Programming

Are We Experiencing a Great Software Stagnation? (alarmingdevelopment.org) 286

Long-time programmer/researcher/former MIT research fellow Jonathan Edwards writes a blog called "Alarming Development: Dispatches from the User Liberation Front."

He began the new year by arguing that software "is eating the world. But progress in software technology itself largely stalled around 1996." Slashdot reader tonique summarizes Edwards' argument: In 1996 there were "LISP, Algol, Basic, APL, Unix, C, Oracle, Smalltalk, Windows, C++, LabView, HyperCard, Mathematica, Haskell, WWW, Python, Mosaic, Java, JavaScript, Ruby, Flash, Postgress [sic]". After that we're supposed to have achieved "IntelliJ, Eclipse, ASP, Spring, Rails, Scala, AWS, Clojure, Heroku, V8, Go, React, Docker, Kubernetes, Wasm".

Edwards's main thesis is that the Internet boom around 1996 caused this slowdown because programmers could get rich quick. Then smart and ambitious people moved into Silicon Valley, and founded startups. But you can't do research at a startup due to time and money constraints. Today only "megacorps" like Google, Facebook, Apple and Microsoft are supposedly able to do relevant research because of their vast resources.

Computer science wouldn't help, either, because "most of our software technology was built in companies" and because computer science "strongly disincentivizes risky long-range research". Further, according to Edwards, the aversion to risk and "hyper-professionalization of Computer Science" is part of a larger and worrisome trend throughout the whole field and all of western civilisation.

Edwards' blog post argues that since 1996 "almost everything has been cleverly repackaging and re-engineering prior inventions. Or adding leaky layers to partially paper over problems below. Nothing is obsoleted, and the teetering stack grows ever higher..."

"[M]aybe I'm imagining things. Maybe the reason progress stopped in 1996 is that we invented everything. Maybe there are no more radical breakthroughs possible, and all that's left is to tinker around the edges. This is as good as it gets: a 50 year old OS, 30 year old text editors, and 25 year old languages.

"Bullshit. No technology has ever been permanent. We've just lost the will to improve."
Star Wars Prequels

Has 'The Mandalorian' on Disney+ Redeemed the Star Wars Universe? (salon.com) 242

Today a staff writer at Salon argues "The Mandalorian" has redeemed the Star Wars universe: The Disney+ series "The Mandalorian" has been both a critical triumph and commercial success. In my judgment, it's the most compelling live-action story in the "Star Wars" universe since 1983's "Return of The Jedi".

To that end, the story in "The Mandalorian's" first two seasons about a mysterious bounty hunter and "the child" (who is actually more than 50 years old) he's entrusted with as they navigate their way through a dangerous world — rife with "scum and villainy," where the remnants of the evil Empire still terrorize the galaxy — has accomplished something difficult in science fiction and other genre entertainment. Longtime and serious "Star Wars" aficionados are enthusiastic about "The Mandalorian's" attention to detail and obvious love and respect for George Lucas's "Star Wars" universe. More casual "Star Wars" fans can enjoy the series for its story of family, friendship and adventure, and of course for "baby Yoda," aka Grogu, "the Child," a character described by legendary film director Werner Herzog as "heartbreakingly beautiful...."

Where does "The Mandalorian" go next? Why is it such a compelling TV series and story? Is there such a thing as too much "fan service" in a genre film or TV series? Why has "The Mandalorian" been such a success, compared to the most recent "Star Wars" films? Disney and Lucasfilm have recently announced plans for 11 new TV series and at least three more feature films. At what point does "Star Wars" become overexposed and made into something common, a parody of itself?

