From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id YGKrCmg+dGaObwEAe85BDQ:P1 (envelope-from ) for ; Thu, 20 Jun 2024 14:36:24 +0000 Received: from aspmx1.migadu.com ([2001:41d0:303:e16b::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id YGKrCmg+dGaObwEAe85BDQ (envelope-from ) for ; Thu, 20 Jun 2024 16:36:24 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=elenq.tech header.s=soverin1 header.b=UgcTuWv5; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1718894183; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature:autocrypt:autocrypt; bh=g6U4khGefK/K+a7e6rteF81FaY4KtKxfHHyfN6mDCFA=; b=dpSru5qswBzdwSLestAgQZiQwnfv6ygVqGPcQKQ6nx6Jvrfhx0HhEkXYv9JCKyTKXGgxMu iyY00apNwkXjJzJvaArMIYmkbj1WrhN3eAuCQLwjRaI/yq2R0hvYsyFdiAOYL0FNpV6Qcm mTvZjbPi00eXPcSGga/O4zv5Zu2OFOKHlyPi1HfkDZfb68AzmG9kQZX4zZHLYvAS1uigxn 3XYM5vxRr1JzGhFKmD1M4bKDnltPpgQsRYLL2lBl0MnfgJ2u3ZTe01DaxNYO5HpS6rjrHT 23A+ST84H0d2SBvq+bh/4Mup9N5CBNJs3T9X+ngujv/CG0w/CDHQFoJCvjh+hA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=elenq.tech header.s=soverin1 header.b=UgcTuWv5; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=none ARC-Seal: i=1; s=key1; d=yhetil.org; t=1718894183; a=rsa-sha256; cv=none; b=PImhujJUAzI+yoHjG1TWI3p5+FB1hFqsiVChXN2U6uqLZ73LPR64jQvPc31rW9V0XWu91S MhfWQMaSpLSwkw9mCEnThriGAFFaoS+oY0mJSzZkBnQ2h36xzpLnMDYYFtT6Z5z2NhOA3m OFtyP2BxnTTjZHL0Pqci6oQqlrYx0APAAhkWFUKRL06GP6NwafamkaATu+6VFIkVLfcXyn QhVFLKmIWngfMPOwUuyArd3CE3tUp389GDIZwehPjxOspWmjXhIPuNO1Es6gHMdd4pbLfv hP4d3Yau2LPhKR+sn5HhwvkPp+Uwi4Tni77AVKWxNh1fzU5Iyfwd3ytMHfQK9A== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 7722012571 for ; Thu, 20 Jun 2024 16:36:23 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sKIsn-0001CC-JU; Thu, 20 Jun 2024 10:35:25 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sKIsm-0001Bc-8k for guix-devel@gnu.org; Thu, 20 Jun 2024 10:35:24 -0400 Received: from dane.soverin.net ([2a10:de80:1:4092:b9e9:229d:0:1]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sKIsf-0007xh-L1 for guix-devel@gnu.org; Thu, 20 Jun 2024 10:35:24 -0400 Received: from smtp.soverin.net (c04smtp-lb01.int.sover.in [10.10.4.74]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dane.soverin.net (Postfix) with ESMTPS id 4W4jgz5fXpzyZZ; Thu, 20 Jun 2024 14:35:11 +0000 (UTC) Received: from smtp.soverin.net (smtp.soverin.net [10.10.4.100]) by soverin.net (Postfix) with ESMTPSA id 4W4jgz140zzKB; Thu, 20 Jun 2024 14:35:11 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=elenq.tech; s=soverin1; t=1718894111; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=g6U4khGefK/K+a7e6rteF81FaY4KtKxfHHyfN6mDCFA=; b=UgcTuWv5W71RrybtgSbxN7Sz65+DHqjRasR/SSs2E9il9dgKuOz+teovPCfcXJqgohp7gF Tc47N7EmuUbwqL3w1kd13BU4KoojGl0XGuafyhkJuRp+J3cPy+SsvuEPx7YZEsDdFM1nlf cHxFF7cA7OM/ih0KNwTWNQh/cX/sZ6SaXs5ekn26uX+zFrt88VFwVq8kViBDqZ/MLW0yCk zWv6KWK2+MID5M0SYAYnmN1boRKMKdFkSvf3qp3cvRlpsp3vATKy41ZkUK/RGbwEbzuvZc qzc74XTvAABpk9e/WYQucOGaCOulYrvuPb+S+74by/4g4LeDNzQyWT115y0taw== Message-ID: Date: Thu, 20 Jun 2024 16:35:10 +0200 MIME-Version: 1.0 Subject: Re: Next Steps For the Software Heritage Problem Content-Language: en-US, es-ES, eu