Say That Again

by Mike Masnick


Filed Under:
18f, it modernization, open source, usds

Companies:
oracle



Oracle Tells The White House: Stop Hiring Silicon Valley People & Ditch Open Source

from the well,-that's-one-way-to-think-about-things... dept

Even though Oracle is based in the heart of Silicon Valley (I can see its offices from my own office window as I type this), the company has become sort of anti-Silicon Valley. It tends to represent the opposite of nearly everything that is accepted wisdom around here. And its latest crusade is against open source technology being used by the federal government -- and against the government hiring people out of Silicon Valley to help create more modern systems. Instead, Oracle would apparently prefer the government just give it lots of money.

First, some background: over the past few years, one of the most positive things involving the federal government and technology has been the success of two similar (but also very different) organizations in the US government: US Digital Service (USDS) and 18F. If you're completely unfamiliar with them there are plenty of articles describing both projects, but this one is a good overview. But the really short version is that both projects were an attempt to convince internet savvy engineers to help out in the federal government, and to bring a better understanding of modern technology into government. And it's been a huge success in a variety of ways -- such as creating federal government websites that are modern, secure and actually work. And even though both programs are associated with President Obama, the Trump administration has been adamant that it supports both organizations as well, and they're important to continuing to modernize the federal government. The offices are not politicized, and they have been some of the best proof we've got that government done right involves smart, dedicated technologists.

Of course, not everyone is thrilled with these organizations. Old school federal contractors, for one, have been grumbling loudly about 18F daring to do things like making government procurement open to small businesses. After all, these contractors have spent decades charging the government billions for crappy products, in part, because they know how to work the system. Bringing in actual engineers who realize that it's crazy to spend so much money on crappy solutions -- especially when there are much better solutions that are often open, seems to really piss off some folks who grew fat and happy overcharging the government. And they've found some front groups who argue that these programs are a waste of government money, which would be better spent giving billions to private contractors.

Either way, the Trump Administration, following a Trump executive order, requested feedback on how best to modernize government IT. The request for comments and all the submitted comments are on Github (which is nice to see). Many are quite interesting, but the one that really caught my eye, was Oracle's submission, which I can only describe as... curmudgeonly.

A little more background: if it weren't for Oracle's failures, there might not even be a USDS. USDS really grew out of the emergency hiring of some top notch internet engineers in response to the Healthcare.gov rollout debacle. And if you don't recall, a big part of that debacle was blamed on Oracle's technology. So, perhaps it's not surprising that Oracle might hold a bit of a grudge against USDS. Similarly, while Oracle likes to claim that it's supportive of open source technologies, most recognize that open source has been eating Oracle's lunch for a while now.

Even with all that background, the sheer contempt found in Oracle's submission on IT modernization is pretty stunning. The letter complains about three "false narratives" that "have taken the [US government] off track":

False Narrative: Government should attempt to emulate the fast-paced innovation of Silicon Valley. Silicon Valley is comprised of IT vendors most of which fail. The USG is not a technology vendor nor is it a start-up. Under no circumstance should the USG attempt to become a technology vendor. The USG can never develop, support or secure products economically or at scale. Government developed products are not subject to the extensive testing in the commercial market. Instead, the Government should attempt to emulate the best-practices of large private-sector Fortune 50 customers, which have competed, evaluated, procured and secured commercial technology successfully.

Now, this is kind of funny if you follow anything having to do with government and IT projects over the past few decades, as compared to what's happened on projects where USDS and 18F have been involved. For example, remember the big new $600 million (only $220 million over budget) computer system the FBI paid for that was useless for catching terrorists and had to be completely written off? This was the system, built by giant government contractor SAIC, that a computer science professor who was asked to review the system said he was planning to go on a crime spree the day the system launched, knowing the FBI wouldn't be functional. The same system that was so bad that a contractor who was trying to do something so simple as add a printer to the network had to hack the system, accessing the usernames and passwords of 38,000 FBI employees (including then director Robert Mueller) just to do his job.

Is that really the kind of world we want to go back to? And that's just one example, but there are many others like this. Yet, whenever you look at the systems that USDS and 18F are working on, they seem to actually work. They also seem secure. So, sure, it's easy to attack having the government put together these systems, but real world experience seems to show that these groups, staffed with experienced internet engineers does things a lot better.

