From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp2.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms13.migadu.com with LMTPS id 6AcLBeOrdWbd8AAAe85BDQ:P1 (envelope-from ) for ; Fri, 21 Jun 2024 16:35:47 +0000 Received: from aspmx1.migadu.com ([2001:41d0:403:4876::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp2.migadu.com with LMTPS id 6AcLBeOrdWbd8AAAe85BDQ (envelope-from ) for ; Fri, 21 Jun 2024 18:35:47 +0200 X-Envelope-To: larch@yhetil.org Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=BmYU5KD3; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gmail.com ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1718987746; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post:dkim-signature; bh=LSw5Uf+eFp1/RlRmSMmT4jx9UT6fARvI8BTNTajs7G4=; b=dAvvFkwpKtv/zVyjZPPB0+kOJr3312FxT1XM8ZLXTfamcgjTgizBaaH8b5b1hH4QwFv8op UG902EHPEQQaLJzEYRXkUcvqKksvnDgf1JsX6eqdJ1Rb4IseDcik7rLztKwOHvTcBqQ1Lc 9guddsyS6k/NydRnsB7V4zn7FjgwAqMlsWm8oIX0NBg9K31+adOF/z9PfROypj2WtvudaD bMg/pzvctDJUh+nQnE0F9zIRWlbx0QUoZwZRiTDVSvTHGnCwn3cX/hFJCAl+Y4xkV79MOr 62fUAegkLFIl9JQS7TCC+SuIpAxzQ/v34wKRuy0Hq2cYnb9yjOpNfleRoR3tHQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=gmail.com header.s=20230601 header.b=BmYU5KD3; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org"; dmarc=pass (policy=none) header.from=gmail.com ARC-Seal: i=1; s=key1; d=yhetil.org; t=1718987746; a=rsa-sha256; cv=none; b=H4nF4/oJW1uB36pcqCiKOKHyETI3+VpXKLc4dRRr/Ez7L9VnuhsFHMIQ6llLwn2IU1DmeC /KZvqfmZ6Fru4/d+zCirm+PmJ4E07InYgSxNOBUqw7FYtbSpd8R3ai+5HHoziYRIOT/m5X yo0dsynqIJHDzQ1N6M/JPEB0FFRKo+osFpNgd+q7McqzXFGvZWpst58YvWYi7sCOnitBCJ iwcRua/eP0Y6P9nwV0C+zv7M5UBBpY98L3wa+txMc6aEfdMbO5Xbl3Xcq8c4DlNUFtm+vG p8/HzocscW0327YRUf+ElfbXZm4oMd32b4JHCsjNhRLEqO4XA6owLR5hqY5GQw== Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id DB2802560D for ; Fri, 21 Jun 2024 18:35:46 +0200 (CEST) Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1sKhDx-0007Mn-H0; Fri, 21 Jun 2024 12:34:53 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sKhDv-0007Ks-B1 for guix-devel@gnu.org; Fri, 21 Jun 2024 12:34:51 -0400 Received: from mail-wr1-x444.google.com ([2a00:1450:4864:20::444]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1sKhDt-0006Hb-I6 for guix-devel@gnu.org; Fri, 21 Jun 2024 12:34:51 -0400 Received: by mail-wr1-x444.google.com with SMTP id ffacd0b85a97d-3621ac606e1so1997065f8f.1 for ; Fri, 21 Jun 2024 09:34:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1718987687; x=1719592487; darn=gnu.org; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:from:to:cc:subject :date:message-id:reply-to; bh=LSw5Uf+eFp1/RlRmSMmT4jx9UT6fARvI8BTNTajs7G4=; b=BmYU5KD3x9tw1xW/BIRyjNB54lC9W/exjUjWaqnGniG/WQgKcK3rKQGCcQP8Zgb88c LHRCmhpAsCnO00MFPVFbbPQ20kLlfuvN1HpYjZKMwsbDrL4Hm2ULwsU9dGMlk5rVwaLf IRKd5ZxqsLB/WgRRBDxdGzWPXq51FShYJKeAJG7Hsz9pS76pJW/59bdv1NTvzTOA44oy buaw3vYTajUlJ8LlalUxPGRCa8kFkh72mg1jf72BDx2P98yjAKwjVm8wc7f3uIjdxAFg 6z5vF/QMO9mvN32pAQ0hGYQAN+Aq/QCSyGGWZlVGWB0OCaDZJd4UjfLyxInmfUQnvOnb 6lnA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1718987687; x=1719592487; h=mime-version:user-agent:content-transfer-encoding:references :in-reply-to:date:cc:to:from:subject:message-id:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=LSw5Uf+eFp1/RlRmSMmT4jx9UT6fARvI8BTNTajs7G4=; b=pS/QBcSK8pdmIawLVqtP/MqPujdiYJ//gLnEz9qbXNIFNysAM3r54LyUYrBylzOx03 eAi31+789fZw17rwUkB5NZ5EryOJ7khJnN6f6r5bNrySce/z2eTOj0K3FPPLvkjRh2jH jS7PX07g+pYQpAEgNWD6dq6vR6JKkbZvf2s3LoBiPSW/knR/BcFLRWCKWSN0gqP+3pYY vw4Ptqa1dyGstgTynzsx00DH/zU3WHPHS8BJZNBmFmPcGjE7b3JDZhuzsKY+xS5bBNTa YQ+yV1B+Nwz0u3Gbwk1eTIAxKBuncXtvEJjESwmngqXxruasgK+4i4QAj4uWm/bwGRf7 QnAA== X-Forwarded-Encrypted: i=1; AJvYcCWWmgB45KIWgD8ODgcd8gH15xJQ8ZWjkTys5OXDCmclYq5nwa/odtf7X2YRMHM060Dc609OmGImrx/DSXaYInquOgM= X-Gm-Message-State: AOJu0YztU1ouyOR0+7CMNPL0g4rcE63zZoP6hQ9gCXtCg+hNm7txMy5l Cu8+K1pU4FVXDZhRgqifJ7bru4WmMaBlC/M6w3mKBJgbbByUdOUh X-Google-Smtp-Source: AGHT+IHBy46KzqdQ/hYdIWMVW5hqBqqm5plqSux5XCDNtSK8H+OIXHDhBj6i91QI/j0UiYf4oyW5ow== X-Received: