The fallout continues.

Okay, so I swiped the headline from the video, but it's pretty much a given.

Further to my previous blog entry about Hashicorp's decision to change Terraform's license, I mentioned how the OpenTF Initiative put a choice to Hashicorp: change the license back or we will fork Terraform.

Unsurprisingly, Hashicorp didn't comply, so now Terraform has (or will be) forked as OpenTF at [github.com/opentffou...](https://github.com/opentffoundation)

This story has been covered in several places including The Register and several videos on YouTube including a nice short summary by Fireship

If the fork goes ahead, I'm curious as to whether Hashicorp sees it as a competition and goes after the foundation, but if it does, what little reputation Hashicorp has left in the OSS community will be nigh on destroyed.

Meanwhile, I'm going to continue playing with Pulumi in case the OpenTF doesn't work, gets blocked or if we need another alternative.

Two major updates recently

Firstly, as suspected, I finally got the notification saying that Google Domains' registrations would be acquired by SquareSpace so all my registrations would be transferred over them should I not do anything. Obviously, I didn't want that, so I transferred them over to AWS (Route 53) so now my domains are registered with AWS, but are DNS managed by Cloud DNS. I had some weirdness when trying to migrate all my domains in bulk, with respect to the auth code not being accepted on one of the domains when doing the bulk migration, but it was accepted when I did the migration on that one domain alone, so... go figure.

Next update is Terraform. In case you didn't know, Hashicorp has changed the Terraform license and essentially made it no longer open source. This behaviour is similar to what Red Hat did with its RHEL offering and the backlash is just as bad.

Immediately I knew someone would fork it, and already, there's the OpenTF Initiative and this is the key part:

Our request to HashiCorp: switch Terraform back to an open source license.

We ask HashiCorp to do the right thing by the community: instead of going forward with the BUSL license change, switch Terraform back to a truly open source license, and commit to keeping it that way forever going forward. That way, instead of fracturing the community, we end up with a single, impartial, reliable home for Terraform where the whole community can unite to keep building this amazing ecosystem.

Our fallback plan: fork Terraform into a foundation.

If HashiCorp is unwilling to switch Terraform back to an open source license, we propose to fork the legacy MPL-licensed Terraform and maintain the fork in the foundation. This is similar to how Linux and Kubernetes are managed by foundations (the Linux Foundation and the Cloud Native Computing Foundation, respectively), which are run by multiple companies, ensuring the tool stays truly open source and neutral, and not at the whim of any one company.

OpenTF Initiative (https://opentf.org/)

Essentially, make Terraform open source again, or a fork from the MPL version will be made and maintained separately from Hashicorp's version. This will essentially lead to two, potentially diverging versions of Terraform, one BUSL and one MPL licensed

I'm already looking at alternatives and the two currently that I'm looking at are Ansible and Pulumi

Ansible I've had experience in , but there's two main issues with it:

• It's underused compared to Terraform and the providers are woefully undersupported and undermaintained
• It's Red Hat

Pulumi I've heard lots of good things about, but its a new technology, and I don't know if it is can "Import" existing infrastructure.

Guess a "spike" is worth doing for it.

It's been quite a long time since I did any updates on this blog so a couple of updates are in order

House

I've now been living in the new place for just over a year. Generally everything is good, we've started putting in a lawn and currently letting it get its roots in before we try to cut it

Twitter

Oh, boy, what an absolute train wreck. I've tolerated Elon's presence at Twitter because most of the stuff he did wasn't far off what Jack was doing prior. But cutting off all third party clients, forcing everyone onto the new TweetDeck (which likely will be paywalled too) has literally driven users away. Twitter has been losing users and revenue constantly, and it is totally unsurprising.

I've disabled my two TweetDeck profiles (a professional one, and a casual one) from Ferdium. But I doubt I will be going back any time soon.

Red Hat

Another train wreck of a situation. Red Hat's decision to first kill CentOS's stability, then for RHEL sources to only be accessible behind a subscription has pissed of a lot of users, even if it's not strictly speaking against license.

The only one left in its sights will be Fedora so that leads me onto the next update

Manjaro & Archlinux

I've been tinkering with Manjaro more and more lately, with its rolling release schedule meaning I never need to upgrade from a major version to another major version.