To: MSavoritias Cc: raingloom@riseup.net, Simon Tournier , Ian Eure , guix-devel@gnu.org References: <87a5jh74jf.fsf@gmail.com> <20240619121338.71b5f340@fannys.me> <621b39c5af21791286c6a2b6e39c4c1b@riseup.net> <815e3434-19db-2a07-2fed-f7794b7a63d9@elenq.tech> <20240620093619.52e65ea3@fannys.me> From: Ekaitz Zarraga Autocrypt: addr=ekaitz@elenq.tech; keydata= xsFNBGViSyIBEADY3g71uW/0CVaVm5/ObqTicQXXJRuh1uafIFiUUZoAp1V3V89b3LZ/m0cL 8YNHxTxsx8sKIMYTGlOvARAMiSpDvkmpf5pLn5T7+VvK90FOv/Pkp1tNNT+tvd0m/7C58+39 s7tN+XppbjVRtFuSXY0aFe8rpivZsKxv+tPUHUnQQszXvwgx0GQl8AX99IE+j75NJmBHFVg2 0geKa7QVymu669ix2+zU8vGoOKf5nIS0qG1m/vrtwR3ZuuyWX9/E/uP95ahX5ETWtjhTDbEm MEaRperwbczBewkdERJ34vRrverqKQA1xHXoPsx4NkLMocORFSSCJsveXcgWlU+pUIOYcKUA ARJjHhoWoUH4LZt5EOb7U17AaYMmATUXPCqq8G3jEXq6i0O1J1obCJGIRG02R9GiGp4zrVuv 2hmyoAmed4xYZAtf9WjcbwiunDkMGIxscdSlfEH/9dt7PGdEvkZ0dNSCTbp4ctMI4jAfobAL LReMSGx1CgPi01J61a/n/SgR66AiRJZCyC1u2V7AK1rBOAYzOU4UoePz+yF1I7crjZWAQVo6 DlmmXW+29l/lh2oK5jOuNEcvI6qi+tPCYxpDhUhZeYgqFU+/xgGlMj/XGvwuIFlpVg9ovFMg 6mxskOCVP9xNEp/qHiHqByYu5NRcITo/z/3BUimdXTT4KSq2cQARAQABzSJFa2FpdHogWmFy cmFnYSA8ZWthaXR6QGVsZW5xLnRlY2g+wsGOBBMBCAA4FiEEg/pnRVjAUpRlfkwZt5lM+Jly CyYFAmViSyICGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQt5lM+JlyCybjZxAAy+YW 3Q22xKoMWJYw03qGCy87WPK+xGWDpKD6TJ77+/IEbldObyQRrKYTTGjQSy6WgaJ0txJMIqeK JyuWuR3bq+Vkh86Byntl25jknOJ+jY1zwPs6HnWFr+hS48FcQh/0D26h57Cqc+6nbKhJcva8 JsInbHTbWPz7wye+xhqY1LfdgVTbCyADESXdmBY30/vP4LzqW81atwYF6X7dN7ko/JvyPPdv VlcspmbP6zNihoApBHdMfJwYscyAsu6tTyL4hMG3zpraeU+S857vZN39gFagRng+uyZG7rfB dHHAFzT1LKOZ4dahavOfA0gS1RZTgtAGsvhUEBn9vKxlB4efZuKhwMtgQEskRFD6JIF1DYCj pLgn5x/y3oI6rn35R46VDhLfohcUWpvzplu6LBft8ZNr+UgoVYc6qBezyDlxk0FmhGI7DEoh gfUxljTALXjSdUGEw2mvp/Mcrz+ffemWpG4+Zq0UXR8sZaHpv+PqmFLFFSQCOCRTYbMKzZBn y03wym3y0tGtunDGm5pR7NEPqUO9QbZdKyTy4ftRkSfTpiPCF8+KKYDT8HimSrusmtTfR4R1 nBJ4lNBYgTdOyJYFbHdF0Jxo9r0t+K2e+6hX6bK79o6aC+/LtzkoYgjCWvAEopO0ras/XQYM S7/bCzeDIhXX5RqmMIp5XN+oBP2roZDOwU0EZWJLIgEQAMIgPDpJY9aOhFiFICx58XMM28An yUPdN39t0A8VkUbsvKXH6eNqUZj/Q3yNcZrknAT1vinv9FN/4uCUnsaqEKp+mRAYgzmNfeJk SWuMzmA04fcISIBz3sJUR0w/59tWi8QxlNn7IR6McAA3lHDXC+KYh9ZfhaOARfan1M6Ppy6g YltUQGSSPXU807inmQZh8GFTi8iUza7vGuBEnaNRGhmhR+blMwHSqVWN4gD81e8dSAEi3zNR sLoBXneHUqTcJMHvsT5cOk7cGMoVAWIffA2EKWfrgda57Qw+w+0OPqWEfKoXwnyt35Tl+Lxl 7MAaAG9R5760yhgkf3LmnBNP3m6StZ8Fv09Gdn5cGSbVnoofHDkg4PQDTD6aGz9af3SnGVg9 nb1Zm1XbqtnYwG9JvQhcjgWAHwrPLkHAcvKtfYWNe4wiirMjXMXxADY08g33SEchPJR2r4pg wttJS4kHUJ2IQUmSH/43RO5PkftWsCucYGeaG1aPr+GAkeKIS1M3OZGuqhd800mltpiH73eL XrUPF8fgngC+SGMrHXLfzuhaRxPNYUbsdF+wRkvjRSO4tCmSVpgfPsHu5emoZgix1iiTO7GF do7L6n1Ay3oF4Witoxc0Gcbu7ltYlZHGmDnsVTVALartsJV2muSXpWcjQiXyC0gUkIkUD/3P jtgVxK8xABEBAAHCwXYEGAEIACAWIQSD+mdFWMBSlGV+TBm3mUz4mXILJgUCZWJLIgIbDAAK CRC3mUz4mXILJrIaD/9CXGckwRCojuRzP0r6+8/RvNDc03CSe2W17WrSaoYgiRb+h5asI/AL yqw+QRgwXZpt0i9hNiDCe/baD62mufIyjKFjHoAWSYJuZ5VK3vWnro6GaxWULYt1+c4c4Lz2 d1nSK6j8F3CxYo7BFk6afOusjYfh+0HywThcYY+x+K5Z+4SdJejDLiL5AzJn2W5Gt/ViK5nI wl7uRQpayMc9zmI8ytUT2NJxovq1/fT9nB8VPwlbJTE9zvIqfqHh9o9Apx5o8yTaSCyGUyu9 8h/klqxFy4HAPJJu/3JkiMaCI45ZdCqRR1LIwhtmW2lb73r0rP/0S1cKi+ehA4oQvwiUw7zh XXw7mqzSAJ0SWT92Vy2G8Z8qqgwxwfQcdFZAyJAL1rgEPQljNT91Vgbc6DCUka2XW5BqyhEB