From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 745A5138334 for ; Thu, 27 Sep 2018 14:25:06 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id E97CDE096B; Thu, 27 Sep 2018 14:25:04 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id A02EEE0964 for ; Thu, 27 Sep 2018 14:25:04 +0000 (UTC) Received: from [192.168.10.30] (ool-4571a16e.dyn.optonline.net [69.113.161.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: np-hardass) by smtp.gentoo.org (Postfix) with ESMTPSA id 186A0335C5A for ; Thu, 27 Sep 2018 14:25:02 +0000 (UTC) To: gentoo-project@lists.gentoo.org References: <23325.35685.793702.267278@a1i15.kph.uni-mainz.de> <23337.15822.698153.812236@a1i15.kph.uni-mainz.de> <4683a4e7-c752-8735-4bcf-1ee7cb4837f9@gentoo.org> From: NP-Hardass Openpgp: id=862040BE422755F27FDE13D5671C52F118F89C67; url=https://sks-keyservers.net/pks/lookup?op=get&search=0x671C52F118F89C67 Autocrypt: addr=NP-Hardass@gentoo.org; prefer-encrypt=mutual; keydata= xsFNBFTkWCYBEADjDSP3/MDba3hDgUjy/8w2PU/kzx+AWwWkXuA3zUhBnS7AVK2Zh5gajysZ OWAkmZ0VmrzSHICQzYosyhq+YVIdTg5LvIxsG1fj2rSEMbqk9mtjdNDsoUmzUkECOL/Txph1 u46vtnMy97Gs82imE3uCBIQkxc+aUesePXeQGOh6EDcxMvFcn8x1lhXE244lES5Spu72Wen4 cYRpPboRTbuUxXUwrOIAOzF2eX5BDipZVKmrV9i5SC3oQIG1MnJdHDLWhDm3XQjlEsvH5Rge 55bvXFVs6Hzdv3SUI330E6W15kLt0Ij94nJqOgWCPfKu+7Tb2UYlVlCkiIFujIWxLGaQRXU2 3wOu7TuGJ0NQzP1lwCImdydEF+BL61l6awFI1ixwgZQGkzaEvXMhc6PltM12y5poFvcQXK+P aLdztY0cLSlhg36HZb+E8bavNLLIw4tJ2LKx8YmMNFfoIVAN33wU2QZ08SyT5VTCi8svU0U+ 2n8e3TA23gx+OHyUvjwNdFm5NDi0sIpeYpgMfUSjTO7pq0JEAQLTY//9MjqmmicXpvMnqA2X NrZZXaxs19yApzxfbFQegg9tgNiSeYONtIXWQinznfv+h3GY7K6zKhyq5IL0ji/Gf2l/+1WD VB/h6OJGbKqydPZnBiQRC6mt/lpkE5/Z1qHzzrNlTT0RTdNDlQARAQABzSJOUC1IYXJkYXNz IDxOUC1IYXJkYXNzQGdlbnRvby5vcmc+wsGWBBMBCABAAhsDBwsJCAcDAgEGFQgCCQoLBBYC AwECHgECF4AWIQSGIEC+QidV8n/eE9VnHFLxGPicZwUCWi8lgwUJCQ00XQAKCRBnHFLxGPic Z7toD/9BlYZ9Lk7ejlvkenz+EPqySkZAHERwUS5hqBiOTarVJZtjm7uGCbzhCltInsWKHREN jIboWsCzHPdnqeQ7BiRjUCbLXctqsW9kWvxBxJaCKqy9XqG7WWqgm7gxqYxDp9EM4mV1JeU4 aSXkLJu/JlLaC0FWvQNFJZhhK7VQwcMmz1mmFZayXFce/lpKn2NWwqQc6gKRQlBvKaY+ohpP 0Ixt7SiU2FqgsfR8tsGxiMaZnq4ULbfzOtee3zSzIaPpF1EzoKmnNKzVdSW7QY94OJQKkFmt KWi0+yk2lYfMVPiYC+Ph8FXe0Cqk//nECA+OGtvLo5bc7mtgCdCqfQVo7ds0HQ9gdW8Hq55u evrVN+6TwoPr0n50wckJ3cQy9Yj1gKWJO/XNciLJoZ2fJ9jAsaP9LlITKeLI1yWqt2LaNMfP gVn4eS/jNstuMvyA0qgmELQ/VItDrC30ow7I8yarPlBpywIW8jpBZQeujujshDfmYJJatt72 ETT6Us5f/zDpb7V8g+feReUzo1bDsIlXxhSC/hrJIQUdsRj5kM2cHgMttdj5/+9mMhxLVXkK AlgJs2evnp3WmrOovYoLfN/pkVyxAbXKu0Y/c7L+NMPRHW+V3oUXGrphw+Uh/S+d3NHG3gGz 1Y0H6OyHHai9f8iXu4aTqhVatNZFmYlywlS3/Wz/Lc7BTQRU5FgmARAA4ThPsCyVb6QBhtRU 5vUuWMuzhXpdUr151ccXYqYBXn1h45hW9qoZo8Y7xQp6cGJSECSNmTkJU9FMN48Ewn3+YIxa uJOWar+eCvh++TvPVqjo/UQZqTK29NUBiL5aSC0pU49Z5Ve2TXYGhdcZT0OQM4A1MTlRfIaV tqlPfoqifsNGjiwpjRoo4AWYADIfhajvHCDJ5ITka+T07DBFOBSy98SaoKNfdaClb6tmLBs7 hroKpCCijfBe20UMeaKN6zQuhW8GR3VzpRC/G9HBEmH6GxiVmBkhEQjgX5aTS7T/jz2YZrI6 mS3zKZ7gEByjhxUOS83UON99aOqnMPUphXnjIPIPydBHYVlY4egLKPI91nFAZv5DYIzyERux KE2w2f9Xns7wyEOYhqddOTZ0lio4oQCc/sR040rKtL6qOciC1z3jDeYTrQE410eGF71SvuiN ceThbAty26zYQAFxvlimrgTTVkLOSsCz6+/SWoD42gwVYwQ4hRoCwYzuC/ILGmECoiJXFgtR