This is amazing:
https://www.bleepingcomputer.com/news/security/dev-corrupts-npm-libs-colors-and-faker-breaking-thousands-of-apps/

tl;dr:
1. a developer of a bunch of popular #npm packages publishes new, intentionally broken versions of them as he doesn't want to support for-profit companies with his free work;
2. NPM *reverts* the packages to older versions against developer's wishes;
3. GitHub *blocks* the developer for acting "irresponsibly".

That story again: developer blocked by #Microsoft #GitHub for making changes to his own code.

This is why #AGPL and @forgefriends are so important!

@rysiek https://mastodon.social/@Gargron/107597555535490243

@gargron @rysiek If you don't want to support BigTech, then don't use "permissive" licenses. Use AGPL. The problem is: Most people don't understand Copyright and licences. So they find their way to choosealicense.com which is curated by Microsoft Github. It prominently advertises the MIT licence with "I want it simple and permissive". This phrase sounds fair and good to most people. But permissive actually means "I permit BigTech to run their profit-driven thing with my code".

@t0k I don't care if others make profit. I just care if they're destroying our living place, and that's why BigTech are a problem.

@Gargron @rysiek

@ffeth @gargron @rysiek Also the #AGPL does allow to make profit. And that's fine. But it requires to play a fair game. That's what the BigTech companies fundamentally don't like. Because many fundamentally can't play such a fair game.

@t0k @ffeth @Gargron that's all correct. In practice, though, Big Tech will do anything they can to keep away from AGPL'ed code, as exemplified by Google's internal policies banning their employess and contractors from even having AGPL'ed code on their work laptops:
https://opensource.google/docs/using/agpl-policy/

> Do not install AGPL-licensed programs on your workstation, Google-issued laptop, or Google-issued phone without explicit authorization from the Open Source Programs Office.

@rysiek @ffeth @gargron I wonder if that's not somehow part of a smear campaign against the #AGPL. Because technically, I see no problem for Google if its employees use some AGPL program on their laptops. They don't run publicly accessible services from their laptops.

To me feels like it's more about fighting the AGPL in general because it's bad for them. Imagine all FOSS would be AGPL: BigDisaster for BigTech.

@t0k @rysiek @ffeth @Gargron

> Imagine all FOSS would be AGPL: BigDisaster for BigTech

Wasn't there talk of putting this “you must distribute even if over a network” AGPL thing into what would become the GPLv3? Obv that was not included in v3, hence why AGPL was created. It's a shame they didn't do that (maybe GPLv4 🤔), and instead put something against “Tivo-ization” which in retrospect was almost pointless...