I’m now a full-time professional open source maintainer
words.filippo.io
words.filippo.io
His experience is totally unique. Please don't let this make you think you can quit your job and earn the same you did at your high paying FANG job. He's an outlier in the industry. I was a nobody when I left my job to work on open source full time. It was a year before I found a corporate sponsor and that was only because my friend worked there and he understood the value of what I was working on. Patreon was laughable in terms of what came back. Just be fully aware as you read this. With existing brand and following you can do what he did, without it you'll struggle immensely like I did.
...even more than that. He's an outlier in the industry and has chosen an industry with access to pyramid scheme money.
Neither the investment bubble surrounding FAANG, nor the job market bubble surrounding the talent pool that FAANG recruits from (namely SE talent that happens to be localized in the Bay Area) were sustainable.
Now that the market seems to finally be correcting away from that unsustainable local equilibrium, he's hopping right into the next one by becoming an open source crypto bro.
> "proves the thesis that it’s possible to be a professional maintainer earning rates competitive with the adjacent market for senior software engineers."
"Prove" is a strong word but "possible" weakens the statement.
"It's possible to earn 95th-percentile compensation." True, by definition, for 5% of all people. Nothing to see here. "There's more than one way of getting there." True. "Honest pay for honest work will get you there." Probably not. "Just seek out the bubbles and jump right in is a reproducible way of getting there." Probably not, you'd have to get the timing right, and that's mostly luck.
Prove is the technically correct word here, in the sense of mathematical proofs: the existence of an example proves that it's not impossible.
When a motivational speaker says something like "Billionaire X proves that it's possible to be a billionaire" that's mathematically correct, yet totally uninteresting. What people go there to hear about is methods for reproducibly becoming a billionaire or even just slightly increasing your odds of becoming a billionaire, and this article is just as lacking in that department as most motivational speeches.
Don't get me wrong. I think open source is a good thing. It seems like the author is working hard, doing good work, sharing it, and making a solid livelihood may be well-deserved for him. There's just nothing here that suggests a reproducible method.
Effectively what should be pointed out is "this guy makes some extremely fundamental crypto libraries that are used by millions of projects out there, including cryptocurrencies". But that's hardly relevant.
Taking Google-money means taking money that's earned through surveillance capitalism and anticompetitive tactics deployed by a monopolist that erode our free markets. Taking crypto-money means taking money earned through "greater fool theory" of valuations of investable assets.
People, on the whole, are never all-good or all-bad. When I see somebody showing off their good sides, I instinctively start looking for the bad. When I see somebody owning up to their bad side, I instinctively start looking for the good.
The good in this person is that he does open source. But that doesn't make him an angel. The bad in this person is that he's a top earner in part because he takes money that causes bad things to happen in the economy. As to his personality, I simply have no information on that and have never met him.
Which he does not do. He develops cryptographic libraries (used to encrypt files, network connections and the like). Nothing to do with cryptocurrency at all, save some cryptocurrencies might use the library he writes, but most of the use will be for TLS connections, file encryption etc.
If your definition of "crypto bro" is so broad to include "receives money from any person or company that has ever incidentally done anything with cryptocurrency" you've basically painted the entire industry that way.
Just because it mentions "Filecoin, whatever that is" doesn't imply that he's working in cryptocurrency.
I use "crypto bro" to describe people who actively work/invest in cryptocurrency directly and/or evangelize it. This usage does not intersect with Filippo at all.
But Filecoin IS a cryptocurrency. It's not merely "incidental".
Or change my mind and show me which of his projects is cryptocurrency-specific.
Fair enough, no reason to denounce him as "crypto bro", though, because you know full well what it insinuates.
Also:
>Google-money [...] surveillance capitalism
The email domain from your profile points to 180.136.102.34.bc.googleusercontent.com ...
Just saying, you know.
The fact that "bro" is a derogatory term for you is also not great.
You don't?
There's a massive difference between "hey this signature scheme is safe, trust me I'm a cryptographer, all my colleagues agree" and "hey this signature scheme is safe because if anyone can break it they can steal over $1,000,000,000 USD anonymously"
Seems you can confusing cryptography with cryptocurrency, this guys is a cryptographer, that's a proper expert level security guy, nothing to do with pyramid scheme money.
Even aside from cryptocurrency, blockchain, NFTs and that kind of stuff, there's a lot to question when it comes to the ethics of the computer security industry. A lot of it is snake oil, like Firewalls that basically whitelist everything so as not to become annoying. A lot of it is a racket (e.g. you can't get insurance for your company if it doesn't have antivirus software). VPNs basically make money by helping people break the law by circumventing geoblocking. I could go on, but I won't.
