Hacker News new | ask | show | jobs
by nullc 4191 days ago
He's saying it has ethical implications.

Making that decision in an informed way starts with having some idea of what you're giving up.

In the case of SaaSS, you're often not sure what you're giving up precisely because the operation of the server is so opaque to you. E.g. is the server copying all your email to a hostile foreign government? The operator /says/ it isn't.

Indeed, it can be a bit abstract-- but many other important tradeoffs we weigh also involve abstract implications or effects at a distance.

1 comments

I have huge respect for Stallman and I understand his argument, but he's still stuck in a 1980s mentality where everyone on a computer had to have some level of expertise with actually running software.

The fact is that many people today are incapable of even installing an application on a proprietary desktop OS, much less utilizing the freedom of software they control. 10 years ago I was building websites for people at $1000-$5000 a pop, all with open source software. They have all the benefits of free software available to them, but you know what they don't have? Anyone to maintain their software for a reasonable price. I've been directing them to SaaS providers for a long time because frankly it makes no sense to pay me 100 times as much to a software professional in order to realize this freedom.

Obviously Stallman would say that there's no inherent reason that you can't have a reasonably priced service based on free software, just like there's no reason you can't charge for shrinkwrapped free software. However the mechanics and cost savings of SaaS make this much much more difficult to conceive, and frankly I don't see how it will ever make sense for the laymen who make up the vast vast majority of computer users today.

Stallman is a gem of the computing world, and I would never say anything bad about his ideology, but the primary battle that needs to be fought today is about data ownership, not software freedom. The latter still matters, but only for the computing elites (ie. programmers, sysadmins, etc), the former is what is increasingly going to affect everyone going forward.

Yes.

Arguing that paying someone to run the software for you is unethical is like arguing that paying for a well-prepared meal in a restaurant is unethical. You should source all the ingredients and prepare them in your own kitchen.

Except we're paying for the expertise of the chef. In the case of SaaS we're paying for not maintaining our own data center, system administration costs, operations costs, monitoring and security.

But the chef might not use clean food! People will get sick, the chef's reputation will suffer, and he'll go out of business.

As you say, the question is data ownership. Turning that toward the analogy, how do we verify data security such that reputation is affected? Make ethical behavior valuable (reputation) and businesses will behave ethically.

Freedom means having control over your own life. If you use a program to carry out activities in your life, your freedom depends on your having control over the program. Nonfree software encourages users to surrender control over their computing to someone else and this is the exact same situation in SAAS. SAAS is not controlled by the user but some other person. This is unethical because this causes an unjust form of power over the user. Users who partake in SAAS or proprietary software do not get all four freedoms of free software that all users need to have freedom. Now if you feel that you don't need all four freedoms of free software, then so be it but beware, your computing will not belong to your hands but it will belong to the hands of other people (who don't necessarily have your best interest in mind).

In a restaurant, there is no unjust power over the customer. In a restaurant, a customer can order some dishes and order the dishes to be prepared a particular way. When the customer gets the meal, the customer is free to do things such as add more things to the food, take the food away for later eating or share the food with friends or even resell the food to anybody. In the case of SAAS, similar freedoms are not available to the user. Users are forbidden to study and modify how the service operates, and users are forbidden to share the computing service with other people. Control over the service belongs to the SAAS company and not the user.

Way to repeat the mantra without engaging in the actual argument at all.
I repeat the mantra because I thought it engaged the ideas of the ethics of SAAS and in food service. Would you care to present a counterargument to what I've presented.
If I understand your position, and that of the FSF, rightly then you believe it is both unethical to provide, and unethical to use hosted software that does not carry the AGPL.

I would submit that a SaaS provider could not ethically allow modifications to their running software. So let's exclude that from the discussion.

What if a provider only ran software licensed with the AGPL? It wouldn't fix anything. The license requires accessing a download of the source. How can a customer verify the version of the software is the same as the version of the download, i.e. check for a violation of the license? Short of having access to the operating system on the servers, the customer cannot. No reasonable service provider would allow such access, and no reasonable customer would accept that other customers, including, possibly, competitors, had such access.

You can push the problem around all you like (every customer has their own server with OS-level access, but what about the DB?). It will always end up being cost prohibitive to run a service.

Also, under the AGPL the point is for any user of the system to be able to host and run their own instance. Meaning that any innovations must be given away. Conversely, if the software can only run in the context of the provider's data store, the problem of data ownership is not resolved.

Do I want the keys to the OS on my home computer. Darn right. At work, do I want the keys to Amazon's virtualization layer? Heck no, I don't want those headaches. It's what I'm paying them for.

Stallman's position also fails to address the ethics of contract law. What makes Free Software ethics superior to ethics of contracts?

> but he's still stuck in a 1980s mentality where everyone on a computer had to have some level of expertise with actually running software

I don't think he is: The challenge for excellent free software today is to build software which can be used maintenance free (and, of course, be compatible with maintenance if the user wants to provide some).

Of course, it's _easer_ to build software that runs remotely and can be fixed silently for the user at any time, than software which has to be complete and correct when it goes out the door...

Freedom that costs to much can't deliver on its promise. The response shouldn't be to abandon improved freedom as a goal, but to apply our intellect to lowering the cost.

I was very careful in the way I worded my argument to avoid this strawman rebuttal (see the part about computing elites).

Of course you are right that we should rise to the challenge of shipping excellent free software, but experience tells me that it doesn't matter how good we get at this, we will still be undone by the transient nature of software stacks. Patches will be necessary unless people never upgrade, which of course they will because sooner or later they will desire new features or it's necessitated by security. At best we can asymptotically approach the amortized cost of having someone else manage your software for you, and even that is dreamland until free OSes finds a way to approach the UX provided by Apple/Microsoft/Google.

You're welcome to devote your life to proving me wrong, but I'm not holding my breath.