1,505 comments

[ 3.3 ms ] story [ 421 ms ] thread
I guess it's time to move to Gitlab.
MS has had an 180 degree turn in policy since Balmer left.

Lately they released amazing open-source projects with VSCode being the most prominent one.

I simply have little trust in MS. They did improve in some areas, but not enough to gain overall trust. They are still not on the same page with many FOSS efforts.

Company which actively pushes lock-in and patent aggression is not a good steward for FOSS projects.

particularly when most microsoft investors value microsoft stock for its earnings potential, as opposed to growth/revenue potential.
Add to that Microsoft's position about copyrightability of APIs. That alone should be a red flag for many FOSS projects to avoid Github if MS buys it.
And TypeScript <3!
Looking at Windows 10, with stuff like telemetry that's impossible to disable completely and hidden behind every dark pattern imaginable, or ads in Start menu?

Microsoft of today is more Microsoft than ever.

Eh. Windows today might be more Microsoft than ever, but the rest of the org is spending lots of effort creating cross platform developer tools that's preparing Microsoft to remain relevant in a world that doesn't involve Windows PCs.
True, they went from Scroogled to mandatory telemetry, while focusing on renting out servers at ridiculous markups. Don't forget the new focus on the Windows Store either.

Meanwhile, all their non-developer-focused products are still Windows-only and closed-source.

They really haven't. Maybe like a 150 degree turn at best.
(comment deleted)
As i know it started under Balmer, but he have to left because the failed phone OS.
Honest question: do the still threaten Linux-related companies with suing for violations of unspecified Microsoft patents?
Last time I've heard, MS is still shaking down many mobile manufactures who use Android, using patent protection racket.
I am gonna wait and see. I know they messed up Skype really bad, but LinkedIN for example they havent touched and destroyed. I will wait and see..
LinkedIn is kinda hard to make worse though tbh
Microsoft screwed up Skype by trying to “make it more Microsoft” whereas LinkedIn is being left to operate as before (tough MSFT is using the data for something). My guess is that GitHub will continue as before with the main change being that MSDN subscribers will likely get private GitHub repos as part of their package.

Now MSFT just needs something along the lines of Jira to replace the dog’s breakfast that is VSTS Agile project management tooling. I don’t suppose the folks in Redmond are looking to acquire Atlassian next...?

You dont pay 2 Billion, and leave it untouched, they see an earnings potential in the company given the right management and shareholders expect ROI that is higher then the average market return
The earnings are getting people who already have code in GitHub to also buy into Visual Studio App Center, Azure, all other Microsoft value-adds. By not leaving GitHub untouched otherwise reduces the chances of spooking the current patrons of GitHub. Makes nothing but sense to me.
Thanks for this comment.

Most of the discussio here is just centered around Microsofts goodwill and trustworthiness, mostly ignoring that MS wouldn't make this investment without a solid plan and path to profitability.

That doesn't have to be bad per se, I guess there are a lot of options like integrating Github well with Azure and providing alternatives to AWS CodeCommit / pipelines, ...

Microsoft can monetize the data in a way that github themselves couldn’t. It can also afford to lose money for strategic reasons.
Although I completely agree with you, pointing at LinkedIn as a success story is kind of weird.

Microsoft's new future is to be a cross-platform vendor for developers. I see absolutely zero incompatibility between Github and Microsoft and a need to shut it down. I think the Satya's Microsoft is smart enough not to ruin it.

Or you can move immediately like many others. What would you gain by staying until it's too late?
It's good that there is such an alternative as GitLab, because there is a slight but still not unsignificant risk that MS will not do the right thing. I think they will though since they are power users of their own product. I'm hoping they know this space.
I thought many people did after the infamous incident at Github.
Some did, but this will be another major incentive.
I think the majority of the Github users started using the platform in the time since that, and don't even know much about Github's history.
(comment deleted)
Tbh, I like this move. I hope they will merge Atom with VS Code and shutdown VSTS in favor for GitHub.
Atom and VS Code are both built on Electron. No need to kill Atom as it and VS Code are built for different purposes.
What different purposes? They're both text editors / lightweight IDEs focusing on plugin extensibility built on top of Electron. They're literally the same thing.
And there are many who would say a sedan and a crossover are basically the same thing, but the devil is in the details.

Atom is extensible to a fault. A plugin can do just about everything and anything. FFS tabs are actually a plugin! While that means that performance will suffer, many (myself included) use Atom because of that insane freedom that plugins have to do what they need to do.

VSCode on the other hand is much more "if you want to do X, use this API". It's much more controlled, much more opinionated about how things "should" be done using VSCode as a platform.

From 30,000 ft, they are the same. But their goals and details differ, and I always prefer more choice rather than less.

(comment deleted)
(comment deleted)
I use neither, and I can see that the two take fairly different approaches, but why would you say they're build for different purposes. I don't think it's clear why a single org (though very far apart) has two approaches for a code text editor.
Atom has a whole team under Github. If they're both run by Microsoft, that seems like a clear cost-cutting measure; why develop two vastly similar electron-based code editors when you could just move that team + all of the interesting tech into VSCode?
Why do you hope for this outcome?
Probably less redundant work and overall a better editor/IDE?
I wonder if they will merge VSTS or shutdown VSTS, or maybe just add CI and CD from VSTS to github
I used to be a big fan of Atom in the beginning, but there’s nothing Atom does that VS Code does not do better. I wouldn’t see a purpose in merging the two, but I could see them killing Atom.
I agree on the VSTS front, but a lot of people use Atom and I can see many of them being put off by being forced onto VS Code.

Lately, based on comments made while promoting .NET Core, it sounds like Microsoft don't want to consolidate tooling, so it wouldn't surprise me to see Atom and VS Code co-exist as entirely separate entities/teams.

I'm also optimistic they'll revamp GitHub's pricing structure. Their current price of $7 a month is absolutely absurd for individual developers. I can get a pretty decent VPS for $2 a month cheaper. Considering that most of their competitors give small teams free private repos, their price should be half of that. I understand that they have a lot of open source projects to subsidize and all, but I highly doubt a lot of individual developers are biting at that price.
I don't understand why a solo dev needs to host his private repos somewhere. You can just keep it on your machine, and have it backed up with the rest of your data. And given git is distributed, you should be able to work with teams w/o requiring Github.
It's a convenience thing for me. As a hobbyist solo dev it'd be nice to have a place to work on code across different devices in private and then open it up when I feel the code is mature enough and the time is right to put it out there under an open source license.

Right now I use VSTS for private repos, but it'd be nice to be on GitHub were the vast majority of open source projects are hosted.

I can only speak for myself, but I like hosting private repos on GitHub because I like using issues & milestones to track my progress
Especially when you have free bitbucket for that purpose.
This completely misses the forest for the trees.

I currently pay for GitHub, personally. This has the following benefits:

- Easy to collaborate with other people if I want to invite them to my projects.

- Web-based code hosting, meaning I can access my code from anywhere regardless of whether I have access to my own machine or not.

- A web interface! This is quite useful for browsing code or sharing particular snippets with others.

- Integration with third-party tools. Almost literally every code-related service that offers integration will integrate with GitHub – things like CI servers etc. for example. This means basically zero-effort setup for many other tools.

The cost to me is basically a rounding error, and the utility is great.

> Considering that most of their competitors give small teams free private repos, their price should be half of that.

