoft continue to ignore the original and much beloved assistant A.I?
We stopped trusting TV and starting trusting each other more. So they started disguising as us. It's the natural evolution.
What’s the difference, really?
If it would legitimize my claim that Microsoft is different under Nadella, I can write a blog post about it with supporting data.
But yes - it's still a company that will act in it's own self-interest, as any company will, and right now, that aligns pretty well with playing nice with the opensource community. That could change - in the future, so some caution is always a good idea (but that's the same for Google, Apple, Amazon, ...), but today, I have little issues with MS's attitude today towards opensource. Tomorrow, we'll see.
That said - I don't mind them buying github and I like that people are actively looking into alternatives, github is simply too big imho, and too many things just expect git = github, which sucks too.
Their updated terms of services are a treat:
https://professional-troublemaker.com/2018/03/25/microsoft-b...
If you disable telemetry in Windows, the OS __still__ calls home:
https://social.nah.re/@alex/99699321529592263
MS prompting his users to not think too much about what it's doing :
https://shelter.moe/@fenarinarsa/99472223904930838
Bitlocker sends you private key to microsoft (and questions about it, said they were to be trusted, but you could request deletion individually if you wanted):
https://www.undernews.fr/libertes-neutralite/windows-10-vs-v...
I have sane doubts about this new microsoft.
We got another new microsoft every year. I have this argument every year.
And since I do see they are getting way better at PR, I think that now I just miss worse scandals because they deal with them much better.
I still remember when this was made.
One thing Microsoft failed to comprehend is that if you want to be all buddy-buddy with open-source community then don't go out and buy the condo they are renting in and lay out new rules.
[0] https://news.microsoft.com/2018/06/04/microsoft-to-acquire-g...
Not trying to troll, I just don't know the negatives from this. I have a github account and want to know if there's a valid reason to move it.
Yet I haven't done any real analysis, neither I know if business data of X individuals is valued more than hosting Y projects, probably from an ad + data gathering perspective it makes some sense but still I'd love to hear a more in depth analysis on this
I ran across OS Coin [1] on Twitter but couldn't find any additional info beyond what's on the website.
Like most "successful" startup companies over the past decade, only way (for investors) to make money was to make the company a "product" that would be sold to the highest bidder
Why is anyone surprised that GitHub would be sold ?
https://blogs.msdn.microsoft.com/bharry/2017/03/31/shutting-...
Of course the brad name, mind share and userbase are worth a lot, but that much? I reckon they must have also talked to some competing bidders, like Google.
You lost the OS war, from cloud to the phone, just get over with it.
In MS shops no one really wants to use TFS, so most turn to Gitlab and Bitbucket.
Anyway, I'm moving my personal repos to Gitlab and strongly considering moving my team's repos too. Specially considering that our bill will drop to $0.
My more personal take is: if you hate Microsoft's track record, you should have every other big software company at least as much. Were there really better realistic possibilities for GitHub?
For example, Google has quite a few (e.g. golang, kubernetes etc)
To Git to the other side.
Speakerdeak, originally part of Github is now under fewerandfaster.com
Gaug.es - Turns out Github sold it long ago.
Microsoft Team Foundation Server powered by Github
=)
The first doesn't matter to me. The second makes me think everything from "Add a .azure.ci.cfg file to your GitHub project to trigger builds, only $X/metric!" (not so bad) to "Advanced issue management available through MS Project 365 integration, please ask your project admin to subscribe to Office 365 to unlock!" (please, no...)
A large part of GitHub's appeal to the open source community was that all features were available for free to open source projects. If Microsoft wanted to make more features available for free to open-source projects, then Visual Studio Team Services would be a much, much different product, and Microsoft wouldn't need to acquire a platform that directly competes with their current product line.
Can someone explain why this merger is bad, beyond the usual refrain "Microsoft is evil"? I mean, I rally want to understand what the fuss is all about. It isn't like all our repositories are locked in some proprietary GitHub format and now we are at the mercy of MS. As is happening, people can always migrate elsewhere, and there is always going to be an elsewhere.
Are people upset that they have to take the pains to migrate due to Microsoft's involvement? In that case, it begs the question why is it bad at all. Currently, with my trouble understanding this, it seems like a knee jerk reaction, like disgruntled Americans talking about migrating to Canada post Trump.
No matter how hard Microsoft will try to be part of open source it never will be.
Btw You can't have your cake and eat it.
Of course, it was inevitable that in order to survive Microsoft would adapt its business to utilize the kinds of interactions fostered by open source.
Acquiring Github represents the first attempt by Microsoft to own some of the culture of open source.
Microsoft is still very far behind in several key ways that the Github acquisition won't fix. But the acquisition signals a willingness to move in that direction. Some of these are:
- The "Microsoft account" is a hugely complicated mess, far more complex and unwieldy than a google account. This is a serious miss and it's not rocket science. Look at the places where users are having to reset passwords all the time, getting failed logins, incomplete profiles, etc. Those are major warts that should not exist.
- Microsoft should push hard for adoption of PowerShell on unix/linux, and if it fails at that task it should adopt bash as the main shell for Windows, sunsetting cmd.exe and PowerShell.
- Microsoft should figure out a way to provide integrated X Server (and next generation variants of X) support in Windows. There is a big opportunity to one-up OSX by doing this in an open way.
- Microsoft should offer all of the "pro" and "enterprise" features of Visual Studio free to all developers and should provide high quality command line based tooling to allow for seamless integration with other open source development tools.
- Microsoft should simplify and fix code signing and make available (for free) all tools and utilities and infrastructure for trusted software distribution across multiple platforms.
