Goodbye, and Thanks for All the Bikesheds
291 points
• 2 days ago
• Article
Link
在为 Bikeshed 专栏撰稿近二十年后，Poul-Henning Kamp 回顾了自己的离任，并对自由和开源软件（FOSS）的未来提出了发人深省的预判。他把最后的思考整理成一系列旨在挑战行业既有假设的预测。其中核心是 LLM 辅助代码审查的兴起，他认为这不过是一个可以预见的经济泡沫。凭借多年使用静态分析工具的经验，他断言这些 AI 工具的实际价值有限——就像一部昂贵的电影，模型的训练成本高昂但边际收益递减，当前热潮退去后，其长期经济可行性令人怀疑。
相比之下，Kamp 认为年龄验证将成为颠覆传统 FOSS 精神的关键力量。他把当下互联网的局面归结为 tech-bro 文化主张通过加密实现绝对隐私，与感到被逼入角落的民族国家之间的冲突。随着各国推动更严格的问责和适龄访问，互联网匿名空间在收缩。 Kamp 预计，这将推动以加密手段验证的软件完整性，系统被锁定以确保合规，从而实质上终结用户自由修改和重新编译软件的时代。
数字主权的浪潮，尤其是在欧盟内部，是对 FOSS 的另一个重大压力点。 Kamp 指出，尽管欧盟给予开源某些立法上的豁免，但一旦涉及商业利益，这些保护往往就变得苍白无力。与此同时，依赖个人无偿维护者来支撑这类项目已变得不可持续，而这些项目正是现代社会的关键基础。他预言，那种由独立"仁慈独裁者"带领开发的模式正在消亡，取而代之的将是由企业管理者或政府指定实体主导、缺乏生气的委员会式项目。
总体来看，FOSS 的未来正朝着围墙花园（walled garden）式方向演进。在这种格局下，用户或许仍保有查看源代码的权利，但出于安全和问责的需要，修改或运行未经授权软件的能力很可能受到限制。 Kamp 对这一走向流露出明显的惆怅，感叹曾经那片宽阔、充满试验精神的天地正被僵化、按"健康与安全"标准审批过的环境所取代。他最后真诚地希望，自己关于 FOSS 衰落的悲观看法能被事实证明是错误的。
After nearly twenty years of contributing to the Bikeshed column, Poul-Henning Kamp reflects on his departure and offers a provocative outlook on the future of free and open source software (FOSS). He frames his final thoughts as a series of predictions designed to challenge current industry assumptions. Central to his view is the rise of LLM-assisted code reviews, which he views as a product of a predictable economic bubble. Drawing on his long-standing experience with static analysis tools, he argues that the actual value of these AI tools is limited. He suggests that, much like an expensive film production, these models are costly to train but yield diminishing returns, raising questions about their long-term economic viability once the current enthusiasm fades.
In contrast, Kamp identifies age verification as a transformative force that threatens the traditional FOSS ethos. He traces the current state of the internet to a conflict between tech-bro culture, which prioritized absolute privacy through encryption, and the reactions of nation-states that now feel cornered. As governments push for greater accountability and age-appropriate access, the opportunity for internet anonymity is shrinking. Kamp believes this shift will necessitate cryptographically attested software integrity, where systems are locked down to ensure compliance, effectively ending the era where users can freely modify and recompile their software.
The push for digital sovereignty, particularly within the European Union, serves as another major pressure point for FOSS. Kamp notes that while the EU has offered legislative carveouts for open source, these protections largely vanish the moment profit enters the equation. Furthermore, the reliance on individual, pro-bono maintainers is becoming unsustainable as these projects form the critical foundation of modern society. He predicts that the independent, benevolent dictator model of development is dying, to be replaced by sterile, committee-run projects managed by corporate stewards or government-appointed entities.
Ultimately, the future of FOSS appears to be moving toward a walled-garden model. In this landscape, users may retain the right to inspect source code, but the ability to modify or run unauthorized software will likely be curtailed to satisfy demands for security and accountability. Kamp expresses a clear sense of melancholy over this trajectory, lamenting that the wide-open, experimental spaces he once enjoyed are being replaced by rigid, health-and-safety-approved environments. He concludes by expressing a sincere hope that his grim predictions regarding the decline of FOSS as we know it will be proven wrong.
