It's indeed ridiculous how the world's trillion dollar private companies run on essential software that idealistic open-source maintainers build basically for free while scrambling to even make basic income.
I'm all for open ideals, but we shouldn't be as naive to ignore how stuff we build on these ideals - if offered completely free - will eventually almost exclusively profit only those private entities that best know how to use them, hide them in a 'proprietary chain' and use VC capital to invest more in PR, markting and sales than engineering to reap all the benefits off them.
Therefore, I think, the original problem was that most software wasn't automatically defaulting to a limited-commercial (e.g. business of > million revenue must pay for usage in their product) or AGPL licenses that would benefit all - by either allowing maintainers to get a share from the success the helped build, or making the resulting products build on top, instead of private profit, available freely to all.
True. It's really cases like this that demonstrate the shortcomings of BSD/MIT licenses -- at least if you are of the position, that companies could and should contribute a sliver of profits back to the projects enabling that success.
(Much like contributing back in taxes for the infrastructure used and the educational system producing the qualified employees. But that may be a bridge too far for some of HNs readership :) )
Agreed, and furthermore, I would imagine since some projects (thinking ghostty, linux, and others) are non-profits there are tax incentives for donating and supporting. Software stacks are still neglected, and that points to inefficiencies (companies and corps not valuing open source) and willful malice (hiding them in the "proprietary chain"), and just general abuse of the commons (take and don't pay).
AI has made the "hard" things more important. Everyone can now build an e-commerce website or demo, but the utilities, OSes, and browsers now serve as the base of those projects. They are beginning to be overwhelmed, whether it be through AI bug reports, exponential load on some platforms, or other indirect factors, and there isn't much relief in sight.
We need a large re-alignment of Math, Software and Sciences. I'm not elucidating anything new here, simply musing. Science and math workers can be focused on replication and application, and software expertise focuses on the "foundational" systems.
> It's indeed ridiculous how the world's trillion dollar private companies run on essential software that idealistic open-source maintainers build basically for free while scrambling to even make basic income.
The most ridiculous thing is that idealistic open-source maintainers are still doing it, while this is being an established status quo for at least 30 years. Or maybe they have their incentive, and, while I don't find it palatable too, large corporations understands that. What's _your_ incentive in having such strong opinions about that ?
Honestly the most ridiculous part is that open-source maintainership is so easy to monetize.
All you have to do is declare a simple ULTIMATUM.MD:
I hereby guarantee that all project maintenance work will be deferred indefinitely if there are insufficient funds to continue maintenance work.
Project costs are split fairly according to a simple formula: pledge = maintenance budget / participants.
Pledgers can set a private maximum total bid during the campaign window. Generous pledgers can optionally set the maximum number of pledges they grant the project within their total bid.
I guarantee that received funds will not be used to build up project savings to extend the maintenance window beyond the funded window and that there will be no simultaneous campaigns to secure funding for future time periods beyond the current funded window.
I guarantee that the pledger's identity, maximum total bid, number of pledges, will be kept private to protect them from pledge analysis attacks that automatically infer the pledger budgets to calculate the maximum free rider potential.
I guarantee to always keep the project at the brink of abandonment to preserve the value of the pledges.
Hint: A rational pledger would consider these conditions amazing because all of them preserve their investment while protecting them from freeriders. 99% of the strategy here is to shift the freerider problem onto the pledger by guaranteeing that the project will be shut down, but this leaves the pledgers vulnerable to freeriders who analyse who is willing to fund the project to avoid funding it themselves.
Hint 2: You cannot fork your way out of this. At best you can have competing maintainers who underbid each other using ULTIMATUM.MD.
> idealistic open-source maintainers build basically for free while scrambling to even make basic income.
Maybe these maintainers could simply cease doing all this free work? There are other ways to make a living. Perhaps even doing the same thing but with better negotiation skills. No one is forcing anyone to do this. The reality is that if 100% of the tzdb and SQLite teams disappeared today, Microsoft and Google would have these projects back under stable operation before the weekend.
We cannot expect a realistic economy to arbitrarily compensate people who originally did not seek compensation without a lot of really bad side effects. Does anyone on HN have any actual evidence that the maintainers of truly load bearing infrastructure (billions of devices+) are genuinely struggling economically?
Maybe some countries could pay stipend to software developers who do that? I mean, this open source software enables other companies to produce cheaper software and to earn more money and they pay taxes from that money, so tiny bit of these taxes could also be redistributed back to some independent developers.
Then I am going to have to complain that the trillion dollar tech firms contribute no taxes while middle class joes pay a stipend to the people who built the software that they depend on to be trillion dollar companies
There's still the problem of how, precisely, we're going to force the rich to pay those taxes out of their own wealth, rather than them simply offloading them in the form of increased prices for the products and services their companies provide, which increased prices are then paid for by the weakest chain in the link: private end consumers, aka the middle class.
There may be a way, but it isn't self evident what that way may be.
> Maybe some countries could pay stipend to software developers who do that?
Why should the public make up for private savings? Hey billionaire x does not like to spend for his software, let's all raise some funds so he does not have to.
With my OpenBSD developer hat on, getting new hardware in the hands of developers is really important, many of us are hacking on 5-10 year old thinkpads that need replacing.
Shamelessly, if I may add a personal plea, in addition to funding the open source projects you use, if you can, please do consider directly supporting individual contributors/developers personally who work on those projects, many are volunteers and even a small monthly contribution could mean the difference.
Out of curiosity I asked Codex to build a version of this article that can be read/scrolled in a normal way while preserving the original graphics/text. Codex built it in about 10min with GPT-6.1 Sol High (consumed 8% of my 5h quota). It even thought of adding a dark/light mode switcher which is useful too. It still needs a few prompts of minor polishing, but already more readable to me.
It’s not a failure of corporate. It’s a failure of community. Would it be better if all internet infrastructure would be controlled by corporate? I would argue: no, it wouldn’t.
Perhaps It should be NPOs like ISOC or IETF that supports private open source engagement into internet infrastructure ?
I'm working on something similar for a PyCon talk.
While I agree that there is a problem of recognition and appreciation, I also feel like the spirit of making a small contribution without expecting a return is what enables the open whole source ecosystem that many of us benefit from.
This page has a11y problems. Reader mode fixes those but hides all the graphics, only text and pictures remain. Such a waste of an otherwise good article.
A specific screw in a car can be crucial, but at the same time it's cheep, replaceable and easy to reproduce. When describing the achievement of a car you would never put this particular screw at the top.
I don't mean that the achievement of those people is unimportant, but dislike when people mix up the idea of "dependence out of convenience" vs "dependence out of necessity".
These aren't simple pad left functions. Good luck making a Core-JS on your own. All of these are crucial to basically everything continuing to work - and more importantly massive security risks if their maintainers stop.
what do you mean by "making on your own"? The first example(time zone db) is portrayed as "holding up" 4B android/iPhone devices, and Google/Apple for sure have the capacity to create something "on their own".
What I’m curious about is, then, how should this problem be handled? Actually, there’s a point I’m somewhat curious about.
For projects with a bus factor of 1 or very low, and in a supply chain like this, there’s a somewhat difficult point regarding what kind of system should be established so that the core developers maintaining that kind of core receive appropriate compensation.
That’s true, after all. Technically very new or challenging technologies get the spotlight from many people, but these technologies are very important yet are a kind of engine technology that is less visible... I’m curious how this should be identified or selected.
That said, if you set up a committee, the committee could also become an inner circle based on their personal connections.
The devs should send emails asking for a couple million each to all the large tech companies while reminding them how much their utility is being used for their product. I think a lot of them will donate the money. It’s lesser than chump change to them.
I remember when the maintainer of an open source XML library contacted dozens of companies for support to fix a critical vulnerability, and most of them didn't even respond and aside from two the rest went basically "not our problem, get lost".
A handful of companies probably care a bit but most won't bother to pay even a penny.
Sorry to be harsh but, dev gets hit by bus, project is forked, people move on.
I'm sympathetic to this topic but I hate the framing. "The people holding up the internet" includes thousands of people at Google, Microsoft, Apple, Amazon, and yes, some volunteers too who are doing as a hobby.
They are free to give it up and stop doing it. Some person or company will pick it up.
I had Claude whip up Fundcli a bunch of months ago. It goes through your atuin shell history and suggests places to donate to based on what you've been using.
These people aren't holding up the Internet. The software they built is doing that.
It's like how your house isn't its blueprint.
Writing software isn't the same as running it. Software maintenance work doesn't scale with the size of the user base.
For software you don't operate yourself, the scaling factors have nothing to do with where it runs or why or when. You're isolated from the number of installs, since you don't operate those installs, you don't keep them updated or bring them back when they go down. That burden is borne by vendors.
Sensationalist takes are great for clicks, but there is no "there" there. If this was a true economic failure it'd have been fixed long ago.
My bet is these maintainers aren't in it for the money. After all they're not currently dead of starvation, so by definition they're okay. Not billionaires, but okay.
And that's okay! Not everyone wants to be a billionaire. Some people just wanna be that person in Nebraska thanklessly keeping the planet on axis.
This article is biased towards open source developers and ignores all the employees at tier 1 backbones who are the ones actually holding up the internet.
The difference is that the employees at tier 1 backbone providers get paid, and if one of them quits, there is an organization responsible (and incentivized) to hire and train replacements.
So what? That doesn't make those people, the software they write, or the actions they take any less important at keeping the internet functioning. The work employees do seem to constantly be downplayed since they often are not working out in the public, nor are they making public blog posts advertising what they are doing.
You have seemingly missed the point of the article entirely, while also becoming offended for... I'm not even sure. Not being mentioned maybe? The internet will never cease to be a rich vein of absolutely baffling behavior
It's indeed ridiculous how the world's trillion dollar private companies run on essential software that idealistic open-source maintainers build basically for free while scrambling to even make basic income.
I'm all for open ideals, but we shouldn't be as naive to ignore how stuff we build on these ideals - if offered completely free - will eventually almost exclusively profit only those private entities that best know how to use them, hide them in a 'proprietary chain' and use VC capital to invest more in PR, markting and sales than engineering to reap all the benefits off them.
Therefore, I think, the original problem was that most software wasn't automatically defaulting to a limited-commercial (e.g. business of > million revenue must pay for usage in their product) or AGPL licenses that would benefit all - by either allowing maintainers to get a share from the success the helped build, or making the resulting products build on top, instead of private profit, available freely to all.
True. It's really cases like this that demonstrate the shortcomings of BSD/MIT licenses -- at least if you are of the position, that companies could and should contribute a sliver of profits back to the projects enabling that success.
(Much like contributing back in taxes for the infrastructure used and the educational system producing the qualified employees. But that may be a bridge too far for some of HNs readership :) )
Can't speak for all of the projects, but tz is intentionally public domain.
Agreed, and furthermore, I would imagine since some projects (thinking ghostty, linux, and others) are non-profits there are tax incentives for donating and supporting. Software stacks are still neglected, and that points to inefficiencies (companies and corps not valuing open source) and willful malice (hiding them in the "proprietary chain"), and just general abuse of the commons (take and don't pay).
AI has made the "hard" things more important. Everyone can now build an e-commerce website or demo, but the utilities, OSes, and browsers now serve as the base of those projects. They are beginning to be overwhelmed, whether it be through AI bug reports, exponential load on some platforms, or other indirect factors, and there isn't much relief in sight.
We need a large re-alignment of Math, Software and Sciences. I'm not elucidating anything new here, simply musing. Science and math workers can be focused on replication and application, and software expertise focuses on the "foundational" systems.
> It's indeed ridiculous how the world's trillion dollar private companies run on essential software that idealistic open-source maintainers build basically for free while scrambling to even make basic income.
The most ridiculous thing is that idealistic open-source maintainers are still doing it, while this is being an established status quo for at least 30 years. Or maybe they have their incentive, and, while I don't find it palatable too, large corporations understands that. What's _your_ incentive in having such strong opinions about that ?
Honestly the most ridiculous part is that open-source maintainership is so easy to monetize.
All you have to do is declare a simple ULTIMATUM.MD:
I hereby guarantee that all project maintenance work will be deferred indefinitely if there are insufficient funds to continue maintenance work.
Project costs are split fairly according to a simple formula: pledge = maintenance budget / participants.
Pledgers can set a private maximum total bid during the campaign window. Generous pledgers can optionally set the maximum number of pledges they grant the project within their total bid.
I guarantee that received funds will not be used to build up project savings to extend the maintenance window beyond the funded window and that there will be no simultaneous campaigns to secure funding for future time periods beyond the current funded window.
I guarantee that the pledger's identity, maximum total bid, number of pledges, will be kept private to protect them from pledge analysis attacks that automatically infer the pledger budgets to calculate the maximum free rider potential.
I guarantee to always keep the project at the brink of abandonment to preserve the value of the pledges.
Hint: A rational pledger would consider these conditions amazing because all of them preserve their investment while protecting them from freeriders. 99% of the strategy here is to shift the freerider problem onto the pledger by guaranteeing that the project will be shut down, but this leaves the pledgers vulnerable to freeriders who analyse who is willing to fund the project to avoid funding it themselves.
Hint 2: You cannot fork your way out of this. At best you can have competing maintainers who underbid each other using ULTIMATUM.MD.
> idealistic open-source maintainers build basically for free while scrambling to even make basic income.
Maybe these maintainers could simply cease doing all this free work? There are other ways to make a living. Perhaps even doing the same thing but with better negotiation skills. No one is forcing anyone to do this. The reality is that if 100% of the tzdb and SQLite teams disappeared today, Microsoft and Google would have these projects back under stable operation before the weekend.
We cannot expect a realistic economy to arbitrarily compensate people who originally did not seek compensation without a lot of really bad side effects. Does anyone on HN have any actual evidence that the maintainers of truly load bearing infrastructure (billions of devices+) are genuinely struggling economically?
Maybe some countries could pay stipend to software developers who do that? I mean, this open source software enables other companies to produce cheaper software and to earn more money and they pay taxes from that money, so tiny bit of these taxes could also be redistributed back to some independent developers.
Then I am going to have to complain that the trillion dollar tech firms contribute no taxes while middle class joes pay a stipend to the people who built the software that they depend on to be trillion dollar companies
Exactly. Tax the rich, reroute a part of that money to those developers.
There's still the problem of how, precisely, we're going to force the rich to pay those taxes out of their own wealth, rather than them simply offloading them in the form of increased prices for the products and services their companies provide, which increased prices are then paid for by the weakest chain in the link: private end consumers, aka the middle class.
There may be a way, but it isn't self evident what that way may be.
Well the article does list Germany so some countries do it seems.
What are the absolute bare minimum qualifications for this stipend?
What would prevent abuse of this kind of program?
> Maybe some countries could pay stipend to software developers who do that?
Why should the public make up for private savings? Hey billionaire x does not like to spend for his software, let's all raise some funds so he does not have to.
I only make MIT because, after a decade of GPL, I actually find lawyers and license bullshit more annoying. Just let me build stuff.
>e.g. business of > million revenue must pay for usage in their product
That happens with linux, if businesses don't want their supply chain to vanish.
But, hey, we are trying communism :)
I mean, it is called "Free software", it has been made purely for free.
Now AI has made software abundant, there really isn't any need to pay maintainers really.
Enterprises can just fork it, rebuild the software for their own needs and not contribute anything back.
Even if the license is AGPL, they ignore it anyway and it is unenforceable.
Free as in "free speech", not free as in "free beer".
With my OpenBSD developer hat on, getting new hardware in the hands of developers is really important, many of us are hacking on 5-10 year old thinkpads that need replacing.
https://www.openbsd.org/want.html
The OpenBSD foundation is ~23% away from its fundraising goal for 2026, which helps support developer hackathons and project infrastructure, etc.
https://www.openbsdfoundation.org/campaign2026.html
Shamelessly, if I may add a personal plea, in addition to funding the open source projects you use, if you can, please do consider directly supporting individual contributors/developers personally who work on those projects, many are volunteers and even a small monthly contribution could mean the difference.
https://brynet.ca/wallofpizza.html
https://dir.floss.fund/view/@brynet.ca
> After that it is Lasse on his own again, and in 2025 he wrote 97 percent of the changes.
The xz story is so depressing. The only person who stepped up to help him was someone trying to plant a backdoor...
No mention of Ronald and runk (Ronalds Universal Number Kounter), which handles all math for every machine on earth [0]?
[0] https://x.com/6thgrade4ever/status/1433519577892327424
I'm not sure I like this form of content. It's hard to read and confusing on mobile for little gains. The article seemed interesting though.
Out of curiosity I asked Codex to build a version of this article that can be read/scrolled in a normal way while preserving the original graphics/text. Codex built it in about 10min with GPT-6.1 Sol High (consumed 8% of my 5h quota). It even thought of adding a dark/light mode switcher which is useful too. It still needs a few prompts of minor polishing, but already more readable to me.
Or you could just save all that time and effort and scroll through it like a reasonable person.
If you use Reader View in your browser, its much easier to read.
On desktop it is very difficult to read.
I'm absolutely sure I don't like it, and I'm reading it on desktop.
Only made it a couple of "pages" in and had to close the tab entirely because of the convoluted animated presentation.
None of it felt like it was in service of anything other than screaming "look how neat this is!" which is just terribly distracting.
I personally hate all sites that hijack my scroll wheel for animation purposes.
This thread reminds me of the Margaret Hamilton thread, where incels and egotists are interspersed, claiming what she achieved was No Big Deal.
All this gatekeeping. All this hypothetical "I could totally have done it better".
Celebrating people who DO things is worthwhile.
It’s not a failure of corporate. It’s a failure of community. Would it be better if all internet infrastructure would be controlled by corporate? I would argue: no, it wouldn’t.
Perhaps It should be NPOs like ISOC or IETF that supports private open source engagement into internet infrastructure ?
