Mike Linksvayer - Identi.ca

2016-06-01T17:21:46Z via Identi.ca Web To: Public CC: Followers

https://rhodecode.com/blog/113/rhodecode-goes-open-source-unified-security-for-git-svn-mercurial

(I've only skimmed but looks like AGPLv3 and a proprietary 'enterprise' version, presumably an asymmetric CLA.)

(Rhodecode is what Kallithea forked awhile back.)

mray shared this.

2016-05-22T19:52:18Z via Identi.ca Web To: Public CC: Followers

Wish Bassel a happy and free birthday http://gondwanaland.com/mlog/2016/05/22/happy-birthday-bassel-releases/

Tyng-Ruey Chuang , 4slamK , Kete Foy like this.

Tyng-Ruey Chuang , 4slamK , Charles ☕ Stanhope shared this.

2016-05-19T18:38:22Z via Identi.ca Web To: Public CC: Followers

This week's LWN

It's big, it's hot.

Claes Wallin (韋嘉誠) likes this.

I say that with regards to no article in particular. I've only skimmed anything yet. Just reminds me of when a paper periodical had a big issue that at a glance seemed all super interesting and made me want to spend hours reading.

Mike Linksvayer at 2016-05-19T18:39:54Z

Claes Wallin (韋嘉誠) , Jason Self like this.

2016-05-16T03:25:03Z via Identi.ca Web To: Public CC: Followers

Voted https://commons.wikimedia.org/wiki/Commons:Picture_of_the_Year/2015/R2/Gallery

Jason Self likes this.

2016-05-11T18:53:18Z via Identi.ca Web To: Public CC: Followers

https://whispersystems.org/blog/the-ecosystem-is-moving/

Critique of federation

Tyng-Ruey Chuang , Kete Foy like this.

Show all 10 replies

People who feel the solution is another cryptocoin:

http://maidsafe.net/
http://filecoin.io/

Claes Wallin (韋嘉誠) at 2016-05-12T08:39:16Z

Further discussion on The Other FedSocNet:

https://quitter.se/notice/5614467

Claes Wallin (韋嘉誠) at 2016-05-12T08:46:08Z

For the two preceding reasons, scalability and perceived privacy, federation technologies have always degenerated into a slippery slope leading people from free services into the dependency of centralized offerings. It comes as no surprise that at some point the so-called open standards lose their relevance and the big companies procede to lock their users in for good.

http://about.psyc.eu/Federation (linked from the GS discussion)

I have no idea what this secushare or PSYC2 thing is, but they seem to be making interesting conversation.

Claes Wallin (韋嘉誠) at 2016-05-12T09:09:51Z

@[email protected] I saw that and thought the problem is the federation escapes he listed don't generate revenue so there's no full time employees updating pieces. Browsers are federated technology with many complex moving parts, but because they're also ad delivery tools they get updated.

Diane Trout at 2016-05-13T01:42:08Z

Kete Foy likes this.

2016-05-10T19:04:17Z via Identi.ca Web To: Public CC: Followers

BitKeeper released under Apache License 2.0
https://news.ycombinator.com/item?id=11667494

See comments from McVoy (user 'luckydude')

Claes Wallin (韋嘉誠) likes this.

Claes Wallin (韋嘉誠) shared this.

https://news.ycombinator.com/item?id=11668492 reflects pretty clearly on your thesis that the success of free software/culture is the unprofitability of the proprietary alternative.

Git ate BK's lunch.

Claes Wallin (韋嘉誠) at 2016-05-10T19:47:30Z

Mike Linksvayer likes this.

And it reflects on Linus's attitude that Mercurial was named after McVoy, whereas git was named after Linus. :-D

Claes Wallin (韋嘉誠) at 2016-05-10T19:51:08Z

Security researchers have begun inspecting the code:

http://seclists.org/oss-sec/2016/q2/301

lfam at 2016-05-10T20:34:33Z

Claes Wallin (韋嘉誠) , j1mc like this.

http://seclists.org/oss-sec/2016/q2/312

We've never had anyone complain about this in a real world situation so we've never focussed on it.
I am not sure to fully understand, so allow me to rephrase based on my understanding. Because no one complained and found the problem before among your clients, (that likely didn't had the source code to begin with, and also no expectation of being able to read without likely infriging copyright), the BK team didn't focused on trying to be proactive and fixing security issues that ook 5 minutes to be found ?

Ouch.

Claes Wallin (韋嘉誠) at 2016-05-12T07:32:56Z

2016-05-10T18:26:00Z via Identi.ca Web To: Public CC: Followers

http://www.meetup.com/SFOpenDrinks/events/230892543/ 6pm tonight Internet Archive

2016-05-08T02:25:17Z via Identi.ca Web To: Public CC: Followers

The GPL Is Almost an All Writs Canary http://2d.laboratorium.net/post/142848414775/the-gpl-is-almost-an-all-writs-canary

My comment, which you would not see if you're blocking Disqus or proprietary javascript or all javascript(no complaints from me if you are):

I think you're reading GPLv2 correctly. I'm not sure a device with GPLv3 software must allow anyone in possession of the device to install modified software. The installation information in theory could be specific to an individual device, and provided to the purchaser of the device out of band. Also the ability to replace a device's OS doesn't necessarily give one the ability to decrypt user data.

GPLv2/3 and AGPLv3 might also "almost" serve as canaries when companies are ordered to distribute spy software to and spy on users, respectively. But the OS or the service aren't GPL'd, particular programs are, possibly even every program. But a proprietary program can be installed and run on such systems without violating the GPL. Protection of users to the extent it can be obtained has to come from software update services and general services being run by processes and organizations designed to resist compromising users.

It is very much worthwhile thinking through these issues in more detail!

Somewhat related, I wonder if there's anything new https://identi.ca/mlinksva/note/aiXESNT8SB-54jvtvGIZfA (2013) in the state of art for remote bricking under control of device owner with only free software?

Douglas Perkins , Christopher Allan Webber , Claes Wallin (韋嘉誠) like this.

Douglas Perkins , Douglas Perkins , Christopher Allan Webber , Claes Wallin (韋嘉誠) shared this.

I would presume this would be partially relevant to copyleft-next?

Stephen Michael Kellat at 2016-05-08T03:00:34Z

Absolutely relevant to copyleft-next.

Claes Wallin (韋嘉誠) at 2016-05-08T03:58:46Z

Note that the scenario posted only is relevant when the organization ordered to comply with a court order is not the sole holder of the copyright. There needs to be a third party, whose copyright interest can be infringed upon.

Regarding the GPLv3 installation information: The user could have access to installation keys specific to the device, and the FBI also given those keys, or the user could have device-specific keys, Apple unlimited keys and the FBI some other unlimited keys. I'm not convinced the GPLv3 adds or removes any features in this scenario. It doesn't force anyone to disclose all keys applicable, just forces the vendor to give you one way of signing that works.

If the installation of spyware or backdoor-ware on your device is distribution to you, they would have to provide you the source code. But that depends whose phone the court thinks it is, when the FBI has seized it.

Claes Wallin (韋嘉誠) at 2016-05-08T04:09:00Z

Mike Linksvayer likes this.

2016-05-07T17:59:48Z via Identi.ca Web To: Public CC: Followers

svn sw http://svn.automattic.com/wordpress/tags/4.5.2

2016-05-06T17:20:31Z via Identi.ca Web To: Public CC: Followers

https://en.wikipedia.org/wiki/Contributor_License_Agreement

A really poor article. Probably almost best to start fresh. Anyone up for fixing it?

2016-05-05T15:58:24Z via Identi.ca Web To: Public CC: Followers

Definitely not looking at any of the 329 comments on a recent LWN article.

2016-04-24T20:09:46Z via Identi.ca Web To: Public CC: Followers

Tabular data on Wikimedia Commons, would be great for open data and for Wikimedia projects!
https://commons.wikimedia.org/wiki/Commons:Village_pump/Proposals#Tabular_data_storage_for_Commons.2...

der.hans , Tyng-Ruey Chuang like this.

2016-04-12T20:02:59Z via Identi.ca Web To: Public CC: Followers

svn sw http://svn.automattic.com/wordpress/tags/4.5

2016-04-08T09:03:49Z via Identi.ca Web To: Public CC: Followers

It is International Dark Sky Week

http://darksky.org/dark-sky-week-2016/

Karl Fogel likes this.

Karl Fogel shared this.

2016-04-06T04:42:45Z via Identi.ca Web To: Public CC: Followers

Aggregated prediction markets and next election iteration outcomes http://gondwanaland.com/mlog/2016/04/05/aggregated-prediction-market-election-outcomes/

2016-03-26T04:38:58Z via Identi.ca Web To: Public CC: Followers

Virtue, power, and rationality of targeted apathy http://www.philosophersbeard.org/2016/03/what-terrorists-want-and-how-to-stop.html

bthall , Claes Wallin (韋嘉誠) , Christopher Allan Webber , Charles ☕ Stanhope like this.

Claes Wallin (韋嘉誠) , Claes Wallin (韋嘉誠) , Christopher Allan Webber shared this.

Thank you for sharing that. I needed a thoughtful read after these recent events.

Charles ☕ Stanhope at 2016-03-26T16:11:06Z

Wow, so many gold nuggets in that text.

Claes Wallin (韋嘉誠) at 2016-03-27T12:11:29Z

2016-03-17T04:30:11Z via Identi.ca Web To: Public CC: Followers

https://github.com/hearthsim/joust#licenses

Joust is licensed under the AGPLv3 for non-commercial uses exclusively. The full text of the license can be found in the LICENSE file. Joust is not licensed for commercial use. Commercial exceptions can be granted on a case by case basis.

j1mc likes this.

Someone doesn't know what they say...

A basic understanding of software freedom and its major licensing models is now pretty much a requirement for a professional software developer. Even if they don't write any free software themselves.

I don't mean that everyone needs to understand the details of, say, AGPL. I mean that they understand the concept of copyleft and that it's entirely incompatible with restrictions such as "no commercial use".

Lars Wirzenius at 2016-03-17T07:59:07Z

j1mc likes this.