Unable to load image

Moq, an open source mocking library for .NET, is harvesting emails because nobody wants to pay the dev

https://github.com/moq/moq/issues/1372#issuecomment-1670865839

The developer finally grew a spine and realized he didn't want to do it for free. So he added some code to his library (SponsorLink) that runs in your IDE, reads your .gitconfig, checks if your email address is registered as a sponsor, and possibly slows down your build if it's not.

Reddit reactions:

https://old.reddit.com/r/programming/comments/15m2q0o/moq_a_net_mocking_library_now_ships_with_a?sort=controversial

https://old.reddit.com/r/csharp/comments/15m2lg2/moq_now_ships_with_a_closedsource_obfuscated?sort=controversial

https://old.reddit.com/r/dotnet/comments/15ljdcc/does_moq_in_its_latest_version_extract_and_send?sort=controversial

I wonder if anyone at Microsoft uses this internally 😂 Hope they get their emails harvested

The Github issue and Reddit threads on this are pretty calm. Maybe there will be more drama in the coming days/weeks, when companies forbid their employees from using this library, and code monkeys have to rewrite all their unit tests. Redditards are trying to reportmaxx SponsorLink but nothing has happened yet.

68
Jump in the discussion.

No email address required.

I think the extreme success of the free software, but more broadly open source, model of development has been amazing but clearly the ideology didn't keep up with growth. Now we have a lot of devs who never had heard of free software principles and confused when they get zero $$ in return.


Follower of Christ :marseyandjesus: Tech lover, IT Admin, heckin pupper lover and occasionally troll. I hold back feelings or opinions, right or wrong because I dislike conflict.

Jump in the discussion.

No email address required.

I think the issue is more that large numbers of projects depend on open source repositories whose devs cannot sustainably maintain it for free. It's all well and good releasing a free tool, but when half of the internet needs it maintained but don't want to fund the time to do so you end up with this sort of shit.

Jump in the discussion.

No email address required.

Just don't maintain it then. :marseyconfused:

Jump in the discussion.

No email address required.

But you don't understand they need 11 line package! DEVELOPMENT IS AT RISK OTHERWISE!

Jump in the discussion.

No email address required.

They typically don't, but then put up with constant screeching about how shitty "the dev" is.

The response is usually "if you want it maintained then donate".

Jump in the discussion.

No email address required.

Clearly soydevs are too stupid to market themselves as consultants for their own software so they get huge payouts whenever companies have a problem. Also the new autocomplete github tools are pretty scary in how this just removes any need for low level programming skills. Things will be fricked when the last soydev who nows C/C++ retires.

Jump in the discussion.

No email address required.

new autocomplete github tools

how useful is it

Jump in the discussion.

No email address required.

amazing if you know how to program, 10x speedup unironically

incredible foot gun if you're a monkey that writes code barely knowing what you're doing

Jump in the discussion.

No email address required.

It's actually pretty good, it won't really write new code for you but it's perfect for when you're sitting at the start of a line trying to remember what you were going to write, it usually pops up with something similar


:#marseyviewerstaretalking:

Jump in the discussion.

No email address required.

Not at all :#marseycope:

Jump in the discussion.

No email address required.

Free software principles don't prevent monetization, it's “free as in speech”, not “free as in beer”

Jump in the discussion.

No email address required.

Yes usually if you go into these things from first principles you'll see the possible avenues of monetization but will also be doing it for moral reasons which will make it sting less.


Follower of Christ :marseyandjesus: Tech lover, IT Admin, heckin pupper lover and occasionally troll. I hold back feelings or opinions, right or wrong because I dislike conflict.

Jump in the discussion.

No email address required.

Yea I ran an open source project for a while, 1000 daily downloads (but a lot of those would be users updating) and over 2 years I made ~ 100 bucks.

Jump in the discussion.

No email address required.

They dont even market themselves or provide an avenue for companies to get support through them. Then one day they realize they are doing it for free and put in malware to cope, few months will go by and the project will be dead and archived.

Jump in the discussion.

No email address required.

I wonder if anyone at Microsoft uses this internally 😂 Hope they get their emails harvested

They do use it, but that might change lol.

https://i.rdrama.net/images/16915910126951506.webp

Jump in the discussion.

No email address required.

Open source is communism. that is why I will never donate to a single open source project including rdrama

Jump in the discussion.

No email address required.

It is and that's a good thing

Jump in the discussion.

No email address required.

Same

Jump in the discussion.

No email address required.

I really don't care about this because I don't write unit tests ever, I even forgot how to write them :marseycool2:

edit butt frick me, i might have to start re writing old tests if MEND reports this as a vulnerability :pepereeeeee:

Jump in the discussion.

No email address required.

Unit testing is for girls and queers. :marseycool2:

Jump in the discussion.

No email address required.

https://media.tenor.com/H0jo6L01Lo8AAAAC/exactly-jack-donaghy.gif

but then sonarqube says 0% coverage and rejects PR :pepereegun:

I make it optional tho despite company policy :marseysmug3:

Jump in the discussion.

No email address required.

Same but with QA.

:soycry: how will we know if this feature has a bug?

:c!had: when pagerduty pings the on-call dev

Jump in the discussion.

No email address required.

I wonder if anyone at Microsoft uses this internally

Yes, all over the place. At least as of 2 years ago

Jump in the discussion.

No email address required.

Good find! Author showing their :marseyneko: in assuming no company has all private git server.

Jump in the discussion.

No email address required.

https://media.giphy.com/media/CAYVZA5NRb529kKQUc/giphy.webp

Jump in the discussion.

No email address required.

https://github.com/moq/moq/issues/1372#issuecomment-1671627931

This package is no longer GDPR compliant, under Article 6 on unambiguous consent for collection of email. Regardless of what they are doing with the email address they need informed consent before capturing it.

Time to move away from this package.

:#soyreddittalking:

Then I guess you have no issue giving us all your private email address and phone number since you already shared it with other entities?

Of course that's not how it works, you want to choose with whom and when you share your information, as insignificant as they are.

:#soyjakanimeglassestalking:

[email protected] and 555-55555

:#chadtalking:

My point exactly; you don't want to do this.

:#chudragetalking:

Jump in the discussion.

No email address required.

Jump in the discussion.

No email address required.

linus with a stache?

Jump in the discussion.

No email address required.

Oh wow, really glad I stopped using moq.

Jump in the discussion.

No email address required.

Lol BSDcels

Jump in the discussion.

No email address required.

Jump in the discussion.

No email address required.

Link copied to clipboard
Action successful!
Error, please refresh the page and try again.