From mboxrd@z Thu Jan 1 00:00:00 1970 From: Josh Subject: Re: How to present Guix to a wider audience Date: Tue, 14 Jan 2020 19:20:31 -0500 Message-ID: References: <878smq41kg.fsf@ambrevar.xyz> <874kwyp9hi.fsf@ambrevar.xyz> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:47266) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1irWQG-0001tw-1W for help-guix@gnu.org; Tue, 14 Jan 2020 19:20:37 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1irWQE-00070m-UY for help-guix@gnu.org; Tue, 14 Jan 2020 19:20:35 -0500 Received: from mail-qk1-x72c.google.com ([2607:f8b0:4864:20::72c]:32948) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1irWQE-0006zh-ON for help-guix@gnu.org; Tue, 14 Jan 2020 19:20:34 -0500 Received: by mail-qk1-x72c.google.com with SMTP id d71so14127721qkc.0 for ; Tue, 14 Jan 2020 16:20:34 -0800 (PST) Received: from ?IPv6:2601:183:857f:9434::333? ([2601:183:857f:9434::333]) by smtp.gmail.com with ESMTPSA id u4sm7427017qkh.59.2020.01.14.16.20.32 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 14 Jan 2020 16:20:33 -0800 (PST) In-Reply-To: <874kwyp9hi.fsf@ambrevar.xyz> Content-Language: en-CA List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane-mx.org@gnu.org Sender: "Help-Guix" To: help-guix@gnu.org It is purist, and that's hard for a general audience.  To CS and math people, this is exactly the way to go.  The start is stronger.  Some of Ken Thompson's more worrying work should be included to convey our intuitive fear of this to the layperson. The second link may not be all that credible, but the story conveys what guix is meant to prevent, and fix. http://wiki.c2.com/?TheKenThompsonHack https://www.quora.com/What-is-a-coders-worst-nightmare/answer/Mick-Stute?srid=RBKZ&share=1 https://en.wikipedia.org/wiki/Backdoor_(computing)#Compiler_backdoors I think some of the buildup to the logical proof can be omitted, with just the assertion that with the elements of FLOSS, Reliability, and Trust are required and guix is designed to guarantee those would be sufficient for the audience.