Why would you lower your price if people are still paying for it and you are the market leader? Also at $7 per month it is among the cheapest tools for a professional developer.

> I'm also optimistic they'll revamp GitHub's pricing structure.

Well, it's Microsoft, so more complex tiering and tie in to MSDN should be on the road map.

> Their current price of $7 a month is absolutely absurd for individual developers.

How so?

> I can get a pretty decent VPS for $2 a month cheaper.

Perhaps, so what? That's an unrelated service.

> Considering that most of their competitors give small teams free private repos, their price should be half of that.

Their competitors do that to build a user base and mind share in the face of GitHub’s huge advantage in network effects.

VSTS does a lot of things that GitHub does not. VSTS takes the workflow roles of Jenkins, GitHub, Jira, and has a few additional features that I don't know what open-source equivilant exists for (staged production, push to cloud - maybe done as Jenkins plugins?). It's highly unlikely VSTS will be shut down, especially in favor of a project which does very few things that VSTS does.
If they shut down vsts they would have to make github have vsts’ level of issue management, ci/cd, test management, ...

I think most people who use github would NOT want that.

Not surprising. Microsoft has made a big deal of partnering with GitHub, showing off how well their Azure-based CI/CD products and services integrate with code hosted at GitHub. Not to mention that .NET Core and many companion libraries are hosted at GitHub, not on VSTS.
Step 1: Embrace.
We still have Gitlab if MSFT decides to do anything malicious.
I don't think the big loss here is GitHub-the-software, but this short sweet period in time where everyone, from Microsoft to Apple, had their source code on the same platform. I doubt that e.g. Swift would have moved to GitHub if it had already been owned by Microsoft.
Agreed. Having GitHub be the place for OSS code has definitely been beneficial and convenient. That being said, I don't feel like it would be the end of the world if some of the projects moved to competing platforms.
I think they're on step 2 now.

They already embraced it by adding 1k repos. They're now going to extend it.

We'll soon have an msgit, which is git with extensions that only github will support.

You mean like the current extensions in the .github folder (pull request template, etc)?
Tangentially related, but maybe microsoft could actually do that : why is github's search so terribly bad ?

If they had developed a good powerful code search (custom semantic engine for most used languages, complex queries, exact/fuzzy matches for syntax, use of history, etc) they could have become the primary way you interact with code you don't know yet.

As it stands now it's simply more efficient to clone and use plain old grep, it's really sad.

Their search is really frustrating, I agree. I feel like they only index a small percentage of files, so results are always bad.
The fact that you can’t search within a branch too...
They don’t index forks. Cloning a fork just to search through it locally is always fun. Very annoying when a fork becomes the de facto project because it’s the one being maintained.
I’m not even talking forks. I’m talking largish projects hosted on GitHub (100k+ loc). The actual results will contain less than half the results you’d see with grep, and even then the indexed content may even be out of date. This is exacerbated even more when database migrations are kept in source control, with older migrations archived, and the only search results you get for eg a stored proc search will be a version of the sp from 6 months ago.
Github won't let you do a code search in a forked repository. Clone & grep is literally the only option!
That would be really great. To improve looking through new repos at least a litte bit I like the browser plugin [Octotree](https://github.com/buunguyen/octotree), it adds a tree view of the code and eases jumping between files.
It is shockingly bad. The fact that you can't code search in a fork blows my mind. How have they not fixed this basic, important feature after so many years? What could possibly make it more difficult than a few person-months of effort?
Maybe avoiding the costs associated with keeping the indexes available for every fork? I believe they use elastic search so maybe someone with more experience with that can comment.
(comment deleted)
Um, have you actually tried doing anything about this? https://help.github.com/articles/searching-in-forks/
> You will not be able to search the code in a fork that has less stars than its parent.

... but since it's allowed if the fork has more stars, I guess they're just trying to save compute cost. Seems like a bad place to scrimp to me.

SourceGraph tries to fix it, and the experience of searching, jump-to-definition and generally getting to grips with a codebase is way better there IMO. They also have browser plugins with integration to GitHub. I recommend you to check it out.
Sourcegraph CEO here. Glad you like Sourcegraph! Regardless of what happens with GitHub and Microsoft, we agree that developers need great code search.
Sourcegraph is great, but I had to disable the browser plugin because it opens a new tab on every github search. So annoying.
Sourcegraph CEO here. There was always a toggle for that feature, but it was too hard to find. It is now off by default and you can enable it in the browser extension settings. I'm sorry you had a bad experience. I hope we get another chance to give you an awesome code search experience.
Cool, for sure, thanks for the response!
So we're asking the creators of Bing to fix it?
Bing is actually quite good. Not as good as Google, but much better than Github.
Or whoever implemented the start menu search.
I used to be able to execute programs through the start menu. Can't do that anymore.

I used to go:

press start btn --> type "utor" --> press enter --> uTorrent.exe executes.

Why would they remove such a useful feature?

Part of the reason GitHub search is so bad is to mitigate people uploading their AWS keys and passwords.
Yea, Microsoft should acquire sourcegraph too.
I think they purposely weakened the search because people were using it to find secret keys.
That doesn't make sense. Ruin the feature to potentially help someone who made a mistake with security? Why wouldnt they just run the search to find keys themselves and remove them from search results.
Microsoft should be able to leverage Bing to do good deep searches across all code. This would be a big win for everyone (and Bing!)
As one of my pet projects, I'm trying to resurrect Google's Code Search (a fast search indexer that supports regular expressions).

It's in alpha stage so far and lots of useful features (like multi-line search) are missing but you can already try it out for Crates.io and Hackage: https://codesearch.aelve.com. Indexing all of npmjs is coming soon.

I cannot agree more with this.

It boggles my mind why GitHub's search finds results across various commits, giving patchy results. It would be far better and likely easier for GitHub to just search HEAD. This frustrates me about GitHub every day.

Huh.... GitHub only searches head for me. This is confusing as I've often wanted to search other branches and can't find a way to...
Search seems to be surprisingly bad at a lot of companies. I don't know about github but reddits search is so bad it cannot even find something when you type it character for character.

I'm super curious to what all these companies are using for search because they are so atrocious that tend to not even work in a basic substring search solution.

Exactly. I can’t search my own tweets on Twitter. Facebook doesn’t know how to rank people when I do people search there. Search is terrible across the internet except Google.
I'm worried. Consider what happened to Skype. Consider what happened to LinkedIn. I worry something similar will happen to Github. And I love Github.

At some point Microsoft told me I had to change my password for Skype. The "Reset your password" process failed 6 times in a row. I eventually had to create a new, Microsoft ID, to use Skype. I lost all of my old contacts and had to slowly recreate my address book. This is really one of the worst transitions I can recall.

Meanwhile, I act as adviser to a number of entrepreneurs, and the biggest trend of the last year has been "I want to do _______ for professionals, since LinkedIn isn't doing it." The lost opportunities for LinkedIn are very sad.

what did they do with LinkedIn?? I havent noticed any change.

as for Skype, its completely ruined. I have it installed but I am scared to open it. Horrible GUI. Constant updates and generally just useless now.

> what did they do with LinkedIn?? I havent noticed any change.

I think that's his point. He's saying that LinkedIn has the opportunity to do lots of interesting things, and appears to be squandering it.

