Friend who is not a software person sent me this tweet, which amused me as it did them. They asked if “runk” was real, which I assume not.
But what are some good examples of real ones like this? xz became famous for the hack of course, so i then read a bit about how important this compression algorithm is/was.
Sqlite isn’t quite one person, but it is a very small team and is extremely widely used. https://www.sqlite.org/mostdeployed.html
Damn, I wanted to mention sqlite.
It’s not too late. Mention it!
There is a guy named Arthur David Olson who maintains a small database of all the time zones in the world, including things like leap seconds and such. It’s used by everybody and it is updated several times a year. See here:
If we could all just stop making changes to time zones, that would make my job very slightly easier.
Perhaps we’ll move to UTC+10¼, and then move forward 45 minutes in the summer.
If the day number is a prime, then we’ll go back π hours.
Hope that will help!
deleted by creator
I bet he’s paid nothing to do it. Then one day, when a timing attack happens that can be traced to the DB, some knobhead CTOs and tech influencers will start talking about “securing the supply chain”. They’ll want other such bullshit and responsibilities to be shoved unto volunteers.
Two quotes come to mind “Fuck you, pay me” and “Open source maintainers owe you nothing”.
Wasn’t there also very recently a whole thing about the single guy who maintains the NTP spec threatened to retire so he could get a “real” job, which caused a gigantic internet-wide panic as pretty much everything we do relies on computer’s clocks being perfectly synced?
It’s also worth pointing out that this was sued in a copyright lawsuit some time ago. The wikipedia article mentions it, but here’s the slashdot discussion if you want to feel like stepping into a time machine: https://m.slashdot.org/story/158778
It caused a momentary panic when everyone realized that this thing runs the system clocks for everything everywhere, and if it got taken down by a copyright suit it would be disastrous for, well, everybody.
Paul Eggart is the primary maintainer for tzdb, and has been for the past 20 years.
Tzdb is the database that maintains all of the information about timezones, timezone changes, leap whatever’s and everything else. It’s present on just about every computer on the planet and plays an important role in making sure all of the things do time correctly.If he gets hit by a bus, ICANN is responsible for finding someone else to maintain the list.
Sqlite is the most widely used database engine, and is primarily developed by a small handful of people.
ImageMagick is probably the most iconic example. Primarily developed by John Cristy since 1987, it’s used in a hilarious number of places for basic image operations. When a security bug was found in it a bit ago, basically every server needed to be patched because they all do something with images.
Furthermore, “RUNK” was originally made in the 1980s to take over from a program written on punch cards in the 1960s. Finally, it’s missing some important functions that the original 60s program had because "RUNK"s developer doesn’t see the purpose of those functions and refuses to add them; and no one has publically released a fork of “RUNK” that adds those functions back in, so you have to do it yourself. Thank God it’s open source.
Edit: oh yeah, and back in 2005 there was an effort to make a GUI for it, but “RUNK’s” sole developer got mad because “back in the 80s we didn’t need GUIs; command line is infinitely faster” and kept intentionally breaking support for the GUI with each bug fix, leading to the project eventually being abandoned.
that really sounds like a case where someone ultimately says “fuck you, runk’s developer”. why didn’t that happen?
Because frankly, Ronald (the current maintainer, not the original author) is very competent. I say this as somebody who has personally been yelled at by Ronald at a kernel summit; I didn’t deserve it, but none of his technical points were wrong. I like to think of myself as the kind of person that, given enough time and documentation, can maintain anything; I think it’d still take three of me to do Ronald’s job. (Well, “job.” I think he technically works for Red Hat or something?) Not to excuse his conduct, just to explain why he’s not been replaced yet.
Wait if it stands for Ronald’s Universal Number Kounter, does that mean both the creator and current maintainer are named Ronald? Is it a dread pirate kinda deal where whoever holds the hat takes the name?
I’d love to link you to their Wikipedia pages, but both of them are redlinked. As far as I can tell, Dr. V. Ronald was an educator who moved from Canada to the USA as part of the whole Xerox PARC thing and probably was valued for mainframe experience; does anybody have a full bio? The current maintainer is Ron Sunk, who did a full run at MIT up through postdoc before going to Red Hat. The names are a coincidence;
runkimplements what we now call Sunk summation, after Sunk’s thesis. (As you might guess, that’s an instance of Stigler’s law, since clearly Dr. Ronald discovered Sunk summation first!)Also, as long as we’re here, I want to empathize a little with Sunk. The GUIs that folks have placed on
runk, like GNOME’s Gunk or Enlightenment’senk, look very cool, and there’s rumors of an upcoming unified number-counting protocol that will put them all on equal ground. But @[email protected] wasn’t joking; Dr. Arnold’s code literally only reads punch cards, and there’s a façade to make it work on modern Linux and BSD transparently. It predates X11, if that’s any help. The tech debt is real.
