惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

Webroot Blog
Webroot Blog
Last Week in AI
Last Week in AI
WordPress大学
WordPress大学
Y
Y Combinator Blog
F
Fortinet All Blogs
B
Blog RSS Feed
H
Hackread – Cybersecurity News, Data Breaches, AI and More
C
Check Point Blog
博客园 - 【当耐特】
V
V2EX
云风的 BLOG
云风的 BLOG
Vercel News
Vercel News
GbyAI
GbyAI
美团技术团队
Jina AI
Jina AI
雷峰网
雷峰网
Hugging Face - Blog
Hugging Face - Blog
MongoDB | Blog
MongoDB | Blog
F
Full Disclosure
阮一峰的网络日志
阮一峰的网络日志
宝玉的分享
宝玉的分享
人人都是产品经理
人人都是产品经理
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
小众软件
小众软件
The GitHub Blog
The GitHub Blog
NISL@THU
NISL@THU
D
Docker
MyScale Blog
MyScale Blog
V
Vulnerabilities – Threatpost
S
SegmentFault 最新的问题
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
S
Schneier on Security
K
Kaspersky official blog
AWS News Blog
AWS News Blog
The Hacker News
The Hacker News
Latest news
Latest news
C
CXSECURITY Database RSS Feed - CXSecurity.com
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Know Your Adversary
Know Your Adversary
L
LINUX DO - 热门话题
P
Privacy & Cybersecurity Law Blog
L
Lohrmann on Cybersecurity
C
Cisco Blogs
Simon Willison's Weblog
Simon Willison's Weblog
Cisco Talos Blog
Cisco Talos Blog
N
News and Events Feed by Topic
Google DeepMind News
Google DeepMind News
Help Net Security
Help Net Security
C
Cybersecurity and Infrastructure Security Agency CISA
B
Blog

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
AI May Do for FOSS What 30 Years of Idealism Couldn't
Keith MacKay · 2026-05-29 · via DEV Community

Free and Open-Source Software (FOSS) is a cheat code for AI development. Thirty years of idealism couldn't get it into the mainstream, but a year of coding agents may just do it.


For three decades, the open-source pitch ran like this: it's technically great, it's free forever, and you own it completely. The response from corporate IT: who do we call at 2am when payroll breaks?

Nobody had a fully convincing answer. With AI, that is all changing.

The Ideology Was Never the Problem

The Free Software Foundation spent decades arguing that proprietary software was philosophically indefensible. Many developers agreed. The code seemed to agree. Linux conquered server infrastructure. PostgreSQL has more recently replaced Oracle at hundreds of serious enterprises that find it mature enough to replace Oracle and its high annual licensing fees. The open-source stack underneath most of the internet is vast, deep, and excellent.

But the desktop never tipped. Enterprise productivity software never tipped. The industries where software has to work the way non-engineers expect it to work -- accounting, legal, healthcare administration, graphic design -- stayed commercial, stubbornly, decade after decade.

This was not a failure of idealism. The idealists were right about most of the technical arguments. It was a failure of practical infrastructure: the expensive scaffolding that enterprises actually need and that nobody provides for free.

Eric Raymond made the ideological case most clearly in The Cathedral and the Bazaar 1 -- the essay that gave distributed open-source development its intellectual framework. His central argument: the bazaar model (public code, distributed contributors, rapid iteration) produces better software than the cathedral (centralized, controlled, released complete). There are a lot of supporting examples: Linux on servers, PostgreSQL replacing Oracle, the entire open-source infrastructure stack. What Raymond didn't solve -- what no amount of idealism could solve -- was the consumption problem. Getting bazaar-produced software into enterprises that require phone support, working SSO, and a named entity to blame when payroll breaks is a fundamentally different problem than building the software in the first place.

What Enterprises Were Actually Buying

When a company signs a six-figure enterprise license for Microsoft Office or Adobe Creative Cloud or ServiceNow, they are not paying for the software alone. They are paying for:

  • Accountability. There is a named entity responsible when something breaks. That entity has contractual exposure and a financial incentive to resolve it.
  • Support. Real humans, paid to understand the product deeply, available when the system breaks before a board presentation.
  • Documentation. Not the GitHub wiki that a volunteer updated in 2019 before getting excited about and involved in a different project. Actual, current, version-specific instructions.
  • Predictable updates. Feature releases tested for compatibility with your existing workflows. A roadmap someone is paid to keep, that is responsive to market needs.
  • Enterprise integration. LDAP works. Active Directory works. Your SSO provider works. The vendor either built it or certified someone who did.

