Wisdom of the Day… Incy Wincy

You know, the spider! Many good ideas don’t come from a specific field such as databases…. this gem comes from my daughter Phoebe, this morning as I was getting my bike ready to ride us to school. She said “don’t give up papa, keep on going! Just like Incy Wincy Spider, he climbed up, got washed out by the rain, but didn’t give up either!” Smart chook, that Phoebs.

By the way… the key to not being held hostage to investors’ whims, is not to have any investors to begin with! Money doesn’t generally solve problems, it actually creates more. If you have to make it all on your own, you get this wonderful focus. In a nutshell, never spend money you don’t have.

Australian govt PC grants pay for license fees

As noted in this article: PC grants pay for licence fees, it appears that in the current setup, the Rudd government’s education revolution ends up less than ideal, with a heap of the money flowing to mainly Microsoft.

Clarifying the story… state education authorities and catholic education generally have an arrangement with Microsoft which gives them very cheap access to for instance Windows and Office licenses. But all is relative… under the agreement, any PC in the school’s realm gets counted, even if it doesn’t run any of the software. So if a school acquires new PCs, even if they were to all run Linux, OpenOffice.org and the whole shebang, Microsoft still gets a cut. If, as a consequence, the authorities have to acquire lower grade hardware to get to their quota of machines, that’s not-so-shiny, eh? And that’s exactly what appears to be happening.

I don’t actually blame Microsoft for making such a deal, of course it’d take what it can get, and offering a simpler auditing system for its licensing kinda makes sense for the other side as well. It just ends up borked. It’s up to the education authorities to renegotiate something. The federal government says it’s not their gig. True, strictly speaking, but really….

SQL database injection on the SSN/government level…

In the realm of the daily WTF, this SQL doozy popped up earlier in the year: Oklahoma Leaks Tens of Thousands of Social Security Numbers, Other Sensitive Data

SQL queries were part of the URLs, so anybody could see which tables/cols were present, and modify at will to extract lots of privileged data including social security numbers. I particularly cried around the bit where the developers, after being informed of the problem, merely changed the social security number column name to start with caps, while leaving the whole “SQL in URL” thing in place. They only actually took the thing off-line “for routine maintenance” after it was then proven that the developers’ own personal information was also retrievable. Apparently it had to have such a personal connection to “hit home”.

On China in the software market, exploring with a twist!

Please allow me to take your mind on a little adventure! I was just reading A global Chinese software company in the next 20 years? about how China goes about acquiring technical know-how. It’s not quite like what Japan did after WWII, it uses unique aspects of China, such as its size as well as its form of government.

Savio then makes a comment about “[…] piracy rates sky-high and IP legislation and enforcement in its infancy, […]” which I think misses a very important point: China’s government form is of course communist. One of the fundamentals of communism is that there’s no individual ownership of things, most things are *communal* (hence the name “communism” ;-). Wikipedia writes “Communism is a socio-economic structure that promotes the establishment of an egalitarian, classless, stateless society based on common ownership of the means of production and property in general.”

Therefore, IP -> intellectual *property* kinda doesn’t fit into China’s picture of the world. So what the US and the media generally completely fail to appreciate (or convey) when talking about this topic, is that it’s not at all about “not enforcing IP”. Very simply, without IP, there’s nothing to enforce!

Open Source is sometimes regarded as IP communism, but from the above you can easily see that it is not – OSS has a strong foundation in copyright law: the GPL, for instance, builds directly onto it and would not work without.

Then there’s the debate over whether communism actually works or not; most implementations tend not to, but some can be quite successful in certain ways (for different reasons). Cuba for instance has done some very interesting things. But China is a special case. It’s been creating its own special mix producing economic wealth as well as power, and I reckon that the “does it work” debate in this case is completely moot. China is such a force that they can pretty much do as they please, and the rest of the world will just put up with it.

Likewise, human rights suck in China, and media freedom is an oxymoron – but they’ve just held very successful Olympic Games and the world has gone along with all the nasties it knows exist.

Right now, the world needs China more than China needs the rest of the world. The other countries have created a huge dependency by outsourcing manufacturing over many years. Shopping in Australia, most things are manufactured in China, even if the company is Australian. This is just a fact right now, whether you like it or not.

So here’s the thing… given the above-sketched picture of China and the world, does China have any reason to change anything in the way it does things? Why would it change its approach to IP?

China uses lots of Open Source software, and has created its own Linux distro and versions of other OSS packages. So it’s getting the benefits from that perspective already.
If you’re building say a website, the key factor is speed and time to market, not IP. In fact, many in “the West” get very distracted by IP (patents generally) and waste a lot of time and money on it, to the detriment of the possible economic advantage in their marketplace. So Chinese might have an advantage already here, they don’t have that “fussing about IP” background and would thus not be hindered by such distracting thoughts ;-)
Building other Open Source software… well, within China, does it really matter? Outside China there’s copyright laws, so there the stuff can be made “safe” anyway with authors’ rights fully protected.

The world seems to work just fine, from China’s perspective? Perhaps this is actually similar to tax(free) havens. They’re regarded as a nuisance when viewed from the outside, but the tax havens themselves and people using them are quite happy with the arrangement. See China as an IP(free) haven! Perhaps, rather than lamenting the lack of IP protection, we can look at how we can use this haven in good and useful ways?

OpenSQL Camp 2008 (14-16 Nov 2008)

OpenSQL Camp 2008 is coming! When and Where: Charlottesville, Virginia, USA November 14, 15, and 16 2008!

Organised by Baron Schwartz & others, and attended by loads of cool and interesting people (Brian, Monty and Baron are already on the attendee list!) you’d better get ready for a dynamite weekend of learning, contributing, and having fun! I’ll be there too.

Some Key facts:

  • It is of, by and for the community (you).
  • At this event, all Open Source databases are created equal. We’ll learn together and grow together.
  • It’s a combination conference and hackathon.
  • It’s free.
  • It is Friday night Nov 14, 18:00 through Sun the 16th at 18:00 in Charlottesville, Virginia USA in a very cool location.
  • The website, where all details will be posted: http://www.opensqlcamp.org/
  • The mailing group, where details will be discussed, decided and arranged: http://groups.google.com/group/opensqlcamp
  • Date, time and place are confirmed and will not change. You can make your travel plans now. There’s travel information on the wiki.
  • We already have some great speakers who have offered to give great talks. These and other details will show up on the wiki as they’re finalised.
  • Sponsors are needed. See the wiki.

Despite the name, this will be different from other Camp conferences you’ve been to. This is a combination of a planned event (with great speakers and sessions), semi-planned spontaneity (sessions to be decided by attendees the night before), and a hackfest. It’s the best elements cherry-picked from all the conferences (and un-conferences) you’ve been to.

What should you do next? Go to the website and register yourself. Then go join the mailing list. And buy your plane tickets before they get too expensive. And tell your friends, and blog about it. See you there!