In an effort to answer these questions I recently spoke with Bill Slavicsek, one of the writers and developers of the much-beloved "Star Wars" roleplaying game from West End Games. He is also the author of the "Star Wars Sourcebook," "A Guide to the Star Wars Universe," many guides to RPGs and, more recently, "Defining a Galaxy: 30 Years in a Galaxy Far, Far Away...." He was one of the main game designers for the Dungeons and Dragons RPGs and is currently the lead writer for the massively multi-player RPG Elder Scrolls Online. Fair warning: This conversation contains spoilers for Season Two of "The Mandalorian," which is now available on the Disney+ streaming service.

Meanwhile CinemaBlend shares some commentary from another source, writing that "We need more Star Wars discourse like this." No arguing about bloodlines, or one director undoing the plotlines laid down by another. Just all of us, being amused by a cat who delightfully thinks that he or she can catch the lightsaber that a brooding Kylo Ren is tossing away during a pivotal moment in J.J. Abrams' Star Wars: The Rise of Skywalker... And it even has Mark Hamill's seal of approval...

Kitty cats aside, it's a very good time to be a Star Wars fan. The Mandalorian just wrapped up an incredible season of television on Disney+ and Kathleen Kennedy recently ushered in a wave of new programming that will keep Star Wars on our radars for years to come.

The Internet

Basecamp Releases Hotwire for Building Web Applications Using 'HTML Over the Wire' (hotwire.dev) 60

Basecamp's David Heinemeier Hansson (the creator of Ruby on Rails) announced on Twitter this week that "all the tricks and tooling we used to build the front-end for Hey.com" have now been released as Hotwire (also known as New Magic), "an alternative approach to building modern web applications without using much JavaScript by sending HTML instead of JSON over the wire." This includes our brand-new Turbo framework...a set of complimentary techniques for speeding up page changes and form submissions, dividing complex pages into components, and stream partial page updates over WebSocket. All without writing any JavaScript at all...
Hotwire's web page argues HTML over the wire "makes for fast first-load pages, keeps template rendering on the server, and allows for a simpler, more productive development experience in any programming language, without sacrificing any of the speed or responsiveness associated with a traditional single-page application." On Twitter, Hansson called it "a refinement of years of research, experimentation, and SHIPPING HTML AT THE CENTER. It's been a revelation for us. Both for the web, and for our native apps." He shared a 13-minute video demonstration — then added a thoughtful comment about the state of web development today.

"Really curious to continue pushing the ECMAScript 6 + ES Modules approach in the browser. This isn't strictly related to Hotwire, but it's part of deconstructing the overly complicated mess we've all made of frontend development. One brick at the time!"
Privacy

Nintendo Conducted Invasive Surveillance Operation Against Homebrew Hacker (torrentfreak.com) 23

Leaked Nintendo documents have revealed a frightening surveillance operation carried out against a hacker who was researching exploits for the 3DS handheld. TorrentFreak reports: During the past 24 hours, various Twitter accounts (1,2) have been posting snippets from documents that were recently leaked from Nintendo. While there are numerous items of interest, the most shocking revelations involve Neimod, a hacker who several years ago developed exploits for the 3DS handheld console. [T]he scale of the operation, which is revealed in detail in the leaked documents, shows just how far the gaming giant was prepared to go to stop his work. For example, the leak reveals personal profiling that dug deeply into Neimod's education status, listed details of his working life, while offering evidence of physical snooping on his daily lifestyle. What time he could be found at home, who came to see him there, and even when he visited places like banks and restaurants are all included. While this kind of surveillance is creepy in its own right, additional documents reveal a detailed plan to use the gathered intelligence to physically confront Neimod in order to pressurize him into complying with the company's demands.

According to Nintendo's planning, the operation would begin around April 15, 2013, with its team meeting at a local hotel to discuss and finalize their plans. Following a review of Neimod's movements of the previous week, the team would then decide where and when contact would be made -- after work or at home, for example. With an undercover investigator monitoring Neimod to discover what time he left work, Neimod was to be approached by a 'contact team,' who were instructed to approach their target "in a friendly, non-threatening, professional, and courteous manner." "Provide a business card," the instructions read. After Neimod had been engaged in conversation, the team was instructed to flatter the hacker by "acknowledging his engineering/programming aptitude." They were also told to reference his stated aim of not "facilitating piracy" with his hacks but point out Nintendo's concerns that a release of his hack could do just that.