FOSS (Free and Open-Source Software) alternatives often matched commercial software on raw features. What they couldn't consistently offer was the support structure around those features. When LibreOffice's LDAP integration misbehaved, the answer might be a forum post from 2016. When Microsoft's misbehaved, you called a number. The gap was not code quality. It was operational accountability -- and operational accountability costs money.

The Expertise Tax

There's a more granular version of this problem that rarely gets named: the expertise tax.

Every FOSS deployment carries a hidden cost in human expertise. Not general technical expertise -- specific, hard-won, intimate knowledge of the particular software in question. The knowledge that PostgreSQL's max_connections parameter needs to be set before you configure shared_buffers, and that the ratio matters enormously for your specific workload. The knowledge that GIMP's batch processing mode requires a different script path than its interactive mode. The knowledge that the reason your Nextcloud LDAP integration fails on nested groups is a flag buried four levels into the admin panel that defaults to off and was mentioned once in a developer forum in 2021.

This is the dark art of FOSS deployment. Somewhere out there, if you're lucky, one person figured this out. They may have blogged about it. They may have answered a Stack Overflow question eight years ago. Their knowledge exists in the world, distributed across a thousand pages of documentation, a thousand forum threads, a thousand GitHub issues closed as "works for me." The organization that wants to use the software has to find it, evaluate it, and apply it correctly.

That used to require a person who'd spent months with the software, or a consultant who'd done it enough times to have the context memorized, or both.

What Agents Actually Change

An AI agent with access to search tools and a file system doesn't have the expertise tax problem. Not the way humans do.

Give an agent the task "install and configure Nextcloud with our Active Directory environment" and it reads the documentation, the release notes, the known issues, the forum archaeology, and the GitHub issues simultaneously, comprehensively, without fatigue. The 2021 forum post about nested group LDAP flags? Found, read, applied. The recommended PostgreSQL tuning parameters for a deployment of this size and access pattern? Applied. The configuration that one developer in the Netherlands figured out that makes mobile sync actually work with a reverse proxy setup? Done, in a reproducible, documented configuration file the next administrator (agentic or human) can read.

Raymond's seventh lesson in The Cathedral and the Bazaar [1]: treat your users as co-developers. For three decades, enterprise FOSS users couldn't live up to that aspiration -- they could file bug reports, not patches. The gap wasn't willingness; it was technical depth. Agents collapse that gap entirely. An enterprise deploying Nextcloud with an agent is, functionally, a co-developer: the agent reads the source, understands the extension architecture, and produces working integrations to spec. Raymond also coined Linus's Law: "given enough eyeballs, all bugs are shallow." The constraint was never the eyeballs. It was the human capacity to act on what the eyeballs found. The agent is an eyeball that can write the fix.

The agent doesn't stop at configuration. If the FOSS software is missing a feature your enterprise needs -- say, a specific export format for your compliance reports, or a webhook integration with your incident management system -- the agent can write the plugin. The source code is available. The agent can read it, understand the extension architecture, and produce working code to specification. (Every open-source project maintainer who has fielded "when will you support X?" for a decade just felt something stir.)

My nanobot implementation is a glorious Frankenstein's monster of nanobot, claude-mem, lossless-claw, features I liked from OpenClaw, downloaded OpenClaw skills, and ongoing tweaks for efficiency. I see a FOSS project mentioned on YouTube, and I can fork it on my phone so I have a copy to explore, or point my code agent at it and ask it to understand the code and incorporate relevant concepts into MY system...even if my system is in a different programming language, for a different use case. Adding things like persistent memory with keyword and semantic search, multiple Discord channels with individual personalities and skills, health check and security enhancements, model routing, and support scripts (e.g., backfill my persistent memory with all my historical Claude session prompts and responses, both raw text and as vector embeddings) was a great way to learn more about what agents can do and how to compensate for their weaknesses, and I was able to leverage the brilliant work of others in minutes to do so. My 4k lines of nanobot code has grown to something like 25k over a couple of weekends of experiments and expansion, but it does what I'd like it to do (for now) and is far smaller than the 400k lines of OpenClaw (I'm not anti-OpenClaw -- I'm running on a 2013 MacBook and was trying to keep things small). Even openclaw, its skills, and nanobot are FOSS projects I was able to fork and modify for my own use at the cost of my time and attention.

The practical barrier to FOSS enterprise adoption was never about ideology. It was about access to expertise. Agents are expertise on demand, at the cost of compute rather than headcount.

This is a subtle but significant shift. Commercial software vendors charged partly for expertise embedded in the product: the thoughtful defaults, the compatibility testing, the help documentation that actually matches the current UI, the analytics and reporting and security guardrails for productive and safe use of their product. Agents can supply those layers on top of software that doesn't include them.