False Narrative: In-house government IT development know-how is critical for IT modernization. In-house government procurement and program management expertise is central to successful modernization efforts. Significant IT development expertise is not. Substantial custom software development efforts were the norm at large commercial enterprises, until it became obvious that the cost and complexity of developing technology was prohibitive, with the end-products inherently insecure and too costly to maintain long-term. The most important skill set of CIO’s today is to critically compete and evaluate commercial alternatives to capture the benefits of innovation conducted at scale, and then to manage the implementation of those technologies efficiently. Then, as evidenced by both OPM and Equifax, there needs to be a singular focus on updating, patching, and securing these systems over time.

There's at least some truth to the idea that developing things from scratch is not ideal in many cases, but claiming that those making decisions on federal IT shouldn't have development knowledge is ludicrous. When you don't have that kind of knowledge, that's when you get the big federal contractors coming in and selling you $600 million FBI computer systems that are useless at catching terrorists. I'd be curious if any software developers out there actually think they get better requirements docs from those with dev experience, or those without? Because over and over and over again, I've seen that when the management side actually understands software development, then the process tends to go much more smoothly, because people are much more realistic. Having non-technically inclined managers making these decisions tends to go poorly. Remember the massive computer system that the Copyright Office wasted millions on? That involved a failure of the Copyright Office to set requirements with the outside vendor who never could actually build a working system.

False Narrative: The mandate to use open source technology is required because technology developed at taxpayer expense must be available to the taxpayer. Here there is an inexplicable conflation between “open data,” which has a long legacy in the USG and stems from decades old principles that the USG should not hold copyrights, and “open source” technology preferences, which have been long debated and rejected. There is no such principle that technology developed or procured by the USG should be available free for all citizens, in fact that would present a significant dis-incentive to conducting business with the USG.

This is the most ridiculous of all. Copyright law is pretty clear on this: works of the US government shouldn't be subject to copyright -- and many in the government have embraced variations on open source to live up to that requirement. The idea that open source somehow creates disincentive to working with the US government is hilarious. Maybe for a company like Oracle, but tons of others are happy to work with the US government and lots of open source technologies have made government IT faster, cheaper and more secure.

But Oracle really wants to dig in on this point, with some complete bullshit about how open source is somehow less secure... because the Equifax hack came via a vulnerability in open source:

Developing custom software and then releasing that code under an open source license puts the government at unnecessary security risk as that code is not “maintained by a community,” but is rather assessed and exploited by adversaries. Further, this practice puts the government – most likely in violation of the law – in direct competition with U.S. technology companies, who are now forced to compete against the unlimited resources of the U.S. taxpayer. The Equifax breach stemmed from an exploit in the open source Apache Struts framework.

The Equifax breach stemmed from Equifax failing to patch a widely discussed bug that competent administrators should have patched. The bug was found and patched because it was open source.

Speaking of "false narratives," Oracle also claims that open source technology is being used less and less in the corporate world:

Open source software has many appropriate uses and should be competed against proprietary software for the best fit and functionality for any given workload, but the fact is that the use of open source software has been declining rapidly in the private sector. There is no math that can justify open source from a cost perspective as the cost of support plus the opportunity cost of forgoing features, functions, automation and security overwhelm any presumed cost savings. The actions of 18F and USDS plainly promote open source solutions and then propagate those mandates across government with the implicit endorsement of the White House. The USG’s enthusiasm for open source software is wholly inconsistent with the use of OSS in the private sector.

If you actually follow the open source software market, Oracle's claim here is laughable. Open source is now commonplace in the enterprise and that's only increasing, not decreasing.

Also, somewhat hilariously, Oracle tries to argue that letting USDS and 18F develop things means that there will be extra costs, compared to letting private companies develop stuff:

The largest contributor to cost and complexity is customization, yet actions of the USG and the Report seem to embrace both government developed bespoke technology and customization. Custom code needs to be maintained, patched, upgraded and secured over the long-term. The cost of technology comes almost entirely from labor, not from component parts, whether software, hardware, or networking. The goal should be to seek leverage and scale by engineering out labor costs, including process engineering. Government developed technology solutions must be maintained by the government. Every line of code written by 18F, USDS or another government agency creates a support tail that results in long term unbudgeted costs.