- Microsoft should make firm committments with respect to any APIs or Azure services in terms of life cycle, EOL committments, etc. This would be a big differentiator with Google.
- Microsoft should fully open source some of its products that are duds, such as outlook for ios, and let the community make them awesome.
1) Google bought them 2) Facebook bought them
Go!
guess the headline,
"MSFT: Destroying Standards Every Way Possible"
is just not quite as sexy.
Right. That's why Windoze is and always has been an open source project...
No you're not, you liars. Until the day that Windows and Office and all that is open source you can't say anything of the sort.
I guess it works. I don't want to support that though. Time to find a new git host.
Clearly written by HMM: Human Markov Model.
I still have no idea what "intelligent edge" is supposed to mean.
Let's move our open soresx elsewhere to bleed.
I used to work for a company that worked with security cameras, and they always used terms like 'edge analytics' to refer to software that's running on each individual camera as opposed to running somewhere central, like on the DVR the cameras are connected to or a server.
From what I've seen in Nadella's presentations at various events and conferences recently, he's using 'edge' in the same way. Lots of MS presentations about the intelligent edge have included things like training a neural network on Azure, and then pushing it out to IoT devices and phones so the NN is running on 'edge' devices and just transmitting results back to a central server.
Another way to think of it: if we were looking at a tree, servers/the cloud would be the trunk, the internet would be the branches, and edge devices like cameras, various IoT devices, and phones would be the leaves. They're out at the edge of the tree, interacting with the world.
Microsoft cannot be trusted.
They make fine products, but they are definitely looking to make money from this acquisition.
EDIT: This is to say that Github was not looking to squeeze their users. I have been squeezed by microsoft.
Who wouldn't?
Github wasn't a Robin Hood scheme. They were never giving their finger to the man. Their goal was to make a lot of money, failing that, sell for a lot of money. We are lucky Oracle didn't buy them at least.
Given how many employers/recruiters want to see a GitHub account, I expect to see a lot of future LinkedIn integration.
Github has been underwater for years, would you rather it be propped up by a big corporate sponsor that can subsidize its losses, or run out of money and die?
I expect to move, because I also do not trust microsoft, but I am not moving yet until I see what they do with it.
This is not what I'm implying.
>I am not moving yet until I see what they do with it.
If you are too late, you might not get your projects off without paying fees.
Is there any evidence in the Nadella years of MS doing this in the way they used to do this in the 90s?
There isa definite change of tone in the modern Microsoft, but remember that they're still doing a lot of sketchy things. The ongoing patent trolling, or mandatory telemetry in Windows are examples.
It’s not just that MSFT did what they did, but they established a culture that was cool with it and even came up with the ideas. How do we know they are no longer doing that? It’s not like they openly admitted to what they did in the 1990s...
The burden of proof is in the accusers that claim they haven’t changed a bit. Where’s the proof that they’re the same Microsoft?
I don't think that concept is relevant to this format of discussion.
They're trying, they see the writing on the wall, it's foolish to not see that they're trying. I think it would be equally foolish to just whitewash away the sins of the past.
He's been there since 1992. That means that if he was so ethically challenged that he could sit through that without piping up that I have very little hope that there is a real and sincere change happening. Most of what I see is just very clever PR whilst under the hood not much has changed.
They just got a lot smarter about keeping their nastiness out of the public light. The reason why the 'trope' gets trotted out is because this could very well be the part where Microsoft finally gets to 'embrace' the open source world where they can hurt it for real. Keep in mind that nothing comes close to threatening Microsoft at its core business as open source software does.
Open source (LibreOffice) has never seriously threatened office for professionals so much as maybe google docs, and even then not so much. And they’ve made great moves towards subscriptions so that’s going strong.
Windows isn’t threatened so much by open source unless you talk about either Apple or chromebooks. Again, less about open source and more about the web.
They’ve already lost developer mindshare to open source culture. So they responded apppropriately by open sourcing their entire .NET platform, and actually using a useful license like Apache, not some murky custom commercial nonsense.
How do you suppose they’re going to start hurting the open source world? I’m all ears, especially given they’d have to sue companies like FB and Google.
Just because Nadella was there, it doesn’t mean he ran that operation that sued SCO. Otherwise that would’ve come out.
Plus with personalities like Bill Gates, they would clearly override any dissent.
We were recently evaluating it, and found that basic needs like code reviews are not covered. And their hiding of LDAP Integration (luckily the extended community stepped in and duplicated their module) is a joke.
1: https://gitlab.com/help/user/project/merge_requests/merge_re...
2: https://docs.gitlab.com/ce/development/code_review.html
3: https://docs.gitlab.com/ee/administration/auth/ldap-ee.html
And I forgot about squashing :)
All I say: it is expected. Gitlab is capable, just not in all editions
I'm not (only) trying to be pedantic here -- I'm just pointing out the loaded language. In both business models and product recommendations, people use the word "comparable" to justify their conclusions, rather than to explain their comparisons themselves.
It is all about framing a decision for a particular use case at a particular price point.
I guess you could say I'm the kind of person that can't help but notice that modern communication seems to be fraught with this pattern: let's state our conclusions without much justification and then choose our language minimize the "rationality" of alternatives. I think we can do better, as a community.
I get your point though. The form and structure of the language used, consciously of subconsciously, often conveys quite a bit more information than the words themselves impart. Sometimes this is meant to communicate or subconsciously sway the reader, sometimes it's leakage of the writer's mental state.
Not only can you do community-driven project development with Gitlab but the core product itself is also open source and community participation is encouraged. See: