> people run kaneo on setups i never imagined:
> behind corporate proxies
> ...
> in kubernetes with custom networking
It's OP's project so they're welcome to support whoever they want but I definitely would not offer free support to customers who are obviously using the product commercially, especially in large enterprises.
It's FOSS, so they can use it for free if they want, but if they need custom support or features, they're a great user to tell, "Sure, I'm happy to help you with that if you purchase a $500/yr support contract." You'd be surprised how many customers like that don't care because they have a corporate card and that amount is too little to require approvals or much process.
In much of corporate America expenses under $100 give or take don’t even require documentation, so a $50/month support subscription is easily purchased.
Just need to find the person with the purchase card.
I think this one is 100% ok for open source, no?
As a developer in corporate environment I won't get anywhere close to be able to influence anyone to buy a support, or a subscription for an open source or closed source product. This is my third corp, and it was true in all of them.
The most what I got is the approval to do some PRs for such projects during company time.
Firstly, you need to clearly define what is included, and even more so, what is not included. How many hours is $500? Who decides what us should bug? Can they get new features because they have support? How many installs does the support cover? And do on.
And if they start with things like "supplier agreements" etc, just walk away.
Yes, some companies have a threshold where managers can just "spend money". Some managers may even use that to support you. But taking any money changes the relationship you have with the user.
Right now, it's completely inside your control. Direction, Priorities, Scope, Pace, levels of effort etc. I'm a huge fan of getting paid, I write software for money, but make no mistake - taking money changes things.
- the second 'start' button overlaps the list items
- tapping that button darkens the whole page but doesn't display anything new
- even before I get to that stage, it's not clear what you're selling at each price point
Also, look at Gitea. People got paranoid and forked the project after the original author did exactly that.
I feel like it shouldn't be poor form to say on this site - a site that predominantly has been about building tech companies and revenue streams - to get over it and charge them.
A German business on the other side of the transaction rarely will pay anything if there's not a proper invoice (listing net sums and VAT separately) on file. And they usually also require the (business) tax ID of the other party.
To be fair, founding a business is a matter of filling in some form, paying a small fee, and a few days of time (depending on the workload of your local trade office). But still - if this is a one-off thing and you don't even know whether there will be more... I'm not sure I'd want to go through the hassle. Especially if it means having to hire an accountant with monthly costs, when I don't even know whether there will be more income.
More than enough has been written about how the ecosystem in various EU countries stifles entrepreneurship. It's not new information, but it's not a problem for the vast majority of people reading this site. This site is also focused on supporting entrepreneurship, we should be supporting the default approach of getting paid for your work.
Germany needs to change, not the stance of this site or the argument of charging for your work/time/etc.
[1] (the proverbial you)
Alternatively, people could just stop complaining about it.
>"hey, can I do this?"
<"no, you'll need fields from forms X,Y and the price needs to be at least Z with them"
Same goes with a law-person. Then if you're lazy you'll just look at how much they cost you in some timeframe and add that to the price, and find that you've lowballed so hard you'll get laughed out of the bidding
The second half of that also sounds unhinged.
Most sensible choice in my country is hiring an accountant to do those taxes. It is quite affordable (you pay monthly fee)
Sure, hire an accountant. Either way, charge the companies and stop doing free work. This isn't rocket science.
Since Hacker News also centers on entrepreneurship: I know quite some entrepreneurs in Germany who think this way about the bureacratic chicanery that companies have to handle, and already thought about whether hiring a hitman for these politicians would be a good idea. The hate for the political caste in Germany among many people is insane.
As to a more constructive path: bureaucracy all over EU is definitely considered a big problem (for startups, and for many others) and there are a bunch of movements aimed at addressing them at all kinds of levels. For example look at the eu acc movement.
There is a tremendous amount of legal and paperwork once you start accepting money and working with corps. It’s a nightmare.
If the commercial terms of the engagement don’t work for you, then walk away. It’s really as simple as that.
This is entirely jurisdiction specific, so I can't say for certain, but in almost every country I've looked into it for, there is a set of paperwork that an individual can use to independently invoice for work, without the effort of setting up an incorporated company. You will definitely need to record the income you received, and declare it on the relevant tax forms.