But, again, looking at historical IT implementations pre-USDS and 18F and you see example after example of it being the outsourced, private, large government contractor companies whose work results in massive unplanned maintenance costs.

Seriously, this entire filing by Oracle is one giant false narrative of people living in denial about how the world works these days.

There's even more nuttiness in the filing, but you can go through it yourself and count how frequently you gasp at just how wrong it is. This is an old, legacy company trying to cling desperately to old, obsolete, legacy ways. Oracle's entire business was originally created to serve the US government as a customer, and it clearly doesn't want to give that up. But, once again, things like this just make it clear why the top engineers coming out of school today don't have much interest in going to work for a company with views like Oracle's.


Reader Comments

Subscribe: RSS

View by: Time | Thread


  1. icon
    Vidiot (profile), 3 Oct 2017 @ 8:58am

    "The USG’s enthusiasm for open source software is wholly inconsistent with..."

    ... Oracle's need to skim easy federal money from decades-old, proprietary installations.

    reply to this | link to this | view in thread ]

  2. identicon
    Anonymous Coward, 3 Oct 2017 @ 9:49am

    Oracle is furiously lashing out because nobody rational thinks that APIs qualify for copyright protection. They're like the out_of_the_blue/tp for code.

    reply to this | link to this | view in thread ]

  3. identicon
    Anonymous Coward, 3 Oct 2017 @ 9:55am

    First they had MySQL fork on them, and the Open Office.org, and now [Java EE is going away](https://www.infoworld.com/article/3217347/java/oracle-doesnt-want-java-ee-any-more.html). This suggest that they are not very good at listening to other people, which makes their ability to develop any software for other people to use suspect.

    reply to this | link to this | view in thread ]

  4. identicon
    Anonymous Coward, 3 Oct 2017 @ 10:08am

    Equifax breach

    While the specific intrusion point was through a hack (which happened to target an open source component that Equifax had neglected to patch), the larger failure of the Equifax breach was that Equifax designed a system that could so easily disclose so much sensitive information as a result of a single security breach. Their design was grossly negligent, likely motivated by a preference for design convenience with no regard to the security consequences of a failure.

    reply to this | link to this | view in thread ]

  5. identicon
    Mitch, 3 Oct 2017 @ 10:13am

    Not this again

    Casting meritless aspersions on open source in general sounds like the early '00s when software company/copyright troll SCO and various astroturf groups, likely funded in part by Microsoft, sought to discredit the concept. They failed.

    reply to this | link to this | view in thread ]

  6. identicon
    Anonymous Coward, 3 Oct 2017 @ 10:13am

    B.S.

    The USG can never develop, support or secure products economically or at scale. Government developed products are not subject to the extensive testing in the commercial market.

    First hand experience that that statement is crap. I mean look at all the IOT products getting pwned repeatedly guess they really did their testing on those.

    Also when developers are more interested in making a good product instead of greed the government developed products are cheaper and more maintainable over the whole life of the product.

    And if you look at recent DoD instructions and directives you will see government products are being held to high standards. It just may be the case that the individual program is not being managed correctly, think F-35. And if management of a program is bad you can bet they won't know how to reign in contractors that are out to gouge the government.

    The government equipment I work with is better secured and maintained than anything a contractor developed.

    Contractors (at least the leadership and management) just want to be funded to design a product and sell it to the government with no thought of how their development decisions will impact maintenance costs in the future.

    Sometimes they purposely plan on leaving in bugs because they know most government program managers won't catch on and that they will come back to the contractor to fix the bugs in the future.

    reply to this | link to this | view in thread ]

  7. identicon
    Anonymous Coward, 3 Oct 2017 @ 10:22am

    Re:

    It's not like they require almost weekly updates to fix their badly coded software. Oh wait, I'm thinking of adobe.

    reply to this | link to this | view in thread ]

  8. icon
    rkhalloran (profile), 3 Oct 2017 @ 10:50am

    Re: Not this again

    As has been proposed in many places, most prominently at the much-missed Groklaw site, SCO was a niche player, found its Sys-V UNIX lunch being eaten by Linux, and after its deal with IBM to develop for Itanium went down with that ship, launched a pay-us-to-go-away suit against Big Blue for scuttling the development deal (let's not talk about the shenanigans about selling the company & misreading the original USL deal with Novell in the 90s).