Whether Neimod complied or resisted, Nintendo prepared for both eventualities. The following slide, posted to Twitter by Eclipse-TT, shows a flow chart that begins with instructions for the "Knock and Talk Team," details a staging area, rules of engagement, and plans for what should happen when things go to plan -- or otherwise. The Nintendo "Final Enforcement Proposal" document describes a "carrot and stick" approach, with the stick being a laundry list of potential offenses committed by Neimod under Belgian law and the carrot representing a number of sweeteners that might be of interest to the hacker. If cooperation was achieved, Nintendo suggested it could refrain from filing a criminal complaint. It may also enter into a "bounty" contract with Neimod with payments made for finding and documenting exploits. Within certain parameters, his discoveries could still be announced to the public, allowing him to retain "bragging rights." This could help Nintendo's image, the company wrote.

Programming

Report: PHP, C++, Java, and .NET Applications are the Most Frequently Flawed (techrepublic.com) 92

Application-security company Veracode "has released the 11th volume of its annual State of Software Security report, and its findings reveal that flawed applications are the norm, open-source libraries are increasingly untrustworthy, and it's taking a long time to patch problems," reports TechRepublic.

The top three security flaws — like last year — are still information leakage, cryptographic issues, and CRLF injection: The report found a full 76% of apps contained flaws, and 24% of apps have flaws considered highly severe. Some 70% of apps are inheriting security flaws from their open-source libraries, but it's important to note that only 30% of apps have more security bugs in their open-source libraries than in code written in-house, suggesting that it isn't solely open-source projects that are to blame... In terms of how bugs are being resolved, Veracode found that 73% of the bugs it found as part of the report were patched, which is a big improvement over previous years, when that number was in the mid-50% range. Despite that good sign, it's still taking an average of six months to close half of discovered flaws...

Veracode also released a heatmap of the worst bugs in the most popular languages. Interestingly enough, the language with the least use of open-source libraries is also the one with the most bugs: PHP.

Looking at the heatmap, it's easy to spot which of the five popular languages included has the worst security. Following PHP is C++, then Java, .Net, JavaScript, and Python. The latter two are, doing considerably better than the competition, with the worst flaws in each only being found in roughly 30% of apps. Compared to PHP with 74.6% of its apps vulnerable to cross-site scripting, JavaScript and Python are security powerhouses.

Google

Here Comes the Google Chrome Change that Worries Ad-Blocker Creators (cnet.com) 119

CNET reports: With the next version of Chrome, Google is moving ahead with a plan to improve privacy and security by reining in some abilities of extensions used to customize the browser. The move had angered some developers who expected earlier it would cripple ad blockers. Manifest v3, the programming interface behind Google's security plans, will arrive with Chrome 88 in mid-January, Google said Wednesday at the Chrome Dev Summit. Extensions using the earlier Manifest v2 will still work for at least a year...

Among other things, Manifest v3 limits the number of "rules" that extensions may apply to a web page as it loads. Rules are used, for example, to check if a website element comes from an advertiser's server and should therefore be blocked. Google announced the changes two years ago. Reducing the number of rules allowed angered creators of extensions like the uBlock Origin ad blocker and the Ghostery tracking blocker. They said the rules limits will stop their extensions from running their full lists of actions to screen ads or block tracking. That could let websites bypass extensions — and the preferences of people who installed them...

The shift brought on by Manifest V3 will spread to all browsers, to the detriment of ad blocking software, predicted Andrey Meshkov, co-founder and chief technology officer of AdGuard, an ad-blocking extension... Ghostery is working to update its extension for Manifest V3 but would rather spend its time on "real privacy innovations," President Jeremy Tillman said in a statement Wednesday. "We still have real misgivings that these changes have more to do with Google protecting its bottom line than it does with improving security for Chrome users...."