LinkedIn is excellent as it is; its a utility to keep your CV updated and connect with professionals. We don't want FB-like functionality here, thank god.
To be clear, I don't have an opinion on the issue myself. I was just trying to clarify the meaning of the grandparent comment.
Excellent if you like endless spam from clueless recruiters who think that Java == JavaScript...
LinkedIn is a massive pile of dark patterns and spam. What universe are you living in that that's "excellent" or even acceptable?
Well, it is excellent platform for self-declared thought leaders offering groundbreaking insights about business/culture and innovation.
It's a shit platform for that. Users who are attempting to read these "groundbreaking insights" are subjected to a deluge of tracking code and other malicious behavior. There are plenty of excellent platform for people to share ideas, LinkedIn is absolutely not one of them.
I think parent was joke.
Just spam and advertisement. That is all LinkedIn has ever been. The contact aspect is shallow at best if you don't work in HR. It's a circle jerk.
LinkedIn is fine as it is. I found my last 3 jobs on it.
LinkedIn is perfect already.
I think it has actually improved. They added messaging and now I can get real-time recruiter spam to ignore.
LinkedIn acquired Lynda and are continuing to dominate the online learning space in enterprise. Not sure what you think "happened" to LinkedIn but they're doing great.
I've heard claims that Skype is no longer peer to peer but runs on msft networks/infrastructure and performance has suffered. Can anyone confirm or shed any more light on that?
Not sure about the performance aspect, but your mention of them changing architecture to send all data through their own servers is well known.

It went from seemed like a ~reasonable security architecture, to outright enabling the monitoring and forwarding of all user conversations. Ugh.

As I also replied to a sibling comment (https://news.ycombinator.com/item?id=17222045):

It used to be that it would only nag you to sign up or log in when trying to view extended profile attributes. Now it just requires you to log in to even view someone's name and function. It shows up in the search results alright, some day I should find a UA changer to spoof Google and see if they do IP checking or just UA header checking, but generally, they made it completely locked-in now, whereas it was semi-open (at least to view) before. It was a user-configurable setting whether your profile could be viewed by people who are not signed in, and now it's just a completely walled garden.

Agreed about Skype. They're trying to make it like a messaging platform, and added a lot of crappy - completely unintuitive, complex UX that now make it extremely difficult to use their core features of phone calls, video calls, screen-sharing.
Agree. And I had a similar issue with Skype.
Yes, serious chance of GitHub fading like SourceForge did.
Me too. I'm waiting for the official transaction to be done and i'm preparing a plan b in case i have to migrate everything.

More mitigation work is just what i needed. The skype one took years, many failures, and resulting in the use of several tools instead of one. Not a win.

Isn't that one of the strengths of Git? The whole decentralization means that it is ridiculously simply to take the whole shebang and migrate to another service or even just self host on a cheap VPS.
Yes but with services like Issues and Wiki built into GitHub and Gitlab ... If you made use of the extra services by the Platform Provider, then you possibly have alot of non-trivial project dependencies to move around ... like your Issue history for the project.
Yes but you still have configurations and docs referencing the repo to change. Then find a mean to alert all interested persons. And then write a script to migrate the issues.

It's not a big deal, it's just work that I don't want to do. Espacially since I love github.

I would agree with Skype, but what actually happened with LinkedIn? I remember in pre-Microsoft times they asked me for my google email and password.. right not to log-ing with google but the email and password! I understand it's more LinkedIn's fault than Microsoft merit, but I just wanted to say, IMO there were never "good times" for LinkedIn
> what actually happened with LinkedIn?

It used to be that it would only nag you to sign up or log in when trying to view extended profile attributes. Now it just requires you to log in to even view someone's name and function. It shows up in the search results alright, some day I should find a UA changer to spoof Google and see if they do IP checking or just UA header checking, but generally, they made it completely locked-in now, whereas it was semi-open (at least to view) before. It was a user-configurable setting whether your profile could be viewed by people who are not signed in, and now it's just a completely walled garden.

It does bug me that they pollute search results with login-required resources. Search engines should treat that as abuse, or at the very least default to freely available resources, otherwise they just become a menu without prices.
Google should start delisting their indexes for that reason, just like they are doing for sites with popups.
That's not a microsoft decision per se, my friend who was previously SEO PM at LinkedIn made this change to increase signups.
And even worse MSFT/LinkedIn is suing a small company for spidering LinkedIn's data.
LinkedIn remains as pointless as ever.
>At some point Microsoft told me I had to change my password for Skype. The "Reset your password" process failed 6 times in a row. I eventually had to create a new, Microsoft ID, to use Skype.

I had the same problem. Microsoft Live process didn't feel very intuitive or smooth either.

True in regards to Skype, although that was an acquisition that was done under Balmer's and not Satya Nadella. In regards to LinkedIn I don't see what exactly you think has went/is wrong with LinkedIn from a product perspective since it has been acquired. There's no assurance had it not been acquired that it would have the features your advisees are claiming it should have. It is still the undisputed leader in its market.
I could make the same concern for a bunch of other companies who were to buy GitHub. Indeed, my main concern with GitHub being bought by anyone is the uncertainty of its future, and the fact that it no longer will be 'neutral' ground, so to speak.

It's not in particular Microsoft that concerns me (although their embrace of Git, this seems inevitable for a company like that, considering its history), but that GitHub is now losing its appeal; it being independent from the big players.

"Consider what happened to LinkedIn" Where are you going with this? LinkedIn's growth has reaccelerated after the MSFT acquisition to the order of 35%. Only good things have happened at LinkedIn (I'm an employee) since the MSFT acquisition. If LinkedIn is not doing something, then it sure will consider doing it now, with the vast resources it has available to it now.
"LinkedIn's growth has reaccelerated after the MSFT acquisition to the order of 35%."

I honestly don't know a single professional who still updates or cares about LinkedIn. I have no doubt that it still has the momentum from late comers and straggers, but...eh.

Mind you, it was on the outs long before Microsoft bought it. Not its fault, but it just hit the no longer novel curve.

"with the vast resources it has available to it now"

This part is almost parody, and reeks of comical self delusion (or astroturfing). It is the rally cry of how so many of Microsoft's purchases faded to black.

And just like they acquired Skype to please the NSA and make changes for its sake, I wonder if this is also a move to backdoor Github projects without the project owners and contributors noticing.

I, for one, would definitely stay away from any open source project that's still hosted on a Microsoft-owned GitHub.

It's tricky to backdoor git repositories, since it's a Merkle tree of hashes and as such immutable. Any attempts at tampering would break git push/pull for developers, and as such be immediately detected.

Binaries could be backdoored, potentially, but with the trend towards deterministic reproducible builds I don't see this happening.

Perhaps modifying code is out of the question, but consider how many juicy credentials / private keys etc must be tucked away in all those private repos...
GitHub is already an American company. What makes you think the NSA doesn't already receive a full copy of everything on their servers?
You place a surprising amount of trust in a hash algorithm with known collisions (SHA1).
Collisions, yes, but preimages are the bigger concern with hostile actors in git IMO.
Given the context this is not surprising at all.

A hash collision in git lets you show somebody one change, then substitute it for a different change (with the same hash) in a version others see that appears (to the first person) to be the same code.

