This is the official technology community of Lemmy.ml for all news related to creation and use of technology, and to facilitate civil, meaningful discussion around it.
Ask in DM before posting product reviews or ads. All such posts otherwise are subject to removal.
Rules:
1: All Lemmy rules apply
2: Do not post low effort posts
3: NEVER post naziped*gore stuff
4: Always post article URLs or their archived version URLs as sources, NOT screenshots. Help the blind users.
5: personal rants of Big Tech CEOs like Elon Musk are unwelcome (does not include posts about their companies affecting wide range of people)
6: no advertisement posts unless verified as legitimate and non-exploitative/non-consumerist
7: crypto related posts, unless essential, are disallowed
After reading more into this, the dev sounds like he's being a twat.
Nginx had some security bugs in alpha code. F5 issued cve's for it, the dev didn't want them to because it wasn't code in a stable release. That's the entire story from what I can tell.
I don't feel like f5 was in the wrong here, and running off to raise a stink seems like an excessive response here.
Can you share links to the further reading? I use nginx and would love to know more about what’s happening.
For sure, most of the good discussion was on hacker news here: https://news.ycombinator.com/item?id=39373327 and https://news.ycombinator.com/item?id=39373612
Megazone is one of the F5 security people and posted here: https://news.ycombinator.com/item?id=39374312
Thanks very much!
This is the best summary I could come up with:
Maxim Dounin as one of the longtime core developers of the Nginx web server announced the creation today of a new fork of the project called Freenginx.
Dounin explained in announcing Freenginx: "As you probably know, F5 closed Moscow office in 2022, and I no longer work for F5 since then.
Still, we’ve reached an agreement that I will maintain my role in nginx development as a volunteer.
Unfortunately, some new non-technical management at F5 recently decided that they know better how to run open source projects.
That’s quite understandable: they own the project, and can do anything with it, including doing marketing-motivated actions, ignoring developers position and community.
The goal of the project is to keep nginx development free from arbitrary corporate actions."
The original article contains 318 words, the summary contains 124 words. Saved 61%. I'm a bot and I'm open source!