The importance of the Chrome team's choices are magnified by the fact that other browsers, including Microsoft Edge, Vivaldi , Opera and Brave, are built on its Chromium open-source foundation. Microsoft said it will embrace Manifest v3, too.

"Another Manifest v3 change is that extensions no longer may update their abilities by downloading code from third-party sites.

"The entire extension now must be distributed through the Chrome Web Store, a measure Google says improves security screens and speeds reviews."
Google

Google Plans to Calculate 'Criticality' Scores for Open Source Projects (thenewstack.io) 40

Programming columnist Mike Melanson writes: As part of its involvement in the recently announced Open Source Security Foundation (OpenSSF), Google has penned a blog post outlining one of the first steps it will take as part of this group, with an attempt at finding critical open source projects.

"Open source software (OSS) has long suffered from a 'tragedy of the commons' problem," they write. "Most organizations, large and small, make use of open source software every day to build modern products, but many OSS projects are struggling for the time, resources and attention they need."

So as a way to address this problem, and help fund those projects that need funding, Google is releasing the Criticality Score project. The project gives projects a criticality score (a number between 0 and 1) that is "is derived from various project usage metrics" such as "a project's age, number of individual contributors and organizations involved, user involvement (in terms of new issue requests and updates), and a rough estimate of its dependencies using commit mentions." From there, you can also add your own metrics, if you see fit...

Abhishek Arya, one of the project's creators, points out that the project is still in its initial phases and welcoming feedback on "any ideas on metrics we can use." Arya also notes that the project is currently limited to ranking open source projects hosted on GitHub, but "will be expanding to our source control system in the near future."

"Though we have made some progress on this problem, we have not solved it and are eager for the community's help in refining these metrics to identify critical open source projects," the blog post announcing the project concludes.

Programming

2020 AP CS Scores: Still Big Gaps In Performance, Participation 103

theodp writes: As the 8th annual Hour of Code kicked off this week, the College Board released 2020 AP national and state score breakouts for AP CS program participants. As in past years, this year's results still showed striking gaps in performance and participation across gender and ethnicity segments. Passing rates across major ethnic group segments ranged from 39.8%-78.6% for the Java-based AP CS A course, and 52%-83% for the newer "language agnostic" AP Computer Science Principles (CSP) course. Across gender segments, females accounted for 25% of AP CS A scores (16.2K of 64.9K total students) and 33.9% of AP CSP scores (38.6K of 113.9K students). Asian students accounted for 47% of all passing female AP CS A students. Due to pandemic-related school closures, the overall number of students completing AP STEM-related courses in 2020 declined for all subjects except CS. AP CS A, which had an abbreviated taken-at-home final exam, saw a modest 1.5% YOY increase in completions, while AP CSP saw a whopping 21.5% YOY increase in completions, no doubt helped by the cancellation of its end-of-course exam, which was to have counted for 60% of scores (students were instead assessed only by their portfolio submissions).
Programming

Amazon, Amex To Fund Software Developers in New GitHub Program (bloomberg.com) 11

Amazon.com, American Express, Daimler AG and Stripe are among those joining a new GitHub program that will let companies directly fund open-source projects and software developers that are key to their businesses. From a report: It's an expansion of GitHub's Sponsors program, which previously let individuals support software projects and the millions of developers who use the digital platform to collaborate on, share and store code. GitHub, whose parent company Microsoft will also participate in the new service announced Tuesday, expects the change to dramatically increase the number of contributions. The year-old sponsors service has already generated enough money for some developers to rely on it as full-time work, said Devon Zuegel, GitHub's director of product for the communities department.
Christmas Cheer

The Geeky Advent Calendar Tradition Continues in 2020 9

Long-time Slashdot reader destinyland writes: Advent of Code isn't the only geeky tradition that's continuing in 2020. "This is going to be the first full year with Raku being called Raku," notes the site raku-advent.blog. "However, it's going to be the 12th year (after this first article) in a row with a Perl 6 or Raku calendar, previously published in the Perl 6 Advent Calendar blog." The tradition continues, with a new article about the Raku programming language every day until Christmas.