I myself don't refer to anything that isn't paying new customers with old customers money as a pyramid or Ponzi scheme, because I think that trivializes actual pyramid schemes.
But a lot of people do, apparently, and it's completely understandable that a self perpetuating scheme where startups losing money at their core business at a varying rate are constantly sold at higher and higher valuations to see who holds the last hand, is regarded with the same skepticism.
> I myself don't refer to anything that isn't paying new customers with old customers money as a pyramid or Ponzi scheme
In Wikipedia's definition, that aspect doesn't seem to be strictly necessary [1]. They define it as "a business model that recruits members via a promise of payments or services for enrolling others into the scheme".
In my mind it also plays a bit of a role whether you're doing that with retail investors vs. high-net-worth or institutional players. A retail investor generally can't invest in startups, but might invest in crypto if their neighbor recently bought some and then talked them into it.
…and yet…
I run a self-funded SaaS business. I regularly pay (sponsor) developers of libraries that my software depends on. These are not large amounts, but they slowly grow over time. Additionally, there are some libraries (Semantic-UI for example) that are critical for me, but have been unmaintained for a while, and I'd gladly pay significantly more, on a regular basis, to have them maintained.
I am pretty sure I am not the only one. The money is there. The problem is in gathering critical mass: both for any single developer, to make a living, and for the entire movement, so that we shift from a culture of "FREE FREE EVERYTHING IS FREE" to a more responsible and sustainable "it's free, but if you depend on it, you better contribute money every month".
Business idea: If there was a single corporate intermediatory who would handle all this sitting somewhere we could create a supply agreement with and funnel the cash through to the right people we could probably deal with it. We currently do this via AWS marketplace regularly so we don't have to deal with the paperwork.
Isn't that what tidelift [1] is doing?
That is totally worth day 10% of the value of the product!
It won't work: this company will eventually crank up their fees to 30+% of the value.
A lot of software/B2B sales are procured through a channel whose primary purpose is an existing business relationship with the company you're trying to sell to.
They take a % as a transaction fee. Anywhere from 10-30%, depending.
They exist. They suck, they all suck... and I say this as a vendor "procured" by these companies.
It's a necessary evil, one that's ripe for disruption.
> Business idea: If there was a single corporate intermediatory who would handle all this sitting somewhere we could create a supply agreement with and funnel the cash through to the right people we could probably deal with it.
Isn't that exactly what Github does through its Sponsors program? I think I only handle two endpoints these days: Github Sponsors and Clojurists Together. Github works very well, and they will even fold/consolidate new sponsorships into your existing invoices as you add them over time.
I don't think "overhead" is a valid excuse anymore.
I'm sure it's not the only reason to choose open-source tech.
At least with open-source projects you can read, patch, clone or fork the source
If GitHub actually helped developers make money this would be a different story. Sponsorships are a tipjar, it's not a sustainable path, it's not a form of employment. Grants, same thing, waste of time. We need the ability for developers to put a Pay but on their repositories. This is not about optional sponsorship. This is about paying to download the code, paying for use after a certain point. This is about putting a real number on the value of software. It only works when you define the economic model. If each Dev has yo setup their own website, integrate payments, do sales, etc its a struggle. GitHub is a big enough distribution channel where they could actually streamline this, App Store style. I know they have a marketplace but realistically who's using it?
I really don't understand. GitHub does help developers make money. Sponsorships are subscriptions, not one-time tips. If you can get 20 companies to pitch in with, say, $250/month, you begin to look at a sustainable living. From a company point of view, paying, say, $1000/month for four most-used pieces of software that the company depends on, is still many times less expensive than hiring even a single full-time developer.
I feel like rather than trying to change the mindset ("everything must be FREE FREE FREE"), we are trying very hard to find reasons not to use a perfectly good existing solution.
It is possible to survive a shark attack. Well, yes, but do not count on my to try.
Still I think the situation is highly exceptional. Which employer/client would be happy with someone working for them only 1 day a week? And think about the adminstrative overhead for a single person to deal with 6 contracts all the time. With some clients the paperwork can be significant.
Today I have am managing 8 active retainer clients, and regular 1-2 week audit contracts, while rarely working more than 40 hours a week. Virtually all code I write is open source, or on track to be so soon, and I only work with clients okay with that.
I am making triple my previous salary, and am actually onboarding new team members as a "tier 1" to help me meet demand without overworking myself.
I am a full stack security engineer with 20 years of experience, and most companies can't have access to senior security engineers without paying GAFAM money in the range of $600k+ total comp, which they just can't afford.