There is often a scale variance too - in Australia, "hobby" income is treated differently from "business" income. [0]
In Germany, there is the concept of the "Freien Berufen" ("liberal professions"), in which you can freelance without a company. [1]
> ... the client also will demand...
The client may also demand these things of you.
They are certainly capable of dealing with sole traders, and will have some services provided by people who do not have those things. (Your boss does not check if the receipt you submit for the new bookshelf for the office comes from a registered company or a sole trader carpenter.)
Depending on the scale of the services you are providing, they may prefer to deal with a registered entity, but for small one-off things, that may not be necessary.
If you are regularly working with large businesses who are funding your work, it's worth looking into the most effective tax and legal structures for you. But if you just need to send the occasional invoice off to someone who wants something quick done, it's useful to know what your options are.
One final thought - even when dealing with organisations who prefer to deal with registered businesses, you have options. You can choose to be employed by a company which does that on your behalf. Either a business which you have a good relationship with, and is willing to enter into a casual employment contract with you and bill for your services, or a dedicated contractor management company. Either way, you give up a percentage of what you bill, but in exchange, they take the paperwork and liability overhead.
[0] https://www.ato.gov.au/forms-and-instructions/trust-tax-retu...
I have an ABN and I am registered for GST for side hustles beyond the hobbyist income threshold. This costs me about 10 minutes of extra admin per year when I do my tax return.
All I need to do is give the tax office three figures: How much money I earned, how much GST I charged, and how much I paid (ie how much they need to give back to me.)
Estonia has been trying to get foreigners to open their businesses there for a while now: https://e-estonia.com/ But I don’t think that helps US residents too much (ask your tax advisor about CFC rules; I have only a vague understanding that it’s a PITA).
Working with corps is not a problem. Unless you have a slave mentality that is, and let them bully you and stomp all over you. If they have their wits with them, they will fully understand what negotiating position they are in, and not make unnecessary demands on the software creator.
Unless you are getting paid in cash or monero, HMRC will absolutely know if you are getting paid under the table.
500/hr more like.
The thing is if you agree, now you have to deliver. Be sure it’s something you want to do. If the project is open source because you don’t want to be a business, then be careful about letting a little quick cash change your mind.
Or charge enough that it becomes something you want to do :)
Secondly, yes. The biggest challenge I have seen is getting on "VENDOR LISTS". Vendor approval is a huge PITA. master agreements, proof of insurance, etc.
You may not hear about them here or on your socials but it is possible you are not hearing everything. For example, do you have a presence on Mastodon or Lemmy (for example)?
There are a lot more channels too (you mentioned blogs).
Just like the roads you drive on seem to repair themselves sometimes (sort of), FOSS keeps on rocking along with minimal fuss, driven by a vast army of people who do what they can when they fancy it.
Look at the evidence: There is a vast, publicly accessible, free and open source, pool of software for you to download and play with. It gets larger daily but individual stories are immaterial - they might be described or not.
Look at the community: Along with all that software, often there will be a community. Arch, Gentoo and many others are legendary in providing resources to engage with.
>maintaining an open source, self-hosted project is:
> more work than building it > different fun than building it > more rewarding than you'd expect > harder than you'd expect > worth it
I'd say the title is not misleading: what they don't tell you is that is more rewarding than you'd expect and worth it. (Because yes, we mostly hear the "it's too much work and not worth it" story.)
> every feature you add is a feature you maintain forever.
This.
Keeping a framework/app/SDK “pure” is very important, in my experience.
> > every feature you add is a feature you maintain forever.
... until it becomes a security flaw.
Log4shell (IIRC) goes back to a feature to do an indirect lookup of a string over jndi in a beta version of the library. https://issues.apache.org/jira/browse/LOG4J2-313
Could you elaborate?
For example, if the framework provides text storage, adding text processing might be a mistake. Instead, make another framework that can be strung onto the text storage one.
It increases the granularity, and the usefulness of the modules. You could have multiple processing frameworks.
In addition, it allows you to refine discrete functionality domains (which can also be personnel assignment domains), and reduces the places for bugs to manifest. You can devote more tests to each framework.
