Friend who is not a software person sent me this tweet, which amused me as it did them. They asked if “runk” was real, which I assume not.

But what are some good examples of real ones like this? xz became famous for the hack of course, so i then read a bit about how important this compression algorithm is/was.

      • MisterFrog@lemmy.world
        link
        fedilink
        arrow-up
        13
        ·
        4 months ago

        Perhaps we’ll move to UTC+10¼, and then move forward 45 minutes in the summer.

        If the day number is a prime, then we’ll go back π hours.

        Hope that will help!

    • onlinepersona@programming.dev
      link
      fedilink
      arrow-up
      37
      arrow-down
      5
      ·
      4 months ago

      I bet he’s paid nothing to do it. Then one day, when a timing attack happens that can be traced to the DB, some knobhead CTOs and tech influencers will start talking about “securing the supply chain”. They’ll want other such bullshit and responsibilities to be shoved unto volunteers.

      Two quotes come to mind “Fuck you, pay me” and “Open source maintainers owe you nothing”.

      Anti Commercial-AI license

      • MisterFrog@lemmy.world
        link
        fedilink
        arrow-up
        6
        ·
        4 months ago

        It would make sooo much more sense for the ISO to set something up, and make governments each responsible for keeping it updated, since they’re the ones doing the changing.

        Require all participants to amend their law/regulations, so there’s a note to prompt whoever is in power and changes it next.

        I’m sure some places would still neglect to do it… Haha

    • rothaine@beehaw.org
      link
      fedilink
      English
      arrow-up
      7
      ·
      4 months ago

      It’s also worth pointing out that this was sued in a copyright lawsuit some time ago. The wikipedia article mentions it, but here’s the slashdot discussion if you want to feel like stepping into a time machine: https://m.slashdot.org/story/158778

      It caused a momentary panic when everyone realized that this thing runs the system clocks for everything everywhere, and if it got taken down by a copyright suit it would be disastrous for, well, everybody.

    • Piece_Maker@feddit.uk
      link
      fedilink
      English
      arrow-up
      4
      ·
      4 months ago

      Wasn’t there also very recently a whole thing about the single guy who maintains the NTP spec threatened to retire so he could get a “real” job, which caused a gigantic internet-wide panic as pretty much everything we do relies on computer’s clocks being perfectly synced?

    • xmunk@sh.itjust.works
      link
      fedilink
      arrow-up
      71
      ·
      4 months ago

      And they still get emails from randos when some program that uses curl doesn’t work (the Readme is top notch).

          • Baku@aussie.zone
            link
            fedilink
            English
            arrow-up
            3
            ·
            4 months ago

            I feel a bit split about this. Seems it is an actual law, and it kind of makes sense. You probably don’t want random components from unknown people and places in your multi million dollar space equipment. But it feels rather arrogant to just demand such things.

            Is NASA actually a customer? Did they pay for a license to use curl (genuine question - I’m not familiar enough with it to know if enterprises and organisations require a paid license)? Are they planning on becoming a paying customer? Do they make donations to the project? If not, it feels kind of rude to send a demand letter to the lead developer of a free piece of software straight up demanding a formal letter stating where the free software is being developed and maintained (for free), or if outside the USA, that the free software has been tested in the USA. Oh, and a bonus demand that such information be returned within 5 business days (naturally with an implied “or else”, just to really make sure those pesky people maintaining open source software for free really get the memo)

            In any case, why don’t all their scary 3 letter spy agencies go and figure it out on behalf of NASA themselves? It’s open source, they could just like, read the source, test the source, and audit the source themselves. Or fork it and make any modifications they’d like to ensure its safety

            I don’t blame the person sending the emails, obviously, they’re just following orders, but the whole email reads as very entitled and arrogant, assuming NASA don’t provide any compensation to the project and projects maintainers for their use of curl

            • ricecake@sh.itjust.works
              link
              fedilink
              arrow-up
              1
              ·
              4 months ago

              https://daniel.haxx.se/blog/2020/12/17/curl-supports-nasa/

              https://daniel.haxx.se/blog/2023/02/07/closing-the-nasa-loop/

              Their process for validating software doesn’t have a box for “open source”, and basically assumes it’s either purchased, or contracted. So someone in risk assessment just gets a list of software libraries and goes down it checking that they have the required forms.

