From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms8.migadu.com with LMTPS id 6BxeARb39WU7wwAAe85BDQ:P1 (envelope-from ) for ; Sat, 16 Mar 2024 20:46:30 +0100 Received: from aspmx1.migadu.com ([2001:41d0:403:58f0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id 6BxeARb39WU7wwAAe85BDQ (envelope-from ) for ; Sat, 16 Mar 2024 20:46:30 +0100 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=wolfsden.cz header.s=mail header.b=LN7BVGsP; dkim=pass header.d=wolfsden.cz header.s=mail header.b="J//n7VIB"; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=wolfsden.cz ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1710618389; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=kKBzBuP6Ep0/QzvtRshIdT9iMpE082h4Uc+5w2blet8=; b=oWHWeeokqWKrIGClyJ082T9bauzjPjzigIgYM6jbvnyB9sJEVi4BCBeQ8uF5kc4uC8cipA C9OqJmTHz6VNzETY25SnWtL9rDeI6OQKaf3eoomW61nrPxVbnuTk+2N84p30acbTQ8vxCB Wsayxjh3ikWvHA2q7hjXo12QKVzJUcrJWizLilii8pGglf3yRgOJWLItg5I5KwkwWDwNzl hVgSX5R+CLkLF0CO3RslNukX2hvckfLmGQyhnwjj5WTDkjA/xaXZJqD4Eejd0evV22iTPF yq4vXDhln363ggpwx929WyZ+c8jEz117b9UL+B0vUXTH4RbuRuLtt3uk39jADg== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1710618389; a=rsa-sha256; cv=none; b=hHO4SVto/djIPlqvbUjy+6bQLeS4wxcAbG6GVWcAvO6/nmqWAcFTZOHQ9egdFVlDln0IKf NP0WN8tH4+fLGAOsi2FSnvO6yS71eHMNEVjmft0xtbx4RRKQls0gy3qmmWzAfdAuCLvAQ7 2alnwhyIQ1siH3D7rr48d5fhQ6TodPV50uEnE9wBEGS9cbJqcYhOYaCk3TTbfa16r38n0w vrrsfkayIjRmN4bKYYk+2Q6xJR07zmtq9djXsd1eb0emx+FORJK7v3fGULhZ4/9odFKWBL qVfu3vYI/EiGQNbk+IE1q16SL7Pu+xkMFIikJiTVl8pKaZCqW8BG02ukzuzDNw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=wolfsden.cz header.s=mail header.b=LN7BVGsP; dkim=pass header.d=wolfsden.cz header.s=mail header.b="J//n7VIB"; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=wolfsden.cz Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 9F8F46F378 for ; Sat, 16 Mar 2024 20:46:29 +0100 (CET) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1rlZyi-00075p-BK; Sat, 16 Mar 2024 15:46:00 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1rlZyf-00075X-Qx for guix-devel@gnu.org; Sat, 16 Mar 2024 15:45:58 -0400 Received: from wolfsden.cz ([37.205.8.62]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <~@wolfsden.cz>) id 1rlZyd-0002zO-8U for guix-devel@gnu.org; Sat, 16 Mar 2024 15:45:57 -0400 Received: by wolfsden.cz (Postfix, from userid 104) id 1C50B290D86; Sat, 16 Mar 2024 19:45:51 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1710618351; bh=w2bu4GTYXg/REuqYnuyeeT8Iw+W/mvRsleItJscrn94=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=LN7BVGsP5wGgMVdxF0BiZyEIoCNuoT4N+A7I4ERCkmijYkk7WurGV6E5s+bfZSqyG iVzPoJi+8D1DMh86FjyOuBYraV+1INr/R/GktzFx1xEDL1ZP2wNuhu1U+aiiueEyKr 54sgdv8+LuJOWq3TIAQfTqeyyeZdGcKRvjj/dOjuEBuw2ME2coQXvLpW63Pv/eZ0S4 uaefBlfwBOuM5puDXQ1jigyCmV3y/Q24e6gjAL8NEcJRWKouwahVsSM4TZRaFEnR/S 4ilL3ByIf3M1GIEEpYCKzHzHy6q2MDnDY0OB67VX99ZRMOCTbbiHGQWA0pgVrfiFI4 p0KeOpM0qQQ9LsU06cufRlhGqExK/OQuoeeEa+0+JP9C2mt0ibnBOPuhT6HXDZ/k1u fqT/ClwfB7kMc0rN7TCMVZdTHEHjEtElPa9PqVK8tjLOBxwta8pnwO0+BNth6Vmudq 2/bMAwNumCQ9JuC/f73I3dQLWSO57/4DFUkEy6p9UpVPr0ylg3+AM0XRAS3KqXd/hI 4iTTzDh8dsPBTHJCOJ1HmPElgmR9EmeaccdPS3OqP91E1H6PRv6Yl09cTPaAiycGVL xWszKMbiQDPeVq6S7ryYBFQoZN2/YCCON+6Y6VCU/X2pHQSW7SHfnXt7NdANkZJ6zu hAC4HQkeL+n80qUsjRdRsZfM= Received: from localhost (unknown [146.70.134.188]) by wolfsden.cz (Postfix) with ESMTPSA id 21DCA29017E; Sat, 16 Mar 2024 19:45:50 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=wolfsden.cz; s=mail; t=1710618350; bh=w2bu4GTYXg/REuqYnuyeeT8Iw+W/mvRsleItJscrn94=; h=Date:From:To:Cc:Subject:References:In-Reply-To; b=J//n7VIBp/upLyBY24DXA/xBP7BigT4AnB/LmLltWy+IWBfEu074QFpBhDPAzND8a CV1HLWwg5orNJBN+0zpDxdGE7nZWeZVBLpT9D2D0wviGPbMHLh2aMV9/Rg7jFx2adX ZUElqVTmdA5SmKwn+AXGqbvZgvIad59EKA8wSA4UFqZ1e9VYEUK/lDG+hmmnALRSmk cVo1JwizUaTkuzPC1g+2wzzU4S4n96V8LCjzDlW+uifhBCBAtz5omCpQ4eo7sVBmxV 8UeQKdxE8f8LYcPGoffHZ4vtrVzhEsKlTayoK5rv21tHCzV3jtgntSbtckNLB4DqTW RD01jBPoFYRKWP1HMGkxkKRF1raZUCC/LrDQXf4fliaPl1SnR6xn3fhXth/sosW5q5 ewRtGwQVfmgusLAtUTo8jJ1mXEfSJYHQy+WoA61sDZRAGfzGsi/YTDc5lEcS4V4MPH fEf7SmN/g+qgHDoJJGtGyTPm/Q0NBxBH7c+zHNeihnboYYeIm/Y/3qwlrmRwY/GK8i 931ZQ2+3EFh+CiSdzGII1W//D5yltpC4JGrZGUNqJbj3gFQzYmzRPoFNmZsa1OrBQY 0vgipbpPwZKpcGylpIicTjvE1Z4G69a0Wn+MAXZp6hX3E42AW9aBIMDuHvTjPlZ+fT QYYqIIi29jSW7oKNfecbMT1k= Date: Sat, 16 Mar 2024 20:45:49 +0100 From: Tomas Volf <~@wolfsden.cz> To: MSavoritias Cc: Christopher Baines , Ian Eure , guix-devel@gnu.org Subject: Re: Concerns/questions around Software Heritage Archive Message-ID: Mail-Followup-To: MSavoritias , Christopher Baines , Ian Eure , guix-devel@gnu.org References: <87il1mupco.fsf@meson> <87cyruqcfe.fsf@cbaines.net> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="9mWrcorAMFxJCSJ5" Content-Disposition: inline In-Reply-To: Received-SPF: pass client-ip=37.205.8.62; envelope-from=~@wolfsden.cz; helo=wolfsden.cz X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Flow: FLOW_IN X-Migadu-Country: US X-Migadu-Spam-Score: -8.78 X-Spam-Score: -8.78 X-Migadu-Queue-Id: 9F8F46F378 X-Migadu-Scanner: mx11.migadu.com X-TUID: VPW2zGBFDt94 --9mWrcorAMFxJCSJ5 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On 2024-03-16 20:24:50 +0200, MSavoritias wrote: > > > I was also distressed to see how poorly they treated a developer who > > > wished to update their name: > > > https://cohost.org/arborelia/post/4968198-the-software-heritag > > > https://cohost.org/arborelia/post/5052044-the-software-heritag > > This is probably worth thinking about