Instead of seeing it as "users of X platform", I think it's more useful to divide user groups into:
1. Completely non-technical users who, at worst, wouldn't know how to download anything, and at best only know how to install from an ".exe" file;
2. Middle-ground users who, at worst, are not willing to learn your preferred way of installation, or at best, are new to non-common installation methods;
3. Technically proficient users who, at worst, have arbitrary reasons for disliking your preferred way of installation, or at best, have legitimate reasons for disliking it;
4. Your ideal technically proficient users.
FOSS is often geared towards the fourth category, and for good reason. But if you want your tool to be adopted more widely, you have to learn more about those other user groups, and how to support them beyond documentation.
And here I'd say it's also fair to look for good reasons or funding for that extra support, because if it's not rewarding work, it doesn't have to stay free as in free beer (even if it's FOSS).
On the other hand, software is never done. Even simple features, like headphones, regress these days. (I missed a meeting today because my phone decided to send audio notifications into the black void of the heat death of the universe because I didn't unlock my phone after plugging the headphones into the USB-C port of my iPhone -- the audio didn't come out of the speaker, nor out of the bluetooth of the car I was driving. No sound worked until after the phone was unlocked.)
At least with open source software I can fix the bugs I care about, but the fun goes away once you have to deal with other people to get things merged.
Is there a community of software Luddites I can go live with where we build simple technology that works and works well?
I don't know why but this amused me. Is this a feature one can get when buying a backhoe?
I channel that into my gardening during the appropriate seasons, but now that it's November, all that woodworking equipment in the garage is lookin' mighty appealing.
Yeah people have thoughts like this but then you hear a story about lying on your back in a muddy 3’ crawl space cutting into a blocked sewer line to install a cleanout and hoping you can roll away when the liquid starts pouring out.
Then your desk job writing code starts to sound a little better.
I'm sure there are other people out there frustrated with the software grind. My point is that change is always an option. There are interesting problems to solve in the world that exist outside of large software projects that most folks here have the required skill sets to tackle.
People like GP - and other hardware monkeys* - are the reason your computer works. Don't be rude.
* Said with much love <3
Take a look: https://press.stripe.com/working-in-public
If you do not spend a lot of time explaining things at length, people will link back to how much an asshole you are.
[1]: https://github.com/mickael-kerjean/filestash/issues/661#issu...
I'd at least make sure the cert is up to date.
I'll also point out the supportive comments in that thread; sure there's always gunna be some negativity, but there's also positive people. Focus on those.
Your response is where it should go when things get rude, but you don't want to start there.
Tons of open source exists as only source code and a license, nothing else. No docs, no issue tracker, nothing. People who need it use it, learn from it, remix it, whatever, but there need not be any engagement at all from the given repo's maintainer.
Because open source is not just about the code and the license. It is first and foremost about a community of people who want to make software better for everyone, not just for themselves or a select few. The code and license are ancillary to this goal.
I won't get into this discussion again. I'll just say that if you think otherwise, whatever good you think you're putting out into the world, is not much better than keeping the software proprietary.
Everything else in open source is a cultural projection entirely ancillary to the code and the license.
> I'll just say that if you think otherwise, whatever good you think you're putting out into the world, is not much better than keeping the software proprietary.
I have never seen someone so entirely miss the point of open source. This is not a house party, this is not a community support network. There are genuine disagreements about open source philosophy, if it should be more focused on user freedoms or developer convenience, but they are all incompatible with the idea that open-source licensed code in and of itself "is not much better than keeping the software proprietary".
Stallman did not invent the GPL because he wanted an issue tracker and complete documentation from HP. He invented the GPL because he needed to fix his printer drivers.
A ton of very important open source code was thrust into the world, created immense value, but was never further supported or developed by its original developers. Off the top of my head: git, Doom, Bitcoin, and basically everything Fabrice Bellard has ever done.
Licences also existed before FOSS, but open sources licences enabling the kind of freedoms that they allow did not exist. And as it happens, a license is not a technical artefact but a social contract. Stallman is activist, not simply a neutral combination of a technician and a lawyer.
The social contract and political vision are consequently not ancillary, but core to FOSS. Code is the medium, but the license is the innovation. Without that social contract, 'open' code is just abandonware.
The community doesn't need to be a 'house party,' but the license guarantees the right for a community to form when the original author walks away.
Which is why the license is the only thing that matters. Without the license you don't have the community. It will happen with some code, it won't happen to other code. Without the license, or without the code, it never happens.