I'm working on something similar for a PyCon talk.
While I agree that there is a problem of recognition and appreciation, I also feel like the spirit of making a small contribution without expecting a return is what enables the open whole source ecosystem that many of us benefit from.
This page has a11y problems. Reader mode fixes those but hides all the graphics, only text and pictures remain. Such a waste of an otherwise good article.
And Gijs Kruitbosch / Richard Ziade/Chris Dary/others? who gave us reader mode.
It is so sad, I wish I could make big corporations support them
A specific screw in a car can be crucial, but at the same time it's cheep, replaceable and easy to reproduce. When describing the achievement of a car you would never put this particular screw at the top.
I don't mean that the achievement of those people is unimportant, but dislike when people mix up the idea of "dependence out of convenience" vs "dependence out of necessity".
Did you even bother to read the list?
These aren't simple pad left functions. Good luck making a Core-JS on your own. All of these are crucial to basically everything continuing to work - and more importantly massive security risks if their maintainers stop.
what do you mean by "making on your own"? The first example(time zone db) is portrayed as "holding up" 4B android/iPhone devices, and Google/Apple for sure have the capacity to create something "on their own".
I loved this - high quality content and the sort of info I wouldn’t chance across myself
Good content, but the scroll-linked animations are the cancer of modern web.
I so so so love this! Thank you for putting effort into communicating this crucial information.
What I’m curious about is, then, how should this problem be handled? Actually, there’s a point I’m somewhat curious about. For projects with a bus factor of 1 or very low, and in a supply chain like this, there’s a somewhat difficult point regarding what kind of system should be established so that the core developers maintaining that kind of core receive appropriate compensation.
That’s true, after all. Technically very new or challenging technologies get the spotlight from many people, but these technologies are very important yet are a kind of engine technology that is less visible... I’m curious how this should be identified or selected.
That said, if you set up a committee, the committee could also become an inner circle based on their personal connections.
Believe it or nit, the answer to this is -- more communism.
The devs should send emails asking for a couple million each to all the large tech companies while reminding them how much their utility is being used for their product. I think a lot of them will donate the money. It’s lesser than chump change to them.
I remember when the maintainer of an open source XML library contacted dozens of companies for support to fix a critical vulnerability, and most of them didn't even respond and aside from two the rest went basically "not our problem, get lost".
A handful of companies probably care a bit but most won't bother to pay even a penny.
+100
Sorry to be harsh but, dev gets hit by bus, project is forked, people move on.
I'm sympathetic to this topic but I hate the framing. "The people holding up the internet" includes thousands of people at Google, Microsoft, Apple, Amazon, and yes, some volunteers too who are doing as a hobby.
They are free to give it up and stop doing it. Some person or company will pick it up.
i'm doing my part!
I had Claude whip up Fundcli a bunch of months ago. It goes through your atuin shell history and suggests places to donate to based on what you've been using.
https://github.com/fragmede/fundcli
These people aren't holding up the Internet. The software they built is doing that.
It's like how your house isn't its blueprint.
Writing software isn't the same as running it. Software maintenance work doesn't scale with the size of the user base.
For software you don't operate yourself, the scaling factors have nothing to do with where it runs or why or when. You're isolated from the number of installs, since you don't operate those installs, you don't keep them updated or bring them back when they go down. That burden is borne by vendors.
Sensationalist takes are great for clicks, but there is no "there" there. If this was a true economic failure it'd have been fixed long ago.
My bet is these maintainers aren't in it for the money. After all they're not currently dead of starvation, so by definition they're okay. Not billionaires, but okay.
And that's okay! Not everyone wants to be a billionaire. Some people just wanna be that person in Nebraska thanklessly keeping the planet on axis.
This article is biased towards open source developers and ignores all the employees at tier 1 backbones who are the ones actually holding up the internet.
The difference is that the employees at tier 1 backbone providers get paid, and if one of them quits, there is an organization responsible (and incentivized) to hire and train replacements.
Never make OSS your full time job unless the company employing you pays you for it.
OSS is a strategy, not a business model, and it is certainly not a good lifestyle for developers.
I know plenty of OSS companies willing to pay for software engineers. Why shouldn't it be a good lifestyle choice for developers?
So what? That doesn't make those people, the software they write, or the actions they take any less important at keeping the internet functioning. The work employees do seem to constantly be downplayed since they often are not working out in the public, nor are they making public blog posts advertising what they are doing.
You have seemingly missed the point of the article entirely, while also becoming offended for... I'm not even sure. Not being mentioned maybe? The internet will never cease to be a rich vein of absolutely baffling behavior