this post was submitted on 23 Jan 2025
65 points (95.8% liked)

Programming

17899 readers
209 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]



founded 2 years ago
MODERATORS
 

As in title, my company is seeing a huge uptick in abusive messages from Anaconda.com seeking licensing revenue.

They're hitting many people across the org with legal threats - many with zero control of whether a person uses conda or not. I don't use it in my job at all, and neither do my teammates.

FWIW - we're a small-ish growing startup that just recently crossed the 200 employee line. Our product is a database often used for AI and there are many packages within the Anaconda ecosystem that are owned by us, not them. So I don't know why they'd be hounding us for licensing since the primary reason we'd use conda is to contribute to conda - not consume it.

It's starting the conversation of needing to drop conda support for future releases. If they're going to be this utterly vile, then why would we spend the effort packaging for them?

It's gotten so bad that I've made FTC complaints over this. I'm tired of the near daily threats for something I have zero control over.

If anyone else is experiencing this, I highly recommend reporting the abusive comms to the FTC here - https://reportfraud.ftc.gov/ - also forward the emails to your HR/Legal team so they know to contact the state AG.

all 20 comments
sorted by: hot top controversial new old
[–] ericjmorey 15 points 1 day ago (2 children)

It's all about your organization's size and if the organization makes use of the Anaconda controlled defaults channel. I'm not a lawyer, but your company may be liable for some licensing fee if your company is using Anaconda's repository of binaries. You'd need to consult with an actual lawyer for more reliable assessment of your potential liability.

Switch to using miniforge and the conda-forge channel when installing and using Conda.

[–] th3raid0r 13 points 1 day ago (2 children)

Sure. I can agree that my company would be liable. But the company isn't mine. I just work here. And my team doesn't use any conda stuff at all.

Essentially, I am being personally threatened of a lawsuit even though I have no ability to make a licensing or purchase decision.

That just doesn't sit right with me.

[–] ericjmorey 11 points 21 hours ago

I didn't read your post correctly. Yeah, that's harassment at the very least. No better than someone screaming at a retail worker because of some corporate policies.

[–] [email protected] 10 points 23 hours ago (1 children)

Send the emails to your company's legal team. It's not your fight.

[–] th3raid0r 11 points 23 hours ago

Send the emails to your company’s legal team. It’s not your fight.

Already did, and agreed. I also asked the legal team if they could ask Anaconda.com to stop contacting me and threatening me personally. We shall see what happens.

[–] [email protected] 19 points 1 day ago (1 children)

Anaconda Inc is terrible. I recommend mamba + conda forge but I don't package stuff.

Glad you're filing a complaint, and I hope others do as well. My experience with them as vendors of enterprise data science server software was quite disappointing.

[–] ericjmorey 3 points 1 day ago (1 children)

Miniforge should be defaulting to use conda-forge. Perhaps an old installation is configured to use the Anaconda inc maintained defaults channel.

Conda-forge.org provides a guide to rid your environments of the defaults channel.

https://conda-forge.org/docs/user/transitioning_from_defaults/

[–] [email protected] 2 points 16 hours ago

Thanks for this! I wasn’t aware a good independent fork of all of this had been set up (I’d kinda forgotten about conda-forge).

[–] [email protected] 9 points 1 day ago (2 children)

While I’m sure it was inevitable, especially in today’s climate, it saddens me to see Anaconda (and conda by extension I presume) go down like this. When they first came out it was such a breath of fresh air in the Python ecosystem.

I’m not sure in the details, but what’s the point in relying at all on any of their infrastructure? Is any of it independent enough?

[–] th3raid0r 4 points 23 hours ago (1 children)

The real kicker is that I'm fairly sure we aren't really using them at any real scale - if we do it's to demo our product within the context of AI development. So if anything, they get a lot of free press when we do that. If they're gonna throw a fit over it, I'm sure we can work with some other "AI" company (that's what they bill themselves as) that wants the free marketing. Heck, I can't imagine the anaconda ecosystem working out if they keep threatening the developers that enrich that ecosystem.

[–] [email protected] 1 points 20 hours ago

Oh I get you, and it’s an insight into the priorities and operation of the company. They’re clearly worried about snaring all of the “free loaders” as they move to a more extractive business model. And so there’s probably a bunch of people with licence quotas hounding anyone they can.

[–] ericjmorey 4 points 1 day ago (1 children)

Conda itself is outside of Anaconda, Inc's control.

[–] [email protected] 2 points 20 hours ago

What about the package repos and conda forge? Apologies, it’s been a while since I paid attention to them (and Python packaging too). Does conda work well just against PyPI?

[–] [email protected] 3 points 21 hours ago* (last edited 21 hours ago)

Keep in mind that you actually do have control over what you and your reports use for software and their license compliance. Otherwise not your problem. Beyond that, it is an issue for legal anyway and management.

[–] [email protected] 2 points 1 day ago (1 children)

200 employees is medium sized, not smallish. And how is it still a startup?

[–] th3raid0r 7 points 1 day ago

I'm not here to discuss the nuances of a startup versus medium sized company. Suffice it to say that much of the organization still views itself as a startup. Even though yes, you are right, it's a medium sized organization.

[–] [email protected] 1 points 23 hours ago (1 children)
[–] th3raid0r 4 points 23 hours ago* (last edited 23 hours ago) (1 children)

Yes, I am aware.

I'm more asking if others are getting a wide spread of threatening messages across the org - even if they don't regularly use conda/anaconda.

It's like everyone glossed over "I don't use it in my job at all, and neither do my teammates" bit.

[–] [email protected] 1 points 13 hours ago* (last edited 13 hours ago)

didnt put it for you specifically, I didnt know about this and found this while searching. thought others might find it useful. otherwise I agree it is stupid they dont go to something like a legal or hr department but harass teams directly (even if they were using it imo). they might be thinking along the lines "lets pester their teams, they will take it up with whatever the relevant department is"