by 2002:adf:fd43:0:b0:363:23c4:a2d4 with SMTP id ffacd0b85a97d-366de98d1e7mr277307f8f.33.1718987687421; Fri, 21 Jun 2024 09:34:47 -0700 (PDT) Received: from lumine.fritz.box (85-127-52-93.dsl.dynamic.surfer.at. [85.127.52.93]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-3663a8c789esm2248510f8f.91.2024.06.21.09.34.46 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 21 Jun 2024 09:34:46 -0700 (PDT) Message-ID: <736a1962e3b331737ddfda39ac7bea340d3ffebc.camel@gmail.com> Subject: Re: About SWH, let avoid the wrong discussion From: Liliana Marie Prikler To: MSavoritias , Luis Felipe Cc: Andreas Enge , guix-devel@gnu.org Date: Fri, 21 Jun 2024 18:34:43 +0200 In-Reply-To: <20240621171524.4fe8bb13@fannys.me> References: <20240618113717.4a6bad2b@fannys.me> <87msnebsfd.fsf@gmail.com> <20240621121213.419da774@fannys.me> <20240621134439.5bc324b4@fannys.me> <20240621171524.4fe8bb13@fannys.me> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable User-Agent: Evolution 3.48.4 MIME-Version: 1.0 Received-SPF: pass client-ip=2a00:1450:4864:20::444; envelope-from=liliana.prikler@gmail.com; helo=mail-wr1-x444.google.com X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: guix-devel-bounces+larch=yhetil.org@gnu.org X-Migadu-Country: US X-Migadu-Flow: FLOW_IN X-Spam-Score: -9.70 X-Migadu-Queue-Id: DB2802560D X-Migadu-Scanner: mx10.migadu.com X-Migadu-Spam-Score: -9.70 X-TUID: wMjWBPBNwenB Hi, MSavoritias, Am Freitag, dem 21.06.2024 um 17:15 +0300 schrieb MSavoritias: > But I didnt say that tho did I? the context you are reading as from > the quote is Guix uploading all code from its packages to SWH. > Not any private repos. So i have no idea what you are reffering to > here tbh. I hate to say that, but you kinda did. It was implicit on the mailing list (at least in the OP), but very explicit in the XMPP room, where you say "it automatically sen[d]s your repo (and all your code) that is reachable through the internet to Software Heritage [=E2=80=A6] with no way= to opt-out at any of the process and no flag with `guix lint` to disable it" Now, you stand corrected on both accounts (the automatic sending of code and the inability to disable it), but I'd like to poke at another tangent. Currently, the StarCoder LLM endorsed by SWH, claims to only ingest GitHub and to filter out both commercial and copyleft code, thus training on non-copyleft "open source" software only [1]. So, at the time of writing, you do have an "easy" opt-out by way of using the GPL. Except, that, of course, their script to detect licenses is buggy =E2=80=93 what else did you expect? Just search for GNOME using their tool.[2]=20 It will print out repos like the unlicensed releng [3] =E2=80=93 although f= or some reason, being unlicensed appears to be fair game to them anyway [1] =E2=80=93 or the GPL'd devhelp [4]. So, in my opinion, the collaboration between SWH and StarCoder should trigger some side-eyeing; and if only to exclude the archival lint for the time being.=C2=A0 We can still consider SWH as a software mirror if all else fails, and they should probably be quick enough in updating as well. Long term, we might want to look into options that do not openly endorse tools which make such questionable decisions. On the notion of consent, I do think that "I license my code under the MIT license, because then companies will like me" ought to count as consent here. [3] and [4] on the other hand very much don't. Also, "sign up with GitHub, so that you can opt out" is not a great consent model either =E2=80=93 at the very least accept bleeping email. As per Doctorow's law of enshittification, there is a good chance that "ethical AI" to SWH will become "any AI" if we do nothing to communicate that this is not what we as Guix expect. Cheers [1] https://arxiv.org/abs/2402.19173 [2] https://huggingface.co/spaces/bigcode/in-the-stack [3] https://github.com/GNOME/releng [4] https://github.com/GNOME/devhelp