266 comments • Comments Link
• Poul-Henning Kamp 是一位影响力颇大的开发者，以创建 md5crypt 并长期为 BSD 做出贡献著称；但他近期关于网络隐私和监管的观点在技术界引发了激烈争论。
• 支持年龄分级技术的人通常强调有必要保护未成年人免受有害社交媒体环境的影响，并主张监管机构可强制要求预装的消费类软件内置家长控制，从而在不完全破坏整体网络隐私的前提下加以治理。
• 反对强制年龄验证的人认为，这不过是身份验证的"特洛伊木马"，实际上会终结网络匿名，并使专制政权以儿童安全为借口追踪政治异见者。
• 关于技术圈大佬与隐私倡导者应扮演何种角色存在核心分歧：有人认为对任何立法妥协的绝对否定会疏远立法者，阻碍更温和且尊重隐私的保护机制的形成。
• 大型企业和社交媒体平台常被指控游说通过年龄验证法来规避法律责任，实际上把数字安全的责任转嫁给个人用户和家长。
• 很多参与者认为，年龄验证在结构上无法有效解决社会危害，他们把它比作在餐厅靠查证身份来防止食源性疾病，而不是直接着手改善卫生条件，因此这种做法荒谬可笑。
• 家长责任的有效性也存在争议：有人指出，现代社会与经济压力、以及数字素养的不足，使家长越来越难以单独承担抵御全球科技影响的重任。
• 是否存在介于两者之间的加密折中方案仍有分歧。一些人主张"最小兼容"协议可以在回应政府关切的同时保障权利，而另一些人则坚持认为任何技术妥协都必然导致大规模监控的滥用。
• 这场讨论反映出对政府数字政策的广泛怀疑：怀疑者将现行立法视为一种升级手段，试图通过将现实身份与数字行为挂钩来控制网络话语。
• 尽管参与者多有技术背景，但对话凸显出日益扩大的裂痕：一方将监管视为维持秩序的务实必要，另一方则把任何对隐私的侵蚀看作对个人自由的生死威胁。
这场讨论反映了人们对网络匿名未来以及国家监管对互联网架构不断侵蚀的深切焦虑。在主张通过务实立法来管理数字伤害的人与那些认为任何技术或基于身份的妥协都将滑向全面监控的人之间存在尖锐意识形态分歧。最终，这场辩论凸显出公众对家长能否单独保护儿童免受庞大数字实体侵害的疑虑，以及对推动现行以身份绑定的互联网接入的政府与企业诚意的普遍不信任。 • Poul-Henning Kamp is an influential developer known for creating md5crypt and his long-term contributions to BSD, though his recent perspectives on internet privacy and regulation have sparked significant debate within the technical community.
• Arguments for age-gated technology often center on the need to protect minors from harmful social media environments, suggesting that regulators could mandate parental controls on pre-installed consumer software without necessarily dismantling overall internet privacy.
• Critics of mandatory age verification contend that it serves as a "trojan horse" for identity verification, effectively ending online anonymity and empowering authoritarian regimes to track political dissent under the guise of child safety.
• A core tension exists regarding the role of "tech bros" and privacy advocates; some argue that absolute opposition to any legislative compromise has alienated lawmakers and prevented the development of more moderate, privacy-respecting protective frameworks.
• Large corporations and social media platforms are frequently accused of lobbying for age-verification laws to shield themselves from legal liability, effectively offloading responsibility for digital safety onto individual users and parents.
• Many participants argue that age verification is a structurally ineffective solution to social harm, drawing parallels to absurd requirements like checking IDs at restaurants to prevent foodborne illness rather than addressing hygiene directly.
• The effectiveness of parental responsibility is debated, with some noting that modern societal pressures, economic stressors, and a lack of digital fluency make it increasingly difficult for parents to act as sole guardians against global tech influence.
• Disagreement persists over whether a middle ground for encryption exists; some claim that "minimally compatible" protocols could have protected rights while addressing government concerns, while others maintain that any technical compromise inevitably leads to mass surveillance abuse.
• The discussion reflects a wider skepticism toward government digital policy, where skeptics view current legislation as part of an escalating effort to control online discourse by linking physical identity to digital actions.
• Despite the technical pedigree of those involved, the conversation highlights a growing divide between those who view regulation as a pragmatic necessity for stability and those who see any erosion of privacy as an existential threat to personal liberty.
The discussion reflects deep-seated anxiety regarding the future of online anonymity and the encroaching influence of state regulation on internet architecture. There is a sharp ideological divide between those who advocate for pragmatic legislative compromise to manage digital harms and those who view any technical or identity-based concession as a slippery slope toward total surveillance. Ultimately, the debate underscores a loss of faith in both the ability of individual parents to shield children from massive digital entities and the integrity of the governments and corporations driving the current push for identity-linked internet access.