Hacker Read top | best | new | newcomments | leaders | about | bookmarklet login
Show HN: Fossfox – paid opportunities for open-source devs (fossfox.com) similar stories update story
235 points by 4kimov | karma 142 | avg karma 5.07 2023-06-25 14:07:20 | hide | past | favorite | 37 comments

The index lists either companies that work on open-source products or those that heavily contribute to open-source. Either way, ideal for devs that want to keep an eye out for opportunities.

Engineering teams can post for free. Open directory of available positions is here [0].

[0] https://github.com/fossfox-com/fossfox



view as:

The site looks good. On a side-note, it’s really great to see that more and more Comercial OSS and other open-source projects become viable businesses. I think this is one of the best way to actually make open-source sustainable.

Thank you. I agree: it's a great moat against closed-source competitors. Plus I'm noticing more and more businesses going with permissive Apache 2.0 licenses (or similar), which is great for the public as well.

So true. I have no problem with using and paying for a hosted, "cloud" version of the product if a self-hosting option is available. It reassures me that I can rely on this product, while not being vendor-locked.

I've certainly seen many different licenses used in COSS projects, including different mixes of them. E.g.: for my latest project I've decided to use mainly AGPL-3.0 (a pretty strong copyleft license) with specific parts licensed under MIT.

That said, my goal wasn't to limit the usage, but to be open-source, and provide self-hosting option (the 2 fundamental advantages you can provide to your users by being open-source, IMHO), while making sure nobody just runs the product on their servers, rebrands it, and sells it to others as a service (which, while possible with other licenses, is simply unethical in my book).


Everyone is clearly entitled to their own set of ethics, but in this situation ethics is not a problem.

One of the explicit permissions of Free Software (and by extension Open Source Software) is that you can sell the software or otherwise profit off it. There is no stipulation that you need to be the primary author, or any kind of contributer to do this.

Equally there is the very explicit freedom to not restrict what people can do with the software. This is quite literally in the definition of Free Software.

Thus rebranding a product, and hosting it yourself, is completely consistent with the Free Software ideals, as long as the user conforms to the terms of the license (making source code available.)

AGPL does not stop rebranding/ rehosting, nor is it designed to. There are licenses that do that well, but they are not OSS licenses.

Ethically I subscribe to the idea that the author was free to license their work (open or closed) however they chose. I'm happy to use , or not use, the product based on the license -they- chose. I'm not obligated to impose additional restrictions on their work. If they wanted those restrictions they have the choice to add them.

You are of course free to apply any framework of ethics to yourself that you like. I'd also point out that using the AGPL specifically does -not- prevent someone from running your product on their server rebranding it, and selling it for money. Doing that is completely within the bounds of AGPL.


Thanks for clarifying. I should indeed explain better what I had in mind.

You are correct that under AGPL-3.0 people still can provide the software as a service, but they’ll have to disclose any changes to the source code they’ve made.

This, in my mind, effectively discourages doing so as, if all you do is change the branding, people will eventually know and, depending on their ethics and the provided offering, they might choose not to use the “official” service.

In theory people still could distribute the product as-is or just be fine with the open-sourcing and actually add something of value to their fork. However, as I’ve seen in practice, this doesn’t seem to happen at a meaningful scale and people usually prefer to contribute directly to the original project.

Like you’ve said, there are other licenses that aren’t really open-source, prohibiting this from happening at all.

Most interesting options from these, for me, were SSPL (which puts the open-sourcing requirement on other elements of your stack, like hosting provider, making it a non-starter), or ELv2 (which just prohibits SaaS use entirely).

But again, not being recognized as official open-source licenses, using these puts the project more in the camp of source-available software rather than open-source.


You make good points, but alas I must disagree with them. Specifically;

>>This, in my mind, effectively discourages doing so as, if all you do is change the branding, people will eventually know and, depending on their ethics and the provided offering, they might choose not to use the “official” service.

There are a lot of factors that go into a SaaS decision. Price obviously, but also things like name-recognition etc.

In a business environment I'm more likely to use ElasticSearch from AWS because we already pay them every month (so I don't need a million people to sign off on it.) Plus I'm comfortable that they will be around next year, and they have the resources to fix hardware issues.

AWS running ElasticSearch is completely within the license (OK, until recently) and thus ethically I'm free to use it. It's being used -exactly- as elasticSearch released it to be used.

They obviously thought your argument was true, that people would prefer their hosting, but apparently they were wrong.

I get the desire to advertise a product as "free software" or "open source". But don't then complain when users make use of those freedoms. Be sure to pick a license that conforms to your actual goals. If you have conflicting goals then you need to resolve that first.

I love open source as much as the next guy, but its not a marketing term, it's a licensing term. Be sure you choose it for the right reasons.


Also fair points :)

I think it all depends on the project’s scale, type (is it part of your infrastructure like a database or all-in-one solution like a CMS, etc.), goals and other factors.

It’s difficult to make the right choice at the very start, as something that might have worked then might not work when you’re at a scale of competing with AWS.


I like the name.

