A CEO is no longer expected to talk candidly about open source. Maybe business leaders have never expected open source to be anything but serve their business interests. Not every CEO takes advantage of open source to the degree we have seen in recent months. But no one is free of blame. Open source means different things to different people, and everyone uses it for their own purposes.
The colloquial use of open source gives companies like Meta the opportunity to use open source as they wish. Even high-ranking people in the open source community discount the problem. They say it’s OK. Open source is still moving forward. The kids don’t care — all they want to do is build models.
There is no playbook or good versus evil here. Many thoughtful people want to find a way to solve the mess we’ve seen surface in the WordPress saga of the past few weeks.
To recap, for those who haven’t been sufficiently online the past few days: Matt Mullenweg, co-creator of WordPress, the popular open source content management system, has been accusing WP Engine, a WordPress hosting provider, of violating WordPress’ trademarks and using its servers without compensation. The two organizations’ lawyers have exchanged cease-and-desist letters (more on those later). At the stroke of midnight UTC on Tuesday, WordPress blocked WP Engine’s access to its servers.
As this episode unravels, a fresh flow of ideas about open source has emerged. At least one CEO has established an important approach to solving issues like those we see with WordPress and WP Engine.
In a thoughtful post on his personal blog, Dries Buytaer, creator of Drupal, described the issue today as a makers-takers problem, where “creators of open source software (“Makers”) see their work being used by others, often service providers, who profit from it without contributing back in a meaningful or fair way (“Takers”).”
CEOs are on both sides of the perspective he details. He knows the people involved and has a solution that makes sense for the Drupal community. He calls it a “contributor credit” program.
Buytaer comes from the same world as Mullenweg. Drupal and WordPress are open source content management systems.
Still, open source is a tool for CEOs to use for profits, sometimes illusions, and leverage against commercial competitors. We’ve seen this with Meta CEO Mark Zuckerberg, who calls Llama, the company’s large language model, open source, which it is not.
And now we face someone who has long enjoyed a gleaming image in the open source community but now faces many questions about his intent.
Earlier in the week, we interviewed Mullenweg, who said WP Engine should fork WordPress.
“I think a fork would be amazing,” he told TNS. “They should fork WordPress, because what they offer is not actually WordPress. They call it WordPress, but they really screw it up.”
Mullenweg now wants to own a chunk of WP Engine, and he’s using his bully pulpit to pound away until he gets what he wants. He’s called WP Engine “a cancer.” He openly rails about the WP Engine executive team and Silver Lake, the private equity firm that has invested in it, using tactics we’ve become far too accustomed to from all sorts, who we don’t have to name here.
It’s a victim tactic. Mullenweg and Automattic, his holding company, talk like they are the victims of an evil plan, rooted in trademark violations. Following the victim’s logic, Mullenweg has to attack. He and his team have to block WP Engine from the WordPress servers.
Now comes the news from The Verge that WordPress demanded 8% of WP Engine revenues each month in exchange for being considered a contributor to the WordPress open source project. That would also mean WP Engine could not fork WordPress, but it would allow WP Engine to use the trademark.
The Verge:
“[C]hoosing to contribute 8 percent to WP Engine employees would give WordPress.org and Automattic ‘full audit rights’ and “access to employee records and time-tracking” at the company. The agreement also comes with a ban on ‘forking or modifying’ Automattic’s software, including plug-ins and extensions like WooCommerce.”
This raises questions about Mullenweg’s hearty support for a WP Engine fork. For perspective, WP Engine competes with Automattic. Just be clear on that one.
Mullenweg has made it confusing for almost everyone involved. There are huge supporters who want WordPress to survive, and there are end users who don’t have any clue about open source or even that their sites run on WordPress servers.
WP Engine, on the other hand, has its own issues. It does not give much in return for using WordPress. The company, under CEO Heather Brunner and founder Jason Cohen, uses the WordPress name. They call it fair use.
Further, WP Engine uses the work invested by the WordPress community into the service without the engineering overhead required if it had to maintain its own fork, which would cost millions and take quite some time to develop — a year, two, three?
What drama. If you are hearing about this for the first time, Mullenweg, who created the web content management system WordPress, has been relentless with his attacks on WP Engine for what he claims are trademark violations. It came to a head at WordCamp in Portland earlier in September when Mullenweg called WP Engine “a cancer” on the community.
On Sept. 23, attorneys sent a cease-and-desist letter to WP Engine on behalf of Mullenweg’s holding company Automattic and WooCommerce. Among its demands: that WP Engine stop all unauthorized use of WordPress’s trademarks and “provide an accounting of all profits from the service offerings that have made unauthorized use of our Client’s intellectual property.”
