From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id qGAJAtVHdWY+EgEAqHPOHw:P1 (envelope-from ) for ; Fri, 21 Jun 2024 09:28:53 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0.migadu.com with LMTPS id qGAJAtVHdWY+EgEAqHPOHw (envelope-from ) for ; Fri, 21 Jun 2024 11:28:53 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=IB8kRxil; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1718962132; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=dRtu4exXej9nAPIWu6P6mWb9r529QbCz5xaBCV3TtLw=; b=jKCHJW9pd2jR88soLX/yDt+fSBakIJXNA79NzYLij6ylQ3hKtWGwJ+7i21dYRh8VfuHHEN 5zHFMc2qjNS6W9RDjHjsDm3qUuluo7qNMg56g5YRNcJD/VcETAbjeLkoXmtPAoRGAU7vSv urOgIHHiEgt/6nPAFc61pPbsKjj4BBVa6rrXjhtqe8ghgLOaXLBLG8xq+6Z8Ns9SyoIu0f q5cDUeB+T+Ap4Sa+I9ZMvsftyAsXjSDGGeomLgo99PSHDpHd3s+Oc8Dw9abkceyPTI2rOf 3HTf1oy7Az1af061Xls0Kg56qMccjB1BTh57r/homaYldLUFmAcXU1uLznIQ5w== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none ("invalid DKIM record") header.d=msavoritias.me header.s=20210930 header.b=IB8kRxil; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=fail reason="SPF not aligned (relaxed)" header.from=msavoritias.me (policy=none) ARC-Seal: i=1; s=key1; d=yhetil.org; t=1718962132; a=rsa-sha256; cv=none; b=cuxN9R8zX4VpGT4Y8jpcUDPwPOhvx1kCYgA+r6S24ZGYTtpgFkwc84KfBATN8ZG1+fCctV XzsA3yQSOTmxZq0pas9GCPuCxhbNBEBkZDwZvuMMTtoHCtpp9y47fMJkUqjPoNWAZJY6Ge LdSwbqCrVF5vQzmcH6Io+sObZ+bnOkryfcTIVxecoWHfmaJpOyI6SpQ2eFs5vCqDgSTldQ ZqFN3ZjYPk8pE/UDZV/iOiyY7j/Qcp4Dp6qUAsJZR41Nt5ltE6maZCxTRrU7/Xc7gErupV U9vNCgYZ2BrJErmLtCTOmmzhjRtMh8jFGTVhhcWUSANokRdmyuNXWzsJOVc4HA== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id CDF3572FB4 for ; Fri, 21 Jun 2024 11:28:52 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sKZza-0006ch-G3; Fri, 21 Jun 2024 04:51:34 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sKZzX-0006aQ-1g for guix-devel@gnu.org; Fri, 21 Jun 2024 04:51:31 -0400 Received: from mail.webarch.email ([81.95.52.48]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sKZzU-0008Ur-KJ for guix-devel@gnu.org; Fri, 21 Jun 2024 04:51:30 -0400 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPSA id 9406E1A889FB; Fri, 21 Jun 2024 09:51:16 +0100 (BST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=msavoritias.me; s=20210930; t=1718959885; h=from:subject:date:message-id:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=dRtu4exXej9nAPIWu6P6mWb9r529QbCz5xaBCV3TtLw=; b=IB8kRxilaQ1R4gbcRxsKusXWtTV7xW2syxsqhu0b311dPxxUVDojLIWAhNVGiJ0B0CSr8Z B/aqE9w0qZJHEdwLG6v1M/V7K47thmpK5sLy0asPKnJdfK7nt3twaxqXm88ULUHraX5b9P SSvoWgG0TYvymbY6PIaLXdpZpPel+dkIL7dGqSD5D0BX9DFmH9qKbg9agDdBusMXDL2bWy 2PWq+BodI2g0zuvSgb30gWhD/jM/UUxgT+y2MMQJ8FqSvsZFcTHNZeO78xThVPcLiMu/Pu WY4R/FfhKJO03FWOe6sb7UUS+3UQdjio1wAH6HspLh9Mj8zCKF84tAtR9FtCUQ== Date: Fri, 21 Jun 2024 11:51:11 +0300 From: MSavoritias To: Ekaitz Zarraga Cc: raingloom@riseup.net, Simon Tournier , Ian Eure , guix-devel@gnu.org Subject: Re: Next Steps For the Software Heritage Problem Message-ID: <20240621115111.7120c644@fannys.me> In-Reply-To: References: <87a5jh74jf.fsf@gmail.com> <20240619121338.71b5f340@fannys.me> <621b39c5af21791286c6a2b6e39c4c1b@riseup.net> <815e3434-19db-2a07-2fed-f7794b7a63d9@elenq.tech> <20240620093619.52e65ea3@fannys.me> X-Mailer: Claws Mail 4.1.1 (GTK 3.24.41; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Last-TLS-Session-Version: TLSv1.3 Received-SPF: pass client-ip=81.95.52.48; envelope-from=email@msavoritias.me; helo=mail.webarch.email X-Spam_score_int: -16 X-Spam_score: -1.7 X-Spam_bar: - X-Spam_report: (-1.7 / 5.0 requ) BAYES_00=-1.9, DKIM_INVALID=0.1, DKIM_SIGNED=0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: 8.54 X-Spam: Yes X-Migadu-Spam-Score: 8.54 X-Migadu-Spam: Yes X-Migadu-Queue-Id: CDF3572FB4 X-Migadu-Scanner: mx10.migadu.com X-TUID: ZSdw8Pd7PFNG On Thu, 20 Jun 2024 16:35:10 +0200 Ekaitz Zarraga wrote: > > 2. You seem to imply that Free Software or code is apolitical. (in the > > sense of social or state politics not) Which it is not. Nothing is. > > For example Free Software is explicitly pro-capitalist and > > pro-Google/big companies. I am not saying I disagree, but its good > > to keep in mind that politics exist and do exist always. And in the case > > I'm not one of those people that think everything is politics but that's > not a debate I want to open. Free Software can be understood from many > ways. I don't think it's pro-capitalist, but