I think this probably applies…
So Thief: The Dark Project (1999) and Thief 2: The Metal Age (2000), are a couple of classic stealth FPS games, proto-immersive-sims, and still some of my all time favorite games. They both use the Dark Engine, an in-house engine from the now defunt Looking Glass Studios, which also powered System Shock 2.
In 2010, the source code to a System Shock 2 port (for the dreamcast or ps2 iirc…) leaked online, and on 2012 someone used that code to create NewDark and TFix, patches to make these old games work on modern computers (and some bugfixes, support for HD, etc).
There are still updates regularly released for it too!
I must emphasize that these games are still sold on Steam, GOG, etc and this patch is essentially required for them to work. And these are hardly the only games like this, just the ones most personal to me. Retrogaming is built on the backs of unsung individual heroes who backwards-engineer, hack, patch, and mod their favorite games to keep them running for everyone long after the publishers have died or abandoned their work.
Vampire The Masquerade: Bloodlines had a patch for it that made it way more stable (and also added back in a bunch of cut content).
Way back, my partner played Watchdogs at launch and the stuttering was awful, and it was basically unplayable. Some random person made a patch that fixed most of the problems and made the game look closer to what it did at E3.
Random nerds on the internet are my favourite people
Also the guy who fixed GTA Online’s ridiculous loading times.
left-pad was the first thing that came to mind for me
Yeah that debacle still pisses me off. Especially the fact that someone could possibly trademark and enforce a trademark a name that’s already in use. It’s made even worse that the package that now uses the stolen name is defunct.
I hope all of the bad actors burn in Hell.
What pisses me off is that NPM thought it would be okay to remove something from their repository.
What did NPM remove? My understanding is that NPM restored the deleted package. If you’re referring to giving the author the ability to delete their packages, I’m on the fence about that. On the one hand, if it’s open source, it’s a part of the community. On the other hand, it’s also still the author’s code, and if they are the only author, then it’s their sole decision if they want to host their code under their account.
But at the same time if the code is properly licensed under an open source license (I would assume/hope NPM didn’t allow non FOSS code) then NPM can refuse to take it down. Yes, they put it back up, but I think it’s important for public repositories (as in packaged code repositories, not got repositories) to never remove things (barring legal requirements, sure).
For what it’s worth, the policy they adopted after the fact seemed pretty sensible. I think it was something like you can’t take things down once they have ~100 downloads or x number of dependents.
The guy that runs Rufus.
Idk who needs to know this, but in Norwegian “runke” means to jerk off. “runk” is the word you add a prefix to in conjugation to get the different inflections
- runke - jerk off
- runker - jerking off
- runket - jerked off
Etc…
also the swedish meme subreddit is called r/unket
and runket translates to “the jerk”, as in a noun referring the act of (and/or the result of…) rubbing one out.
ie a Swedish circlejerk subreddit?
The
core-jsstory always makes me sad. Sure, he’s developing an open source project and no one HAS to pay him. But the meager amount of donations and the tons of hate he receives isn’t justifiable.It’s especially sadder when a substantial amount of the donations vanished when Open Collective and others stopped operating to Russians.
I’m surprised that no one seems to have brought up curl, which is maintained by Daniel Stenberg who is Just Some Guy™
Based on my cheatsheet, GNU Coreutils, sed, awk, ImageMagick, exiftool, jdupes, rsync, jq, par2, parallel, tar and xz utils are examples of commands that I frequently use but whose developers I don’t believe receive any significant cashflow despite the huge benefit they provide to software developers. The last one was basically taken over in by a nation-state hacking team until the subtle backdoor for OpenSSH was found in 2024-03 by some Microsoft guy not doing his assigned job.
I mean, it was either Richard Stallman or Dennis Ritchie that created grep in an evening so that a buddy of his could do research on volumes of text that wouldn’t fit in the RAM of a PDP-11 (or similar machine. I’m telling this story from memory). It’s designed to do what you would do with the ancient text editor ed using the commands Global, Regular Expression, and Print. g re p. grep. Probably the most important piece of software ever written in a couple hours.
Relevant, for those interested in the history of grep. Computerphile
I’m telling this story from memory
pun intended? ;D
It’s also, in my opinion, the most verb-able of all *NIX commands.
Yeah I’ve told someone to grep something despite knowing they had a windows server
I don’t know, rm being short for “remove” is very verbaceous.
Verbaceous is a great word. I’m adding it onto my “favourite words” list ,(even if it isn’t technically a word "
Ah, pshaw, I don’t subscribe to the notion that there’s such a thing as “not a word.” Why bother having a system of root words, prefixes and suffixes if we’re not allowed to use that system to build the words we need? Especially for the fun of it. Verbaceous is adjectivacular.
Original grep was pretty much a wrapper around sed (or actually maybe ed, I don’t remember). That’s why it’s called g/re/p, which is the sed command to do the same thing.
TIL
Wikipedia credits it to Ken Thompson, PDP-11 to me implies early Unix.