The only thing you need to do as an open source software developer is release your code under an open source license. You don't need to respond to or even maintain an issue tracker, you don't need to accept MRs into your upstream, you don't need to care about anyone else using your code.
Open source places no other obligations on a developer other than the license. To say otherwise is to fundamentally misunderstand what open source is.
- https://www.postgresql.org/list/
Though I have to be very charitable to grant your point.
Even your examples support their point of "people who want to make software better for everyone, not just for themselves or a select few". Stallman just cared about code, like fixing his printer, and not a whole social movement?
Stallman created a social movement that just cared about code, yes. He needed the social movement to create an environment in which he could fix his printer.
The social movement was about the license and the code, not about providing support for, documentation of, or continuing development of any particular code.
By creating an environment where code is open, you allow for communities to organically form around code and maintain it. Without the environment, without the code and the license, the communities cannot form.
> The community of people cannot exist without the code and the license.
That is obviously false. Communities form around any common interest. They also exist around proprietary software, where no code is shared.
When code is freely available, it is the community of people who make the project successful—not the code, and certainly not a piece of legalese text.
> The code and the license can and often does exist without dedicated communities.
Technically true, but such projects languish in obscurity. They're driven by the will of a small group of people, often the original lone author, and once that diminishes, they are abandoned and forgotten. The vast majority of software which can technically be described as "open source" is mostly inconsequential to computing or anyone's lives. It once scratched the itch of a single person, and now sits unread on some storage device.
Thus, communities are what make software successful. Not just free software, but software in general. We write software for people, and we publish its source code to help others. We do so because software is better when shared and improved by a community of passionate users, rather than written by one or a few people who wanted it to exist.
It's wild that you would bring up Stallman as an example, since everything he's done goes completely against your point. That printer story served as a good example to illustrate to others why free software is necessary—not just for him, or for the team and company he worked with at the time, but for the world at large. He didn't need to invent a social movement and philosophy to fix his printer issues. He probably could've hacked around it and found a solution that worked for their specific case, and called it a day. And yet he didn't. He believed that software could be built and shared in a different way. In a way that would benefit everyone, and not just the people who wrote it. He believed in the power of sharing knowledge freely, of collaborating, and building communities of like-minded people. The source code is important, and the license less so, but it is this philosophy that brings the most value to the world.
> A ton of very important open source code was thrust into the world, created immense value, but was never further supported or developed by its original developers. Off the top of my head: git, Doom, Bitcoin, and basically everything Fabrice Bellard has ever done.
Whether the original developers supported it or not is irrelevant. All of the examples you mentioned are projects supported by someone, and have communities of passionate people around them. That is the point. Individuals may come and go. The author is no more important than any talented and passionate member of the community. But someone cares enough to continue maintaining the software, and to nurture the community of users around it, without which none of these projects would be remotely as successful as they are today.
It is fundamentally true. You cannot have a Pokemon community without Pokemon, a knitting community with yarn, or a software community without software.
> Technically true
You should have stopped here. It is true. Period, full stop. Everything else is fluff.
> The vast majority of software which can technically be described as "open source" is mostly inconsequential to computing or anyone's lives.
This is because the open source software movement was so overwhelming in its success it became the norm.
> He didn't need to invent a social movement and philosophy to fix his printer issue.
Yes he did. The philosophy is about the freedom to fix your printer. It is not about engaging others to fix your printer, or obliging maintainers to fix your printer.
Those things are follow ons to the core philosophy. Once you have the freedom to fix your printer, you can form communities of people also interested in fixing printers. The freedom comes first.
> Whether the original developers supported it or not is irrelevant.
It's literally the only thing we're talking about. Open source enables others to come along and support software abandoned by or simply never championed by its original creator. Without open source you do not have those later "someones".
Honestly, this is a GitHub thing. You wouldn't get that issue on sourcehut, bitbucket or self hosted.
GitHub is the lowest common denominator for users.
It's what is taught in every school, bootcamp, youtube channel and corner of the internet. Anyone that had an idea on a random weekend to "learn to code" signed up for GitHub.
GitHub is less of a software forge and more like a Facebook for software.
Back in the day, with different technologies, most of it would have been "strange compilers and environments" that had to be supported.
