[Dev] Fwd: Re: Article: Chromium's subtle freedom flaws

Tue May 9 16:28:08 GMT 2017

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Now, I've a question, as qt5-webengine is based in Chromium, is it
"Googled"? Because in that case it'd be a security flaw I think.

El 09/05/17 a las 13:10, Nicolás A. Ortega escribió:
> On Tue, May 09, 2017 at 12:44:07PM -0300, Megver83 wrote:
>> 
>> I agree, there aren't proves yet
>> 
> 
> And there haven't been for the past few months since this has
> started. I think it's high time we take at least qt5-webengine of
> the blacklist. Once someone can actually prove something (which in
> the past *few months* no one has managed to do) then it can go back
> on the blacklist as we reevaluate evidence. Until then, any
> discussion on what to do with 'non-free' chromium is just
> pointless.
> 
>> El 09/05/17 a las 12:40, Nicolás A. Ortega escribió:
>>> On Tue, May 09, 2017 at 11:55:09AM -0300, Megver83 wrote:
>>>> Is this really an internal problem of Parabola? I say this 
>>>> because, what if other distros adopt qt5-webengine? then it
>>>> will become a bigger problem not only for us, but for the
>>>> other free distros too. Maybe we should discuss this with the
>>>> FSF and/or the GNU Project, they could fork
>>>> Chromium/Iridium/Ungoogled-chromium like they did with Icecat
>>>> (like creating an "Icemium").
>>>> 
>>> 
>>> Or Ungoogled-Chromium/Iridium could attempt to join the GNU 
>>> project.
>>> 
>>>> For now, I think the best thing would be to blacklist the 
>>>> packages that depend on webengine, after all, it is nonfree,
>>>> and we block a lot of free software that depends or works
>>>> only with nonfree packages (with no [libre] replacement).
>>> 
>>> I would like to ask, what exactly is non-free about
>>> qt5-webengine? The only argument I've heard so far is that it
>>> uses Chromium, yet there is still no real dirt on Chromium
>>> being non-free. Unless someone can start pointing out specific
>>> files in qt5-webengine's source/dependencies that are non-free
>>> I would propose taking it off the blacklist. This has been
>>> going on for way too long and we're getting ahead of ourselves.
>>> First you make it evident that it is non-free *then* you begin
>>> discussion on how to deal with it. This is putting the cart in
>>> front of the ox. If someone is suspected of murder then you do
>>> not start thinking about what their sentence should be until
>>> they have been convicted. Let's please be at least a little bit
>>> skeptical of how so much effort has been going in to 
>>> blacklisting chromium and anything using it but absolutely no 
>>> valid evidence is anywhere to be found.
>>> 
>>> I will say as I have in a previous e-mail (and something I 
>>> mentioned in the Quarantine Process proposal that seems to
>>> have been lost in the huge donation issue bruhaha) that this
>>> information should all be concentrated in *one place* that is
>>> easily accessible for everyone to see and should be easily
>>> edited in the case that certain sources are wrong (as I have
>>> seen them to be in this enormous mess we've been in for months
>>> now).
>>> 
>>> 
>>> 
>>> _______________________________________________ Dev mailing
>>> list Dev at lists.parabola.nu 
>>> https://lists.parabola.nu/mailman/listinfo/dev
>>> 
>> 
>> - -- SIP: megver83 at sip.linphone.org XMPP: megver83 at diasp.org Tox:
>> megver83 at toxme.io GPG: 0x227CA7C556B2BA78 GNUSocial:
>> @megver83 at quitter.cl Diaspora*: David P. (same XMPP ID) 
>> -----BEGIN PGP SIGNATURE-----
>> 
>> iQEzBAEBCgAdFiEEbbnEtPDYwNxDLPbkInynxVayungFAlkR48QACgkQInynxVay 
>> unjaUwf+K+YW+lky9QW4LrNvQf1wbtqismShIRxPo1288gGGUsYifCSw32Fnx2QP 
>> 85ert6lICFzj5MJOEckks2eDSYCIg0FUha/UVVXGvKSdinjf/BymGltJ9s1ksJGp 
>> IPcT1RXDE2Ake36+y7m6RYQd8KyaoOCO+8YdvE/6SWeV0D1xx2GNuCEgRihYyzpb 
>> ahgIXP15X5mrV5oCLhrSNDMs6qoZ1HA6iKD1XCZvre5BCmWrReBIXz8dEQ8Ly/km 
>> TOq1TD8SyXL+pZ6gw8bkzWhjOI6gkatpuPlTehMiHLxD0mYwmcMZa3faH2K/CqgQ 
>> 2/+yj4+CslsiAZFuCHbOY6Voc3C0xA== =Xp0R -----END PGP
>> SIGNATURE----- _______________________________________________ 
>> Dev mailing list Dev at lists.parabola.nu 
>> https://lists.parabola.nu/mailman/listinfo/dev
> 
> 
> 
> _______________________________________________ Dev mailing list 
> Dev at lists.parabola.nu 
> https://lists.parabola.nu/mailman/listinfo/dev
> 

- -- 
SIP: megver83 at sip.linphone.org
XMPP: megver83 at diasp.org
Tox: megver83 at toxme.io
GPG: 0x227CA7C556B2BA78
GNUSocial: @megver83 at quitter.cl
Diaspora*: David P. (same XMPP ID)
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEbbnEtPDYwNxDLPbkInynxVayungFAlkR7hQACgkQInynxVay
ungS7wf+JnjEkRCQ9CpQbD1OZIMT9yvX16aK65g5RfvKw/R8Nqz8mqc2wOzSVG0q
/gdfDYvdmuIbVzyQ7g0BR5SIylRKIZzWclaBLA6YJSZ4fm3c9LExuAFCnWd8YPVG
gSh5ev71iIqLSzXuy55q8z2mVgE8XmN6cx6F1N2WiJIXzQ8C+78dqBwWVSA449Op
axmeOBr6DjUUa3z3Qs9RLiZme17VIY7gvpOupl6OOqptz41QO0Ywb9QtSbsOiCp2
646l4IXh33vAKsJSrWDNMQaWDPec5avuxKLKd3gDi4ra86ujmkhTNOmruOB8UADU
cZ2gt/Si69ycJhuLiKnwtmI/AgL/ZQ==
=bZUC
-----END PGP SIGNATURE-----