              As the referenced talk mentions, the people using the software understand that all the testing and everything is entirely on them, and that sending these messages is bothersome and unfair, and they’re working on it. Unfortunately, NASA is also a massive government bureaucracy and so process changes are slow, at best.
              The TLAs don’t generally help NASA, and getting them involved would unfortunately only result in more messages being sent.

              As for contributions, I think that turns into an even worse can of worms, since generally software developed by or for the US government isn’t just open source, but public domain. I think you’d end up with a big mess of licensing horror if you tried to get money or official relationships involved. It’s why sqlite is public domain, since it was developed at the behest of the US.

              Mostly just context for what you said. NASA isn’t being arrogant, they’re being gigantic. Doing their due diligence in-house while another branch goes down a checklist, sees they don’t have a form and pops of an email and embarrassing the hell out of the first group.

              The time limit thing is weird, but it’s a common practice in bureaucracies, public or private. You stick a timeline on the request to convey your level of urgency and the establish some manner of timeline for the other person to work with. Read the line again, but extremely literally: “we have a time frame of 5 days for a response”. “Our audit timeline guessed that it would take a business week for you to reply, so if you take longer we’re behind schedule”. The threatening version is “your response is required on or before five business days from the date of this message”.
              The presumption is that the person on the other end is also working through a task queue that they don’t have much personal investment in, and is generally good natured, so you’re telling them “I don’t expect you to jump on this immediately, but wherever you can find a moment to reply this week would keep anyone from bothering me, and me from needing to send another email or trying to find a phone number”

    • refalo@programming.dev
      link
      fedilink
      arrow-up
      47
      ·
      4 months ago

      curl is most definitely not developed solely by one person though, it has thousands of contributors. in fact, there is so much red tape around curl that you can’t even discuss making a change to it without first writing an RFC and having it approved by a committee.

    • mox@lemmy.sdf.org
      link
      fedilink
      arrow-up
      12
      arrow-down
      2
      ·
      4 months ago

      Libcurl is at the foundation of almost all networking.

      That’s not remotely true, but it is nevertheless outstanding work and very much deserving of recognition and support.

  • dosse91@lemmy.trippy.pizza
    link
    fedilink
    arrow-up
    141
    ·
    edit-2
    4 months ago

    I’d say ffmpeg is a good example, it’s used by almost every piece of software that has to manipulate audio or video (including messaging applications), yet not many people know about its existance.

    • Fred@programming.dev
      link
      fedilink
      English
      arrow-up
      69
      ·
      4 months ago

      And Fabrice Bellard, the original author of ffmpeg, went on to create qemu which pretty much made open-source virtualization possible. Also TCC (even if I don’t think that one is widely used), he established a world record for computing decimals of Pi using a single machine that had ~2000× less FLOPS than the previous record, and so much more…

      • cartoon meme dog@lemm.ee
        link
        fedilink
        arrow-up
        28
        ·
        4 months ago

        Fabric Bellard’s body of work is fairly strong evidence for time travel having happened already.

        Or just genius.

  • Godort@lemm.ee
    link
    fedilink
    arrow-up
    130
    ·
    4 months ago

    NTP is the one that comes to mind for me.

    Basically every device uses it and until fairly recently was maintained by a single person

  • Captain Aggravated@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    123
    arrow-down
    1
    ·
    4 months ago

    I mean, it was either Richard Stallman or Dennis Ritchie that created grep in an evening so that a buddy of his could do research on volumes of text that wouldn’t fit in the RAM of a PDP-11 (or similar machine. I’m telling this story from memory). It’s designed to do what you would do with the ancient text editor ed using the commands Global, Regular Expression, and Print. g re p. grep. Probably the most important piece of software ever written in a couple hours.

        • AnarchistArtificer@slrpnk.net
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          4 months ago

          Verbaceous is a great word. I’m adding it onto my “favourite words” list ,(even if it isn’t technically a word "

          • Captain Aggravated@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            4 months ago

            Ah, pshaw, I don’t subscribe to the notion that there’s such a thing as “not a word.” Why bother having a system of root words, prefixes and suffixes if we’re not allowed to use that system to build the words we need? Especially for the fun of it. Verbaceous is adjectivacular.