This is a very narrow opportunity. It is _probably_ viable for a very powerful adversary (such as the NSA) to successfully trick someone working with binary blobs, like firmware for a black box. You can imagine a developer who (unusually) assiduously checks the firmware they're provided to see that it works as intended, then uploads a new version to github, and the NSA trap is sprung, they substitute a modification with the same hash but different firmware that, perhaps, causes your billion dollar spy satellite to point its cameras at the sun, destroying it.

But if the developer is less assiduous this was all pointless, just send the "burn spy sat" firmware to the original developer and lie.

Or if the spy camera owners decide not to take this mysterious last-minute update, or they try it on their ground-based prototype first to check it works... bzzt, your hugely expensive SHA-1 trick was a waste of time.

Yes, SHA-1 is broken. Nobody should use it for anything new, and things that already use it should have been migrating already _before_ the official announcement from Google et al. But, Merkle-Damgard hashes have done this before, and will do it again, and so we know how this goes. You get a collision but don't get anything else, critically you don't get second-pre-image.

This means, the NSA doesn't gain a way to substitute other stuff in a repo. They can only _collide_ their own things, by carefully choosing the inputs. So a plan where you just replace the _real_ firmware can't work.

Also, the nature of this MD attacks smashes up the input state, which for git will usually be source code. A mysterious anonymous contributor is surprising enough, but when their proposed patch adds dozens of bytes of what seems to be binary noise, you know something is up. That's why my example attack above involved firmware, where this might be less suspicious.

So yes, Git should have transitioned off SHA-1, and a window of opportunity for bad guys does exist, but it's not the sort of gaping window you imagine.

I had a pretty similar experience with skype. I lost access to my connected email account and was essentially locked out of my account forever - repeated emails to support were met with silence, alas! Then I connected my facebook account to use skype instead... then they discontinued support for that. Now it's got to a point where attempting to create a new account on the OSX desktop version just shows an error screen every time, so I'm stuck unable to use skype forever. I've moved on to other, better solutions, naturally :)
Could you tell us what "other, better solutions" would you recommend?
GitHub is also used for recruiting and many other data mining purposes, so seems obvious they’d find ways to restrict the data just enough or require you pay based on how you use the data somehow.

And combining that data with LinkedIn’s data would be valuable indeed.

If Github does die out will be a slow and painful one. Skype was more of a radical change to the core technology. Of course anything is possible. I'm guessing many companies paying for Github's enterprise products are more concerned about the implications of Microsoft owning the company that hosts their proprietary code.
proprietary code which is hosted on git hub enterprise is customer-run on premise, there’s no outside access
If Microsoft does to github what they did to Skype, pushes will go into the wrong repo without authentication for no reason just like Skype had contacts and messages jump from one account to another for no reason. Pretty much everything they touch software wise is a disaster. I wonder if there will be ads or how exactly they will fuck it up, but I know for sure they will. Gitlab is fairly equivalent in features and much better in their pricing and plans anyway so I expect a lot of projects to move.
Microsoft is big, with different divisions you can consider what it did with consumer apps, but you'd be better off considering what it has done with developer tools.

There, Microsoft shines. So, we will just have to wait and see what they do. My guess is the main thing they will do is make it super easy to deploy to azure from the github UI.

Exactly. And AWS/etc integrations will be the redheaded stepchild. Remember when MSFT had all that "super cool" IE-only stuff (VBScript, weird non-standard gradients) that then became the bane of every Web developer everywhere?
I feel a great disturbance in the Force. As if millions of voices suddenly cried out in terror and were suddenly silenced. I fear something terrible has happened.
I feel the same. It's not the end of free software, but the end of free software as we knew it (or something, still trying to rationalize).

Someone explain the extreme feeling of uneasiness penetrating our brains.

    Someone explain the extreme feeling
    of uneasiness penetrating our brains.
There is not a single Microsoft product/tool/service I like. Including the ones they aquired. So I expect them to turn GitHub into something I don't like too.
Not even VSCode ?
No, because as the VSCode license puts it "The software may collect information about you and your use of the software, and send that to Microsoft."
Everyone says on here that VSCode is way faster than Atom but I've found the opposite every time I've tried, Atom opens faster and feels slicker when editing, especially multiline. I'm also not a fan of the VS UI and its icon.
What does Github have to do with free software? It's a closed-source, non-free SaaS. Free software repos can (mostly) relocate to any other hoster as they wish.
Microsoft has a history of taking the open source philosophy out of their products. Github is one of the few large, commercially successful platforms that have not only embraced, but built their entire platform around those fundamental values.

It's not a surprise we feel unease, and to hope that Microsoft is actually going in a direction that aligns with those values, instead of simply twisting them for it's own continued success - that's being a bit naive.

We'll all see what happens, but honestly, I wish their was one web platform that existed out there, that could stay stable in it's philosophy, and not succumb to embracing the chaos invoked through economic success.

There are plenty of examples that stick to the core philosophy of open source software and open ideas, but there are rarely examples that manage to become extremely successful and maintain that success without drowning in the confusion created through their own influence.

> I wish their was one web platform that existed out there, that could stay stable in it's philosophy, and not succumb to embracing the chaos invoked through economic success.

An example that comes to mind is Wikipedia. Maybe the lesson here is that if you fear this happening, don't come to rely on services that are not setup as non-profits.

I think it's a balance. Non-profits have their own problems, individuals aren't fiscally organized and instead, have their incentives tied directly to the service. These incentives are philosophical ideals, therefore, not invariant (continuously being used and tested against the system they exist in), therefore, not equivalent (unified) across all participating minds. So there can be confusion there as well. Competition due to ego can cloud clarity, and this impedes the finding and actualizing simple solutions.

Same problems still in a for profit enterprise, just shifted across whatever the base values are. Life will never be perfect.

Alot of MSFT codebase was moved to Git in 2016 and this just makes sense. Wow.

Wonder how hiring/firing is going to be now at Git. They are pro-remote, while most MSFT positions are going no longer remote.

From at least two angles this is great news for Gitlab.

But it feels a bit like the Atlassian / Trello arrangement, which has had little impact on users.

From recent behaviour I'd expect Microsoft to have a very light touch here.

I'm not familiar with recent behaviour anything in particular? (My memory goes to Skype...)
The Skype buy was seven years ago, and it was a pretty user hostile piece of software before that.

Post Balmer we've seen a more open (in the transparent, consultative, community sensitive sense) attitude, with genuine contributions to free software.

People also seem to be citing LinkedIn as an example, but that doesn't feel like it got any more unpleasant since the buyout.

Minecraft, LinkedIn as examples. While LinkedIn has not gone super well, it has been left to make the decisions that it made on it's own.

Minecraft has also gone untouched - it's still hosted on AWS in fact.

They bought xamarin and then made it open source and free. They also have continued to support mono despite having .net core
If this is true, I delete my account immediately.

The last thing I want is my code to fall into the hands of MS.

If you've used GPL then you have nothing to worry about.
80% of github projects here are hidden, inhouse trustworthy secret private projects! This is such horrible news!
So you put trustworthy, secret projects on GitHub instead of hosting them in-house?
yes, my bad, should have listened to IT

The idea was that it's more likely our servers get hacked than a breach at github. Guess I was wrong.

Microsoft built its business by selling software products. If they had meddled with Fortune 500 companies running their business-critical information on top of Windows, Microsoft wouldn't be here now. There are situations to be wary of MS, but I don't think this is one.
In Europe there are real worries about state-driven industrial espionage.

We shouldn't be worried that our developers coding habits will get connected with linked-in and fed into the surveillance state (which MS is big part of)?

