|
|
Subscribe / Log in / New account

No mirrors?

No mirrors?

Posted Sep 30, 2024 21:54 UTC (Mon) by hailfinger (subscriber, #76962)
Parent article: The WordPress mess

So... some companies were using a single centralized foreign resource directly and didn't even think of mirroring that resource or paying the entity hosting/maintaining the resource? And then those companies sold the stuff they got for free? And now the entity maintaining the resource is expected to serve and shut up?

That's really stupid from a supply chain perspective and really questionable from an ethical perspective.

If I have a business, but no contracts with my supply chain, my supply chain can disappear or turn hostile any second. The complaints by various hosting providers/resellers read like "Mommy, Annie is not letting me play with her toys anymore!". Note how absent the "but we contribute equally" argument is.


to post comments

No mirrors?

Posted Oct 1, 2024 1:35 UTC (Tue) by Kalenx (subscriber, #120295) [Link] (6 responses)

Well, personally, I consider this action equivalent to the Python Software Foundation abruptly locking out Azure users from Pypi, stating a vague "Microsoft does not contribute enough to Python" to claim the moral high ground.

Sure, I guess there is no legal obligation for the PSF to provide services to Microsoft clients (or anyone, for that matter) but it would still be a highly dubious move, highly detrimental for the Python community.

No mirrors?

Posted Oct 1, 2024 10:39 UTC (Tue) by aragilar (subscriber, #122569) [Link]

Not entirely the same thing, but PyPI does block outlook emails (https://blog.pypi.org/posts/2024-06-16-prohibiting-msn-em...), which is due to spam account issues.

It's not clear to what extent WP Engine's use of Wordpress.org infra could be called excessive (if at all), but presumably they could have had a cache in front of the services (which would seem to be a wise thing to do anyway) or contribute to running the services if using a cache is not possible due to how wordpress is designed?

No mirrors?

Posted Oct 2, 2024 9:40 UTC (Wed) by khim (subscriber, #9252) [Link] (4 responses)

> Well, personally, I consider this action equivalent to the Python Software Foundation abruptly locking out Azure users from Pypi, stating a vague "Microsoft does not contribute enough to Python" to claim the moral high ground.

IOW: something that's perfectly reasonable and legal thing to do. Free software does come with source but it doesn't come with a free support license, one have to always remember that.

> Sure, I guess there is no legal obligation for the PSF to provide services to Microsoft clients (or anyone, for that matter) but it would still be a highly dubious move, highly detrimental for the Python community.

This would depend entirely on the situation around Azure, PyPI, etc. If it were found that Azure users actually overload PyPI service and Microsoft does nothing to compensate that and this affects non-Azure users… then it would have been the right thing to do.

No mirrors?

Posted Oct 2, 2024 17:12 UTC (Wed) by Kalenx (subscriber, #120295) [Link] (2 responses)

Legal? As I already said, absolutely.
Reasonable? No sure I agree (IOW: I strongly disagree)

No one is obliged to keep up a Python package index. The Python Software Foundation does it because, presumably, it helps them fulfilling their own stated mission: "We are devoted to creating the conditions for Python and the Python community to grow and thrive."

If they start cutting off random people, including end users who did nothing wrong (other than choosing the "wrong" cloud provider), they are not, IMHO, "creating the conditions for the Python community to grow and thrive".

> If it were found that Azure users actually overload PyPI service and Microsoft does nothing to compensate that and this affects non-Azure users… then it would have been the right thing to do.

That would be the nuclear thing to do; not sure it makes it "right". Just as an example, throttling could also be an option. But anyway, we are going off topic, since this is clearly _not_ what happened in the Wordpress/WP engine case. This "resource usage" was not mention until after the fact...

No mirrors?

Posted Oct 2, 2024 18:31 UTC (Wed) by edgewood (subscriber, #1123) [Link]

I agree that it would be legal (unless there's already a contract) but unreasonable for PSF to cut off Azure in this hypothetical situation. If there was an excessive bandwidth usage, throttling or a warning that they could be cut off in the near future would be reasonable.

However, unlike in the hypothetical, WP Engine sent a cease and desist/preserve documents letter the day before the cutoff. I think that makes the cutoff more reasonable: if you're freeloading, maybe you should take some steps to stop relying on those free services before you go making legal threats.

No mirrors?

Posted Oct 3, 2024 12:24 UTC (Thu) by aragilar (subscriber, #122569) [Link]

I can't comment on how you would cache wordpress.org, but there are numerous tools which provide caching/mirroring of PyPI (for various use-cases, requirements and scales). If Azure (or more likely one of their customers) became abusive of the service (as someone did for the XMLRPC service), I don't see PyPI wouldn't and shouldn't as a last resort block Azure (as happened with the XMLRPC service). I would expect Azure to be reasonable and provide a cache/mirror and/or deal with abusive customer, but it would appear in the wordpress case reasonableness has gone out the window.

No mirrors?

Posted Oct 10, 2024 5:56 UTC (Thu) by TRS-80 (guest, #1804) [Link]

TensorFlow is responsible for 17% of data transferred from PyPI:

https://kristoff.it/blog/python-training-wheels/

The whole post is about the cost of PyPI and worth reading.


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds