The End of FOSS as We Know It: Poul-Henning Kamp's Final 'Bikeshed' Column

In his final "Bikeshed" column for acmqueue, Poul-Henning Kamp argues that the era of traditional Free and Open Source Software (FOSS) is ending. He predicts a shift toward "attested computing platforms" and corporate stewardship, driven by the need for legal accountability and government-mandated age verification.

The Decline of Traditional FOSS

Traditional FOSS is becoming unsustainable because it lacks a mechanism for legal accountability. Kamp asserts that the "Don't blame me" clauses common in FOSS licenses are incompatible with the needs of modern civic society and digital sovereignty, particularly within the European Union.

The Shift to Corporate Stewardship

Kamp predicts that the "Benevolent Dictator for Life" model of FOSS maintenance is being replaced by committees appointed by "FOSS stewards" or companies. This transition is driven by several factors:

• Maintainer Burnout: The original generation of FOSS do-gooders is aging, and the role of maintainer is often pro bono, making it unattractive to new apprentices.
• Legal Accountability: The EU's Cyber Resilience Act, while providing carveouts for FOSS, removes those protections the moment a project becomes profitable. This forces a shift toward professionalized, accountable entities.
• Digital Sovereignty: European CIOs seeking alternatives to US-based monopolies require a supplier they can sign a contract with to allocate blame and manage risk.

The Rise of Attested Computing Platforms

Kamp argues that anonymity on the internet is shrinking, and government-mandated age verification will be the catalyst for a fundamental change in software distribution. He posits that the only way to implement such verification is through "cryptographically attested software integrity."

This leads to a predicted future where:

• Users can read the source code, but cannot modify it without breaking the attestation.
• Only unmodified, genuine kernels and programs from approved "FOSS-stewards" app stores can run outside a browser sandbox.
• The internet fractures into zones accessible only via these attested platforms.

LLM-Assisted Code Review and the AI Bubble

Kamp views the current excitement surrounding LLM-assisted code reviews as an economic bubble. He compares the process of finding bugs with LLMs to the way computers play chess: they explore search trees wider and deeper than humans, but the returns are diminishing.

Economic Viability

He questions the economic sustainability of LLM tools, noting that the massive upfront cost of training is concentrated in the model weights, which are easily distributable and difficult to protect via copyright. He suggests that once the bubble bursts, the diminishing returns on bug-finding will make it the tools less viable outside of the investment hype.

Community Perspectives and Counterpoints

Discussion among the technical community reveals a deep divide regarding Kamp's views on privacy and regulation.

On Privacy and "Tech Bros"

Kamp attributes the loss of privacy to a refusal by early developers (whom he calls "tech bros") to design protocols that were "minimally compatible with a nation of laws," thereby backing nation-states into a corner and provoking a more aggressive regulatory response.

Community members disagreed strongly with this framing, arguing that privacy is a binary state—either it is technically guaranteed or it is not. One commenter noted:

"There is nothing in between. This is not about tech bros. This is about guiding principles, about personal liberty, and and freedom from tyranny."

On the Impact of Age Verification

Some argue that age verification will not fundamentally break FOSS. One perspective suggests that restrictions could be applied to consumer devices and preinstalled software without requiring the entire OS or all software to be part of the regulation, thereby preserving the openness of the OS once the user's identity is confirmed.

On LLM Utility

While Kamp is skeptical of the impact of LLMs on code quality, some users argue that his take is out of date, stating that LLM-assisted review is already a major disruptor in the industry.