Once the initial enthusiasm fades, it becomes difficult to maintain the project.
> it's not better. it's different
> automation isn't lazy. it's sustainable
> it's not about gatekeeping. it's about making debugging possible
This is everywhere in the article.
I wouldn't be certain of it but I can definitely believe it.
I do hate that if you publish anything online these days, someone will accuse you of having used AI to write it.
We're at the point we need to coin a law for it. With tongue firmly in cheek, we could call it Turing's Law perhaps?
"Any person who publishes any text on the internet will be mistaken for a robot"
Noticing this too. Sabine said something a while ago in one of her videos that stuck with me [0]. about people expecting proof of suffering by next year. She was talk submitting an essay, but it might as well be anything ai could have done.
The author very thoroughly uses AI for everything. If you want further evidence just look at the commit messages for the site. They are almost all AI messages (compare against the author's commit messages for any project pre-2025).
Not saying that the article is bad because it's AI written (or at least heavily AI assisted). After all you enjoyed it! Regardless you're definitely looking at AI prose.
You understand that you can prompt an LLM to do things, right? This was screaming LLM-generated at me the whole way through. Adding "Use only lowercase" to the prompt does not change that.
> automation isn't lazy. it's sustainable: [bullet points]
A software developer did not write that. I would bet my entire net worth on that if the bet could be arbitrated objectively, at virtually any odds, because it would be free money.
> the people using kaneo aren't just users. they're: [bullet points]. they're not demanding. they're engaged. that's a *gift*.
This vomit-inducing sappy "gift" line, too.
> them kaneo
> cloud-hosted self-hosted (your data, your server)
> closed source open source (you can read every line)
> feature-rich minimal (does one thing well)
> subscription free (as in freedom and beer)
Wow, this looks just like the completely unnecessary comparison table you get any time someone prompts an LLM for a comparison! How much money would you feel comfortable betting "open source (you can read every line)" was written by a human software developer?
> someone stars your repo → feels good
An entire paragraph of these ultra-terse "x -> y", under a bold header "the emotional reality", also reeks of LLM output.
The evidence is overflowing, you simply aren't familiar enough to recognise it. Which sounds like a nice state of being, admittedly. Ignorance is bliss. I, personally, am absolutely sick of seeing this LLM spam on HN.
Your comment made me register for a HN account for the first time ever in my life (I have been lurking since 2009/2010).
I did not even think to consider that the OP's submission was AI and I felt dirty, violated and even saddened that a developer home page; something I long assumed in my 35 year old mind to be sacred, technical and a place where you could read honest thoughts about programming was now polluted with genAI.
I always treated them like open source docs or linux contribs pages or deeply technical or academic sites where you could 100% definitely trust that the developer would not waste your time or tell lies.
I think this episode has finally made me decide to go video only, f2f meetings or just zero-out reading from my life.
Just thought you should know what your comment did for me. The whole post now reads cheap, like they didn't value or care about what they said or how readers would feel.
- Ximmer
See e.g. my comment on the commit messages: https://news.ycombinator.com/item?id=46054935
Sure, but you're also not obligated to do... well, anything. And people are also allowed to read documentation and code and put in the effort to build and install things themselves. What happened to the oldschool hacker spirit that rewarded learning and helping yourself? If you show up to a group of people and say "how do I make this work?" while showing zero evidence that you've actually done anything, you'll be politely told to fuck off. I promise it's okay to say no to people, especially people who haven't demonstrated that they've put in their own time to understand something.
But this is immaterial anyway. I don't know how to better explain that you don't owe your time to strangers on the internet, some portion of whom are probably not even human. Alternatively, you could get them to pay you, especially the organizations "behind corporate proxies". If they can afford a corporate proxy, they can certainly afford your time, as long as you value it appropriately.
So yeah. Stop working for free, and stop treating every last internet stranger as relevant.
> they're not demanding. they're engaged. that's a gift.
100%!
Open source maintenance is a difficult and sometimes thankless job. It requires a lot of communication, careful balancing of the project's vision and user requests; tolerance, patience, honesty, transparency, gratitude, humility, but also confidence, sternness, and above all else, dedication to improve the project for everyone, not just a select few. It seems that the author gets quite a few of these right.
