2025-03-28 00:00:00
Suwako
software
rant

【FOSS】Large-Scale Open Source Projects Are Not Your Allies

Initially, I planned to limit this article to Tor, F-Droid, and Let's Encrypt, but as I investigated further, I realized the issue is much deeper than I thought.
So, what do Tor, F-Droid, Let's Encrypt (ISRG), Mozilla, Free Radio Asia, the CIA, and USAID have in common?

  • They are all funded by U.S. taxpayer money.
  • They all had their funding cut by the Trump administration and are suing over it.
  • They all have the same or overlapping boards of directors.
  • They all promote virtue signaling for LGBT causes.
  • I noticed this when I saw Tor, F-Droid, and ISRG (known for Let's Encrypt) simultaneously suing the Trump administration for the same reasons.
    This seemed odd to me.
    Upon investigating these organizations, I found that Tor, F-Droid, ISRG, Mozilla, and Free Radio Asia are all funded by the CIA through USAID, the Open Technology Fund, the U.S. Agency for Global Media (USAGM), and the IRS (U.S. Internal Revenue Service).
    In principle, there's nothing wrong with open-source organizations generating revenue, but since this is government money, it has implications.
    For example, the U.S. government could mandate data sharing or use these organizations to spread propaganda.

    Tor itself is a highly secretive organization, and its latest financial report from mid-2022 states that 53.5% of its revenue comes from the U.S. government.

    Examples of Overlapping Leadership

  • Nicole Wong: Mozilla, Open Technology Fund
  • Vicky Chin: ISRG, Mozilla
  • Sarah Gran: Tor, ISRG
  • What I'm Currently Using

    I currently use Let's Encrypt for SSL certificates, but I'm considering alternatives.
    Even if they're paid, I'm open to switching.
    I recently stopped using Tor, so at least that no longer affects us.

    Suggested Alternatives

  • Tor: I2P, Gemini (not Gopher, as it doesn't support UTF-8)
  • F-Droid: Buy a real computer
  • Let's Encrypt: Paid certificates, but you'll need to research them yourself first
  • Mozilla: No alternatives at the moment, but a new browser called Ladybird using its own web engine might emerge soon
  • That's all