Thank you.


Nice, thanks for adding to resources.

I don't like that the table doesn't stretch out fully and clicking on the "..." doesn't bring me somewhere that shows them all

What makes Netflix for instance eligible? Is the job specifically geared towards OS, or just Netflix known for releasing some of their stuff as OS and hence are allowed?

Any thoughts about location? No idea what here is relevant for where I live.


Great questions, atm the index contains either companies that have their main products as open-source, or companies that make significant contributions (eg: Netflix, Cloudflare, OpenAI have thousands of Github stars).

All jobs should be remote-friendly. There's nothing to do - if you see the jobs, they should be relevant to you.

Some companies do have physical offices (meaning you're welcome to work from there), and those cities are listed if you click on the company's name. Right now it's region-biased per country -- if you scroll to the bottom and click "more" you can change the country. There's def still work to do (visas, non-remote, fine-tuning, etc).


I'm not sure about the other companies, but I see listings for both Netflix and OpenAI that claim to offer remote work. Aren't both companies notoriously remote-hostile? OpenAI in particular seems to have been pretty vocally anti-remote lately. It might be a good idea to allow some way for people to flag bait-and-switch remote listings.

Reporting/flagging features are def on the todo list & not yet there. I agree, they'd be great to have for better moderation. All good points.

> All jobs should be remote-friendly

Would be helpful to mention where by the way; some positions are world-wide remote, others Europe or US only.


Indeed. Some companies limit to countries, some to timezones (+/- a few hours), some to regions like you mentioned, and others might have a language requirement. I've been trying to figure out how to surface that properly without making it too complicating for either the poster or the viewer, and I'm honestly not sure yet.

Though timezone is generally a proxy for the former. I don't think many US companies asking for UTC-(7-5) for example will entertain European applicants willing or happy (I know it would suit me better!) to work those hours.

Maybe don't show anything unless a specific country (usually US) is mentioned? Can add a flag emoji for those.

Timezones are often more flexible, and I wouldn't bother too much with that. But location often doesn't have that due to legal hassle etc (other than visa sponsorships).


> either companies that have their main products as open-source, or companies that make significant contributions

These two categories seem pretty distinct, and the second is pretty nebulous. What does "significant" mean here, and how well does that translate to the odds of me working on an open source project? It's unclear why Netflix and Cloudflare are included but, say, Facebook and Microsoft aren't.

If you're going to include both, it would be nice if there were a way to distinguish and filter between these two categories. I really like the idea of being able to see all the open source jobs out there, but having Netflix at the top of the list makes me unsure how many of these companies are truly open-source-first.


Good point. The code used to have a "work directly on open-source" checkbox per job, but it's hidden for now because I wasn't sure about the edge cases: people can be asked to switch projects later, some companies have their main product as open-source but the position is not directly related (eg: devops), etc. Perhaps I should bring it back and see how it does. Thank you for the feedback.

Can't read nearly anything unless I force my focus on a specific area.

Can you enlarge the fonts please? My vision is not so good.

Hint: Editing font-size to 18px (for <div class="sc-4dp71k-0 hIhENr app-app-wrapper">) via web dev tools (Firefox) produces an incredible output for me.


Yeah, I might've gotten used to it by now - need to experiment a bit & adjust. Thank you for the feedback.

Rule of thumb: body text should never be smaller than 16px or (preferably, though the difference is nuanced) 1em as the browser gives it at the root. (This holds for form fields too, with a more concrete technical reason: iOS will zoom in on the field on focus if its font-size is less than 16px.) 12px is pretty much the lower bound of what is ever acceptable, and only in small quantities and for specific purposes, and it’s better not to go down that small.

work WITH open source seems more fitting

Oh I like that. It would include people that enjoy working at open-source companies, but their role might not be directly foss-related on the daily (eg: devops, website, etc). Thank you for pointing that out.

This just looks like a job board for tech companies that also have open source projects, which is most big tech companies and lots of startups

Nice initiative! Hope the list grows.

It would be nice if you had a fast filter for remote-only postings.

Also, your mailing list software drops the part after a `+`, this breaks filtering rules. I'd also like your base to store my address in a form I provided.


Thank you. Yes you're right, location/remote has to be adjusted for better experience. And I'll see what I can do regarding the email '+', thanks for the heads up.

I am not sure how this made it to the front page or how you justify the click-bait.

- These are not paid opportunities for Open Source work. This a job board. The title makes you think that there are gigs to work on some open source projects and get paid for it.

- There are no guarantees that these "open source friendly" companies will hire you to work on Open Source. Working on Open Source projects is the exception, not the rule. Unless the company has gone the full OS model, which is just a few startups. And still, sometimes these companies have other kind of work (customization for a certain client) at which point you are not involved in the OS work at all.


All dev jobs and no admin/infra makes bofh cry.

H stands for Hell here, while all devs, DX, startups, hype, CTOs are on Clouds.

When you say Infra here on HN, you show you are from the past.

/sarcasm-not-so-much-sarcasm



The website looks amazing! Good job man!

Legal | privacy