And meanwhile over at perladvent.org, the Perl Advent Calendar is also continuing its own article-a-day tradition (starting with a holiday tale about how Perl's TidyAll library "makes it trivial for the elves to keep their code formatting consistent and clean.")

But they're not the only ones. "Pandemic or not, Christmas time is a time for wonder, joy and sharing," writes Kristofer Giltvedt Selbekk from Oslo-based Bekk Consulting (merging technology with user experience, product innovation and strategy). So this year they're "continuing our great tradition of sharing some of the stuff we know every December" with 11 different advent calendar sites sharing articles (or, on one site, podcast episodes), on topics including JavaScript, Kotlin, React, Elm, functional programming, and cloud computing.

And if you're more interested in outer space, this also marks the 13th year for the official Hubble Space Telescope Advent Calendar. "Every day until Friday, December 25, this page will present one new incredible image of our universe from NASA's Hubble telescope," explains its page at the Atlantic.

There's also a series of daily coding challenges called "24 days of JavaScriptmas" at the tutorial site Scrimba, which has turned the event into a marketing opportunity by promising a $1,000 prize on Christmas Eve to one lucky participant chosen from the ones who publicized their solutions on Twitter.
Programming

Python Beats Java Again in New GitHub Annual Report (github.com) 54

This week the Microsoft-owned code repository site GitHub released its annual report with statistics about its community, writes programming columnist Mike Melanson: The report offers a deep dive into three specific areas, with a look at developer productivity in the time of COVID, community and collaboration, and open source security. Highlights include increased productivity with 35% more repositories created in 2020 than 2019, a large open source community with more than 56M developers in 2020 with 100M expected by 2025, and security vulnerabilities that often go undetected for more than 4 years before being disclosed and 94% of projects relying on open source components.
"2020 has been a year of extraordinary change," notes GitHub's report. "Yet with 60M+ new repositories created this past year, one thing has remained true — developers came together from all corners of the world to innovate, find connection, and solve problems."

GitHub reports that over 1.9 billion contributions were added in the last year, with users distributed around the globe:
North America: 34%
Asia: 30.7%
Europe: 26.8%
South America: 4.9%
Africa: 2%
Oceania: 1.7%
And while JavaScript is still the most popular language used on the site, Python remains more popular (at #2) than Java (at #3) for the second year in a row.
  1. JavaScript
  2. Python
  3. Java
  4. TypeScript
  5. C#
  6. PHP
  7. C++
  8. C
  9. Shell
  10. Ruby

Programming

JavaScript Turns 25 (zdnet.com) 50

The programming language JavaScript emerged 25 years ago and has grown to become one of the most important pieces of the web and browser applications we use today. From a report: JavaScript is the go-to language for front-end development and has spawned Microsoft's Typescript, a superset of JavaScript with a stronger optional type system for developers that compiles to JavaScript when run in the browser. Both JavaScript and TypeScript conform to ECMAScript, the standard for JavaScript and node.js, the runtime for running applications outside of the browser thanks to Google's powerful V8 JavaScript engine. JavaScript's impact on the web cannot be understated. Tech giants have thrown their weight behind the language. Besides Google's V8, there are open source projects like React from Facebook and Angular from Google, which help spread web applications across smartphones and desktop. After Netscape and Sun Microsystems -- where Java was hatched in May 1995 by James Gosling -- announced JavaScript in December 1995, Microsoft promoted Visual Basic (VB) as a standard for creating web applications using VB Script for its Internet Explorer browser. Oracle would go on to buy Sun Microsystems in 2008 largely to get its hands on Java and its huge development ecosystem. The press release about its launch from 25 years ago.
Robotics