(comment deleted)
(comment deleted)
Microsoft is not gonna give a fuck about your shitty little repos or anyones for that matter. What makes you think they are gonna put time and effort into mining people's code?
Fair enough. After all, they did ship a free web browser with their operating system, 24 years ago.

Some things you can just never forgive.

A shitty free browser developers still have to deal with today because enterprises refuse to fix their garbage in-house software..I'm not bitter at all.
don't worry, I'm sure they've got backups
There will probably be a decent amount of skepticism around this acquisition (with fair reason), but I'd like to think of this as an opportunity for Microsoft to demonstrate their respect and commitment to the developer community. I say this as someone who has been pleasantly surprised at how helpful BizSpark has been. Staying cautiously optimistic.
Can you maybe elaborate a little on BizSpark and how it was helpful?
Not the best example... BizSpark has been discontinued.
Why I'll never trust Microsoft ever again.

"postmaster@nsa.gov"

https://en.wikipedia.org/wiki/NSAKEY

I stopped trusting them when they stole the intellectual property of numerous small companies years before the _NSAKEY debacle. I know, I know, Bill Gates is supposed to be some kind of good guy now (malaria, etc.) but I can't think of any good reason to trust any robber baron, based on the past histories of robber barons. Even Andrew Carnegie was an asshole in the final analysis.
Microsoft is basically the corporate version of the ship of Theseus at this point. The have a lot of questionable stuff in their history, but the leadership and the culture at large has shifted drastically since those days. At a certain point it is worth reevaluating one's opinions and question whether it is still worth hanging on to those old grudges.

I can certainly understand why people might be skeptical of GitHub being purchased by any of the big players in tech. But I don't see how Microsoft is really a worse buyer than any of the other potential bidders.

Yeah, I am not saying I would trust any other big competitor more than Microsoft.

However, I am still not convinced that Microsoft really changed as much as many people like to believe. I think it is obvious that they lost the fight against open-standards in many domains. Linux on Smartphones would be one example. Now they have two options, either to embrace these technologies or lose market. The question is: How genuine is their enthusiasm and are they really acting in the interest of open-standards? Do they still have strategies to hurt open alternatives to their own products in the long run?

I think the shift from a traditional sales focus to one on subscriptions and "The Cloud" is a pretty monumental change. Losing traditional sales markets like selling phones really hastened that change. I don't think you're looking for proof that they're genuinely enthusiastic, because imo desperation is the rawest form of genuine enthusiasm. It's whether or not they're altruistic in this particular field, and that has yet to be seen.
I don't think you have to be altruistic to have genuine enthusiasm -- some companies have fantastic plans to support open-source as well as their business plans. But I agree with the first point you are making.
I think it is naive to believe than any company that is beholden to investors would choose altruism over profit. Most corporate altruism is just marketing.

I don't think Microsoft is any more altruistic now, they just have adjusted their corporate strategy to recognize that supporting openness is good for business. That is enough for me.

and yet the response to anything by microsoft is reminders of EEE, while google gets praised for blatantly awful abuses of power.
True.

My days of google fan-boy-ism are long over :-/

> google gets praised for blatantly awful abuses of power

Do you have some examples of that? The first things that come to mind are AMP and related announcements, which were not received particularly positively here on HN.

mil drone stuff, Reader, the worst customer technical support…

Cue followup 'Actually these are all extremely good + business-savvy decisions for big G since' posts.

The key part I quoted was

> google gets praised

None of the things you list are things Google is praised for.

Glad you checked everyone's opinoins about big o' G, thanks for your hard work buddy!!
I don't think anyone on HN has forgotten considering it's repeated ad nauseum on every single Microsoft story on here.
Well, because the strategy was really nasty stuff and acquiring github might fit into this kind of pattern.
Except all the key players of this strategy are gone and Microsoft has embraced (full stop) open source as much as any major corporation in recent years.

But don't let actual evidence stop your pitchforks.

I see that Microsoft is not a corporation that is evil by design and that they are doing exciting stuff as well -- I don't hate them.

However, I am keeping my skepticism when they embrace open-source and am curious which 'actual evidence' you are referring to?

So far, many open-source efforts look more like marketing to me. For instance, WSL makes sense to keep people in a Microsoft environment (and to me at seems that more and more frameworks favor Linux and Mac over Windows).

For the avoidance of doubt, the postmaster@nsa.gov address has nothing do to with _NSAKEY.

Somebody used this address in a joke, and then a Wikipedia editor took it seriously and put it in the article. sigh

So it looks like Github is going to be the next sourceforge! Onward to gitlab!
Personally, I can't wait for GitHub360 Professional for Sharepoint 360.
Enterprise Edition with Cortana.
With VoiceCommit(tm)
(comment deleted)
Personally, I can't wait to start doing git push and pulls using HoloLens.
“Hi, I’m Gitty! I see you are having difficulty submitting your large file. Would you like some help with that?” [YES] [NO]
Clippy was last activated by default back in 2001 (!). When are we going to let go of this old joke?
"Please wait while we're updating your repo" ... 30-60 mins ... connection timed out
> Sharepoint

Don't you even dare think about it much less tell MS about this idea

I'm wrestling with Sharepoint as I type. I don't see why all you lot shouldn't have to suffer too.
With CandyCrush™ included in all free-tier repos!
This is sad news. Partially because I don't care for Microsoft, but mostly because Github was a neutral third-party without any priorities. I hope they don't discontinue Atom or apply their UX styling to the site/desktop app. Like Spotify, I felt safer that a company was just doing hosting in their domain (of music or code projects) and wouldn't try to shovel some other tech into it like Apple making Apple Music terrible on Windows. It's good to have more tech companies just doing their single thing well.
> I hope they don't discontinue Atom

Hadn't crossed my mind that they might drop Atom for VS Code before...

I thought VS Code was Atom? (well, a fork of)
It’s not. They are both web-based but otherwise unrelated.
No, not at all. The only common component (I think) is Electron (Atom shell).
(comment deleted)
VSCode is built on top of the same framework as Atom, Electron, which was previously called Atom-shell.
It's worth noting that the core contributors to Electron are Github employees.
That gives the acquisition a very different perspective.

What if MS is really buying Electron? It’s something they’ve been using a lot in all their recent products, and it’s a key technology in the contemporary development landscape. Making it more Windows-friendly would definitely help them.

Improving Electron can be done far cheaper and easier than acquiring a company.

The only thing GitHub has that Microsoft can't easily get on their own is the user base. That's what this acquisition will be about.

But controlling a leading platform so completely isn't cheap.
They can also ensure the next electronconf isn't cancelled. Everyone wins!
No, it's not a fork. They both run on Electron, so they share a common runtime environment, but they share no editor code.
Wasn't Electron created for Atom? If so, VSCode is at least using a part of Atom.
I mean, by that argument Windows uses Unix because C was written for Unix.
At least historically Windows used different parts of UNIX. i.e. they used BSD's TCP/IP stack for quite some time. Also used "UNIX services for Windows" and recently added the Windows subsystem for Linux.
That doesn't make Electron _a part_ of Atom. If I build my application on top of Linux, my application is not _a part_ of Linux.

Electron is its own application framework, that Atom builds itself on top of. Electron is not a text editor framework, no more than QT or Cocoa is.

