From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id E5C8F138334 for ; Sat, 14 Sep 2019 22:37:33 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id AE584E08A0; Sat, 14 Sep 2019 22:37:28 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 67EABE088C for ; Sat, 14 Sep 2019 22:37:28 +0000 (UTC) Received: from [192.168.1.100] (c-98-218-46-55.hsd1.md.comcast.net [98.218.46.55]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: mjo) by smtp.gentoo.org (Postfix) with ESMTPSA id 2279934B1A5 for ; Sat, 14 Sep 2019 22:37:27 +0000 (UTC) Subject: Re: [gentoo-dev] [PATCH 3/3] dev-vcs/hub: migrate to go-module.eclass To: gentoo-dev@lists.gentoo.org References: <20190911172128.18885-1-williamh@gentoo.org> <20190911172128.18885-4-williamh@gentoo.org> <20190911234815.GA21591@whubbs1.dev.av1.gaikai.org> <20190912154634.GB23846@whubbs1.dev.av1.gaikai.org> <88094567-323c-6f6a-a1d9-0c1b77ef53e3@gentoo.org> <6acd490e-6393-62e4-5d07-71c2a3624417@gentoo.org> <98f7c838-6562-1214-c883-ec4cdbd45d4e@gentoo.org> <20190913211930.088d5513@katipo2.lan> <74ae34f0-75c5-2416-a09f-9551f18ef321@gentoo.org> <20190913131743.11a1d990@patrickm.gaikai.org> <2b8d7f00-fdf9-e879-5035-cc00b9c2b551@gentoo.org> From: Michael Orlitzky Message-ID: <931259ee-ddcc-9218-704f-ebdac13f0591@gentoo.org> Date: Sat, 14 Sep 2019 18:37:22 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-Archives-Salt: b23aa602-7b1e-40a3-afb8-2bb3b781a1bf X-Archives-Hash: 82b6947754287e5a63ddc5e03b7c6194 On 9/14/19 1:06 PM, Alec Warner wrote: > >  - There appears to be some expectation that consensus is required on > the ML; this has (IMHO) never been true. The 'decider' for what to do > isn't the mailing list (by GLEP, it's the council). So this idea that > you can object on the ML and stop a thing isn't really something I'd be > counting on. Sometimes you convince the OP, and sometimes you don't. I > don't think you need to walk away sad when the latter happens. > I'm not going to cry about it or anything. I'm trying to explain my point of view. I regularly spend hours fixing little "quality of life" issues in Gentoo. It's not fun, and I wouldn't do it if I didn't think it was possible to make a difference. But things like this give impression that nobody cares, and that any time you spend trying to fix things is wasted: someone's going to be adding new bugs faster than you can fix the old ones. It's like trying to paint a mural that gets spray-painted over every night. Eventually the artist is going to decide that the people who live there deserve to look at the side of an abandoned building all day. I've filed ~100 bugs for minor security issues, like root exploits in config files, user-controlled binaries in /usr/bin, and race conditions in init scripts. But who actually gives a fuck about a race condition in an init script, when there are parts of the tree that get no security updates at all? It takes YEARS to find, report, and fix a single one of these issues. How long does it take to add a new Go package? It starts to feel like a losing battle. And I'm not throwing in the towel yet, but every time I essentially get told "nobody cares," I agree with this nobody person more and more.