Hacker News new | ask | show | jobs
by m3047 386 days ago
That can mean a lot of different things, and imply various adjacent activities which may or may not meet your definition of "contributing".

I've submitted PRs to projects I use (dnspython, scapy). One of the cybersecurity companies I worked for managed various ruses to keep me from supplying fixes to upstreams; the most feckless bullshit reason they came up with was "opsec".

While working for Farsight I reviewed and provided feedback to several open source projects regarding their integrations with e.g. DNSDB.

Not everything has to be a PR, or targeted at the project's self-declared consituency. For instance I wrote a protobuffer dissector for scapy (https://github.com/m3047/tahoma_nmsg) because scapy was a handy "living off the land" kind of way for customers and prospects to taste Farsight's tunnelled SIE products without compiling a bunch of C libraries. (You can declare your own protobuffer data types, use https://github.com/m3047/tahoma_nmsg/blob/master/tahoma_nmsg... as an example.) I don't distribute scapy, so there's no compelling reason for me to use the same license. (You're welcome.)

In fact, I re-used the protobuffer dissector for the Dnstap half of the ShoDoHFlo DNS + netflow correlator (https://github.com/m3047/shodohflo). I started down that road because Vixie got his panties twisted up and his hair on fire about DoH, and once I looked at it it seemed that there was something in there that I'd personally find useful. A couple years later I decided I wanted e.g. "dig -x" more than a GUI, and after several iterations I came up with Rear View RPZ (https://github.com/m3047/rear_view_rpz). I find it useful, and I think it's a pretty cool hack. (Works with EtherApe!)

ShoDoHFlo stuffs data into Redis. I found myself utilizing that data for other purposes and got tired of installing a Redis client and dealing with the security issues. So I implemented a DNS proxy for Redis (https://github.com/m3047/rkvdns).

I still haven't "found my tribe"; or maybe I have, and most of them don't contribute to open source. Nobody submits PRs, and nobody I know opens issues; instead they send me emails. :-/