This Robot Can Rap (scientificamerican.com) 29

What if your digital assistant could battle rap? That may sound far-fetched, but Gil Weinberg, a music technologist at the Georgia Institute of Technology, has adapted a musical robot called Shimon to compose lyrics and perform in real time. From a report: That means it can engage in rap "conversations" with humans, and maybe even help them compose their own lyrics. Shimon, which was intentionally designed to sound machinelike (listen here), is meant to be a one-of-a-kind musical collaborator -- or an inhuman rap-battle opponent. Computer-generated music dates back to the 1950s, when early computers used algorithms to compose melodies. Modern robots can use machine learning to ad-lib on instruments including the flute and drums. One such machine was an earlier version of Shimon, which could play the marimba and sing. The recently updated robot looks the same; it still consists of a ball-shaped "head," with saucy movable eyebrows above visor-covered eyes, perched at the end of a mechanical arm. But now Weinberg claims Shimon is the first improvising robot to foray into rap, with its distinct stylistic features that pose unique programming challenges.

The crowning glory of rap lies in the lyrics. On top of semantic content, the words need to adhere to an aesthetically pleasing beat and rhythm, all while delivering multiple layers of poetic complexity. In a recent paper, published in the proceedings of the 11th International Conference on Computational Creativity 2020, Weinberg's research team outlines the technical advances that brought a rapping Shimon to life. When Shimon battle raps, software converts its human opponent's spoken lyrics into text. The robot's system identifies keywords from this, and generates new lyrics based on several custom data sets of words that Shimon has been trained on (using deep-learning models). These data sets can come from any text: the work of Lil Wayne, JAY-Z or other rappers; lyrics from other genres; or even nonmusical literary works. Imagine how Shakespeare or Jane Austen might sound if they rapped; Shimon could simulate that for you.

Programming

Python and TypeScript Gain Popularity Among Programming Languages (venturebeat.com) 50

GitHub has released its annual Octoverse report, revealing trends in one of the largest developer communities on the planet, including a spike in open source project activity following the start of the COVID-19 pandemic. VentureBeat: JavaScript continues to be the most popular programming language on GitHub, while Python is now the second most popular, followed by Java and the fast-growing TypeScript community. Maintained by GitHub owner Microsoft, TypeScript has climbed from seventh place in 2018 and 2019 to fourth overall this year. PHP and Ruby, languages that ranked among the most popular five years ago, continued to decline in popularity.
Programming

The 'Advent of Code 2020' Event Begins (adventofcode.com) 26

"Need a vacation from 2020? Why not go on an adventure and learn programming at the same time?" asks developer Eric Wastl on Twitter, announcing this year's edition of the Advent of Code.

From the site: Advent of Code is an Advent calendar of small programming puzzles for a variety of skill sets and skill levels that can be solved in any programming language you like. People use them as a speed contest, interview prep, company training, university coursework, practice problems, or to challenge each other.

You don't need a computer science background to participate - just a little programming knowledge and some problem solving skills will get you pretty far. Nor do you need a fancy computer; every problem has a solution that completes in at most 15 seconds on ten-year-old hardware.

PHP

PHP 8.0 Brings Major (And Breaking) Changes to a 25-Year-Old Language (techrepublic.com) 85

"PHP version 8.0 has arrived, bringing with it a major update to the 25-year-old programming language..." writes Tech Republic.

New language features include the nullsafe operator and attributes (commonly known as annotations in other languages) to add metadata to classes — and more: The JIT compiler is designed to bring performance improvements to web applications by turning code into instructions for the CPU at runtime. Meanwhile, union types is a feature that allows data of more than one type to be held by a variable. Named arguments allow developers to assign values to a function by specifying the value name, allowing optional parameters to be ignored. Alongside these, version 8.0 of PHP brings optimizations and enhancements to the language's type system, syntax, error handling and consistency....