    As anyone with three active neurons could tell you, filing a frivolous suit against IBM claiming infringement, when a goodly part of their business relies on running Other Companies' Computers, is unlikely to go well, and it didn't.

    They pretty clearly got some funding from a Microsoft proxy which I suppose was well-spent by showing the total lack of any code infringement by Linux & cementing its place as The Other OS for server rooms.

    reply to this | link to this | view in thread ]

  9. identicon
    Anonymous Coward, 3 Oct 2017 @ 11:00am

    Re: Not this again

    good times, good times.

    reply to this | link to this | view in thread ]

  10. identicon
    Anonymous Coward, 3 Oct 2017 @ 11:02am

    Re: Re:

    i don't know how adobe does it.

    reply to this | link to this | view in thread ]

  11. icon
    ECA (profile), 3 Oct 2017 @ 11:16am

    Only read 1/2 of this..

    Iv suggested long ago..
    A musician learning Computers is BETTER then a programmer learning to do music..

    The problem with the CORPS tends to be creating IRS software.. DO YOU REALLY WANT THE CORP to create the IRS software???
    OR would you rather a person that is willing to LOOK/LOCATE every penny that a CORP OWES THE GOV..

    This is as bad as our Computerized VOTING SYSTEMS, DIEBOLD(?) would not let anyone evaluate..
    I think I know a few tricks that would make them Unhackable.. Unless you took it physically and Corrupted the system, which you would need to do to EACH system. A real independent programmer/hardware person KNOWS all the ins/outs of What has/can be done..
    THEY ARENT into making a backdoor, or Easy access if not needed..

    reply to this | link to this | view in thread ]

  12. identicon
    Anonymous Coward, 3 Oct 2017 @ 11:54am

    Re:

    I've been using the MySQL fork (MariaDB) as long as it's been available. I fucking love it, and there's no Oracle claws in it.

    reply to this | link to this | view in thread ]

  13. icon
    Toom1275 (profile), 3 Oct 2017 @ 12:33pm

    At least Oracle was nice enough to clearly label some of its false narratives as such for us.

    reply to this | link to this | view in thread ]

  14. identicon
    Anonymous Coward, 3 Oct 2017 @ 12:56pm

    For MySQL, I could see Oracle's position. MySQL does not keep any logs, and any hacker who wanted to steal information from or alter a database could break into the MySQL backend, and interact with the database using the SQL language, and there would be no logs.

    That is how one the biggest credit card number number thief, ALberto Gonzalez, was able to do what he did for years, before the Feds caught up to him.

    The Feds have done then when they want to track down someone who posted something on a forum they did not like, and did not want that "pesky" Fourth Amendment to get in the way.

    When someone, say, posts to Wikileaks, the Feds could break into the MySQL backend, get the metadata they needed to trace someone, and Julian Assange would never know the Feds were in his system.

    The fact that MySQL does not have logging is something that does need to be fixed.

    reply to this | link to this | view in thread ]

  15. identicon
    ryuugami, 3 Oct 2017 @ 12:56pm

    Re: Equifax breach

    which happened to target an open source component that Equifax had neglected to patch

    Twice. With a few months inbetween hacks.

    reply to this | link to this | view in thread ]

  16. identicon
    Anonymous Coward, 3 Oct 2017 @ 1:07pm

    Re:

    Mysql does have logs, can log all queries via remote syslog, and make them immutable and tamper proof. You may be thinking of something else?

    reply to this | link to this | view in thread ]

  17. identicon
    Anonymous Coward, 3 Oct 2017 @ 1:10pm

    Considering that ORACLE cannot fix its own software

    when given the (what everyone else would call) adequate information relating to the flaw, why oh why would we trust anything that corporation and its mouthpiece LE has to say.

    They cannot even produce a relational database management system but have consistently fooled many people into thinking that their product is so.

    I reported a specific bug in there DBMS in version 6. It was still there in version 9. I never did test in any later version as I no longer have anything to do with their software, This specific bug meant the difference of fractions of a second compared to greater than 10 minutes on tables containing 10 million and 100 million records.

    I gave them example SQL that demonstrated the problem. They wanted a snapshot of the database, traces, etc for which I had no authority to give (since it contained commercial-in-confidence information). The example SQL would have taken them 10 minutes effort to replicate problem (well that's what it took me) and yet they said they would be unable to replicate without the snapshot, etc. Go figure.

