From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id aAp+Mojl9mCEdgEAgWs5BA (envelope-from ) for ; Tue, 20 Jul 2021 17:02:32 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2 with LMTPS id 2B9DLojl9mBULgAAB5/wlQ (envelope-from ) for ; Tue, 20 Jul 2021 15:02:32 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 72881DB93 for ; Tue, 20 Jul 2021 17:02:32 +0200 (CEST) Received: from localhost ([::1]:37238 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1m5rGR-0005fB-Cc for larch@yhetil.org; Tue, 20 Jul 2021 11:02:31 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:48110) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m5rGD-0005f1-87 for guix-devel@gnu.org; Tue, 20 Jul 2021 11:02:17 -0400 Received: from dustycloud.org ([2600:3c02::f03c:91ff:feae:cb51]:39566) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m5rGB-0003IR-CH for guix-devel@gnu.org; Tue, 20 Jul 2021 11:02:16 -0400 Received: from twig (localhost [127.0.0.1]) by dustycloud.org (Postfix) with ESMTPS id 4AD4526679; Tue, 20 Jul 2021 11:02:13 -0400 (EDT) References: <87pmvokdr6.fsf@disroot.org> <87eec3k422.fsf@disroot.org> <87k0lus9d5.fsf@netris.org> User-agent: mu4e 1.4.15; emacs 27.2 From: Chris Lemmer-Webber To: Mark H Weaver Subject: Re: Audacity has new administration In-reply-to: <87k0lus9d5.fsf@netris.org> Date: Tue, 20 Jul 2021 11:02:12 -0400 Message-ID: <87y2a1hvuz.fsf@dustycloud.org> MIME-Version: 1.0 Content-Type: text/plain Received-SPF: pass client-ip=2600:3c02::f03c:91ff:feae:cb51; envelope-from=cwebber@dustycloud.org; helo=dustycloud.org X-Spam_score_int: -14 X-Spam_score: -1.5 X-Spam_bar: - X-Spam_report: (-1.5 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_XBL=0.375, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1626793352; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post; bh=7762ls70qT/5houc9uXkT58sLNhJIvlOz34OpcTfnfU=; b=hD2oeFKGwm6IP8S4wKAvGqz1UNW50rWIh5MOuJwIXZjaXMS0BOrGxrNQt0qsM49fUfO2Ng kiSLweNIZ/JrNItvnS4c4GBvGuOxqBA0PvMqBd8QKU+x7FRIusSxulKt+nXJfNECxfv/p+ cn2ovd8JANBy6hD+OlHEIauL7ixwp0rHaigC4KMrfCnj54wI4S7XJzWKgpz//VljgqjR6H 05wv2c/k65ybY1YyaWEu8l5/hTZEl2RxvUZ/7lPb8znMdPiJ8m9pYMC+vSuWbMmD7S67Ai cHPl2f16yy54gKOkT0gUx5TX1hxorOomeGNtgZZG/k4aDfGQEo44oGTIEHYY2A== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1626793352; a=rsa-sha256; cv=none; b=aEsTq2DSZRpp7YFn3oRZX4shqzYeFEGplaEtIoukVa23KeofQSvEr6yDl5rXHXGm09KMYk RmG8umqG/O2I6YAo100OKqkACL3Oc8SDEeXwuDia3gpedHPqpD0RwW059tiXldCXHjuiwW /w95ZfFhKs1U4mt0dFXRAd1VCN/Ct1kQANHQw1+P+wBLUec1hMfmUJ+xGjYcJDs8SlfhXo OgzvEfU1YHhX0lwA30DoyY0p+Sf0Fb0ZrKF1e+v9RFDyhQ32WYFqhbO8V3nFrFBmq/UcKF cCdyxy7aN9J7ZZzBPno5Oi7eoun4NI61gMbMZ3G6GfhKvXzjQUo/b4Q53h76fQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -2.42 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 72881DB93 X-Spam-Score: -2.42 X-Migadu-Scanner: scn0.migadu.com X-TUID: DBXwdt2UTBQk Mark H Weaver writes: > Hi, > > Bone Baboon writes: > >> My initial message in this email tread did not clearly communicate what >> the issues with Muse Group's new privacy policy for Audacity are. >> >> The two main issues are the on by default telemetry and that Audacity >> can no longer be used for any purpose contradicting freedom 0. >> >> # On by default telemetry >> >> On by default telemetry is being introduced to Audacity. This does not >> comply with the No Malware section of the FSDG. >> >> >> The on by default telemetry collects IP address information, system >> information and Audacity version information. >> >> >> > > Thanks for letting us know about this. When the telemetry functionality > was first added a few months ago, they emphasized that it was disabled > by default. Now it seems that they have changed their minds and intend > to enable some telemetry by default. > > We'll need to keep an eye on this, to ensure that all telemetry is > disabled by default in Guix. > >> # Freedom 0 >> >> Audacity can no longer be used for any purpose. Section 3 of the Muse >> Group's new privacy policy for Audacity >> says: >> >>> 3 Minors >>> >>> 1 The App we provide is not intended for individuals below the age >>> of 13. If you are under 13 years old, please do not use the App. > > I'm not a lawyer, but nonetheless I'm _highly_ confident that this > language in their (draft) privacy policy has no binding force. By > publishing Audacity's source code under a free software license, they > have irrevocably granted the four freedoms to anyone who has a copy. > Any license that would allow the copyright owner(s) to restrict the four > freedoms is not a free software license. > > Moreover, their privacy policy is irrelevant if they aren't able to > collect any information about us. By disabling telemetry, we ensure > that their privacy policy is irrelevant to Guix users who do not > "opt-in". I think that seems right. Also there's a fork of Audacity in progress called "Tenacity", but it seems early days. It might be worth considering that. I have to say that initially I was unsure how well to interpret the Muse Group acquisition in terms of with good or bad faith... maybe these were just blunders. Well, I've been fully corrected of that by this recent post: https://web.archive.org/web/20210719115639if_/https://github.com/Xmader/musescore-downloader/issues/5#issuecomment-882450335 Basically the person in charge of that takeover trying to perform an aggressive takedown of a download tool, resorting to direct threats about using an alleged copyright infringement to get someone to be deported to their allged country of origin, and directly stating that the person should consider that since they performed some actions of political criticism against that country, they could be tortured or killed if not complying with that takedown. We should assume that the current copyright holder / maintainer is not going to behave in a user freedom friendly way at all based on that information. - Chris