Commenting on PHP 8.0, PHP programmer and stitcher.io developer, Brent Roose, noted that the latest version of the language may require developers to review code for any breaking changes.

The Courts

Indian Coding Startup WhiteHat Jr Sues Critics (techcrunch.com) 32

Karan Bajaj, an Indian entrepreneur who teaches meditation and in his recent book invites others to live a life away from the noise, is going after the most vocal critics of his startup. From a report: Bajaj, founder of coding platform WhiteHat Jr, has filed a defamation case against Pradeep Poonia, an engineer who has publicly criticized the firm for its marketing tactics, the quality of the courses on the platform, and aggressive takedowns of such feedback. On Monday, WhiteHat Jr, filed a similar case against Aniruddha Malpani, an investor who has shared unflattering feedback about the startup. Most of the customers of WhiteHat Jr, which is aimed at kids, live in America, and demand for its one-to-one classes has surged nearly 90% this year, according to the startup. In the lawsuit against Poonia -- in which Bajaj is seeking $2.7 million in damages -- Poonia has been accused of infringing trademarks and copyright of properties owned by WhiteHat Jr, defaming and spreading misleading information about the startup and its founder, and accessing the company's private communications app.

[...] The lawsuit, riddled with spelling and grammatical errors, appears to be also indicative of just how little criticism WhiteHat Jr, owned by India's second most valuable startup Byju's, is willing to accept. According to internal posts of a Slack channel of WhiteHat Jr shared by Poonia, the startup has aggressively used copyright protection to take down numerous unflattering feedback about the startup in recent months. The suit also raises concern with Poonia accusing WhiteHat Jr of "murdering" an imaginary kid that featured in one of its earlier ads. A 12-year-old child named "Wolf Gupta" appeared in earlier ads of WhiteHat Jr, which claimed that the kid had landed a lucrative job at Google. The kid does not exist, the lawyers of Bajaj say in the suit. Ironically that was also the argument Poonia, who spent a long time trying to unearth more information about this supposed poster child of WhiteHat Jr, was making in his tweets.

Communications

'Code is Sourdough' (increment.com) 70

Romello Goodman, a software engineer at The New York Times, writing at Increment: Like a sourdough starter passed through the hands of many bakers -- some novices, some experienced -- a codebase reflects how teammates communicate with one another. It's a snapshot of our thinking and our best attempts at codifying norms and assumptions. It's a conversation in which each person contributes and is in conversation with those who came before them. With each new feature or bug report, we understand our code better. We identify areas where new logic doesn't quite fit with existing logic. We're constantly in touch with our own past decisions and those of our coworkers. We're working together, trying to harmonize and match one another's thinking patterns and assumptions. We trust one another to make decisions for the good of the team and the organization. Every piece of new code adds to the culture and cultivates our shared understanding.

If code is sourdough, we have an opportunity to better appreciate the histories and context that have gone into it. In software, we tend to think of legacy code as something that should be thrown away or rewritten, often conflating a codebase's age with its health and viability. But code doesn't age in a vacuum. If sourdough can be passed down from person to person over decades, then so can code. The preservation of decisions and experience is tied to the preservation of our codebase. Even when the code itself is no longer being updated, documentation around the logic or the underlying platform and adjacent technologies can keep a codebase and its culture vibrant. You can then pass that culture on for another team to bake with. It might just taste better than you'd expect.

Open Source

The Few, the Tired, the Open Source Coders (wired.com) 71

Reader shanen shares a report (and offers this commentary): When the open source concept emerged in the '90s, it was conceived as a bold new form of communal labor: digital barn raisings. If you made your code open source, dozens or even hundreds of programmers would chip in to improve it. Many hands would make light work. Everyone would feel ownership. Now, it's true that open source has, overall, been a wild success. Every startup, when creating its own software services or products, relies on open source software from folks like Jacob Thornton: open source web-server code, open source neural-net code. But, with the exception of some big projects -- like Linux -- the labor involved isn't particularly communal. Most are like Bootstrap, where the majority of the work landed on a tiny team of people. Recently, Nadia Eghbal -- the head of writer experience at the email newsletter platform Substack -- published Working in Public, a fascinating book for which she spoke to hundreds of open source coders. She pinpointed the change I'm describing here. No matter how hard the programmers worked, most "still felt underwater in some shape or form," Eghbal told me.