    I gave up on them after that and now use PostgreSQL for any database work that is required. Their software is awful, cumbersome, poorly designed and too overly complex for the tasks at hand.

    And they call the kettle black???????

    reply to this | link to this | view in thread ]

  18. identicon
    jIOw3E, 3 Oct 2017 @ 1:12pm

    This is not surprising, considering that the business model of these bloodsuckers depends on the ignorance of their customers.

    The entire sales pitch usually consists of throwing around buzzwords, like "Big Data", "AI", "Cloud" and "Automation", then scaring the hapless deciders with lots of technical terms they don't understand, and then claiming that their product will solve all problems and do everything that staff used to do. Often their claims are strait-up lies. Countless millions have been wasted on their “solutions”. Parasites.

    reply to this | link to this | view in thread ]

  19. identicon
    Lawrence D’Oliveiro, 3 Oct 2017 @ 1:30pm

    We Know Oracle Is Anti-Open-Source

    Look at what happened to every single one of the open-source projects that Sun was running when Oracle took them over: Ellison & co succeeded in antagonizing all their communities and driving them away.

    We all assumed that the one thing Oracle wanted from that acquisition was control of Java. But even that is now being driven into the ground, with the Google lawsuit, as well as general neglect.

    reply to this | link to this | view in thread ]

  20. identicon
    Darkhog, 3 Oct 2017 @ 1:39pm

    "There's even more nuttiness in the filing, but you can go through it yourself and count how frequently you gasp at just how wrong it is."

    No thanks. I don't want to get a heart attack.

    reply to this | link to this | view in thread ]

  21. identicon
    Anonymous Coward, 3 Oct 2017 @ 2:36pm

    FTFY

    the fact is that the use of open source software has been declining rapidly in the private sector at Oracle.

    reply to this | link to this | view in thread ]

  22. identicon
    Thad, 3 Oct 2017 @ 3:06pm

    Re: We Know Oracle Is Anti-Open-Source

    Not to mention J2EE being handed over to Eclipse.

    reply to this | link to this | view in thread ]

  23. identicon
    Rocky, 3 Oct 2017 @ 3:26pm

    Re: Considering that ORACLE cannot fix its own software

    It's not the IN statement thing? Where you have more than 8 values in a IN statement whereupon Oracle silently decides to forego the index and does a full table scan instead?

    reply to this | link to this | view in thread ]

  24. identicon
    Anonymous Coward, 3 Oct 2017 @ 4:24pm

    Yeah, ditch Open Source and welcome Free(dom) Software.

    reply to this | link to this | view in thread ]

  25. identicon
    Anonymous Coward, 3 Oct 2017 @ 4:47pm

    Re: Re: Considering that ORACLE cannot fix its own software

    close but no. It's where you use a select statement in the IN compared with the list of returned values from that select statement in the IN.

    Dynamically create the the outer select based on the results of the IN select and it runs so much faster that just putting the select into the IN. Official documentation from ORACLE since V6 says that they should return in the same length of time.

    eg.

    select .... from table1 where fld1 in (select fld2 from table2 where ...);

    compare with

    assign the results of

    select fld2 from table2 where ...;

    to a variable as string (say var1) and then dynamically create a new string

    var2 := "select ... from table1 where fld1 IN (" || var1 || ");"

    and then submit and execute contents of var2.

    The second process was measured at less than 1/10 of a second, the former was measured at around 10 minutes. table1 had 100 million records, table2 had 10 million records.

    Go figure.

    reply to this | link to this | view in thread ]

  26. identicon
    Anonymous Coward, 3 Oct 2017 @ 5:26pm

    don't forget the licensing problems

    reply to this | link to this | view in thread ]

  27. identicon
    stine, 3 Oct 2017 @ 6:19pm

    18f

    Wasn't the best example of this someone bidding $1 (the minimum legal bid) to develop some peice of software, and actually doing it? This is the story that Mike should have followed up with.
    Found it:

    https://gcn.com/articles/2015/11/11/18f-reverse-auction-micro-purchasing.aspx

    reply to this | link to this | view in thread ]

  28. icon
    ECA (profile), 3 Oct 2017 @ 7:51pm

    Re: 18f

    Love it..
    In the 1990's the IRS asked for bids for new computer systems..
    After the bids were taken and selected..they had to run them passed the Congress to get things paid for..
    After 2-3 years it was passed..