pro-freedom, but that > freedom affects the capitalists too, and it's a *value* they have. But > freedom is also an anarchist value, and it can be an anti-capitalist > value too it becomes more politic when you put more things around it. > The issue I was trying to point is Free Software attracts many people > from many different backgrounds and politics, and trying to push for one > side defeats its purpose: making people stay together because they have > some shared value. I agree up to point. There is a lot of ifs and buts here and the CoC covers some of the already. Not every political opinion should be respected. > >> There are many valid reasons why someone might criticize the Free > >> Software movement and people behind it, but making free software only > >> has 4 simple rules. If you don't comply with them you are not free > >> software anymore. It's as simple as that, and that simple it should > >> be. > >> > >> Free Software gives me the FREEDOM to print the code, make a roll > >> with it and shove it up my ass if I want to (and even distribute my > >> modified copies for other people to do so). The same freedom I have > >> to upload it to github. If you prevent me from doing one or the other > >> you are restricting my freedom and that's defeating the purpose of > >> free software and we cannot consider your code free software anymore. > >> The line is clear, and trying to pretend to be free software while > >> restricting people's freedoms (regardless of what they are) is absurd. > > > > This is missing the context that GPL does indeed restrict people's > > freedom to license code as the see fit. Because it was written to > > further the political goals of FSF. It is on purpose. So we are already > > restricting the freedom of people to do what they want on purpose. > > It does restrict your freedom but only if your goal is restrict other > people's software freedom. I'd say the argument here was that GPL > provides more absolute freedom in the current world than other licenses > but I don't think the GPL was a very easy decision to make for the > radical freedom fighters. That's why some people don't like it. Sure I agree. My point was more that we already restrict stuff to make room for better things. Same way the CoC restricts some people from participating so that our spaces can be safer for people to participate. Its the tradeoffs you have to do. By allowing everybody to do whatever they want or allowing everybody to say whatever they want, you end losing everybody. As you said yourself. > > And lets not forget > > "your freedom ends where the other persons freedom begins" > > and consent of course in the issue at hand. > > Yes, but I don't think this is a matter Free Software needs to deal > with. And my original message was around that. > > Now, we should do something as a set of people that collaboratively work > in a project. Probably not under the Free Software label, because what > free software is is already pretty clear and well defined, but as > something else, may that be Guix users and contributors, if we wish. yep. I agree. And this is exactly what I wanted to do in my proposal in the first place :D > >> The Free Software movement can be labeled (and is often labeled) as a > >> political movement but I'd say it's more of an ethical movement. It's > >> a way to share *values* and the value we share here is freedom. We > >> might or might not share other values, politics, religion or > >> anything, but as long as we put the freedom in the first place we > >> should agree that free software is better than any other software > >> model we have. > >> > >> There are bad actors in the world (say thieves, killers or... GitHub > >> and AI), and we can discuss about how we should deal with them but I > >> don't think the answer is putting our *values* aside but embrace them > >> harder (one value, freedom, in our case). > > > > Definetily agree. The solution is not to embrace propietary software or > > restrict software. Its to write down some common social rules that are > > rooted in consent. > > > >> If people is not happy with the Free Software movement because it > >> puts the freedom first, I can only understand it as people being mad > >> about Free Software because it's about software. > >> > >> For other values, we can start other initiatives I may or may not > >> agree more