    • Phrodo_00@lemmy.world
      link
      fedilink
      arrow-up
      6
      ·
      edit-2
      4 months ago

      Original grep was pretty much a wrapper around sed (or actually maybe ed, I don’t remember). That’s why it’s called g/re/p, which is the sed command to do the same thing.

      • mke@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        4 months ago

        I believe you’re thinking of ed, and yes, grep was made out of ed. I remember reading about a university professor who, if memory serves, gave his students the code for ed and told them to turn it into (basically) grep. Said that no one ever managed, despite having more time than the original took in total. That’s not to say I think this was fair or cool of the professor, it’s just an interesting tale.

    • FizzyOrange@programming.dev
      link
      fedilink
      arrow-up
      5
      arrow-down
      11
      ·
      4 months ago

      If he hadn’t written it someone else would have. Searching through text is an obvious thing to want to do.

    • beveradb@lemm.ee
      link
      fedilink
      arrow-up
      30
      ·
      edit-2
      4 months ago

      Eh, bagder is more than “just some guy” to a lot of people! To me he’s kinda been my tech idol for 20 years lol, he also was a core part of building Rockbox (open source firmware for MP3 players) which was the first open source project I got seriously involved in as a kid ☺️

      • Cethin@lemmy.zip
        link
        fedilink
        English
        arrow-up
        32
        ·
        4 months ago

        “Just some guy” doesn’t mean they aren’t amazing. I would argue the opposite. It just means they didn’t use their abilities to become rich and famous like some other assholes. They’re almost certainly more capable than them, not less.

        • andioop@programming.dev
          link
          fedilink
          English
          arrow-up
          11
          ·
          edit-2
          4 months ago

          I think that would be a great situation to be in.

          You have created a cool thing a lot of people use, by being good at something. You’ve done something.

          Also, people have no idea who you are. Nobody is digging through your trash, harassing the people you love, taking pictures of you wherever you go including on your bad hair days, etc. You’re just some guy.

  • prayer@sh.itjust.works
    link
    fedilink
    arrow-up
    123
    arrow-down
    6
    ·
    4 months ago

    I saw a post earlier about Empress returning to game cracking. For modern video games that use Denuvo DRM, she’s the only person who can really crack it, as far as I know. Singlehandedly holding up the AAA game piracy scene.

    • quixotic120@lemmy.world
      link
      fedilink
      arrow-up
      109
      arrow-down
      3
      ·
      4 months ago

      She is kind of a shithead tbf and fwiw it’s more like she’s the only person who is willing to do it. granted cracking denuvo is something that is extremely difficult and only a small subset of people can do but it’s not like she’s literally the only person on the planet who can. There was that guy who would just release the yearly update of football manager, for one.

      It’s far more likely the people who have that skill set just don’t really want to bother with cracking videogames and the potential legal issues that come with distributing them online.

      • vividspecter@lemm.ee
        link
        fedilink
        arrow-up
        46
        arrow-down
        2
        ·
        4 months ago

        True, but being the only person willing to do something is kind of laudable in it’s own right. Like all of the open source projects relied upon by millions that are sometimes developed primarily by one person in their free time.

        • quixotic120@lemmy.world
          link
          fedilink
          arrow-up
          38
          ·
          4 months ago

          but my (not really my) conspiracy theory for this is the opposite of open source: when someone is good at cracking games companies like denuvo track them down and offer them jobs to harden their product and take another cracker out of the scene. like I bet denuvo is just filled with nerds that spent their teenage years in sketchy irc rooms with handles like -DooMSlAyEr- and used to actually be members of razor1911 before they realized they could get game companies to pay them 200k a year

          • onlinepersona@programming.dev
            link
            fedilink
            arrow-up
            17
            arrow-down
            1
            ·
            4 months ago

            It’s not a conspiracy theory. It’s exactly what Malus did and why it’s harder to root iPhones nowadays (but the EU is seeing to that by forcing them to start opening up their walled garden).

            Can’t remember where I read it, but I think it’s the dude who started AsahiLinux that shared part of his story in the scene. And a few dudes were tracked down and had the choice between a lawsuit and employment. Makes the decision pretty easy.

            Doesn’t help that they did their thing on Github and other public platforms instead of I2P or something.