A few notes from my own experience:
- Documentation is important, and they're right that it is never "done". That said, you also have to assume that it's written for a specific audience. If a baseline level of technical proficiency is needed for your project, then you shouldn't need to explain topics that bring people up to that level. Sometimes it's a better use of your time to address the occasional support question, than to add documentation that would be irrelevant for the majority of your users. Besides, if those support questions are visible to the community (e.g. they're on a discussion forum), then your answers there can serve as unofficial documentation for people who need it.
- Speaking of which, a discussion forum is crucial when building a community around an open source project, or any project, for that matter. It is another source of information for users, you can use it for announcements, etc. And once you have power users and people passionate about your project, the community itself can help out with support duties. Definitely make this as accessible as possible, make it public, and don't use a closed platform like Discord. A real-time chat platform could be useful, but an async searchable old-school forum is much better for discussion and support.
- Code contributions are a double-edged sword. On one side, it's incredible that some users are passionate about the project enough to invest their time and effort in improving it, and are willing to share their improvements with everyone else. But on the other, when their code is merged into the mainline project, it becomes an additional maintenance burden for core maintainers. Those contributors will hopefully be acknowledged for their work and everyone will appreciate it, but if there are issues with that part of the code, it will be the original maintainers' job to fix it and improve it, not the contributors'. The article mentions this already, but this is another reason to be extra vigilant and judicious about which code to accept, and which not. Most contributors will understand.
Kudos to the author, and best of luck with the project! It's certainly on my radar now.
BTW, looking at Kaneo's web site now, the "free forever" next to the Cloud link is not a good sign. Maintaining infrastructure is a financial burden. Nothing should be "free", and definitely not "forever". Please: add a commercial tier where people can pay you for the resources they consume. This is orthogonal to open source, and you should be compensated, not just for the infrastructure you maintain, but for your work. Everyone will understand this, as long as you keep it fair. In fact, it serves as assurance for any potential users that the project is in a healthy state, and that it will likely continue to be maintained.
I'd be happy to discuss this further and offer any guidance if I can. My contact info is in my profile.
If you've got "200 users" who rely on your tool so deeply that a migration glitch would seriously hurt their business, you're past the point where this is a casual side project. That's the point where you should at least have some path for people to pay you.
In my head there are three phases of an open-source project:
* Toy – "I scratched my own itch and threw it on GitHub."
* Product – "People actually rely on this. Now I owe them migrations, docs, and not breaking stuff."
* Infrastructure – "If this dies, someone's company explodes and I'm on the front page of Hacker News for the wrong reason."
This post is basically the story of moving from (1) to (2).
What I rarely see is a maintainer explicitly saying which phase they're in. Users see "kanban board, nice site, good docs" and instantly a user is going to map this to, "Jira replacement!" And the author is thrilled to be compared to a polished SaaS!
But then both will be "shocked" to realize that one person can't match an entire product team, support team, design team, etc.
I think there's a lack of honesty in a lot of open source projects. I'd love to see more READMEs say things like:
* "Hobby project. I reserve the right to disappear for a month."
* "No guarantees, no SLAs. Use at your own risk!" (or even more blunt, "If you use this in production, or for mission-critical business practices, you're a fucking moron.")
* "If you're a company depending on this, you should be sponsoring it."
Anyway, seen this countless times... And the real tension starts when the author's excitement about having users surpasses the amount of work generated by those users. As long as the author wants to avoid working on a team, with business rules, and other stakeholders... it'll never actually scale.
Worse, the difference between users and customers is that there's no barrier to entry. Users expectations drift upward -- whether they are paying or not. Users don't just want fixes -- they want roadmaps, guarantees, backwards compatibility, and custom migration help. The code is open-source, but the longer the project goes on, the more the expectations drift towards enterprise-grade.
Boundaries matter. "No, that's out of scope." "No, I won't support your forked schema." "No, I can't chase down your custom patches." Those aren't signs of being unhelpful -- they're what keep the project from collapsing under its own weight. And when you have to start saying things like this, you've past the point of needing a bigger team... which means you're also past the point of where you should have started charging money for your product.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Why should random people take on more responsibility for clearly 0 gain? If you want people to bear the cost for their externalities due to their shit software it has to be regulation.
I think something like this has to happen eventually, we can't keep using the same unix programs forever.