It is _very_ fair to say VSCode is using Electron - heavily, in fact! But saying VSCode is using part of Atom is just not true, and implies VSCode is building atop the Atom editor, which it does not.

Atom is open source though. One company can not decide to kill it.

https://github.com/atom/atom

In my experience, open source projects that are primarily backed by companies fail to create a real community of developers. Therefore when the company dies, development stalls.

RethinkDB was something that I though would still go strong without the backing. I never used it and was never involved, so I'd love to hear what happened when the company died.

(One exemption is Xfree86 though, which was forked successfully by to community to Xorg if I recall correctly)

That's true, and I want to add that usually it's the company's fault for not guiding the project into the hands of the community (be it intentionally or because of incompetence). Rust is a great example of a "company's project" that reached (or is reaching) a nice spot in autonomy.
I agree but I think Github and Atom are special cases.

A light IDE is not rocket science and this project is known (and loved) by many open source developers.

Sure they can't "kill" it, but a huge fraction of the work on Atom comes from full-time people employed by GitHub. They can handicap it to the point that VSCode becomes the better editor.
I think the popular opinion (and my own) is that VS Code has been the better editor for a long time now. Performance, features, and reliability have all been drastically better, its one weak spot might be the slightly more limited interface for extensions.
Atom is really just a testbed for electron, where the real technology lies. If you can make an editor that programmers love using electron you can make pretty much anything else (excluding games).
Why not games?

https://electronjs.org/apps?category=games

HTML5 and Canvas do work on Electron after all. :) I feel there was some post on HN about a game released under Electron to which the reaction was "I didn't know it was made with Electron!" not a month ago.

Edit:

Also Atom wasn't a testbed for Electron. Electron WAS MADE for Atom afaik. They only opened up Electron after Atom was out for a while, it'd be the other way around if what you're saying is the case. I think Microsoft is already heavily invested in Electron. If anything they will provide even more resources towards Electron itself.

sad. Atom has much better usable UI. I get constantly lost in VSCode menu and (strange enough) it is very difficult to startup a browser in it.
They could probably also merge the two somehow. The one thing I like more about Atom (even though I don't use it anymore) is editing the editor settings gives you a UI instead of just a JSON file which I don't mind, but it's kind of uneeded to me to have to work harder just to check all my editor settings.
If it’s any consolation, Apple Music is terrible on iOS and MacOS as well.
True, but Windows users would find it odd if an app didn't suck. It has to match the overall Windows experience.

Note: I'm working on making Chef code work for Windows deployments of an application that runs under Node. I have strong opinions on Windows right now.

What. Windows apps are far from sucking. There is still no OSS match for Windows Explorer.
OS X and every major Linux DE have tabbed file explorers, Windows still doesn't. I've never even heard of a third-party file explorer for any OS.
Never missed them.

Total Commander for example.

I find the file exporers on linux a huge joke, and Finder on OSX is too simple for me.

On Windows I have found XYplorer [1] to be extremly powerful. Its not OSS and its not free, but I happily paid for it once I discovered it. The project is like 20 years old. I have looked for a free replacement for years and always ignored it, which was a mistake.

XYplorer is very well maintained, 0% CPU cost, 1% RAM cost, highly-configurable, has very nice features. Someone really put some thoughts into the UI and UX. I really like the Ghost filter. Ctrl+P is great. Oh and it remembers all opened tree views after restart, so your workspace is exactly the same after a reboot.

[1] https://www.xyplorer.com/

Some people missed your sarcasm.
Now, on a more serious note, I think the way IE3's News and Mail Explorer extension dealt with custom views for filesystems was nothing short of brilliant. I wish we had something like that for Gnome now.
The "Windows sucks" meme (if you can call it that) is outdated for like 15 years.
We'll eventually see what happened to Skype happen to GitHub. Not sure how it will manifest itself, but the bloat will find its way in somehow.
Were it a consumer product I'd agree. But this is a developer tool and MS have been doing fairly well in that regard the last few years with azure and vscode.

Not happy as others have stated of pretty much the largest neutral party in development being absorbed.

I dunno, as an Azure user, they've launched good products like Azure Insights, that were really good, which they deprecated or merged with PowerBI etc... that totally tanked them.

So I'm not super hopeful.

> I hope they don't discontinue Atom

Atom is MIT licensed, GitHub can't "discontinue" Atom so much as stop paying their engineers to contribute to the project. After that it's whether there's enough impetus outside the company to continue the work (I suspect there probably is, Facebook are heavily invested in Atom).

How many build from source as opposed to downloading binaries from atom.io?
Someone can just make `libreatom` and start distributing binaries. The MIT license is nice like that.
"because Github was a neutral third-party without any priorities"...what are you talking about? They are a company with a purpose to make money. And when I think about some of the other possible buyers, I am fine with Microsoft.
The GP means they were neutral with respect to the tech giants' ecosystems. They didn't favor Amazon or Microsoft or Google's tech. Consider that Apple, Google, and Microsoft all had GitHub organizations and hosted code there. That's what they're talking about
It sucks. We had as you said a neutral site everyone used. Now the big guys will move their code. Hopefully we will get a new common GitHub that is neutral and they will use. Sounds like it might be gitlab.

Just wish MS could have left alone. They just do not help move things forward. Now wasted cycles have to be spent to deal with this thanks to MS.

Do you think Gitlab will stay independent? They’re burning money. They’ll in all likelihood be acquired in the coming decade as well.

Or do you think GitHub didn’t want this? Microsoft didn’t force anyone here. GitHub received hundreds of millions in funding. They couldn’t just stay put as a money losing entity.

Hopefully. The problem is the site has to be neutral. Might end up we just have the big tech companies like Google host their own which sucks but you can't blame them.

Right now looks like GitLab will just become the new GitHub.

We were just so lucky we had basically a single site with GitHub and now that will not be true any longer. We really did not have a single site for very long.

Really just wish this news was not true. But I am sure MS just could not resist.

What bothers me is I really like how the newer tech companies are all about moving the entire industry forward while helping themselves.

So Google shared Map/Reduce, K8s, TF and open source just about everything. They spend tons of money finding all the vulnerabilities and then tell their competitors when they have a problem and even help mitigate. They do it all for free and expect nothing from the companies. What Google did for Cloudflare for example with Cloudbleed is how I love it being.

I am old and remember the old days. But as MS has become less relevant those old ways have been dying.

But then it is like MS sticking in their head in the fun of the new way and mess it up. They should just do their own thing and leave the new culture alone.

I'm sure they'll try to 'Microsoft' it. They could never keep their hands off any UI in any product, no matter if it works or not, and especially lately, leaving a rather spectacular trail of destruction in their wake.
LinkedIn still feels like it's old self to me. Not that that really matters one way another to me.
Just after acquisition, Linkedin started systematically shutting down available API resources, and removing CRM support. Microsoft reigns in eventually. source:https://www.fullcontact.com/blog/linkedin-state-of-crm-2014/

redacted: i mistook the acquisition date

MSFT announced the acquisition of LNKD in June 2016. Your article is from March 2014.
That link says March 2014. LinkedIn was a public independent company for all of 2014.
(comment deleted)
(comment deleted)
GitHub has had more ethics fails in the past few years than MS.
Care to elaborate?
I remember reading that they employ some muppet to check that nobody uses "hate language" and their naive "check all words in text files against this list" spotted the word "retard" as in "fire retardant" and locked the project. Appealing for common sense, or even escalating the problem to someone with a functional grasp of English didn't succeed.
I don't understand how GitHub has been unable to become profitable. Anyone know more and want to share some details?
It is weird, isn’t it? GitHub was the first SaaS I ever subscribed to out of my own pocket. Spotify was the next one.
Plus they have very large private enterprise instances of github.
My guess is they built a very expensive system for the kind of scale they support. It's all RoR and sharded mysql right? Considering how dynamic it is, the resources to power that must be mind boggling.
The costs of the fancy office and the workforce should be quite high as well.