Instead I offer most companies start a retainer with my team and I for as little as 10 hours a month and we can be there when they need help with security architecture, important code reviews, risk assessments, conducting interviews, or just to help unblock people in general.
This model is a win for companies that can't yet afford experienced full time security hires in house, and it is a win for me who can be in control of my time and life with higher income, and only have to focus on the most interesting problems of many different companies with minimal exposure to internal politics.
I can't express how much happier I am. Best career choice I ever made. YMMV.
It's difficult to believe that even in SV.
Hopefully this won't inspire people who don't meet the right conditions and whatever luck contributed to this existence proof.
I've known a lot of poor people trying to make it as independents in open source. I once sent a laptop to a homeless kernel hacker (and, earlier, sent them food), and had to find a laptop specifically to be small and discreet, because they feared being stabbed for anything flashy-looking. Another, who has done talks on their novel work at major hacker-as-in-HN conference, as well as other accomplishments, I had to tell them about Medicaid, because they couldn't afford to go to the doctor when they really needed to. One who accomplished something major that most HNers have used or heard of, was living in a trailer, and died. I've also known plenty of people in open source who had modest day jobs and were pretty stressed and depressed from money problems, and the cascading effects of that, despite being at least as tech-skilled as people making FAANG money.
If you happen to find yourself as the official maintainer of multiple open source components that are recognized as key by numerous enterprises (and cryptobro ventures) that are flush with cash, and you have ins at some of those, and you have a safety net warchest from years of FAANG, and enough reputation you could probably go back if the whole indie open source consultant thing didn't work out... sure, consider a consultancy like this post describes, as a lifestyle move.
Otherwise, it's like the movie star child of a Hollywood producer evangelizing this great career success formula they've found, prompting a bunch of aspiring actors to buy one-way Greyhound bus tickets from Kansas to LA, where most of them will be lucky if the worst that happens is they end up waiting tables.
Well done and keep it up! I highly recommend that you find say two other individuals like yourself and form a triumvirate. An individual can have trouble taking time off, dealing with life's inevitable adversity etc.
That can work well for a fledgling org because two can out vote the one who gets it "wrong". This model does require a certain amount of trust and the ability to accept being wrong.
Then you take on staff ...
Not all of us are going to fly a unicorn to a glorious multi billionaire finish. Most of us would like to be able to sleep at night, have a reasonably comfortable income and basically "get by". As this is HN, I will require a certain amount of "get up and go" but not too much!
I fell into the triumvirate thing 23 years ago. I became an IT contractor at a helicopter factory in the UK around 1996. Helpdesk n that. I learned quite a lot quite quickly and by 1999 ("party like it's") I was in the NETS team - sysadmin land. 2000 - we were Facility Managed off to ... ourselves and our company was started. I was recruited by two other NETS chaps to be the MD of their idea. It wasn't my idea.
So we have three blokes with equal shares of a nascent company. It works really well out of the box. Two can always gang up on one. We would have screaming arguments about direction or whatever but in the end there was always resolution.
23 years later, it still works. The three of us are quite different but we do completely trust each other. The trust thing is where my advice might become unhinged but the model is still very decent 8)
There's a saying, I don't know if its actually old or not, along the lines of: go to sea with one watch or three
the point being that with one watch you just accept whatever it says, with three you pick the closest two, but if you have two... fuck it man who knows: coin flip
Captains have navigated oceans in rowboats to fetch rescue and survive mutiny.
It all starts with knowing where you are and where you intend to go.
Also: Ships aren't neccesarily killed by EMP - mechanical engines still work, they can be tuned by hand, rudders are operated by levers and hydraulics, these can be manually moved, etc.
As for mechanical engines still working -- I would assume there's electronics in any modern hydrocarbon engines, for efficiency reasons (adjusting engine timing etc), never mind nuclear powered ships.
Dunno about you but I still have my working early model Sun workstation (pizza box years) rated to survive EMP with shielded casing, monitor, etc.
> I would assume there's electronics in any modern hydrocarbon engines
assume .. so, you've never worked on a container ship as a mech engineer babysitting a Wärtsilä RT-flex96C and you think the navy has a lot of nuclear powered ships then?
Have a deep think on this - do you think the US military designs ships to be useless when the electronics go?
No capability for manual weapons aiming, no ability to operate the engines or steer?
We've got a navy person commenting upthread here about having three mechanical clocks for longitude estimation in the event of no GPS .. what do you think that's all about?