Why didn't the barn-raising model pan out? As Eghbal notes, it's partly that the random folks who pitch in make only very small contributions, like fixing a bug. Making and remaking code requires a lot of high-level synthesis -- which, as it turns out, is hard to break into little pieces. It lives best in the heads of a small number of people. Yet those poor top-level coders still need to respond to the smaller contributions (to say nothing of requests for help or reams of abuse). Their burdens, Eghbal realized, felt like those of YouTubers or Instagram influencers who feel overwhelmed by their ardent fan bases -- but without the huge, ad-based remuneration. Sometimes open source coders simply walk away: Let someone else deal with this crap. Studies suggest that about 9.5 percent of all open source code is abandoned, and a quarter is probably close to being so. This can be dangerous: If code isn't regularly updated, it risks causing havoc if someone later relies on it. Worse, abandoned code can be hijacked for ill use. Two years ago, the pseudonymous coder right9ctrl took over a piece of open source code that was used by bitcoin firms -- and then rewrote it to try to steal cryptocurrency.

AT&T

AT&T Raises DirecTV Prices Again Amid Customer Losses and Possible Sale (arstechnica.com) 74

An anonymous reader quotes a report from Ars Technica: AT&T has announced another round of price hikes for DirecTV satellite and U-verse TV services, with monthly prices set to rise up to $9 starting January 17, 2021. "Due to increased programming costs, we're adjusting the price of our video packages," AT&T said in a notice on its website. "Periodically, TV network owners increase the fees they charge DirecTV for the right to broadcast their movies, shows, and sporting events." Of course, AT&T itself determines some of these programming prices because it owns Time Warner.

A $5 monthly increase is coming to DirecTV's 160-channel "Entertainment" package, which currently has a standard rate of $97 a month. A $7 monthly increase is coming to the 185-channel Choice package, currently at $115 a month. A $9 increase is coming to both the 250-channel Ultimate package (currently $142) and the 330-channel Premier package (currently $197). New customers can get those packages for $64.99 to $134.99 under promotional pricing that expires after 12 months. "If you currently have a DirecTV TV promotion, you'll keep that discount until it expires," AT&T said. "Once your promo period ends, you'll pay the new price for your package."

There are also $1 and $3 increases for DirecTV's Basic and Preferred Choice packages for international customers, $6 increases for certain Spanish-language packages, and $8 increases for "Xtra" packages. Only the Minimum service, Family, and ChineseDirect Plus plans are not getting increases. AT&T is raising U-verse TV prices by $5 to $9 a month depending on the package, while keeping the price of the most basic U-verse package the same. U-verse provides TV over AT&T's wired network. As with DirecTV, customers on U-verse promotional pricing won't see the increase until the promotional period ends. DirecTV is also adding a "Federal Cost Recovery Fee of $0.19 per month," similar to a fee that used to be charged once per year. Despite the name, the fee is not mandated by the government. AT&T said the fee covers "expenses that DirecTV pays to the Federal Communications Commission."
Ars Technica notes that AT&T did not include any increases for the Regional Sports Network and Broadcast TV fees. It's also decreasing the price of some premium channels. "That includes $3 decreases for Starz, Cinemax, and Showtime," the report says. "There are also decreases of up to $3 for certain add-on bundles that include sports channels. But even with premium channels, there are some price increases, including a $2.96 boost to an add-on bundle that includes HBO Max, Starz, Showtime, Cinemax, and a sports-channel pack."

The full list of price changes can be found here.

Slashdot Top Deals