Elastic didn't really relicense ElasticSearch. It forked it.

🧵 A thread.

1/18

There's a lot of talk in the open source community about the cost of forking.

2/18
- "Forking is best avoided."

- "Forking is a last resort option."

- "Forking is like a nuclear weapons. It's a defensive threat."

3/18
Forking is seen as impractical and extremely expensive.

And that's a Really Good Thing(tm).

It's a forcing function for figuring out solutions that are broadly acceptable across the community.

4/18
The thing is, the cost of forking is mostly a function of three things:

1⃣ the size of the community that you can bring along with you,
2⃣ whether you need to rename your fork (who owns the trademark), and
3⃣ how much infrastructure you need to rebuild.

5/18
When that "community" is your employees, when you own the trademark, and control the infrastructure, then forking is really cheap. You just tell your employees to now contribute to your new fork, and you're done.

6/18
So the whole forcing function that the threat of forking has on the community is essentially lost. You don't get your way, and you fork.

7/18
Of course, with GPL, you can't just fork and close-up the source code, unless you've secured re-licensing right from all of your contributors. This is why the GPL+CLA combo is so prevalent with FOSS vendors.

8/18
With permissive licenses, there is no such need. You can literally embed the software into anything that is proprietary. As long as you give proper attribution and keep the open source license around FOR THAT PART OF THE CODE ONLY.

9/18
No one can stop me from forking Node today and releasing it as proprietary software.

10/18
What I can't do however is:

1⃣ move all of its community to contribute to my proprietary fork overnight,
2⃣ use the "Node" trademark, and
3⃣ leverage all of the existing infrastructure that isn't mine.

11/18
So the problem with Elastic forking ElasticSearch isn't the CLA, or its new license.

It's that it:

1⃣ *is* the community,
2⃣ owns the trademark, and
3⃣ controls the infrastructure.

12/18
So from the very start, none of what would have made forking costly was ever an issue for Elastic. At any point in time, Elastic could have forked at practically zero cost.

Of course, that's a powerful weapon and an incredible power imbalance in a community.

13/18
A key element of community stability (the shared threat of forking) was lacking from the get go.

The lack of open governance, of community trademark ownership, and of a genuine community of contributors beyond Elastic employees, are at the heart of the problem.

14/18
Folks like @beep and @adactio have started calling this "nominally open source."

I think it's more "Schrödinger open source."

Despite the license, you don't really know whether it is open source or not until you open the envelope and find out the cat is dead. 😿

15/18
With that framing in mind, ElasticSearch was never really open source. It was always in this unstable, "quantic" state of being both open and close, up until a decision was made and it was no longer open.

16/18
I've said it before and I'll say it again. We really need to start looking beyond licensing to understand open source and really assess the risk of buying into an open source project.

https://t.co/wuUJMh1RtX

17/18
Licensing clearly is a factor, but community health, governance, and trademark ownership are just as important.

It's time we truly recognize this.

18/18

More from Tech

On Wednesday, The New York Times published a blockbuster report on the failures of Facebook’s management team during the past three years. It's.... not flattering, to say the least. Here are six follow-up questions that merit more investigation. 1/

1) During the past year, most of the anger at Facebook has been directed at Mark Zuckerberg. The question now is whether Sheryl Sandberg, the executive charged with solving Facebook’s hardest problems, has caused a few too many of her own. 2/
https://t.co/DTsc3g0hQf


2) One of the juiciest sentences in @nytimes’ piece involves a research group called Definers Public Affairs, which Facebook hired to look into the funding of the company’s opposition. What other tech company was paying Definers to smear Apple? 3/ https://t.co/DTsc3g0hQf


3) The leadership of the Democratic Party has, generally, supported Facebook over the years. But as public opinion turns against the company, prominent Democrats have started to turn, too. What will that relationship look like now? 4/

4) According to the @nytimes, Facebook worked to paint its critics as anti-Semitic, while simultaneously working to spread the idea that George Soros was supporting its critics—a classic tactic of anti-Semitic conspiracy theorists. What exactly were they trying to do there? 5/
Next.js has taken the web dev world by storm

It’s the @reactjs framework devs rave about praising its power, flexibility, and dev experience

Don't feel like you're missing out!

Here's everything you need to know in 10 tweets

Let’s dive in 🧵


Next.js is a @reactjs framework from @vercel

It couples a great dev experience with an opinionated feature set to make it easy to spin up new performant, dynamic web apps

It's used by many high-profile teams like @hulu, @apple, @Nike, & more

https://t.co/whCdm5ytuk


@vercel @hulu @Apple @Nike The team at @vercel, formerly Zeit, originally and launched v1 of the framework on Oct 26, 2016 in the pursuit of universal JavaScript apps

Since then, the team & community has grown expotentially, including contributions from giants like @Google

https://t.co/xPPTOtHoKW


@vercel @hulu @Apple @Nike @Google In the #jamstack world, Next.js pulled a hefty 58.6% share of framework adoption in 2020

Compared to other popular @reactjs frameworks like Gatsby, which pulled in 12%

*The Next.js stats likely include some SSR, arguably not Jamstack

https://t.co/acNawfcM4z


@vercel @hulu @Apple @Nike @Google The easiest way to get started with a new Next.js app is with Create Next App

Simply run:

yarn create next-app

or

npx create-next-app

You can even start from a git-based template with the -e flag

yarn create next-app -e https://t.co/JMQ87gi1ue

https://t.co/rwKhp7zlys

You May Also Like

The entire discussion around Facebook’s disclosures of what happened in 2016 is very frustrating. No exec stopped any investigations, but there were a lot of heated discussions about what to publish and when.


In the spring and summer of 2016, as reported by the Times, activity we traced to GRU was reported to the FBI. This was the standard model of interaction companies used for nation-state attacks against likely US targeted.

In the Spring of 2017, after a deep dive into the Fake News phenomena, the security team wanted to publish an update that covered what we had learned. At this point, we didn’t have any advertising content or the big IRA cluster, but we did know about the GRU model.

This report when through dozens of edits as different equities were represented. I did not have any meetings with Sheryl on the paper, but I can’t speak to whether she was in the loop with my higher-ups.

In the end, the difficult question of attribution was settled by us pointing to the DNI report instead of saying Russia or GRU directly. In my pre-briefs with members of Congress, I made it clear that we believed this action was GRU.