Obviously, while it might survive some EMP, there's a limit to the efficacy of the shielding. Anything your Sun workstation would survive is trivially survivable by a quartz watch sitting in a shielded box.
you think the navy has a lot of nuclear powered ships then?
My understanding is that the entire submarine and aircraft carrier fleets are nuclear powered, yes.
Have a deep think on this - do you think the US military designs ships to be useless when the electronics go?
I think in a nuclear war scenario, surface ships are already useless (and most likely vaporized) so maximizing the efficacy of their navigation systems in such a scenario is probably not a priority.
We've got a navy person commenting upthread here about having three mechanical clocks for longitude estimation in the event of no GPS .. what do you think that's all about?
My guess is that the three mechanical clocks was more a matter of tradition than efficacy in modern warfare.
It was EMP rated by US nuclear agencies and used for nuclear test monitoring and radiometric surveys.
> the entire submarine and aircraft carrier fleets are nuclear powered
which leaves a lot of other ships .. and avoids the puzzle of why they wouldn't be able to function after an EMP burst - do you think you're the first to think of such a thing and no one has modelled about such an event?
> surface ships are already useless (and most likely vaporized)
You're assuming that an EMP burst high in the skay also vaporises all ships (or other weapons do), the design of military ships is to assume that they still need to function when damaged to a degree.
> My guess is that the three mechanical clocks was more a matter of tradition than efficacy in modern warfare.
You're hung up on warfare .. navigation may fail for all manner of reasons and three clocks for reference in determining latitude (after allowing for mechanical error) is a matter of sound numerics rather than crusty tradition.
Longitude: The True Story of a Lone Genius Who Solved the Greatest Scientific Problem of His Time by Dava Sobel is decent introductory read if you'd care to guess less and learn more.
me: Quote along the lines of "go to sea with one watch or three"
bot: "Take one watch or three, but always be on time."
me: Origin?
bot: This quote is often attributed to British admiral and explorer, Horatio Nelson. However, there is no definitive evidence to support this claim. It is possible that this phrase has evolved over time and has been adopted as a quote attributed to Nelson due to his association with naval and maritime history.
"A man with a watch knows what time it is. A man with two watches is never quite sure"
I feel this is attitude is honourable and should be commended for its wholesome goodness. I really like your attitude in trying to raise opportunities for software engineers and normalise paying for software maintenance.
Do people really enjoy paying for software? Do people actually just pay for bespoke development when they pay for software engineers with the silent industry wide acceptance that software is custom created and not for sharing outside that company. I'm thinking of your custom development for a wordpress blog for a small business or an ERP installation for a particular large organisation.
I feel the independent software vendor market for desktop software has stalled. Antivirus is supplanted by Windows Defender, except for Photoshop and some audiocreative software that everyone uses, I don't see the popularity of download websites that there was in the late 90s early 2000s when I was growing up.
I feel, as a software engineer I would like to love a codebase more, to do the things how I truly want to do them, but am held back by financial obligations and for my employer to be rewarded for shipping.
In my observations of internet comments, even software engineers and people don't enjoy buying software packages unless it is an application on a mobile device.
https://en.wikipedia.org/wiki/Download.com
What would everyone dream's computer tech jobs be? Building web apps, desktop apps, videogames, business software, mobile apps?
Wherever people use Excel as the centerpiece of their work, there is an opportunity to help improve things, for fun and profit :)
In general, most opportunities lie on the seams between well-understood areas. Knowing more than one area helps. Many of these opportunities are too small for hockey-stick growth which VCs crave, or for huge contracts which large corporations desire. They are perfectly sufficient for a mid-size sustainable business though. Specialized things, like the bespoke work on and around open-source software from the post.
With any luck, that work may be pleasant.
Fairly typical as I see same with traders or rentiers.
Either they know it is one time trick and they have to milk it out before it goes bad or they are really clueless and think they have all the answers.
I don’t know which one is worse but I lean on milking strategy to be worse because they become snake oil salesmen by choice.
Yeah, if you're Filippo Valsorda. Not sure that "proves the thesis" broadly whatsoever, though.
To be fair: he has only generated a single data point and not enough for a "thesis".
"Possible" is very different than "likely".
I wouldn’t recommend this route to any random senior engineer.
All they need is the dentist. It’s honestly super creepy how generic they all are and how many middlemen end up involved in your dental care.
Now I'm imagining a future where independent open source maintainers are common and successful enough that there's a conference for the Association of Open Source Maintainer Support Organizations.
As someone who frequently complains about all of the administrative overhead this kind of lifestyle requires I appreciated the footnote pointing out that dentists have the same problem and just get on with it.
