Hacker News new | ask | show | jobs
by CodeGlitch 1987 days ago
I really wish the EU would put up funds for open source software, like signal, it seems to be something they could get behind for the greater good. My previous job involved creating a graphical programming language for the generation of GPU shaders, which the EU partly funded. I knew it was going nowhere, and it made me slightly sad tax payer money was being used on something I knew, despite my best efforts, would not work.

Oh well...

8 comments

>I really wish the EU would put up funds for open source software, like signal, it seems to be something they could get behind for the greater good.

They do https://hexus.net/tech/news/software/125747-14-open-source-p...

I just wonder about the process and the results. I mean, it doesn't look to me, as if there is a management behind this, that actually has a goal.

It looks more like they are giving funds to projects who apply for them. IMO, they should state 3 clear goals and sponsor specific projects which reach those goals. To give some example how those could look like:

- create a decentralized, federated instant messaging platform, that is build on public standards

- create an e-learning platform that is usable with already established devices

- establish a market for the created software with partners

Naturally, all result would have to be open-source products and the goals would need some details/numbers to measure them. They could even invest into already established projects, but please, with easy to understand goals.

I work in EU research funding programs. The process is very bureaucratic, making it difficult for any small company to apply. Not to mention projects without a company.

It's also quite ineffective at giving money to the projects that are meaningful.

Large companies and large university projects rake in plenty.

Yeh so true. One of fhe great things about the Open Tech Fund was that it makes it easier for people with open source ideas, like Signal or our own Umbrella security training app, to get funding. Doing that through European funds would be impossible.
NLnet uses EU funds to help open source projects, in a similar way to OTF:

https://nlnet.nl/

Not just EU funds, but those are currently the largest funds at NLnet.

NLnet does 'funding as a service'. If you want to fund a particular area of FOSS, we (I work there) can administer that. We provide low overhead funding to FOSS projects and pay particular attention to how the ecosystem benefits from projects.

So 'boring' projects that improve adherence to standards, increase deployments of standards compliant software, test standards compliance are very welcome. Redecentralizing the web requires this work, but few people think that this work is fundable. It is and in our opinion is has a high ROI for society.

NLnet seems to have been doing the good fund for quite some time!
Can confirm, though I need to qualify that most of my experience is in the software related programs.

In each and every framework so far, the EU is touting 'reduced administrative overhead', 'simplification of participation' and 'focus on SME's', but has in practice done exactly the opposite.

Especially since Horizon 2020, there has been a 'coup' by the large enterprise and large academic research groups. You can see the same trends in national programs as well.

I hope it won’t become like Canada’s SRED credits where the consultant that helps you make it look like you’re eligible costs 1/3 of the credits you get. These credits in turn keep otherwise completely unprofitable and doomed startups funded while the product delivers no value whatsoever. It’s borderline a scam and the program’s spirit has been completely abused by now.
This is another real issue I've seen in some places, especially regions that are trying to "do" tech, but where it doesn't come naturally.

It hurts me to watch systems full of broken incentives emerge and have money thrown into them repeatedly - there's "tech startups" (which would be laughed out of the valley due to their head-count and lack of any product market fit) receiving large ongoing subsidies to their payrolls while they slowly pretend to iterate on a product, all because they have "created" an agreed number of jobs, and need to keep those chairs full.

Europe on the whole doesn't have a culture of taking the same level of risks with capital, and there's a real push to fund things that are "safe" and help cover up weaknesses in the market - funding a company to hire people into basic tech roles at below-market pay helps to reduce graduate unemployment, which covers up the fact their education isn't giving them the right skills. That's pleasing to government.

On the other hand, giving 1m EUR to a small company with low head-count but a great idea could be a game-changer, and lead to far greater longer-term gains, but any government funding like this would be accompanied by so much red tape that you'd spend half of the 1m EUR on satisfying the monitoring requirements of the grant, attending monthly external progress review meetings, defending your progress to agreed (and inflexible) milestones etc.

That last point is perhaps the killer for innovation - most of the innovation funding schemes I've seen require detailed project plans before receive a cent of funding, and then hold you rigorously to that plan. Need to pivot? Welcome to the multi-page "change request form", which must be approved by a panel of non-technical bureaucrats before you can dare to change direction. They'll get back to you within 3 months, until which time you should continue with your original plan, as you will still be judged by your previous milestone payment plan. Your idea not working? That's not an acceptable outcome - you simply must deliver what you said! Failure is not welcome, you must deliver exactly what you said, else they will complain you are causing them to under-spend by the end of the financial year (as they now won't pay you!)...