eS0n1gK0hYXbM9FKegRsZxlmRAXa4KGXCwr4BNK6k+zkKPitezjbtcLgcKSHa8/HyHNkW7xH R+MN16x2elQPmQ2d0Ien1HgsK98+3prlUGwZIVCqa1ddSoW0llU3JzGsKrMAiYbWg/rOXFil RJbuhjflaLBVmfI8VlRQRocP+WEH0lsUWrtjVaGcBj1/YnIoT+zT6fPSXwPsrBvAWEjfl8HH e1F4cYb+ugPDwUTd1s2Uj2tF0/fhCHPy9sXyx/EIL3gqyBw9M2Rz9A== In-Reply-To: <20240620093619.52e65ea3@fannys.me> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spampanel-Class: ham Received-SPF: pass client-ip=2a10:de80:1:4092:b9e9:229d:0:1; envelope-from=ekaitz@elenq.tech; helo=dane.soverin.net X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Migadu-Queue-Id: 7722012571 X-Migadu-Scanner: mx13.migadu.com X-Migadu-Spam-Score: -5.66 X-Spam-Score: -5.66 X-TUID: NX76XVI2t2R7 Hi, On 2024-06-20 08:36, MSavoritias wrote: > On Wed, 19 Jun 2024 17:46:08 +0200 > Ekaitz Zarraga wrote: > >> On 2024-06-19 12:25, raingloom@riseup.net wrote: >>> On 2024-06-19 11:54, Efraim Flashner wrote: >>>> On Wed, Jun 19, 2024 at 12:13:38PM +0300, MSavoritias wrote: >>>> ... >>>> One of our packages, dbxfs, left Github a while ago and continued >>>> development on a different forge. They adjusted their README to >>>> disallow hosting of their code on Github. Based on this >>>> restriction we have labeled later versions of the software as >>>> non-free and have not updated the package. IMO saying that source >>>> code cannot be uploaded to SWH would fall into the same category. >>> >>> No wonder more and more people are growing dissatisfied with the >>> free software movement. >>> >> > Hey Ekaitz, > > Please remember two things in the context of all of this: > 1. Guix is not a software entity but it is made of people that want a > safer, collaborative space to create things. These things may be code, > a blog post or anything else as part of guix. Even a social network > account. I am saying this because you only talked about Free Software > in your message and not about people or different contexts. > And we are talking about people here. Not code. Code is not alive. I was specifically talking about the Free Software issue raised by Efraim and the message by Raingloom. And exactly what you point out is what I wanted separate as you very well did. Now we are talking about the people and about how things affect people, and that's a different matter I'm going to tackle below. > 2. You seem to imply that Free Software or code is apolitical. (in the > sense of social or state politics not) Which it is not. Nothing is. > For example Free Software is explicitly pro-capitalist and > pro-Google/big companies. I am not saying I disagree, but its good > to keep in mind that politics exist and do exist always. And in the case I'm not one of those people that think everything is politics but that's not a debate I want to open. Free Software can be understood from many ways. I don't think it's pro-capitalist, but pro-freedom, but that freedom affects the capitalists too, and it's a *value* they have. But freedom is also an anarchist value, and it can be an anti-capitalist value too it becomes more politic when you put more things around it. The issue I was trying to point is