It's downside I'm finding is that some packages, especially those in the AUR are essentially "compile from source" packages which does the build on your machine during the install. This can take a varying amount of time depending on the code. With my RSS reader of choice: QuiteRSS, this build takes a mind numbing 2.5 hours to do, even on a high spec machine.

That's where I found out about setting up your own Arch repo. I've been tinkering with that, setting it up on GCP and fronted by a CDN. This works pretty well, but I still need to find how I can do scheduled builds to keep that up to date, but it looks like I'll be switching to Manjaro at some point in the near future. Sound works fine, using lyncolnmd's work.

Another downside with Manjaro, however is that its btrfs filesystem, my home directory backup, and CloneZilla don't seem to want to work well together

Wordpress & Domains

One final update, I will likely be transferring out the blenderfox.com domain out of Wordpress, while I had this registered as part of the blog, I'm finding it much harder to maintain this domain using Wordpress's very limited DNS management tools. I will likely transfer it out to Google Domains, even though there's talk of them shuttering that service. Secondary service would be AWS.

This weekend was the coronation of King Charles III, the first new monarch for most of the people in the UK. Some may have been alive for the late Queen Elizabeth II's coronation but the are few now.

I was working coronation support cover on the Saturday from around 6:30am to about 3pm. Fortunately no major issues. One alert towards the tail end of the day, but that was about it.

Sunday were the street parties. Our local one was relatively small compared to the one during the Jubilee celebrations. Was great for the local kids though, and the weather was perfect for it.

Monday is a Bank Holiday so no-one was working in the London office, although the other offices were still working.

I chose today to retry doing my Manjaro file copy, and again it failed with checksum errors when I tried to back it up (even the btrfs check didn't manage to fix it)

I guess I'll have to restart my Manjaro attempts and not use btrfs -- probably return to using ext4 and lvm.

This article popped up on my Google News feed and the first thing that caught my eye was the fact the headline mentions they were sacked, but the subheading says "affected due to layoffs"

Laying someone off is not the same as sacking them. As someone at work explained: sacking someone is when you keep the role but do away with the person; layoff is when you do away with the role, but (sometimes) keep the person. These workers were laid off since they also got severance pay. Something you'd never get if you were fired.

In fact, this article may get the writer and the publication in trouble. Being fired has a far more negative impact on your career than being laid off so anyone of those 140 workers trying to get jobs elsewhere may find it harder to get a new job if their prospective employers do a basic internet search and find this article that implies (incorrectly) that they got sacked.

[www.indiatoday.in/technolog...](https://www.indiatoday.in/technology/news/story/github-sacks-entire-india-engineering-team-around-140-of-them-2352591-2023-03-28)

It's been a while so here's a few updates in the meantime

It's coming up to a year since I moved house and only now have the pile of construction rubbish been moved from outside my old flat. Dumping of rubbish by the neighbours in the adjoining block of flats into the garage is still happening.

Conservatives lost control of the area to Labour but I'm seeing absolutely no change

We went through a period of very cold weather (-6degC) and this was costing us £10-£15 per day in gas usage.

Moving onto other updates. As posted previously, I went into hospital to remove a lump from my mouth. I'll soon get a follow up call from the doctor to check how I'm doing. Stitches took about 10 days to dissolve. I just have a small white patch there now where the lump was removed and the doctor cauterised the wound.

Twitter has descended into a real s**thole since Elon took over. First killing all third-party clients and then indicating it may start charging for API usage.

The third-party client purge I can tolerate -- it was originally started during the Jack era, but charging for API usage, or even limiting tweets per day is not something many people will accept.

I started working on stripping out twitter functionality from my TFL updates bot and that's near enough done now. It now tweets (or should that be toots) into a Mastodon account at https://mastodon.xyz/users/updatesbf

RSS feed functionality should still work, but it is not enabled yet, until I can get Keda to work.

A step in the right direction

Australia to require social media to 'unmask trolls' • The Register

It's been a long time since I posted on here -- my last post (before today's posts) was July 17 when I had to self isolate. A lot has happened since then, so this post will be a bit of an update list

I had to take my dad into hospital for a prostrate operation (this was planned before I had to self-isolate) -- he already had a PCR test and was cleared. My LFT was also clear, but I still had to self isolate. This was before the self-isolation changes happened. The operation was successful, but he needed to be held a few more days to see an ENT specialist due to them finding lumps in his throat. The concern was that they might be cancerous, but turns out it was just irritation so they gave him some Gaviscon to take after means and soothe the throat. Both my dad and I are prone to post-meal throat irritation so it might mean I might be subject to the same thing later in life.