Part of the problem with the process is that, for various well-intentioned reasons, there's a major focus placed on delivering objective evaluation on any kind of funded research or work. Bureaucrats want to demonstrate the impact their funding had, so that next time around (in say 5 or 6 years) they can make the case for the same amount of money (or indeed more). This leads to a system where "safe pairs of hands" are favoured, due to their ability to "play the game" and deliver the right kinds of metrics. A larger organisation can deliver "more jobs created" as they have the operating capital in place to run hiring using the research funding money, and commit up-front to "creating" those jobs (which they would have needed anyway, but can now fund, in part or in whole, through the funded project).

That's why, in my view, the bigger companies and universities do well - they have a scale that helps them to deliver these kinds of outputs. As a small company, the "spend-and-claim-back" approach to most research funding can be a real issue, especially if the claims are delayed due to bureaucratic "checks and balances". These are necessary to prevent blatant outright fraud (i.e. people not doing the work they say they did, and pocketing the cash), but they tend to be applied across the board, rather than in a targeted way proprortional to the level of risk, and size of the organisation. The end result is smaller players spend more time (proportionately) handling bureaucracy if they do win funding.

RE selecting meaningful projects, this is arguably because EU research funding looks further ahead, at lower technology readiness levels. An open source project used by everyone is "high TRL" and therefore hard to fund. If they have an entity (as you point out, many don't, which makes them harder to fund),

If you don't have a company to pay yourself through an official payroll system, I believe there are rules in place which effectively define that you work a maximum of 8 hours per day, 5 days per week, and that you can't possibly earn more than 25 EUR per hour, which is of course completely out of line with the sector, and makes it really hard to work without creating a company. At which point you then become subject to state aid rules, and need to keep a handle on that.

And beyond the research programmes, any kind of "innovation funding" then drags you into the state aid system of partial funding, which is very difficult for a small company - getting 60% of full payroll costs funded sounds nice, but it requires you have the cashflow/capital in place to run payments through payroll, in order to claim back a percentage. Not ideal for the kinds of non-commercial "critical internet infrastructure" that need this kind of funding the most.

I disagree. I believe the governments should fund existing open source software that are considered to be "critical" infrastructure (as in lots and lots of people rely on it) instead of chasing some random goals and adding bureaucracy on top that would slow down lead developers.

Just give them money and trust them that they'll do whatever it is they've done so far that many people recognised and started relying on their solution to the problem.

Without looking them up, there's exactly three pieces of software in the list above your comment that I don't recognize: FLUX TL, WSO2, midPoint. I'm happy to see all the other names on it, and I'm pretty sure I'll feel the same way about these three after I look them up.

I am not so sure that we disagree. I would consider instant messaging services 'critical infrastructure'. The difference seems to be, that you want to support projects that are large already, while I would certainly put more focus on smaller projects as those are the ones which can initiate change.

I find it heartbreaking, that we still depend on WhatsApp and Zoom. Neither service owner is particular trustworthy. Communication is definitely critical infrastructure and yet, the open-source alternatives are very limited (in quality, not in quantity). So investing in this kind of functionality is key.

In terms of software, Signal and Jitsi are great alternatives to WhatsApp and Zoom. People don't use them because of network effects, not because the incumbents are inherently superior.
For many use-cases they are indeed proper alternatives, but Jitsi has a much lower limit when it comes to numbers of participants. So if someone wants to organize a group call (the typical use-case) you come a with a lot more scenarios into trouble using Jitsi. And it hurts me to write this, because I hate how much growth Zoom had in the last year while being dishonest about critical encryption features. I would love to promoted Jisti and have tried so in the past, but I can't recommend something when it doesn't fit the use-case.

Signal, on the other hand, probably comes close to the WhatsApp features (I use neither one) and while I encourage everyone to to switch, I am missing the federation aspect. IMO, communication should be federated by law (which would also solve the network effect problem). Imagine a world where you could not call someone who has a phone number from a different provider? The current state of instant messaging is exactly this.

XMPP solved these problems decades ago and just because the standard didn't catch up with the speed of the mobile revolution, we don't have to reinvent everything from scratch. Properly implemented modern clients work very well (including reliability and battery consumption), the big issue though is that many traditional clients don't support all features and all companies in the business try, to build walled gardens as those tend to driver stock prices.

Yeah,and they crumble to bits like Signal is doing right now, breaking the wave of mass adoption.

Cynical, profit driven and well funded operations have enough capital to weather these downpours, indeed they’re actually planning for them.

I hope Signal sorts their capacity quickly, I’m terrified that my circles switch back to WhatsApp. And then I’m fucked, I either surrender myself to Facebook or cut off from society

> I believe the governments should fund existing open source software

Governments don’t fund things, taxpayers do.