with, but if the value is freedom (in software), I don't > >> think there's any better way to push for it. But trying to disguise > >> other things inside of the Free Software is kind of dishonest. > > > > Fair. I mean we already have CoC and channel descriptions. Idk if we > > have event guidelines/CoC yet but we should. > > > >> I don't know, maybe I'm just a little bit tired. > > > > No worries. I think it was very well said. > > > > MSavoritias > > That was just for clarifying my point wasn't against this discussion but > to say that the decision Efraim took on dbxfs is not only correct but > the only possible decision, and that it should be. I think our decisions should be a lot more based on context than dogma or some kind of immovable law. But that is just me and probably a discussion for another time. > Now in Guix, I don't feel comfortable with the fact we are helping > people use AI that doesn't respect the licenses of our work to be > trained. I'm sick of it. > > If they respected the licenses, I'd be ok with it. Since I accepted Free > Software's social contract I'm open for anyone to use my code with any > purpose (unless they don't respect people's freedom later). > > Also, even if we don't do anything about it, Guix's codebase is public, > so they could do it anyway, regardless of SWH, so there's not much we > can do about that. I mean sure. But the problem is that Guix actively gives them the source code which they use for the wrong purposes. I wouldn't have a problem if it was on archiving. Just because somebody else is an asshole doesn't mean we have to be. Also a lot of people don't see the Free Software social contract as GPL. They see it as a legal license. Probably we could define some kind of Free Software contract on top but I am guessing that: 1. It would be against GPL, because GPL doesn't want anybody for any purpose to use your code. We would go public domain. 2. A lot of people probably couldn't accept it. See for example hostile forks even inside GNU that have happened. > What we *can* do is raise our concerns to SWH, motivating them to be > more strict with their collaboration with companies or with the terms of > their collaboration. It's probably better that they are in our side in > this battle than if we are alone. I think they are sensible to this > issue so it shouldn't be hard to have a proper conversation with them > and see if we can understand better what they do, how, in which terms > and so on. I agree. I don't want to burn any bridges. Which is why I made the proposal that I did. To put social pressure on them to actually respect consent. > Maybe it's better that these AI companies reach our code through SWH > with a well-written contract than letting them steal it from the > internet without having them to sign anything. > > I'm kind of just guessing there, but we are probably stronger that way. > Also, if we could make other distros to take part on this it would be a > great way to be stronger. > > In any case, I think SWH are more than sensible to this issue and I > think their connections might be helpful to not only restrict this > HugginFace from doing shady things but to start pushing for regulation > for every AI company that uses our sweat for their purposes. > > So, to come back to my original point: It's not the free software that > needs to change. It's the regulation of AI companies that should, and > the responsibility we demand from them. Legally and morally, they should > be accountable of what they do, and that's the direction I'd like to > approach this. Maybe it's not easy to change the regulation of the whole > world, but we can try to push for it in Europe (we pioneered some > related regulations before) first. Maybe. Then again this changes nothing to the current discussion. That a system of code harvesting like SWH has needs to opt-in with consent. Laws or not. Then everybody can take the decision they think is based and give or not give their code to the LLM model :) > In summary, I don't think this is just a SWH is bad/good or Free > Software is bad/good issue. > > Best, > Ekaitz > > PS: If there's action I'm open and ready for it, but I won't like this > discussion to become an exercise of ethical bragging with no goals. Please see my initial email for this thread for actional goals :) That I plan to send a pr/mr/email for soonish. MSavoritias