Yet another open source rug pull (Changelog News #97)
Jun 3, 2024
auto_awesome
Guests discuss controversial iOS app incident, project forks, static effect systems in programming, evolving perspectives on GraphQL, and the significance of persisted queries in GraphQL API development
Effective open source management is crucial to prevent data loss incidents like the Raviio 2FA code wipeout.
Forking Ladybird browser from SerenityOS allows Andreas Kling to focus on mainstream OS development and enhance project independence.
Deep dives
Open Source Sustainability Failure: Raviio OTP App Handover
The popular open source iOS authenticator app, Raviio, changed hands to Mobim, resulting in a disturbing loss of 2FA codes for users. After 10 months of inactivity, the new owners released an update that wiped out people's codes, leading to accusations of ransomware. This incident highlights the importance of effective open source management, as users faced permanent data loss.
Change in Ladybird Browser Development
Andreas Kling, creator of SerenityOS, decided to fork Ladybird browser as a separate project, stepping down from SerenityOS leadership. This move aims to streamline Ladybird's development and focus on mainstream operating systems like Linux and Mac OS. By separating the browser from the OS project, both initiatives can thrive independently and cater to their specific user bases.
A popular open source iOS authenticator app goes rogue under new ownership, Andreas Kling steps back from SerenityOS & forks Ladybird, Vhyrro takes a thought-provoking try at a “static effect system”, Matt Bessey is over GraphQL & Marc-Andre Giroux still likes GraphQL sometimes (in the right context).
Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!
Sponsors:
FireHydrant – The alerting and on-call tool designed for humans, not systems. Signals puts teams at the center, giving you ultimate control over rules, policies, and schedules. No need to configure your services or do wonky work-arounds. Signals filters out the noise, alerting you only on what matters. Manage coverage requests and on-call notifications effortlessly within Slack. But here’s the game-changer…Signals natively integrates with FireHydrant’s full incident management suite, so as soon as you’re alerted you can seamlessly kickoff and manage your entire incident inside a single platform. Learn more or switch today at firehydrant.com/signals