That's a bug bounty programme, which I agree is useful but not quite what I was talking about.
While better than nothing, I'd argue a bug bounty is perhaps the opposite of what's truly needed - incentivising the finding of vulnerabilities is good, but it needs people to fix those.

Alas, this is what happens when tech policy is written by people without tech experience, I suspect.

Signal isnt federated or self-hostable. As long as its not, I dont see it as completely open source software because we still have to depend on their servers to use Signal.

I feel public money should only be donated to them once people are able to setup their own signal instances, like Matrix.

France for example uses Matrix for their internal communications. They don't use the public homeserver, rather, they use their own.

I know you mean well, and I understand the feeling, but how can you say in the same breath that the EU funds useless software and that you wish they funded more software?

Why would the newly-funded software be the useful kind instead of the useless kind?

Because if they got more serious about it, they'd install committees to evaluate proposals, et cetera., like they do for scientific research proposals.
Right, what this problem needs is more committees!
The funding should be in return for a chunk of profits (ie. The EU becomes a shareholder).

They should employ teams of investors to decide where EU money is best invested.

They should use their governmentness to investigate companies after a few years and where they find someone got rich, yet the company failed, put some people in prison. Being the EU they can say "using legal loopholes to suck the company dry is in itself illegal".

What you’re wishing for is to force your fellow man to donate to a cause you deem worthy. EU funds don’t come from nowhere - they are taken from citizens.

You go donate an hours wage a week instead; that’s virtuous.

> What you’re wishing for is to force your fellow man to donate to a cause you deem worthy.

My fellow man sometimes wishes me to fund expensive wars too.

Wishing for how your taxes are spent is an aspect of democracy.

Forcing others to fund wars is not moral. Neither is forcing others to fund mobile apps.

No one hinders you from donating to Signal if you wish, but if I am a Matrix user, do you want to use the violent force of the state to force me to fund Signal? It’s a moral absurdity.

Virtuos does not mean effective. I am of the opinion that we should have a democratic government that is able to spend some of their citizens money on projects deemed worthwile.

This is how public schools are funded in my country and I like that we fund them like this instead of private schools with fees that would exclude some families. This model of funding works for a lot of public infrastructure and I doubt individual donations would make up for that. I think it is critical for this public funding to be under democratic control. Otherwise it is definitely unjust. In the end I think public funding / taxes is a way to bypass the tragedy of the commons (not sure if that is the right term here).

That's how taxes work, unfortunately you can't pick and choose to which causes they go.

That's why, in a democracy, you vote to elect your representative who will, hopefully, make sure your taxes contribute to causes you deem worthy. Be it open source, health services, education, ...

You are right - taxation is coercion and not virtuous. You are also right about representative democracy - the incentive is to have the state fleeze your neighbour as much as possible. For those working in the bureaucracy the incentive is to convince the boss you need a larger budget next year.

Certainly far from “love thy neighbour”.

Donate yourself, you can be a hundred times more efficient than EU bureaucracy, no exaggeration

Eh, but in reality no not really. The PyPy project is one example of a fantastic outcome for OSS (among others): they where heavily reliant on EU funding to get to the point they are now. VLC, glibc, Keepass, Kafka, tomcat and others have had EU funds for their security bounty programs. My 10 EUR contribution to this via my taxes (simplistic and incorrect) is fine. Angry anti-tax anti-big-gov rhetoric involving wishful thinking whilst ignoring the reality we actually live in does little to advance your cause, and for lack of a better word makes you sound rather silly.
Nothing silly about having principles.
If those principles and the way you articulate them are obviously silly then yes there very much is
Wealth is not distributed in a equitable way, so it seems fine to me.

When CEOs and owners make the same as cashiers, donating by yourself makes sense.

yes, if you can't donate money consider in other ways, it's an open source project.
I wisth they do not put up funds to signal. It is closed ecosystem. Even traditional phone calls are more open (having federated independent operators and interoperable implementations).
This is the old Signal-Matrix debate. https://matrix.org/blog/2020/01/02/on-privacy-versus-freedom

In short, federation makes a lot of things more difficult, and Signal opted not to do that to get a polished product quickly. Still, it's not either-or. As I remember it, Moxie welcomes the Matrix developers to try their approach and would be glad if they can get it right, he was just worried that it'd basically never lift off.

I think it's not bad to donate to either project, it's a good thing that we have both.

I mean, isn't that sort of the fundamental problem with government funding? They're not very good at picking winners, and when they make winners by picking, sometimes it still turns out to be a mistake (e.g. diesel in Europe).

Still, it does seem something infrastructure/utility-ish like Signal would be a good candidate for at least some support.

There seem to have been put up huge budgets for bootstrapling startups in tech sectors from the aEu budget recently though? Something like EU Horizon
that sounds interesting do you have any links? or insights to why it did not work out?