I got a ticket after driving my dad to the hospital for taking a left turn when I was not supposed do, due to badly signposted roads. My appeal was rejected on the grounds I had paid the ticket. This is how the council screws you over -- if you pay the fine to avoid the 100% charge, they will claim that admits guilt. If you don't, they delay the response until after the 2-week window so you then have to pay the 100% charge.

I finally decided to upgrade my phone and went for a OnePlus 9 Pro. The phone is classed as a "Phablet" and much bigger than the Samsung Galaxy S5 I have been using for years:

The case on the left is for the OnePlus, the case on the right for my S5

I had problems activating the new SIM and eventually Three had to send me a new one, and soon after I got that new one, I got a message saying Three were going to be doing works on the mast in my area and ever since then I have had horrendously bad speeds at home. By bad, I mean speeds of < 1Mbps and even down to 0.2Mbps. Using 3G band sometimes helps, but only marginally.

I've taken my complaint up to the Ombudsman but Three are still refusing to do anything about it -- even charging me to leave contract early.

I've been with Three many years but I will not be recommending them going forward. I will be checking other providers when my contract expires.

We've started to go back to the office. My team is doing three days a week in the office, and you pick which three days as long as there are a max of 8 people in the office (due to some office reorganisation, we only have 8 seats for the entire team).

Surprisingly many people have left jobs during and post lockdown (some might have been nudged due to the lockdown, and not just in my office, but generally.)

I won a Twitter completion by Curve for a swag bag. Just had to tweet them three images of their different adverts -- all of which showed up on the same station, so that wasn't too difficult.

Then we had the annoying as heck "Panic at the Pumps" causing shortages.

This video from my dashcam shows the queue of traffic. This is the queue leading into the Alperton Sainsbury's. I was there at around 5am and it took me 30 minutes to clear the queue even with less people in the queue. This queue will probably take 90 minutes to clear, assuming the fuel was not gone by the time they got to the front of the queue

This video, also from my dashcam shows the queues that built up outside the petrol stations -- this Esso I actually went into at 4:30am that morning and they were not open, even though there were staff in the shop (so maybe they were waiting for delivery?)

You'll get people tooting impatiently and even people cutting the queue and then blocking the lane for the people behind (they must be luxury car drivers)

My house purchase has progressed and we have moved on and are now ready to exchange. However, one of the two sellers is unable to complete his purchase (he's part of a chain and needs to complete his purchase before he can complete the sale on the current house).

Finally, I got a letter from Principia Law who are the ones trying to claim money back from the drunk driver who wrecked my previous car.

They want me to release my bank records for the period of time I had the hire car. But everyone I have discussed this with seems confused as to why this is required since the accident is a "no-fault" claim on my part, so they should not even need my bank details.

I asked them to call me today to discuss this. I may also speak to the office legal team for their thoughts.

Yes, that's right, another place plans to ditch Microsoft and go to Linux and OpenOffice

Missed logging from yesterday. I did my walk later than normal, as I had to pick up my dad from hospital after an operation.

England were playing in Wembley against Germany last night, though I am not much of a football fan and don't really follow matches.

I didn't even think England would beat Germany, based on their history.

On my way back from my walk, I came across a group of teenagers with England shirts on. They saw me and started singing "It's coming home" to me. I just looked blank and confused (being a chinese person, I guess they thought I couldn't understand them). One of them put their fist out for a fist bump. Now *that* I knew and met the bump before heading off.

England won 2-0 against Germany but you never would have guessed. Normally, when England score a goal or win a match, you hear massive cheering from the neighbours and then celebrations in the streets -- people driving their cars with the windows down screaming "En-ger-land!"

None of that this time.

There's a nice CNBC documentary talking about OSS and how it's pretty much taken over the world. Proof if it was needed that open source is better than closed source in pretty much every scenario.

I say "pretty much" since there are definitely certain scenarios where open source is not the best option, such as proprietary encryption algorithms or something that is company-confidential.

Well, this is a bit of a surprise, but not too much a surprise.

Regular readers will know I'm a FitBit user and have been for a few years.

You'll also know that I'm an Android user, and Linux user.

So I just read this article, about Google acquiring FitBit. I'm curious to see how they incorporate FitBit and whether improve it or destroy it....