Free Software attracts many people from many different backgrounds and politics, and trying to push for one side defeats its purpose: making people stay together because they have some shared value. >> There are many valid reasons why someone might criticize the Free >> Software movement and people behind it, but making free software only >> has 4 simple rules. If you don't comply with them you are not free >> software anymore. It's as simple as that, and that simple it should >> be. >> >> Free Software gives me the FREEDOM to print the code, make a roll >> with it and shove it up my ass if I want to (and even distribute my >> modified copies for other people to do so). The same freedom I have >> to upload it to github. If you prevent me from doing one or the other >> you are restricting my freedom and that's defeating the purpose of >> free software and we cannot consider your code free software anymore. >> The line is clear, and trying to pretend to be free software while >> restricting people's freedoms (regardless of what they are) is absurd. > > This is missing the context that GPL does indeed restrict people's > freedom to license code as the see fit. Because it was written to > further the political goals of FSF. It is on purpose. So we are already > restricting the freedom of people to do what they want on purpose. It does restrict your freedom but only if your goal is restrict other people's software freedom. I'd say the argument here was that GPL provides more absolute freedom in the current world than other licenses but I don't think the GPL was a very easy decision to make for the radical freedom fighters. That's why some people don't like it. > And lets not forget > "your freedom ends where the other persons freedom begins" > and consent of course in the issue at hand. Yes, but I don't think this is a matter Free Software needs to deal with. And my original message was around that. Now, we should do something as a set of people that collaboratively work in a project. Probably not under the Free Software label, because what free software is is already pretty clear and well defined, but as something else, may that be Guix users and contributors, if we wish. >> >> The Free Software movement can be labeled (and is often labeled) as a >> political movement but I'd say it's more of an ethical movement. It's >> a way to share *values* and the value we share here is freedom. We >> might or might not share other values, politics, religion or >> anything, but as long as we put the freedom in the first place we >> should agree that free software is better than any other software >> model we have. >> >> There are bad actors in the world (say thieves, killers or... GitHub >> and AI), and we can discuss about how we should deal with them but I >> don't think the answer is putting our *values* aside but embrace them >> harder (one value, freedom, in our case). > > Definetily agree. The solution is not to embrace propietary software or > restrict software. Its to write down some common social rules that are > rooted in consent. > >> If people is not happy with the Free Software