            Anti Commercial-AI license

    • JadenSmith@sh.itjust.works
      link
      fedilink
      arrow-up
      28
      ·
      4 months ago

      I can’t help but laugh at how batshit crazy she is. Didn’t she write a rap at some point??

      I’ll never not be convinced that she’s on a fair amount of meth and/or crack.

    • Dasus@lemmy.world
      link
      fedilink
      arrow-up
      13
      arrow-down
      7
      ·
      4 months ago

      It was somewhat weird waiting for the HP release on her TG channel.

      Like I’ve seen my fair share of terf transphobes, but she’s honestly best described as a hater.

      There were so many rants.

      But like with Harry Potter, I like to separate the artist from the art.

  • baltakatei@sopuli.xyz
    link
    fedilink
    English
    arrow-up
    95
    ·
    edit-2
    4 months ago

    Based on my cheatsheet, GNU Coreutils, sed, awk, ImageMagick, exiftool, jdupes, rsync, jq, par2, parallel, tar and xz utils are examples of commands that I frequently use but whose developers I don’t believe receive any significant cashflow despite the huge benefit they provide to software developers. The last one was basically taken over in by a nation-state hacking team until the subtle backdoor for OpenSSH was found in 2024-03 by some Microsoft guy not doing his assigned job.

  • object [Object]@lemmy.blahaj.zone
    link
    fedilink
    arrow-up
    95
    ·
    edit-2
    4 months ago

    Idk who needs to know this, but in Norwegian “runke” means to jerk off. “runk” is the word you add a prefix to in conjugation to get the different inflections

    • runke - jerk off
    • runker - jerking off
    • runket - jerked off

    Etc…

  • Aatube@kbin.melroy.org
    link
    fedilink
    arrow-up
    83
    arrow-down
    2
    ·
    4 months ago

    core-js (whose maintainer is also a bit picky about and probably doesn’t understand the OSS process) Phil Katz, the guy who invented .zip. To this day, every .zip file contains his initials in hexadecmial. His story is incredibly interesting.

    • Pyro@programming.dev
      link
      fedilink
      arrow-up
      52
      ·
      edit-2
      4 months ago

      The core-js story always makes me sad. Sure, he’s developing an open source project and no one HAS to pay him. But the meager amount of donations and the tons of hate he receives isn’t justifiable.

      • Aatube@kbin.melroy.org
        link
        fedilink
        arrow-up
        28
        arrow-down
        1
        ·
        4 months ago

        It’s especially sadder when a substantial amount of the donations vanished when Open Collective and others stopped operating to Russians.

      • Thomrade@lemm.ee
        link
        fedilink
        arrow-up
        7
        ·
        4 months ago

        I had seen the hate before and foolishly just assumed he was deserving of it. Its a horrible situation he’s in and he is being cast in a bad light because he reached out for help.

    • Electric@lemmy.world
      link
      fedilink
      arrow-up
      13
      ·
      4 months ago

      Oh dear, that post from the core-js guy made my blood boil. He’s been taken advantage of by the whole world.

  • Mossy Feathers (She/They)@pawb.social
    link
    fedilink
    arrow-up
    82
    arrow-down
    1
    ·
    edit-2
    4 months ago

    Furthermore, “RUNK” was originally made in the 1980s to take over from a program written on punch cards in the 1960s. Finally, it’s missing some important functions that the original 60s program had because "RUNK"s developer doesn’t see the purpose of those functions and refuses to add them; and no one has publically released a fork of “RUNK” that adds those functions back in, so you have to do it yourself. Thank God it’s open source.

    Edit: oh yeah, and back in 2005 there was an effort to make a GUI for it, but “RUNK’s” sole developer got mad because “back in the 80s we didn’t need GUIs; command line is infinitely faster” and kept intentionally breaking support for the GUI with each bug fix, leading to the project eventually being abandoned.

    • 14th_cylon@lemm.ee
      link
      fedilink
      arrow-up
      29
      ·
      4 months ago

      that really sounds like a case where someone ultimately says “fuck you, runk’s developer”. why didn’t that happen?

