Notices by Don McCurdy (donmccurdy@fosstodon.org)

If your company relies on open source software and wants to support maintainers, please don't do it this way.

Better models include:

- Tidelift
- Open Source Pledge
- Sovereign Tech Fund Fellowship for Maintainers

I've been expecting something like this since the XZ hack, but still ... frustrated/annoyed/sad to see Microsoft and 13 (!) partners jointly announcing that their answer is to “educate” open source maintainers.

It's nice that they're compensating maintainers for the time spent on that training, but ... compliance with corporate security policies is still a whole lot of ongoing, unpaid work after that? Sigh.

https://github.blog/news-insights/company-news/announcing-github-secure-open-source-fund/

"Signal is Expensive”, from CEO @Mer__edith, is very good. The transparency around infrastructure costs had me hooked from the start, but the ways they've rearchitected ubiquitous features (profile pictures, GIF sharing, finding contacts) to protect user privacy, that’s really stunning.

https://signal.org/blog/signal-is-expensive/

my feelings about the #threads integration are … mostly good!

some instances won’t federate with Meta, and that’s great. some instances will federate, and that’s also great. a way more interesting set of choices than existed a few years ago.

Really have to wonder if people beginning their careers today — watching AI and corporate power consume the open web — will feel the same way we did about open CC-BY and MIT licensing.