The cash flow is probably good but even with a million customers at $5 a month, that's not enough to sustain a large company.

Does it matter? Twitter isn't profitable, Youtube isn't profitable. Nothing in capitalism is really profitable, or it sometimes seems. Most wealth is just ownership of speculative profit or return. But if you have profit, you're doing something wrong because you ought to be re-investing that to create more future speculative profit.

Anyway, they likely could have remained unprofitable for a long time instead of doing this.

Oh god, I hope not. Anytime a big company acquires almost anything, the quality level drops off a cliff. Microsoft with Skype is the obvious example, but so is anything bought by Google (like YouTube).

Add to this the bad experience we had with Sourceforge, and I definitely worry it could be all over for GitHub if this is true.

I was going to quote YouTube as the one counterexample to your otherwise valid rule. What's wrong with YouTube? (other than being part of the Google Surveillance State GoStaPo)
You didn't use Youtube before it was acquired? I vividly remember finding a lot of cool videos and music that I couldn't otherwise have found. Now once you watch a few garbage videos it's all Youtube autosuggests to you. Also if you start exploring videos they'll probably be mostly around the same what you've already seen and not diverge too much from what's popular. Anything novel and out-of-ordinary is pushed to the bottom in most cases.

It's hard to pinpoint what exactly is different but the freshness of it is gone. I don't expect anymore to find anything super-interesting and the same old stuff that I've already watched is being suggested to me again and again.

Videos get demonetised for questionable or non reasons

Subscribers don't see videos from those they're subscribed to in their home page(a depressingly large percentage of the time).

Things like the YouTube inbox are so 'well' pushed to the background that most people don't remember they exist, let alone know how to use them for anything.

Recommendations are borked, and often consist of videos you've already seen ten times (maybe even ten times today).

Rules in general seem to applied based on how popular a YouTuber is/how much money they bring in instead of what they actually do on the site.

Fair use is basically non existent, or very poorly applied overall. Sometimes people are able to get paid off content they don't own and it's almost impossible to get it taken down/demonetised, sometimes content is claimed through complete lies by the claimant.

Google account integration means that any setup related issue can break large parts of the site. For example, I couldn't previously get Adsense on my account; not because I wasn't qualified, but because the account I used Adsense with and the one I used YouTube for were different, and the merge basically broke any chance of connecting them.

YouTube comment/channel moderation is really bad, with few tools leading to horrendously toxic comment sections.

And then there are various bits of the interface that make me wonder exactly who designed them. For example, you've got a username, display name and channel name, and all can be completely different from one another. Or conflict. This makes it easy to confuse or mislead people, since youtube.com/user/[whatever] and youtube.com/c/[whatever] can be completely different people/channels.

Most of these features (and problems) appeared after YT was acquired, but demonetization and account problems (including wholesale blocking) seem specific to Google, so I agree.
Youtube would probably be dead if not for Google.
Google acquired Youtube so early on, how could you know what it would be like without them?
I worry about github too. BUT, at least with github most of the data is open. And they have a worthy competitor in Gitlab. Might be a bit of disruption if MS mess things up, but not a disaster.
Why not self-hosting?
I'm not sure what exactly you're reacting to, but a lot of us absolutely do not want to self-host our github repos. Because it's work, because we don't need it, because we like using github/gitlab/other as a "marketplace"
But what about the social / code sharing / collaboration part, which is arguably the most interesting part? We need a quality central meeting place.
1. Electricity cost 2. Need for constant electricity 3. Internet cost 4. Need for constant Internet access 5. Cost of hardware 6. Heat generated by the running hardware 7. Noise generated by the running hardware 8. Space occupied by the hardware 9. Need to update and maintain hardware/software 10. Worse discoverability for your repos 11. ISP asking questions 12. Government asking questions 13. Police asking questions

Then again, I live in a "developing" country so most of these might not be an issue for you.

This is a weird comment.

"Self-hosting" doesn't have to mean having a giant server farm at home. You could put it on an AWS/GCP/Azure free-tier VPS instance.

GP admits to being in a developing country. Presumably, their reality is different from yours.
(comment deleted)
Most of these aren't an issue if you're self-hosting in the cloud though. You can cheap VPS for a couple of $ a month.
Can't afford it. $1 goes a long way here.
Not everyone will need to self-host, it is still possible to host your projects at someone else's instance. If you live in a place where $1 is a lot of money (where is this by the way?) you could either share a server with others who each chip in their $0.10 or just find an open instance somewhere. There are plenty of organisations which host services like these, Github is the best-known but by no means the only alternative.
Have you tried running GitLab on a $3 VPS?
Gitlab, no. Gogs [1] or Gitea [2], no problem. I run Gitea on an Intel SS4200 (2.4 GHz Pentium E2200, 2 GB, 8 TB JBOD), it hardly causes a blip on this rather anaemic system. The process generally takes up around 35 MB (RSS), it talks to a PostgreSQL database server on the same box. You would not want to run a service the size of Github on this but for a personal repository it is more than enough. If your projects get so popular that they outgrow the hardware or VPS just move to a higher tier.

[1] https://gogs.io/

[2] https://gitea.io/

For personal projects I find it sufficient to simply have a VPS (or even just a shell account) that I can ssh into.
A lot of these would be problems anywhere. Reliability/uptime of electricity/internet is problematic everywhere, although noise/heat I don't see why it would really be much of a problem anywhere.
I think he's talking about running a server from home.
Yes, that's what I meant. If you're running a server at home, then you will always run the risk of power or internet outages.
Its very hard to open issues or PRs etc on many self-hosted setups, as they don't have a way to create logins, or accept other identities.
You can run gogs/gitea and get that basically 'for free'.
People don't really want to create an account for every project they send a patch to, and I say this as someone who does self-host.
People want the nice UI of Github as opposed to just a hosted .git folder, and self-hosting Gitlab is a hassle compared to using a SaaS.
If you self-host you will probably never get outside contributions. For most people it isn't worth taking the time to figure out whatever system you use. I'd like to see a federated system like GNUsocial/Mastodon for git. I've thought about trying to make such a system but I don't know much about federation.
For us (sqlitebrowser.org), self hosting the code, comments, and similar should be achievable with something like Gitea (Open Source GitHub clone).

Hosting our downloads though... hmmm... that could be more tricky.

Our releases generally have ~180k downloads a month, with each being (very) roughly 15MB in size.

That's only 2.5TB/mo, but the downloads aren't evenly spaced throughout the day.

We'd probably need a small cluster of servers with unmetered bandwidth or something. Scaleway might suit.

Except for the social part as far as I know, I hope that Bitbucket could see this as a big opportunity and expand that aspect of their platform.
I am worried that a company as important to the open-source community as github is now owned by one of the major players. I think it really impacts the neutrality of github. If I would compete with microsoft in a certain space, I would really think twice about relying on github.