A/gK/5g7c05depLSo9VH8/+b4Cxqt+U9+beqfxtr+9b5w9ut6AZcZLj25s40gc19nJQkEl49 S2XfJ7lkczuBj2K8T0ZZ82woPDu2W3UORYU0iW+0WuEZ5DIZsOy5g8YWYFoeWfzI9TPkHAAd ccZtE8r1h2IoQ7RBSr0AEQEAAcLBfAQYAQIAJgIbDBYhBIYgQL5CJ1Xyf94T1WccUvEY+Jxn BQJaLyVzBQkJDTRNAAoJEGccUvEY+Jxnf8YP+wQlCLyFetSuMHd3ZO36HE1ohU+Mvspa6Z1a 97K1ECG9xDNNodHtQ7j1qCTYqKH2N2RWgErowk9RT8y8ok+1fJHD/94qYpmb++R1g2m1XmEC tssGv40uHI0TxVdwu3xpfdGTW8roQOMngoTP0RW5BNWTqfAv7+LEMbD9kber1AbyLJzxYdgU sxwHnQ6pRdcyb75drG9Mo1br8s6knTvW2i+5JCKSud/oexvSC0w2SegPvlsrqPWJoWQ5Yo7g IAQQG6KjdYoVy3m/goNcXiIHnuFv5dWfnOyP+Th2sVgy2VX3M9jsejFvXABYwVyslkIXFudm UqofjSD7OAz9jMOrAgMKdI6ez40GJaK9/aCEynm1ckwzEBpjB9H3TtXuhxwsFB/HqIMxYRCw 7vrKh7of3kzc6nsmn07Nd8sPElx/4wTc6QXyM4OXqmIE5tSgKYt3ns2o6PALqBpWx8FaHafg 4zFRY3+tEx0/lw8/yYDYiRRFfqkuiaqItL6ugSfUXdB13um+606IexFZCiwla1CtnGUx3Byw NQnAYOdUKHkKeQ9mYXGnScl6P6OJBXV5xBmINNmzaRGQWQAXN1/f3AJ7ZLqWdzOT96yKR1RY Qtfcn5WlfuZfjQBVNEWzzTZb/8hAlrFJLMwPUDl9AWz+surEACrh46BT4W2voigsA7dibW6E Subject: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] Message-ID: Date: Thu, 27 Sep 2018 10:24:59 -0400 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.9.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="1pAWAmMXRfeQHH6QiHepv3pM3sqLOLxUl" X-Archives-Salt: d7db5d6d-2bd6-4ba1-8c6f-64bd84c3587c X-Archives-Hash: e844ff4a4a09743f81667537489262ae This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --1pAWAmMXRfeQHH6QiHepv3pM3sqLOLxUl Content-Type: multipart/mixed; boundary="hdAiG4Aeg3KKHi9pizCYNCOQjSg04d9V1"; protected-headers="v1" From: NP-Hardass To: gentoo-project@lists.gentoo.org Message-ID: Subject: Re: [gentoo-project] [RFC] GLEP 76: Copyright Policy [v4] References: <23325.35685.793702.267278@a1i15.kph.uni-mainz.de> <23337.15822.698153.812236@a1i15.kph.uni-mainz.de> <4683a4e7-c752-8735-4bcf-1ee7cb4837f9@gentoo.org> In-Reply-To: --hdAiG4Aeg3KKHi9pizCYNCOQjSg04d9V1 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 09/27/2018 10:13 AM, Rich Freeman wrote: > On Thu, Sep 27, 2018 at 9:52 AM NP-Hardass wrot= e: >> >> But that's really besides the point... The current status quo (as is t= he >> case with me) is that a committer may be pseudonymous under the >> condition that the Foundation have that individual's name in the event= >> of a copyright issue. So, I still don't understand how forcing everyon= e >> to publicly use a real name achieves something that we aren't currentl= y >> achieving... Is that incorrect? >=20 > Interesting point. >=20 > If we were going to go down this road I'd still suggest that the > Foundation have a policy on when the real names of contributors can be > disclosed, either privately or publicly. If we were to use the > defense that we have a statement from a contributor that they checked > the copyright and it was ok, the first question somebody will respond > with is, "who?" An answer of "we know who it is but can't tell > anybody, even a court" probably isn't going to work. >=20 > I think there are other arguments to be made against anonymity. > You're hardly a list troll, but anonymity can breed this sort of > thing. From a strictly copyright standpoint