原始对话

让-巴蒂斯特·康普夫谈开源代码质量、维护与安全构建

Lex Fridman Podcast · · 4:18:22

在 Lex Fridman 对让-巴蒂斯特·康普夫(Jean-Baptiste Kempf)与基兰·昆亚(Kieran Kunhya)就 FFmpeg 和 VLC 展开的访谈中,康普夫探讨了依据代码质量评估贡献、小型核心团队所承担的维护负担,以及 VideoLAN 的离线构建与签名实践。

Jean-Baptiste Kempf on open-source code quality, maintenance and secure builds

内容更新于:

翻译仅用于阅读理解;原始摘录仍为 source evidence。

一目了然

关键时刻3

简短、标注来源的段落,并附有可验证上下文。完整对话保留在其发布者处。

开源软件

代码质量比贡献者资历更重要

原始摘录

The important thing is, is your code good? We care about excellent code. We don’t care who you are. Like maybe you’re a dog. I don’t care, right? I don’t care where you come from. I need to look at your code.

翻译 · 非原文措辞

关键在于——你的代码是否优秀?我们关注的是卓越的代码。我们并不在意你是谁。比如你可能是一只狗,我也不在乎,对吧?我不在乎你来自哪里。我只需审视你的代码。

上下文

FFmpeg 很可能是全球 CPU 使用量最大的项目之一。过去几分钟里我们提到的每一句话,都凝聚着某人毕生的心血。每句话背后都有成书的专著。因此,在许多情况下,其复杂程度是难以想象的。

原始上下文

FFmpeg is probably one of the biggest CPU users in the world. Everything we’ve just said in the past couple of minutes, every sentence is someone’s lifetime’s work. There are books about every sentence. So the level of complexity in many cases is inordinate.

开源软件

FFmpeg 核心团队规模极小,承担主要维护负担

原始摘录

one thousand contributors in the timeline and just ten staying, it’s a one percent chance that someone comes and stays. One percent. So you will have change of job, change of wives, you have children, you have accidents in life. You’re going to change jobs, whatever. You’re not going to come back. It’s most likely. So we are the ones going to maintain your code.

翻译 · 非原文措辞

时间线上有一千名贡献者,但最终仅十人留下,留存率仅为百分之一。百分之一!因此,人们会更换工作、更换配偶、养育子女,甚至遭遇人生意外。你会跳槽,诸如此类。你很可能不会再回来。所以,最终将由我们来维护你的代码。

上下文

他为人非常严厉,但人们往往看不到的是:通常当他严厉时,对象往往是内核某部分的维护者——这些人彼此熟识。而他对其他人并不会如此苛刻。关键是,他在自己房间里创造的东西,实际上正驱动着所有在线服务器。微软云平台 Azure 上的服务器,我相当确信其中百分之七十至八十运行的是 Linux;你所有的安卓手机也都运行 Linux。他凭借开源的力量所成就的一切,的确令人惊叹。没错,Linux 内核的质量非常高,没错,这确实很难,但我们无法在此妥协。我们不能在质量上妥协,因为归根结底——你必须理解这一点——VLC 的核心社区仅有五人。不过我们也应指出,有时为维持这种卓越标准,语言中会带有一些尖锐甚至激烈色彩。对此,您有何看法?

原始上下文

He’s very harsh, but what people don’t see is usually when he’s harsh, it’s to people who are maintainers of part of the kernel, right? So they know him, right? So he’s not very harsh like that to everyone. The thing is, what he created in his room is basically powering every server online, right? Even at Microsoft’s cloud called Azure, I’m quite sure seventy, eighty percent of the servers are running Linux. All your Android phones are running Linux. What he did with the power of open source, sure, is amazing. And yes, the quality of the Linux kernel is very high, and yes, it’s difficult, but we cannot compromise on that. We cannot compromise on quality because in the end—and you have to understand that—the core community of VLC is five people. But we should also mention that there is some spiciness, some harshness to the language that’s sometimes used when you’re keeping this high bar of excellence. Is there something to say to that?

开源软件

VideoLAN 实行离线编译并采用双重签名

原始摘录

There is no code that gets into VLC that we don’t control, and the way we compile VLC, you would call me completely paranoid. Like, we compile on boxes that are offline, where we start by compiling the compiler. We do everything offline on places that have never been connected to the internet. We— The way we do signing, there is double signature.

翻译 · 非原文措辞

没有任何代码能在未经我们控制的情况下进入 VLC;而我们的 VLC 编译方式,你或许会称我完全偏执——我们使用离线设备进行编译,这些设备甚至从未连接过互联网;我们从编译编译器本身开始,一切操作均在从未联网的环境中完成。我们的签名方式采用双重签名。

上下文

那么‘妥协’的定义是什么?比如允许政府植入后门——那我就搬去开曼群岛,更换域名,重新开始,对吧?VLC 是一个工具,一个帮助人们做事的工具。我们并非一个平台。至于专利问题,抱歉,大多数专利……比如,你不该能对数学和矩阵申请专利。这显然是错误的。

原始上下文

And what’s the definition of compromise? Like allowing a government to do a backdoor- I move to, I don’t know, Cayman Islands, and I change the domain name, and I start again, right? Like, VLC is a tool. It’s a tool that is going to help people doing things. We are not a platform. And for patents, well, I’m sorry, but most of the patents… Like, you shouldn’t be able to patent math and matrices. Like, this is wrong.

来源与研究方法

这些观点均关联原始来源。转述已明确标注,不作为逐字原话展示。

打开转录或来源材料 (在新标签页中打开)报告问题