Pretty much every basic terminal command for linux. Grep is the one that comes to mind.
The modern man uses
ripgrep👍But it’s three more letters. No deal.
Its going installed binary is
rg.I shall begrudgingly consider it then, with much begrudgement.
What does that offer offer grep/egrep
-
much faster
-
proper unicode (and other encodings) support
-
automatic recursion (no extra flags needed)
-
can search inside compressed files/archives like gz/xz/zip (also see ripgrep-all) for even more archive support)
-
honors
.gitignoreand ignores binary/hidden files
probably a lot more things too
-
Curl comes to mind. Libcurl is at the foundation of almost all networking.
curl is most definitely not developed solely by one person though, it has thousands of contributors. in fact, there is so much red tape around curl that you can’t even discuss making a change to it without first writing an RFC and having it approved by a committee.
And they still get emails from randos when some program that uses curl doesn’t work (the Readme is top notch).
I cannot for the life of me find what you’re referencing. I only remember the
sqlite/etilqsfiasco with McAfee.https://github.com/mackyle/sqlite/blob/a009acaca1fe25d909d8b5180c0120af1abc2b82/src/os.h#L56-L79
Here’s an example from NASA
deleted by creator
https://daniel.haxx.se/blog/2020/12/17/curl-supports-nasa/
https://daniel.haxx.se/blog/2023/02/07/closing-the-nasa-loop/
Their process for validating software doesn’t have a box for “open source”, and basically assumes it’s either purchased, or contracted. So someone in risk assessment just gets a list of software libraries and goes down it checking that they have the required forms.
As the referenced talk mentions, the people using the software understand that all the testing and everything is entirely on them, and that sending these messages is bothersome and unfair, and they’re working on it. Unfortunately, NASA is also a massive government bureaucracy and so process changes are slow, at best.
The TLAs don’t generally help NASA, and getting them involved would unfortunately only result in more messages being sent.As for contributions, I think that turns into an even worse can of worms, since generally software developed by or for the US government isn’t just open source, but public domain. I think you’d end up with a big mess of licensing horror if you tried to get money or official relationships involved. It’s why sqlite is public domain, since it was developed at the behest of the US.
Mostly just context for what you said. NASA isn’t being arrogant, they’re being gigantic. Doing their due diligence in-house while another branch goes down a checklist, sees they don’t have a form and pops of an email and embarrassing the hell out of the first group.
The time limit thing is weird, but it’s a common practice in bureaucracies, public or private. You stick a timeline on the request to convey your level of urgency and the establish some manner of timeline for the other person to work with. Read the line again, but extremely literally: “we have a time frame of 5 days for a response”. “Our audit timeline guessed that it would take a business week for you to reply, so if you take longer we’re behind schedule”. The threatening version is “your response is required on or before five business days from the date of this message”.
The presumption is that the person on the other end is also working through a task queue that they don’t have much personal investment in, and is generally good natured, so you’re telling them “I don’t expect you to jump on this immediately, but wherever you can find a moment to reply this week would keep anyone from bothering me, and me from needing to send another email or trying to find a phone number”
Libcurl is at the foundation of almost all networking.
That’s not remotely true, but it is nevertheless outstanding work and very much deserving of recognition and support.
Git, by Linus? Maybe even linux itself? Ok actually Linus might just be Steve Wozniak without an annoying Steve Jobs guy next to him, while actually being a lot bigger than Apple maybe?
It’s really hard to imagine a world without Git. If it hadn’t been invented I think it would have been necessary to create it it’s one of those things that’s hard to imagine and then impossible to work out how you can survive without it.
Yet the vast majority of the world probably don’t even know what it is, and wouldn’t even understand it if it was explained to them.
t’s really hard to imagine a world without Git
I’ve lived it.
- CriticalFile.vbs
- CriticalFile.V2.vbs
- CripicalFile.V2.5.vbs
- CriticalFile.DONOTEDIT.txt
- _Old.CriticalFile.aspx
- LinkToCriticalFilesFold.lnk
- GuideToDeploying.CriticalFliles.doc
- CritFil.bat
Really easy to imagine that world to most people. Like me. Who inspite of using computers since my 386sx family pc, never got into software engineering.
I understand a little about it, but its just a name of a thing i dont know how to use lol
I just find it funny how its a kind of ignorance(for entirely understandable reasons)is bliss situation to me, but a horror to those who use it
Git is not the only version control software out there, and not the first one either.
Facebook for example is famous for not using git. Because their own modified copy of mercurial fits their needs better.
Microsoft didn’t use git until relatively recently either. They had to make some big contributions to make it work for their system.
Git has tons of contributors though.
Yeah, and Linus mostly handed off the project to Junio Hamano quite early on (same year, 2005). Seriously, huge kudos to Junio for all his work. Still, it’s fun to say this quirky guy who likes penguins started not one, but two free software projects that took the world by storm. Humbling, even.