The letter suggested that “even a mere 8% royalty on WP Engine’s $400+ million in annual revenue equates to more than $32 million in annual lost licensing revenue for our Client.”
On Sept. 25, in lieu of action by WP Engine, Mullenweg blocked WP Engine’s access to the WordPress servers. He then gave a reprieve on Sept. 27 after users contacted him. Mullenweg said users thought they were paying WordPress, not WP Engine.
“They thought they were paying me, to be honest, that’s why they were pissed off,” Mullenweg said. “And so I was like, ‘Oops, OK, we’ll turn it back on.’“
WordPress blocked WP Engine’s access to its servers Tuesday at UTC 00:00.
The odd thing: no sign of trouble so far from WP Engine users; a WP Engine spokesperson declined to comment when contacted by TNS about whether the company had heard from customers having problems. WP Engine must have set up the mirrors and all to WordPress.org. How that affects performance and the rest is still not understood.
In our interview, Mullenweg said users now hopefully understand that they are paying WP Engine, which does not pay WordPress for auto updates and everything else WordPress provides. Users, he argued, should be mad at WP Engine, not him and his team, who run the servers. Again, Mullenweg expresses that he and his team are the victims.
WP Engine is simply not responding, Mullenweg said, except through a cease-and-desist letter its attorneys sent Automattic on Sept. 23 after his repeated attacks.
The letter sent on WP Engine’s behalf reads in part, “Mr. Mullenweg’s covert demand that WP Engine hand over tens of millions to his for-profit company Automattic, while publicly masquerading as an altruistic protector of the WordPress community, is disgraceful. WP Engine will not accede to these unconscionable demands, which not only harm WP Engine and its employees but also threaten the entire WordPress community.”
WP Engine did not answer The New Stack’s question about forking WordPress, but a company spokesperson did have choice words about Automattic’s licensing demands.
“We, like the rest of the WordPress community, use the WordPress mark to describe our business. Automattic’s suggestion that WP Engine needs a license to do that is simply wrong, and reflects a misunderstanding of trademark law. To moot its claimed concerns, we have eliminated the few examples Automattic gave in its Sept. 23 letter to us.”
For example, WP Engine has made some minor changes, namely changing WordPress to WordPress1 and WooCommerce1 on the site’s front page.
Overall, users had almost no warning that their sites would be disrupted. This is an odd way to treat users, especially when they are such huge fans of your platform.
Here’s where open source becomes a problem for users. Most people do not know how they get the updates to their CMS. But once their site stopped working, they became entangled in a battle between Mullenweg and WP Engine.
Meanwhile, most users are just trying to keep their sites working.
Post by @alexelnaugh
View on Threads
Amidst the controversy, Mullenweg acknowledged he could have done better in reaching out to the community.
“To be fair, I have not been the best at public relations or publishing things,” he told TNS. “That’s why we try to be very clear at UTC 00, Oct. 1 … at this exact time, their network, WP Engine servers will no longer be able to access our networks.”
But a fork? The cost to set up the servers, the network, the load balancers, on and on, would cost millions and could take years. At its peak, WordPress serves 30,000 requests per second and 40% of the entire Web, according to Mullenweg.
Users have an option, he said. They can move to a different hosting provider. He mentioned Bluehost and his own company, WordPress.com, as two options.
There has been confusion about open source AI and server-side public licenses. Now, we’ve got the WordPress debacle. Oh, and there’s talk about Oracle owning the JavaScript trademark. The fun never ends.
But people are working on the problem, particularly the single point of failure issue that has become more apparent since WP Engine’s servers were cut off.
Here’s a thread worth reading from Reddit, about how to solve the problem of a single point of truth. The problem is a severe one, but maybe a fork is not the answer. Instead, perhaps it’s a way to solve matters that can easily happen if sites aren’t updated:
The vulnerability should be apparent: if WordPress.org goes down for any reason, millions of sites stop updating. A coordinated attack (zero-day implementation coupled with a DDoS attack that prevents updates from going out from zero-day) could be a disaster the world over. And, if the Foundation ever decided to get out of the update business, or ran into financial difficulty, or Matt decides to retire to Aruba and quit WordPress entirely — whatever the case may be — there’s no Plan B.
So, the community needs a plan B — and maybe that’s most important. Stop the bickering. Instead, look for ways to modernize the WordPress infrastructure so users don’t get entangled in corporate wars that use open source as a proxy to fight battles that leave casualties scattered across the web.