    The Contract was based on TIME..and what was Available at the TIME of the asked for bid..
    In the 2-3 years, we went from 386 to Pentiums..

    HIS bid being 2-3 years old, HE SUPPLIED what was bid on from the past..and MADE BUCKS..

    reply to this | link to this | view in thread ]

  29. icon
    Mike Masnick (profile), 4 Oct 2017 @ 12:31am

    Re: 18f

    I did write about it and it is linked in the story above. In the third paragraph.

    reply to this | link to this | view in thread ]

  30. identicon
    Anonymous, 4 Oct 2017 @ 12:32am

    We can see Oracle's contributions to Open Source from MySQL. They literally leave it to death. It's not following latest SQL standards for years, engines are not that good and needs some changes on how it works. Thanks for open source community for really good databases including rdbmses and nosql dbs. They are not evil corp just like oracle at least. So; Oracle; shut the fuck up and suck my "ditch"

    reply to this | link to this | view in thread ]

  31. identicon
    spodula, 4 Oct 2017 @ 12:34am

    Re: Re:

    Need to regularly patch oracle? Certainly.
    Actually gets done? Almost never.

    They have arranged the infrastructure so that its basically impossible to patch oracle installations unless your a highly skilled contractor with full access to technet.

    I've worked at a few places that are oracle shops, and no-one patches oracle installations except for major refreshes on new servers every few years. Cos its far too easy to f*k it up and cause major downtime.

    reply to this | link to this | view in thread ]

  32. identicon
    Galyna, 4 Oct 2017 @ 1:23am

    Re: Re: 18f

    I agree with your statement.

    reply to this | link to this | view in thread ]

  33. identicon
    Anonymous Coward, 4 Oct 2017 @ 3:55am

    There's no substitute for in-house expertise

    Career government employees are often faulted -- and sometimes correctly -- for being overpaid and underworked. But the majority of them are dedicated public servants, and it's a serious strategic error to decrease their numbers while increasing the number of contractors.

    Like Mike said, that's how you spend a billion dollars on IT systems that don't work and have to be thrown away.

    reply to this | link to this | view in thread ]

  34. icon
    Ninja (profile), 4 Oct 2017 @ 4:02am

    "and even though both programs are associated with President Obama, the Trump administration has been adamant that it supports both organizations as well, and they're important to continuing to modernize the federal government."

    Don't! Now Drumpf is gonna scrape it.

    Ahem. Oracle just needs to hit the lobby gland the right way. Just look at the FCC.

    reply to this | link to this | view in thread ]

  35. identicon
    Anonymous Coward, 4 Oct 2017 @ 7:51am

    FOSS = Waste?!

    "...some front groups who argue that these programs are a waste of government money, which would be better spent giving billions to private contractors."

    How is this not treason?

    reply to this | link to this | view in thread ]

  36. identicon
    David, 4 Oct 2017 @ 8:48am

    Re: FOSS = Waste?!

    It's not as much treason as a non sequitur. If you need software available by a certain point of time, there is no dependable way around actually giving money to private contractors in return for guaranteed delivery deadlines. But that has fuck-nothing to do with whether the results may be made FOSS and/or be it even while in development and/or involve crowd-based processes.

    reply to this | link to this | view in thread ]

  37. identicon
    Oracle is boring and slow, 5 Oct 2017 @ 9:50am

    Oracle is just salty

    Oracle once again is just mad their crappy software is at the level of free software. Drupal + mysql is better than oracle + shitty proprietary web app which costs the client money to change copy on a screen. Not only is oracle archaic and outdated, developing DB objected and SPs just to do simple things that Drupal does out the box with mysql is not a standard anymore, it's the old way of doing things, which cost clients more money to have rigid non-flexible projects which cost to do changes. Drupal 8 is the future of enterprise, there is no competition as of right now.

    reply to this | link to this | view in thread ]

  38. identicon
    Anonymous Coward, 5 Oct 2017 @ 6:47pm

    Re: There's no substitute for in-house expertise

    In fact those dedicated employees are usually taking a pay cut to be there as opposed to working in industry.

    reply to this | link to this | view in thread ]

  39. identicon
    DA, 8 Oct 2017 @ 10:51am

    What a riot!