I don't see why the > identity of contributors needs to be publicly disclosed, as long as it > can be disclosed where legally necessary. Of course, if that is a > court then depending on the jurisdiction it may become public anyway. > Also, if we were going to go down this route then we also need to have > better archives of such things, as trying to dig up some trustee email > from 10 years ago is not the right solution. A secured repository of > identities/etc would be better (the Foundation already has a place to > store stuff like bank account details). >=20 > Another practical argument against anonymity. If everybody agrees > everything is public, then we don't have any personal information we > need to protect under various privacy laws. As soon as we agree to > keep some info private, then we potentially have obligations under > such laws. Also, legally the Foundation is a US organization - so I'm > not sure if things like the US-EU Safe Harbor provisions start to > apply if we want to collect this sort of info from EU citizens. It is > just a can of worms you can avoid simply by not hanging onto this kind > of information. I believe that many of these privacy protections > cannot be simply waived - we can't get some EU citizen to agree that > they don't apply to us. If the laws apply then we need to follow > them. Now, we're obviously not a big fish, so enforcement may never > happen. Maybe compliance isn't burdensome - I only know enough about > such things to know that I'd want to know more before going down that > road... >=20 But enforcing committers only to be named doesn't really avoid the issues you are espousing wrt copyright issues... All it does is give you someone to blame (who isn't the perpetrator of the copyright violation). Any random person can submit code under the new proposed copyright policy, and as long as they aren't making a commit, there is no force for using a real name. So, unless we are outlawing all anonymous and pseudonymous contributions of any sort (authorship, not just a commit), there is really no point in forcing committers to be publicly named. --=20 NP-Hardass --hdAiG4Aeg3KKHi9pizCYNCOQjSg04d9V1-- --1pAWAmMXRfeQHH6QiHepv3pM3sqLOLxUl Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEv526yLNI+t7RHfJZHNlBHbKvGPsFAlus6DsACgkQHNlBHbKv GPt8AA//cdaiVXgaj2RU2Zfo0zIawqyA5wfi5NI+QjOc6jnqbvHz0T23Ankv2Yn9 ykL45TgKCupvliQ2xVp8wTxM3x3hIv2QNIzLMnL0XICPycEV4Ymk2pjf2+svvy94 EHzpRE7FiPI2K7fEaB05p0xOv4JcyzTTbt6B88b2hsKH8mSasGbW/B8b8j6jLIk2 FWGTb0X/nfGxBaeAAmgcDnSEjUWIXZGA9r1I6l2szjqPcpgI3gGLu642uS+J3WbG lwpoE0coWbT+6leJdr3Wld/NcK6cGERfIfLGqueCq24aLNsRkXfKucxobtcUebB6 d0LrmPgOPXBX4DKAFynGiPfWowFAyP9CKOZ2wUiKc8bGOb9w+Ovw8Nxu65kSDi8w zg6VhnqEenODAgJI9W9hqrvRosY+NEJiBwPcopzA+Fr3Tl/eC+BJECwEnFaQvqts G0xWwzX2KGamYtcmcCXlgBCIKTjj76omlmVdU+XtlTEFUokFao3tzoTydS6jIeBv v8ctfs3LBtsavZBkFg16KQrQT0kWf6Adj6VkdX5JAYyh7I7ZbNi4Z3eW5b/EExVU jvoIiwW4WgRXeClV+4VmBe4IDUvG0lHIv+rqInpJpqDNS7bmb1jTUa6hIFPxLjQm ZZoICNnpriYlp4o2eZ/6QpZwxUgjjO6psMua0qjMIecDD+UtPbQ= =aeTm -----END PGP SIGNATURE----- --1pAWAmMXRfeQHH6QiHepv3pM3sqLOLxUl--