as Guix is in a similar situation > > regarding publishing source code, and people potentially wanting to > > change historical source code both in things Guix packages and Guix > > itself. > > > > Like Software Heritage, there's cryptographical implications for > > rewriting the Git history and modifying source tarballs or nars that > > contain source code. > > > > We have 17TiB of compressed source code and built software stored for > > bordeaux.guix.gnu.org now and we should probably work out how to handle > > people asking for things to be removed or changed (for any and all > > reasons). > > > > It's probably worth working out our position on this in advance of > > someone asking. > > I would go a step further actually. Software Heritage is effectively > breaking CoC of Guix now. > > Im not proposing removing all code or something obviously that connects to > Software Heritage, but there should be some social action we can take. > > > For example until the matter is resolved and Software Heritage implements a > process that respects trans rights Software Heritage should not be welcome > in Guix Spaces. I did skim the articles and I did not see any details on what the technical solution should be. SWH, among other things, archives the repositories and allows fetching them by commit hash. At least as far as I know. Since that commit hash does contain the author field, what is the proposed solution here to change the author name without changing the commit hash? While I am not a huge fan of the ability to map the "fake" author name over the real one in the UI, what other solutions do you or the article author envision? I am genuinely curious what you think can be done here. Have a nice day, Tomas Volf -- There are only two hard things in Computer Science: cache invalidation, naming things and off-by-one errors. --9mWrcorAMFxJCSJ5 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEt4NJs4wUfTYpiGikL7/ufbZ/wakFAmX19u0ACgkQL7/ufbZ/ wan8Eg//QU1HMISmD6xMkuqzS+60j5VKYbXPUzylM2I3HOL6brVnmpe/iXkgundR sF3qPNfmkDgFG/acwAvr/urAeBHVXKO2VgyYZmKzV0MiE06ZqmZejhhDxzVYZNrS 1VDYPC24EkCxR6ScoXIa+Qzj9lJeuh+JLfhj6WeQly53r0ZwyJt+f09Ryorlphla F6FpyiQIXLqCKM+cyVb1zNAmN6gYvxw2GymnvHT8EoWrZWur2NasThdGnEbANyYg 6RO86WuDBiTzWuhVkNbE7SZS3Rif3rmSDTAvjFGld/vcNb9kclOlyAjvl/YNrA2H HdmzkN8UI7hPrVqD4ualux13Ho1b1xOx6tmH5r5jAeESw7NlUK792TGibZBuE/ka k+JTbUjzhsVEJrh1VsqpcCF0e+SUI6v95TggLaexw9cXqynLelk4donSpe7CMxdV MC+yhFBiR03dk9ZOcgW8G9XyrbP+AHM0Pn/BD/uN+hUebAGmhRq5DCA+tIQuJ7/9 YcBV+NgF4XUJB44xQroh2C3L4/V8gieJybeCEwHepyKPcn7Y7ZlQnpDLPvM0x6vd onIp+vaYTclAeAoRrTDYO1t6sZmd/GxiI3IZnOWbtifbiRY3OmFvrJ05uCmu1TMW T0gv1KJyLEL/deVmuqCbWR0pnm55BJTa5F87PqtM0NglSzt+8ts= =pZ9Z -----END PGP SIGNATURE----- --9mWrcorAMFxJCSJ5--