Also, this monopolization is driving me mad.

the history of Microsoft is the reason why we all reacting this way. But encouraged by the move they made lately coming into Linux, even though other players have forced their hand
Microsoft has slain giants before. They will try to do it again. No one is too big to fail.
I would be as worried if it was AWS or Google.

Github should remain a neutral ground in my opinion.

It already was Google. Remember Google Code?
No, Google code was a failed attempt at a code hosting service from Google.

They failed to make it attractive to other developers.

I don't remember the name, but MS tried for a year or two to create another competing hosting platform if I recall correctly, and they also failed.

> I would be as worried if it was AWS or Google.

Good. Need more people like you.

Only way to disrupt monopoly is to use something else. I am going to migrate all my projects from GitHub. Be an example you want the world to be.
I'd recommend running your own FossilSCM server. It supports full code repo, wiki, bugtracking, and more. And it's free software to boot.

I'm looking to see if it's feasible to write a github->fossil layer to make it easy for programmers to dump to local. Right now, Git is easy to dump... but those issues and wiki support isnt dumpable yet..

if you mean dump from GH the wiki is a separate git repo. just clone <our_project>.wiki.git instead of <our_project>.git
Unfortunately, that misses the bulk of user communications. Those bug reports and issues are also tremendously important. And since they link back to commits, its essential to obtain that history as well and maintain the appropriate link between the 2.

Else, changes were made for "reasons", and those justifications are effectively lost.

This was the main reason I started developing https://sit.fyi. It allows you to carry issues, discussions, patches as files (for example, in a git repo) in a decentralized way and has a tool that allows to import from GitHub
If there are other things to use, it isn't much of a monopoly.
I could see developers ditching GitHub with the acquisition for a perceived conflict of interest. It's really easy to change your remote.

I see a potentially big market opportunity for anyone who wants to compete in the space now.

Changing the remote doesn't migrate anything in the issue tracker, merge requests, webhooks, pages or wiki
It wouldn't be seamless. But it wouldn't be difficult for a competitor to create a "competitor import" feature that moved over most of it in a few clicks.
It's possible, but I think it's a stretch to say it "wouldn't be difficult."
Migrating from GitHub to GitLab

https://www.youtube.com/watch?v=VYOXuOg9tQI

this adresses some of the issues.

It doesn't solve the number one issue: External references to your project will all still point to github.com since that's where the project homepage (aka README.md) is.
If GitHub does get sold to MS and I end up moving to GitLab, I'll probably push one last commit to the GitHub repo adding a header saying the project has moved, with a link to the GitLab repo. It's not perfect, but it wouldn't be too bad.
Until MSFT/GitHub does what Sourceforge.net did - taking over project sites from projects which moved away and adding malware (adware/spyware) into those ;)

(I believe with all critique on Microsoft they aren't as bad, but want to exemplarize the risk)

This would be a great way for them to accelerate migration away from Github.
It might just be cleaner to close the github repo and when other projects find a 404 where it used to be, they'll have to use super detective skills (i.e. Google it) to find the project's new home. And if they can't find it that way, then nothing of value was lost. (Yes, yes, I know it's more nuanced than that, but if you wanted permanence, you'd be hosting on your own domain, right?)
Actually, the #1 issue is that everyone can easily file an issue/contribute in other ways at Github without having to create another account to do so.
You can sign in with your Github account to gitlab.com.
I expect Google could be convinced to accept certain files or metadata in a README as equivalent to a 301 permanent redirect, meaning searches will remain effective. That would account for a lot, especially if Chrome begins to honour it.
I seem to remember that under the GDPR, vendors have to make data exportable. I wonder if people could use that for GitHub issues and the Wiki.

GitHub pages is super easy to move except for getting users to know the new domain.

The GDPR only applies to personal data, which won't be most of the content on GitHub.

Anyway, there are APIs which one can use to export issues.

Personal data is extremely broad and is any data that can be identified to an individual. If my photos are Facebook are personal data, then so is my code on GitHub (even if some people are professional photographers or programmers).
This is also why I put my documentation in markdown files in the repo instead of using the Github wiki. I knew it would save me hassle later.
Wikis on Github are cloneable as normal repos: just use project.wiki.git instead of project.git in the clone URL.
Still one step too much making it harder to migrate. Should've been a directory in a repo, default to `wiki` or whatever and configurable to something else.
that leads to problems with access control, though.
This means everybody linking to your docs will link to GitHub, thus you have a hard time moving ;)
As opposed to linking to GP's GitHub Wiki?
Agreed on both points. The shift will bring a lot of opportunity to build a more decentralized repo base. I think something like (Keybase)[http://keybase.io] might be interesting.
They weren't profitable. So the problem perhaps is these cool free tools that some people rely on just don't have a clear way to make money.
How profitable would they be if they didn’t pursue “growth at all costs” and built GitHub with a small and focused team like Stack Overflow or WhatsApp?
As a startup, worrying about competition from Microsoft hasn't been a big deal for almost a decade. I would be more worried about Facebook, Amazon, and Google.
> monopolization

Conglomeration, unless you hated github before which I wouldn't object too.

I agree with you anyway.

Why did the F/OSS community put all their eggs in one basket? Hell a lot of big companies did also. I wonder how they're going to react to this?
Exactly. Code.google.com even provided links for porting repos to GH. Will Google revive it's own code repository in light of this move?
Probably because its fairly low-risk. I have ~270 Github repos. About a year ago I made a ~5 line Python script that added Gitlab as another origin to each repo. I still use (used) Gitlab as my main host, I'm a paying customer - but for me to flick over to Gitlab is a one-liner.
Simple answer: GitHub is good to use

I'm all for FOSS (Git webgui) solutions, but they were absolutely not competitive until recently. Even now, with less trust, the social effect and the lack of need of maintenance and setup is attractive.

Why is it important? What are you relying on? It's just git. Dozens of other services that do the same thing, many that arent losing money every year.
Well, Google recently also purchased Kaggle, another major open-source repository for code. It hasn't really changed anything for now, but Microsoft's purchase will be in the same vein. I think that Microsoft's contribution to the open-source community in the last few years kind of makes sense for why they are purchasing it, just like Google purchased Kaggle because of their contribution to ML.
Your dream of “neutral” VCS is misfounded. Websites like GitHub are massive bandwidth and storage hogs and needs huge cash burn just for dev ops. Unfortunately they can’t be reasonably profitable as well because revenue sources are rather tiny. This means every vcs company out there offering free for all plan is bound to be sold or go bankrupt.

For GitHub I would have wished Google bought them because there is huge synergy both ways. With Microsoft, eventually some CVP there will realize that there is no profitability and they will leave it to rot.

"The acquisition provides a way forward for San Francisco-based GitHub, which has been trying for nine months to find a new CEO and has yet to make a profit from its popular service that allows coders to share and collaborate on their work."

Github was profitable day 1 from what I remember, before they took the $100 million from Andreseen, right?

Alternatives and no not bitbucket
(comment deleted)
Gitlab.com is what I was already slowing moving to, because their code is open source. This will just hasten that migration.
Can the old CEO be sued for 'breach of trust'? At least they must have to give prior notice before any of our sensitive data (trusted to github) falls into the hands of MS (untrustworthy)?
At least it's not Oracle
I searched through the comments to see if anyone else had the same thought I did.