[www.engadget.com/2019/11/0...](https://www.engadget.com/2019/11/01/google-buys-fitbit/)

And a Press Release has just been found in my inbox:

[investor.fitbit.com/press/pre...](https://investor.fitbit.com/press/press-releases/press-release-details/2019/Fitbit-to-Be-Acquired-by-Google/default.aspx)

Not often I post on problems at Google, but this is actually an interesting situation.

https://arstechnica.com/?p=1518703

Google had an outage the other week, and it knocked out several websites GitLab, Shopify and impacted others. Gsuite, Gmail, YouTube were affected, but not down.

There are some interesting lines in this article:

for an entire afternoon and into the night, the Internet was stuck in a crippling ouroboros: Google couldn’t fix its cloud, because Google’s cloud was broken.

Google says its engineers were aware of the problem within two minutes. And yet! “Debugging the problem was significantly hampered by failure of tools competing over use of the now-congested network,”

In short, Google Cloud broke due to congestion, Google couldn’t fix the problem because their tools required using the network that was now congested

The biggest bombshell news in tech recently was that RedHat are being bought by IBM. And in one of the WhatsApp groups I’m in, someone posted this:

So this guy did 650 + 650 + 100 km….. Impressive.

But it does prove the effectiveness of having the right mindset.

www.odditycentral.com/news/man-…

My personal @github repos are now migrated to @gitlab.

As for why I chose to do this?

www.tuxmachines.org/node/1127… and techrights.org/2018/06/1… for starters…

jacquesmattheij.com/what-is-w…

Sad news that M$ are to acquire GitHub. I suspect I’ll start getting Windows adverts in my email inbox soon as my office uses GitHub

On the plus side, this LinuxJournal article has proposed some alternatives. GitLab is a good one and even mentioned on some job listings so I guess I’ll move my repos there.

I’ll be removing my GitHub repos…

www.linuxjournal.com/content/m…

Have a giggle with this :-)

youtu.be/SKV6h_5XF…

twitter.com/9NewsSyd/…

There is a new story doing the round about how Twitter found that it had stored user’s password in the clear in an internal log. Whilst reading it, I got this email from Twitter:

While this isn’t the first time a big company has done this (Github for one also did this), it seems unbelievable that a big company like Twitter would get itself caught out by this basic, common sense security practice. Pretty much every YouTube video and article about correctly handling passwords will tell you not to store them in the clear and only store them as hashes (with salts, preferably). Hashing algorithms are meant to be really difficult or impossible to reverse, meaning you can’t (easily) use the hashes to determine the original passwords.

Some examples from a quick YouTube search – Tom Scott’s video’s really good btw :), although is comment about “using login using Twitter and let them store your password for you” is a bit ironic :P

www.youtube.com/watch

www.youtube.com/watch

www.youtube.com/watch

The fact that Twitter has our unencrypted passwords on disk… does this mean Twitter has been saving our original passwords before hashing them?

More to the point - whilst Twitter are quick to point out that no-one at the company can see the masked password, they don’t mention who has (or had) access to the unmasked passwords in the internal log. Or for how long…

Twitter users who had their accounts on private may not have been as private as they initially thought….

Durian has had a reputation of being a stinky fruit and it’s a well-deserved reputation. This fruit has a smell that can carry over a mile. Literally, on a visit of Malaysia, you could tell when there was a roadside stall selling Durian coming up by the smell.

However, in my opinion, the smell of Durian and the smell of gas are not alike at all…

And here’s what a Durian looks like if you’ve never seen one before…

Source: mashable.com/2018/04/3…

Facebook have been having a lot of bad publicity lately (and I would personally say it’s long overdue) and a lot of it over privacy. Now, there’s talk about Facebook lifting SMS and phone call information from Android phones with consent. Yes, Facebook asks for it, but you can (and should) refuse it access.

Later versions of Android allow you to revoke and change the permissions given to an app, and also prompt you again if the app asks for it.

My Facebook app has very little permissions on my device because I don’t trust it a single bit.

I also have Privacy Guard enabled and restricted. Whenever it wants to know my location, I can refuse it.

Saddened to hear about Stephen Hawking this morning.

While some may not agree with him on certain things, few can dispute his genius.

And the film of his life with Eddie Redmayne is an absolute blast.

youtu.be/KRa_Qps9N…