The Business Model Reckoning

So what will this mean for software businesses?

The most exposed are companies built on top of FOSS by charging for the things open source couldn't provide. Red Hat's model -- take Linux, make it enterprise-grade, charge for support and certification -- was incredibly effective for its era. The era is ending. When agents handle the bulk of first-tier support interactions, when they can apply configuration changes and interpret error logs without a human intermediary, the pricing conversation changes fundamentally.

The same logic ripples across the enterprise software map:

  • Support-led software businesses lose their moat when agents commoditize first-tier and second-tier support
  • Implementation consulting built around complex FOSS stacks loses its scarcity premium when agents can replicate in hours what took a consultant days and a project plan
  • Training and certification programs built around teaching operators to run FOSS tools face pressure from agents that effectively train themselves -- and their users -- on the fly, in minutes, for pennies
  • Commercial software with thin differentiators faces direct competition from FOSS alternatives that now come with an agent-powered support layer attached

Who wins? The picture is more interesting than "everyone loses."

FOSS maintainers gain leverage they never had. The projects that agents depend on -- the core code being configured, extended, and deployed by agents everywhere -- become backbone infrastructure. Projects that were ignored because they required expertise to operate may become much more widely deployed because the expertise barrier disappeared. Maintainers of key projects gain a bargaining position the old Free Software Foundation could only dream of: actual widespread enterprise dependence. Raymond described open-source communities as gift cultures [1], where reputation accrues to what you give away rather than what you control or sell. The maintainers who donated their code to the world for three decades are now the foundation of AI-enabled enterprise computing. The gift came back around. It just took thirty years and an inference engine.

Managed service providers thrive. AWS running managed PostgreSQL, Google Cloud running managed Kubernetes, Cloudflare running managed infrastructure at every layer -- they're not selling the software. They're selling the operational layer above it. Agents don't eliminate that; if anything, they accelerate adoption of the underlying FOSS and drive more managed service usage as a result.

And the software businesses that survive are the ones with real moats: proprietary data, network effects, hardware integration, or workflow lock-in that no amount of FOSS configuration replicates. The products that charged for expertise they didn't actually own are the ones under pressure. The products that charged for something genuinely irreplaceable are fine.

The Pricing Implications

Buried in all of this is a shift in enterprise software pricing that procurement teams haven't fully processed yet, but the market is beginning to understand. Google's release of Stitch, a software look-and-feel design tool for non-coders, reportedly caused a rapid drop in the stock price for Figma (currently the market-leading tool for this sort of design) [2].

Software vendors have always priced partly on implementation friction. Complex software that requires expertise to configure is software you pay consultants to implement and pay vendors to support. That friction was a feature of the business model, not a bug. It created switching costs. It created support contracts. It created the whole ecosystem of certified partners and implementation specialists.

Remove the friction, and the pricing justification goes with it.

This doesn't mean commercial software is collapsing. The market for software with genuine proprietary value -- unique data access, network-dependent features, integrated hardware -- remains solid. But the argument "you need us to make this work" just became much harder to sustain. The argument that will win renewals is "we've built something that doesn't exist in the FOSS ecosystem, and here's the specific value it creates for you." Vendors who haven't been making that second argument because the first one was sufficient are about to discover that their renewal conversations are even harder than their renewal forecasts.

The irony: the same AI that makes commercial vendors vulnerable may also make it possible for FOSS projects to finally be adopted at enterprise scale. The technology disrupts both sides of the table simultaneously.

The Bottom Line

FOSS advocates spent thirty years arguing that free software was better software. Even in the cases where they were unquestionably right, they were largely ignored by enterprise procurement, which had a different definition of "better." Better meant supportable by anyone on the team, not just the one developer who'd spent three months with it. Better meant documented and integrated and predictable.

Agents just made every FOSS project more supportable, more configurable, and more integrated. The idealists made the philosophical argument back in the 1990s, but could never back it up in a pragmatic way. Until now.

References

  1. The Cathedral and the Bazaar -- Eric S. Raymond (1997)
  2. Figma stock drops 11% after Google releases vibe design product Stitch -- CNBC, March 19, 2026

If this resonated, here are some related articles:


Keith MacKay is a technology strategy consultant and CTO in EY-Parthenon's Software Strategy Group (SSG), specializing in AI disruption and technology diligence for private equity and corporate clients. SSG's AI Disruption Lab conducts rapid assessments of how AI transforms and threatens existing business models and value chains. Keith teaches at Northeastern University and writes about strategy, management, and AI/technology with AI collaborators.