From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id iLXMGPJ9+GUXHwAA62LTzQ:P1 (envelope-from ) for ; Mon, 18 Mar 2024 18:46:26 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1.migadu.com with LMTPS id iLXMGPJ9+GUXHwAA62LTzQ (envelope-from ) for ; Mon, 18 Mar 2024 18:46:26 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=planete-kraus.eu header.s=albinoniA header.b=QQavO1UU; dmarc=pass (policy=reject) header.from=planete-kraus.eu; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Seal: i=1; s=key1; d=yhetil.org; t=1710783986; a=rsa-sha256; cv=none; b=sVQR6PqPkjxOPcRfm9GKqe1OjjGvrRy5DaFBlpqw/EQvkCMQlYHYulueA/iOmqouRZL/U2 pzrYVdQ+EzwrSVryPqpsgU7662JA1s06xvJJOQafJ+0G4XR2CpvSfCQ2kmOWBKkFxEnK98 zJmSDErWf3Am+pcoGpJK0cmo2lwfiRdWRXB6MH6mXsrADXWzDFb2HyGumD9ewIvHC+uGjh EpgU2Zt+6ZqS4EHshjoDebAXJS5dPmB7HpD7qIEhtylHxUtKzzUgHBfy6l+m4zSWBsPJbh aOkWqAk9V2EIuXT0WyGYSULNq3Dr7h5SQI8s+fzMMHVuou1kLIKlms2qgIsXvA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=planete-kraus.eu header.s=albinoniA header.b=QQavO1UU; dmarc=pass (policy=reject) header.from=planete-kraus.eu; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1710783986; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=4DF8JvFbMaabqhTrLStPZy1SzDI8EfJdZN7999QIm/w=; b=s9tNZP4SP4Ex8130+yBmU3yi9PG2xlt0OQDfjOpSliWbrGDR8rie7MbIdWhrEKRU+M4eYa 5bZtToBm+/zInWCxMSe5W0nzRNOjC52a+WA+MFScEz/POM4o/j3wWORex90cA1nbujpK5b im4H5oC5xqHs9yAdklR0g/hs9OCYPXiKsduFuIcSJiRZTDxJOea5xCHhNckZ9cwX3rceME GtFZxtdGR/p1NzBBMu5POPPzlQLBt6J1/aDIe6/9F7UYpd/pl+j6xKMPnO4mIZSZhFNkBb OIwdrIQqt46CHDGquDLyT/OZyhYmBJN/d57ItHJh6UGL14RPy7TLVYSWaKSSrg== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 122AD76CCD for ; Mon, 18 Mar 2024 18:46:26 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rmH3b-00058E-8z; Mon, 18 Mar 2024 13:45:57 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1rmH2x-0004f5-Uo for guix-devel@gnu.org; Mon, 18 Mar 2024 13:45:21 -0400 Received: from planete-kraus.eu ([89.234.140.182]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1rmH2i-0004gf-56 for guix-devel@gnu.org; Mon, 18 Mar 2024 13:45:01 -0400 Received: from planete-kraus.eu (localhost [127.0.0.1]) by planete-kraus.eu (OpenSMTPD) with ESMTP id 39ee913b for ; Mon, 18 Mar 2024 17:44:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=planete-kraus.eu; h= message-id:subject:from:to:date:content-type :content-transfer-encoding:mime-version; s=albinoniA; bh=u3cXyZj dAn5e+uuYBRt3wzIhmVk=; b=QQavO1UUkwokNEntY3J9r+7myi361FwhDvPqZwU rVqtzWBvrDCdWcGgYIhfY0XMMjUYSeZ/Knl3bzl/WMXcmS4zph+4YtJpjO3FmIFE fkNH6GRhwQTMsXyz+FKMJgJ8F/BjvMAnlcrwIsXezfoweMLCAWS8Onmic1U5tD/m 6iWz2gxInUQOU8Ia35u1f14xXMHO1odkcPr6AdOCKQjvVdXWhnsRlXS2AXlZo97v 3xi/9jbnOqUhxfTOPnYkq3g7/7KTS07LJTdw/FBvXDrtxSh3inBrp4inbdh+69qi 9RV2ECp5bCGhY9rAb60KlEFWUp8xZnojOwDSrjITQBY1Lxw== Received: by planete-kraus.eu (OpenSMTPD) with ESMTPSA id daefdd4d (TLSv1.3:TLS_CHACHA20_POLY1305_SHA256:256:NO) for ; Mon, 18 Mar 2024 17:44:54 +0000 (UTC) Message-ID: <86d01304cc8957a2508e1d1732421b5e0f9ceeb5.camel@planete-kraus.eu> Subject: Guix role in a free society From: Vivien Kraus To: guix-devel@gnu.org Date: Mon, 18 Mar 2024 18:48:27 +0100 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.48.4 MIME-Version: 1.0 Received-SPF: pass client-ip=89.234.140.182; envelope-from=vivien@planete-kraus.eu; helo=planete-kraus.eu X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -9.70 X-Spam-Score: -9.70 X-Migadu-Queue-Id: 122AD76CCD X-TUID: 6l9Id/DpN63i Hello, Free software enables cooperation in a free society. More precisely, it makes it easy for a user of a package to use a new version where the personal information has been corrected. The thread in [1] questions our handling of potential cases where a transgender contributor of Guix or one of its packages requests to change their name. While it would be nothing but cruel to deny such a request, I want to consider the broader case of updating personal information in general. If someone asks you to update your installation of a package to a new tarball with updated personal information (or a new tag in a rewritten history), then in a non-free society, you can only say, =E2=80=9CSorry, I= =E2=80=99m not allowed to=E2=80=9D. In a free society, you=E2=80=99re allowed to, and you = have tools at your fingertips to make sure it=E2=80=99s harmless to you (diff with you= r old version, if you are alone, or collectively check that it follows semver, remember that it still has all the CVEs, and forget about the old thing). If accepting such a safe update makes a security system fire false positives (such as, guix pull saying there=E2=80=99s a downgrade attack if guix=E2=80=99 history has been safely rewritten), then it=E2=80=99s a limit= ation of the security system. If it=E2=80=99s too much work to silence this warning for = a legitimate reason, then make an announcement about this particular false positive and let the user proceed. The guix users, I claim, would rather have a distribution of guix (and the packages it provides) with accurate personal information, even if it means to be annoyed for a moment with a security system. Best regards,=C2=A0 Vivien [1] https://lists.gnu.org/archive/html/guix-devel/2024-03/msg00138.html P.S. I am desensitized to eye-rolling when I talk about free software=C2=A0;)