Re: [gentoo-project] Gentoo, GitHub, and the Social Contract

[Daniel Campbell <contact@sporkbox.us>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/14/2015 02:40 PM, Ciaran McCreesh wrote:
> On Sun, 15 Feb 2015 01:35:40 +0300 Andrew Savchenko 
> <bircoph@gentoo.org> wrote:
>> On Sat, 14 Feb 2015 22:31:48 +0000 Ciaran McCreesh wrote:
>>> On Sat, 14 Feb 2015 23:23:48 +0100 Alexander Berntsen 
>>> <bernalex@gentoo.org> wrote:
>>>> On 14/02/15 23:13, Ciaran McCreesh wrote:
>>>>> That's how Git works.
>>>> 
>>>> Consider contributors (Gentoo developers or not) that want to
>>>> submit patches to a project. They should have access to the
>>>> primary repository (git or not), and be able to contribute
>>>> without being forced to use proprietary software. This is
>>>> incredibly easy to facilitate, so I don't expect us to have a
>>>> problem related to github and our social mission here.
>>> 
>>> What if their ISP runs proprietary software to manage its 
>>> network? Will Gentoo accept patches by pigeon? (Obviously the 
>>> postal service can't be relied upon to not use proprietary 
>>> software.)
>> 
>> One should not confuse transparent data transmission mediator and
>> active data management engine required to create, submit or apply
>> changes.
> 
> What's the difference between connecting to a proprietary Git 
> server over an open network stack, and connecting to an open Git 
> server over a proprietary network stack?
> 

The proprietary network stack can be gotten around. If the git
provider is closed and goes down, the data is gone. If a proprietary
network stack goes down, there are other options available and the
data is still available at the open repository.

Unfortunately, most businesses are not in line with FOSS philosophy,
so essentially every single ISP is using proprietary stacks.
Additionally, one can check the hash of the HEAD or another known
commit to verify data integrity of the repository to ensure the
proprietary network didn't screw with it in transit.

Keeping the repository open is more a matter of control and
dependability than pure philosophy. No ISP that I know of uses FOSS
stacks, so they're not really comparable imo.

Just 2¢ from a user.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBAgAGBQJU39X8AAoJEJUrb08JgYgHVPoH/2jVpSf2lWuk7gYroPv/Zz5i
PQWDvGPNXLXZrUd7x+2gXXCAnd5VaQVy/g2wtlSlJ9hlAnnXGs/dmjFsi9HcULwg
PJeftIj10RjBGFBdC1IkU+7il7YNn7pXKTOjiiRdecKWUJM7My1twN2FoURk30cR
aA64dxBF6BVGdXDSFNeYGI7HkTs5yjHe+oqsnj0GzzelBp20pHS3F4VUR3Z04nIJ
iGesUSkxfWPlCzQSWSVhj9vA4OONIvoeSAY9cS/Wy7dAqfSkBKlZq2+kcXm4DTEn
JekhjpvJKEpvG81kpw2tdrBPog3o5lEGoWodXO+aPadL7CdveotKsghefbp8ir4=
=D1yC
-----END PGP SIGNATURE-----