Nadia Eghbal (open source researcher) critiques corporate motives when tech companies open-source internal software projects.
Assertion Supported
Eghbal: OpenSSL had only one paid maintainer when Heartbleed hit
“There was, like, a very critical bug that was found in OpenSSL, and the question Was, well, why did nobody find this before? And the answer was, because there are, like, two, there's one paid person, and there's, like, 10 volunteers that are working on this.”
Assertion Not checkable as stated
Eghbal: Tech giants have replaced academia in funding major software breakthroughs
“You still need people to think about, like, why are we building it this way, or what does the actual system look like? And that role is actually kind of being filled lately by companies like Google or Facebook that have the resources to make big strides the wa…”
Opinion
Eghbal: The term 'open source' has become meaningless
“Oh, I said I hate the term open source, which is admittedly it was a little bit inflammatory to say that. I felt very, I felt this tension coming in as an outsider and talking to some people who strongly believe this one thing is definitely a core value of ope…”
Insight
Eghbal: Completely decentralized systems cannot function without baseline governance
“You can't have a completely decentralized system. You have just enough management somewhere in there.”
Insight
Eghbal: Open-source popularity and project health are separate metrics
“So you can have projects like OpenSSL might be a project that was really, really popular. Lots of people use it, but not actually healthy. Until we separate those things out, then you have the problem of people saying, well, if it's, you know, if no one's main…”
Insight
Eghbal: Source code alone does not create an open source project
“Code by itself does not make an open source project. You have to have all these other types of skill sets, and that's, like, one of the biggest issues that I've seen where people don't really understand the value of a healthy community.”