Reading about this xz backdoor story from the outside as a person who is still learning much about the technical ins and outs, but as a psychologist it is just overwhelming to imagine a maintainer in this position and all of the feelings of pressure and skill based identity and social isolation that must be involved.

Imho psychology has a duty to show up for technology practitioners and work for them just like we see and work for the well-being of emergency workers, healthcare providers.

I feel that as a field, psych has largely let the human side of software development pass it by and we have been content to be merely consumers as much as the rest of the world. But the needs of these people are going unaddressed, undermeasured and unheard. I talk to a lot of psychologists about why I started working with software teams and the human needs that are there and the massive amounts of societal responsibility & pressure that are there too. We really need to have this conversation.

@grimalkina Thanks for this. I've been an Open Source maintainer for a major project, I had my project attacked, and I did burn out doing so from community abuse, so I sadly speak with a tiny bit of experience, along with my overall experience as a software engineer and technical executive.

(1/n)

@grimalkina
A difficulty with software work is that it begins by dealing with code and it evolves into dealing with people. For professional work, that tends to happen at milestones that are more or less predictable, i.e. promotions.

For Open Source, the timing of that transition is unpredictable and uncontrollable. The worst that can happen is to have no users, because the efforts go to waste, but the worst that can happen is to have users, because now you have to deal with them.

(2/n)

@grimalkina Another very messy aspect of Open Source is related to time-frames and people's priorities. Open Source licenses are forever, but people's involvement is not, at least not automatically.

Chances are, original authors of Open Source want to do good, and they express that by releasing code. Over time, though, it's not about code, it's about people, which becomes a potentially toxic situation. However, the underlying desire to do good keeps maintainers from saying "no".

(3/n)

@grimalkina That has me wondering, should Open Source leaders set better expectations that authorship of code and stewardship of a successful Open Source project are two very different roles, that require different skills, such that people who did the first part well might not be ready for the second part?

In turn, should we work to recruit people who are good at the second part, even if the first part isn't as interesting to them?

(4/n)

@grimalkina I'll be happy to discuss that a lot more in private, if you'd like to hear from my experiences.

(5/5)