      • Corbin@programming.dev
        link
        fedilink
        English
        arrow-up
        36
        ·
        4 months ago

        Because frankly, Ronald (the current maintainer, not the original author) is very competent. I say this as somebody who has personally been yelled at by Ronald at a kernel summit; I didn’t deserve it, but none of his technical points were wrong. I like to think of myself as the kind of person that, given enough time and documentation, can maintain anything; I think it’d still take three of me to do Ronald’s job. (Well, “job.” I think he technically works for Red Hat or something?) Not to excuse his conduct, just to explain why he’s not been replaced yet.

        • Ms. ArmoredThirteen@lemmy.ml
          link
          fedilink
          arrow-up
          23
          ·
          4 months ago

          Wait if it stands for Ronald’s Universal Number Kounter, does that mean both the creator and current maintainer are named Ronald? Is it a dread pirate kinda deal where whoever holds the hat takes the name?

          • dbilitated@aussie.zone
            link
            fedilink
            arrow-up
            12
            ·
            4 months ago

            it’s a case where he knows a guy just like Ronald but he’s not naming him, so he’s just talking about “Ronald”

          • Corbin@programming.dev
            link
            fedilink
            English
            arrow-up
            2
            ·
            4 months ago

            I’d love to link you to their Wikipedia pages, but both of them are redlinked. As far as I can tell, Dr. V. Ronald was an educator who moved from Canada to the USA as part of the whole Xerox PARC thing and probably was valued for mainframe experience; does anybody have a full bio? The current maintainer is Ron Sunk, who did a full run at MIT up through postdoc before going to Red Hat. The names are a coincidence; runk implements what we now call Sunk summation, after Sunk’s thesis. (As you might guess, that’s an instance of Stigler’s law, since clearly Dr. Ronald discovered Sunk summation first!)

            Also, as long as we’re here, I want to empathize a little with Sunk. The GUIs that folks have placed on runk, like GNOME’s Gunk or Enlightenment’s enk, look very cool, and there’s rumors of an upcoming unified number-counting protocol that will put them all on equal ground. But @MossyFeathers@pawb.social wasn’t joking; Dr. Arnold’s code literally only reads punch cards, and there’s a façade to make it work on modern Linux and BSD transparently. It predates X11, if that’s any help. The tech debt is real.

    • SturgiesYrFase@lemmy.ml
      link
      fedilink
      arrow-up
      4
      arrow-down
      1
      ·
      4 months ago

      I’m from the west coast of Canada, a euphemism for jerking off where/when I grew up is “pulling the pud.” Moving to the UK had some funny bits…like Christmas Pud…as in pudding(dessert). Pronounced slightly different, but my inner 6 year old had a laugh anyway.

      • monotremata@lemmy.ca
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 months ago

        If I’m remembering correctly, this phrase was immortalized in a Primus track at one point. There’s a weird, short track (or maybe an intro to a longer song?) on “Sailing the Seas of Cheese” that’s just one guy singing along with running water, and as I remember them, the lyrics are: “As I stand here in the shower, singing opera and such/pondering the possibility that I pull the pud too much/there’s a scent that fills the air; is it flatus? just a touch/and it makes me think of you.”

        Which apparently is still in my brain, even though I didn’t think I’ve listened to that album since the 90’s. My brain is weirdly prone to storing old audio, though.

          • monotremata@lemmy.ca
            link
            fedilink
            English
            arrow-up
            2
            ·
            4 months ago

            Wasn’t the phrase supposed to be “Primus sucks”? I seem to remember that being a self-identification thing for fans back in the day.

            • SturgiesYrFase@lemmy.ml
              link
              fedilink
              arrow-up
              1
              ·
              4 months ago

              That does ring a bell. I wouldn’t say I was a fan, I bought a few of their albums, and enjoyed them, but idk if I’d be able to name one of their albums or songs…

  • mox@lemmy.sdf.org
    link
    fedilink
    arrow-up
    69
    ·
    edit-2
    4 months ago

    I nominate Paul Eggert and Arthur Olson before him, for the tz database, which we all depend upon whenever the time at which something happens (or did or will happen) matters.

    Edit: Tom Scott touches on the subject here.

    • JackbyDev@programming.dev
      link
      fedilink
      English
      arrow-up
      3
      ·
      4 months ago

      When the US came close to going on permanent daylight savings time there were interesting discussions there.