That said... as a self-employed mostly full time open source maintainer myself I do often think about how much I would appreciate some kind of agency or talent management relationship that would take a bunch of that off my hands. It works for Hollywood, why can't we have that in tech too?
What does that mean? The difference between the two I mean.
If you charge the "bottom" then that might be passed up to the "top" or not. It depends what the "middle" does. The middle might absorb the cost or pass it up to the end customer.
They provide hardware, mailing lists and legal support. They don't help match-make maintainers with sources of consulting income (which is the kind of admin I'd most like help with!)
Also note that for blockchain projects, it's important that they associate themselves with famous people to give their projects credibility. So they are willing to pay huge amounts of money to get celebrities like him on board.
If your open source project has a homepage, a fair amount of visitors, and a public list of sponsors, blockchain companies will pay for the highest tier to be on top of that list instead of going down the usual AdSense route.
From their perspective it's a link from a respectable source that reaches their target audience (those into tech) on a permanent basis that even adblocks don't block. And it only costs them up to a couple of hundreds of bucks per month, way cheaper then traditional banner ads. Doesn't matter if what you're actually building has anything to with cryptocurrencies, but of course having some touching ground works even better.
Seems like the easiest approach for a business. Finding a person then issuing a free lance contract is a lot of overhead.
You could also include non-profits like the Linux Foundation, Blender Foundation or (new!) Godot Foundation, which do the same thing but without having to disguise as consulting, because development of the software itself is important enough to the industry that can pool its resources by donating to the respective foundation.
Still only works for important enough packages. I don't think there's a way around that. An open source project generally has to provide massively outsized value so that a handful of developers can capture a fraction of that value for paid maintenance.
The higher tier plans also get what sounds like a few hours of custom consulting time (think calls with their team) per month.
> it boils down to this: I go in, meet the engineers, and learn what parts of my projects they use and how; then, I keep those use cases in mind in my own planning and I reach out and involve them for feedback when there are relevant changes on the roadmap. This improves outcomes for everyone: I want my projects to work well for users (regardless of whether they are paying me) and no one wants to find out something’s wrong after the release.
That model is expanded on here: https://words.filippo.io/dispatches/reciprocal/
What's the paycheck like?
> I’m making an amount of money equivalent to my Google total compensation package
He goes on to write,
> My Google compensation was dominated by stock grants, so it varied wildly. What I’m earning now per year is: slightly less than my first year at Google (which included a significant signing bonus), drastically less than I earned in 2021 (when the signing stock grant overlapped with three stock refreshes, and $GOOG was at record highs), and more than I would have made in 2022 had I stayed (even accounting for all benefits on one side and the salary of my assistant on the other side).
The biggest cost involved in full time open source work is opportunity cost.
If you have the skills to maintain a popular open source project, you could almost certainly be earning $250,000/year or more at one of the big tech companies.
That is vague. A specific number would have been much better.
According to levels.fyi [1] as of Feb 2023, a Senior Software Engineer at Google (L5) could negotiate a compensation package around USD $193k (base) + $119k (RSU) + (one-time) $26k signing bonus.
I have talked to Filippo in person and I have the impression that he was a Staff Software Engineer (aka. Google L6), which are supposedly able to negotiate around USD $244k (base) + $187k (RSU) + (one-time) $35k signing bonus.
These numbers are averages based on verified offer letters and RSU grant documents that Google employees have submitted to that website during the last couple of years, but I think the numbers do not account for annual RSU refreshers, performance bonus, or stock performance. That is what Filippo is referring to as “it varied wildly”. I still would have liked to see a comparison with real numbers, at least the base salary.
It's complicated, but I think they account for it in a way that gives a reasonably accurate picture in the steady state. levels.fyi for L6 says salary $244k, stock $187k/year, bonus $35k. Every year as a Google L6, I got a compensation letter with roughly that salary, equity refresh, and annual bonus. Each equity refresh vested monthly over the next four years. That means 4+ years in, you receive over the course of a year stock which was valued (at various times in the last four years) at about that equity refresh in total. Actual value when you receive it varies much more because that's what stocks do. And letters can vary more from year to year based on performance multiplier, you can get spot bonuses in addition to the annual bonus described in the letter, you may get promoted to level n+1 (or leave) before reaching level n's steady state, etc. On the flip side, it seems likely that along with the layoffs this year they didn't give anyone big annual bonuses or equity refreshes. I moved on a while ago so haven't asked.
Anyway, it's good money, and I'm really happy to see someone able to match it as a full-time open source maintainer. Filippo seems pretty exceptional though; I hope good open source compensation becomes normal.