    It's easy to make fun of Oracle -- they're bombastic and arrogant, and have a history of shaking people down on licensing. But to claim 18F and USDS are paragons of virtue is just as bad. Everyone has agendas and not all of them have the long-term interests of the government and citizens.

    While the Oracle response shows the tone-deafness of lawyer-speak, it might be more interesting to examine their claims in a balanced manner instead of engaging in virtue-signaling posturing.

    For claim one, you really don't want the government acting like SV do you? Old boy networks of VC funding where 95% of what gets funded either fails, evaporates or is flipped via IPOs to a gullible public who gets saddled with buggy vaporware that demo'd well at TechCrunch Disrupt? Sure, the innovative spirit to try stuff and quickly find out what works and what doesn't is a better way to build software than letting out 10-year aircraft-carrier procurements, but it's not all sunshine and roses either.

    Oracle is right about the main cost of custom software being labor -- for development and maintenance. And your special full-stack custom solution that you labored over last year is something you'd be embarrassed to support this year. And heaven help the poor shlubs who won the O&M contract to support your flash-in the-pan inspirational ORM framework. Like everything, people need to make the right choice about the mix of COTS, OSS and custom code that make up a system and those choices aren't about your belief system -- they're about the need to build and support a cost-effective, reliable, secure, agile and responsive application. All COTS? No. All OSS? No. All Custom? Hell no. When there are good COTS / OSS solutions there should be no need to build custom solutions. Just ask David Bray.

    Open source is great when it works, but the idea that all software should be free does have the problem of how the developers actually get compensated for their work. Charging the government over and over to build the same code happens less often than you think, since every agency thinks their mission is "special" and unique. And the fact is that a lot of open source software gets abandoned or torn apart in forking wars. I suspect Oracle's definition of OSS is different than most -- in their world Cloud Foundry, MySQL and Linux aren't OSS -- they're purchased and supported software from Pivotal, Oracle and Red Hat. It's likely that most commercial companies don't rely on pure OSS, but partner with a vendor for support and service.

    Anyway, just wanted to drop in and add some balance to the discussion. You can go back to bashing Oracle now.

    reply to this | link to this | view in thread ]

  40. identicon
    Anonymous Coward, 9 Oct 2017 @ 8:24pm

    Re: What a riot!

    I'm curious how you think a bunch of straw men is "balance."

    (Also, when you complain about imaginary "virtue signaling," you are only signaling one thing.)

    reply to this | link to this | view in thread ]

  41. identicon
    Anonymous Coward, 10 Oct 2017 @ 7:55am

    Re:

    To be fair though, Oracle is passing Java EE to the open source community, so it isn't really going away. And Oracle is even being pretty open about the process. Not that I have any major love for Oracle, but it looks like they are handling the Java EE transition pretty well.

    http://www.zdnet.com/article/oracle-prepares-to-spin-off-java-ee-to-eclipse-foundation/

    reply to this | link to this | view in thread ]

  42. identicon
    Anonymous Coward, 11 Oct 2017 @ 10:16am

    Re: Equifax breach

    They also had other branches where the username and password were admin:admin. For an actual live server and not just a test bed fed garbage.

    reply to this | link to this | view in thread ]

  43. identicon
    Anonymous Coward, 16 Oct 2017 @ 9:47am

    Re: Re:

    Pretty sure the commenter was referring to archive logs, not syslogs.

    reply to this | link to this | view in thread ]


Add Your Comment

Have a Techdirt Account? Sign in now. Want one? Register here
Get Techdirt’s Daily Email
Use markdown for basic formatting. HTML is no longer supported.
  Save me a cookie
Follow Techdirt
Techdirt Gear
Shop Now: Techdirt Logo Gear
Advertisement
Report this ad  |  Hide Techdirt ads
Essential Reading
Techdirt Deals
Report this ad  |  Hide Techdirt ads
Techdirt Insider Chat
Advertisement
Report this ad  |  Hide Techdirt ads
Recent Stories
Advertisement
Report this ad  |  Hide Techdirt ads

Close

Email This

This feature is only available to registered users. Register or sign in to use it.