movement because it >> puts the freedom first, I can only understand it as people being mad >> about Free Software because it's about software. >> >> For other values, we can start other initiatives I may or may not >> agree more with, but if the value is freedom (in software), I don't >> think there's any better way to push for it. But trying to disguise >> other things inside of the Free Software is kind of dishonest. > > Fair. I mean we already have CoC and channel descriptions. Idk if we > have event guidelines/CoC yet but we should. > >> I don't know, maybe I'm just a little bit tired. > > No worries. I think it was very well said. > > MSavoritias That was just for clarifying my point wasn't against this discussion but to say that the decision Efraim took on dbxfs is not only correct but the only possible decision, and that it should be. Now in Guix, I don't feel comfortable with the fact we are helping people use AI that doesn't respect the licenses of our work to be trained. I'm sick of it. If they respected the licenses, I'd be ok with it. Since I accepted Free Software's social contract I'm open for anyone to use my code with any purpose (unless they don't respect people's freedom later). Also, even if we don't do anything about it, Guix's codebase is public, so they could do it anyway, regardless of SWH, so there's not much we can do about that. What we *can* do is raise our concerns to SWH, motivating them to be more strict with their collaboration with companies or with the terms of their collaboration. It's probably better that they are in our side in this battle than if we are alone. I think they are sensible to this issue so it shouldn't be hard to have a proper conversation with them and see if we can understand better what they do, how, in which terms and so on. Maybe it's better that these AI companies reach our code through SWH with a well-written contract than letting them steal it from the internet without having them to sign anything. I'm kind of just guessing there, but we are probably stronger that way. Also, if we could make other distros to take part on this it would be a great way to be stronger. In any case, I think SWH are more than sensible to this issue and I think their connections might be helpful to not only restrict this HugginFace from doing shady things but to start pushing for regulation for every AI company that uses our sweat for their purposes. So, to come back to my original point: It's not the free software that needs to change. It's the regulation of AI companies that should, and the responsibility we demand from them. Legally and morally, they should be accountable of what they do, and that's the direction I'd like to approach this. Maybe it's not easy to change the regulation of the whole world, but we can try to push for it in Europe (we pioneered some related regulations before) first. In summary, I don't think this is just a SWH is bad/good or Free Software is bad/good issue. Best, Ekaitz PS: If there's action I'm open and ready for it, but I won't like this discussion to become an exercise of ethical bragging with no goals.