Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-04-11 Thread Roberto C . Sánchez
On Thu, Apr 11, 2024 at 11:48:18AM +0200, Christian Kastner wrote: > Hi Thomas, > > I overlooked this the first time, but > > On 2024-03-29 16:03, Thomas Goirand wrote: > > FYI, if I didn't go forward with the project, that we've been discussing > > with Jonathan over at least 3 years, is

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-04-11 Thread Christian Kastner
Hi Thomas, I overlooked this the first time, but On 2024-03-29 16:03, Thomas Goirand wrote: > FYI, if I didn't go forward with the project, that we've been discussing > with Jonathan over at least 3 years, is because I have no idea where to > host it. I have clearly stated that having this

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-04-10 Thread Jonathan Carter
On 2024/04/10 16:08, Felix Lechner wrote: On Wed, 27 Mar 2024 13:57:55 +0200, Jonathan Carter wrote: every single hardware request over the last 4 years (whether from DSA or from a DD) has been approved. Mine wasn't, although I probably didn't follow the proper procedure. I just wrote a

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-04-10 Thread Felix Lechner
Hi, On Wed, 27 Mar 2024 13:57:55 +0200, Jonathan Carter wrote: > every single hardware request over the last 4 years (whether from DSA > or from a DD) has been approved. Mine wasn't, although I probably didn't follow the proper procedure. I just wrote a private email to Jonathan. His response

Re: Question to all candidates: What are your technical goals

2024-04-08 Thread Marc Haber
Hi, now that the campaign period has ended, I will write my longer answer on -devel where it belongs. On Thu, Apr 04, 2024 at 12:38:34PM +0200, Andreas Tille wrote: > Am Wed, Apr 03, 2024 at 05:53:46PM +0200 schrieb Marc Haber: > > I think this can't just be seen by looking at the statistiks.

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-07 Thread Andreas Tille
Am Thu, Apr 04, 2024 at 10:14:59AM -0700 schrieb Soren Stoutner: > On Thursday, April 4, 2024 5:32:45 AM MST Andreas Tille wrote: > >[ ] Its not acceptable, don't do that > >[ ] We should discuss this on debian-devel, possibly do some GR > >before things like this are permitted > >

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-07 Thread Andreas Tille
Hi again, Am Sat, Apr 06, 2024 at 09:26:25AM +0200 schrieb Tobias Frost: > > I want to be able to immediately respond to future problems in this > > package. I'm fine with putting Debian Med team as maintainer, but not > > my personal ID (maximum as Uploader since I do not have any personal > >

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-06 Thread Tobias Frost
On Fri, Apr 05, 2024 at 12:37:19PM +0200, Andreas Tille wrote: > Hi Tobias, > > Am Thu, Apr 04, 2024 at 07:59:56PM +0200 schrieb Tobias Frost: > > > > There is the possilbity to salavage the packagei [1], but that of course > > will > > only work if the person agrees to take over maintainance

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-05 Thread Andreas Tille
Hi Holger, Am Fri, Apr 05, 2024 at 10:42:35AM + schrieb Holger Levsen: > On Fri, Apr 05, 2024 at 12:26:03PM +0200, Andreas Tille wrote: > > > also: (NMU-)uploads to DELAYED/15 are great. > > Sorry, I do not feel my time well spent on just curing a symptom > > (unfixed RC bug) via NMU instead

Re: (last minute) Question to both candidates: CRA+PLD, similar regulations, and Debian

2024-04-05 Thread Andreas Tille
Hi Santiago, Am Fri, Apr 05, 2024 at 03:21:48PM -0300 schrieb santiago: > ... > Non-commercial FLOSS products/projects do not have to comply with CRA. > However, I think there could be an impact in the industry regarding the > adoption and use of Debian. > > What are you thoughts on the subject?

Re: Question to all candidates: GDPR compliance review

2024-04-05 Thread Sam Hartman
> "Adrian" == Adrian Bunk writes: Adrian> If I send an email requesting all data Debian has about me to Adrian> data-protect...@debian.org, will I receive a complete reply within the Adrian> expected time, including all data members of delegations like the Adrian> Debian

Re: Question to all candidates: GDPR compliance review

2024-04-05 Thread Adrian Bunk
On Fri, Apr 05, 2024 at 04:38:57PM +0200, Andreas Tille wrote: > Hi Adrian, Hi Andreas, > Am Fri, Apr 05, 2024 at 12:41:17AM +0300 schrieb Adrian Bunk: >... > > Many parts of Debians Privacy Policy look questionable. > > > > For example the rights are not stated, and in addition to this being a

Re: (last minute) Question to both candidates: CRA+PLD, similar regulations, and Debian

2024-04-05 Thread Sruthi Chandran
On 05/04/24 23:51, santiago wrote: Dear DPL candidates, As you may be aware, the EU has adopted a new cybersecurity regulation [CRA] and other countries are following the example. You may also be aware that Debian issued a public statement about it (based on a previous draft version of the

Re: Question to all candidates: Bits from the DPL?

2024-04-05 Thread Sruthi Chandran
On 03/04/24 01:35, Louis-Philippe Véronneau wrote: Hello! Jonathan's latest "Bits from the DPL" entry reminded me of how much I like those :) I also like reading them. What are your thoughts on the format? I like the format, but sometimes it becomes too long that I end up not finishing

(last minute) Question to both candidates: CRA+PLD, similar regulations, and Debian

2024-04-05 Thread santiago
Dear DPL candidates, As you may be aware, the EU has adopted a new cybersecurity regulation [CRA] and other countries are following the example. You may also be aware that Debian issued a public statement about it (based on a previous draft version of the regulation) last year. CRA will have an

Re: Question to all candidates: GDPR compliance review

2024-04-05 Thread Sruthi Chandran
On 05/04/24 03:11, Adrian Bunk wrote: Hi, this email has two parts: A short question where I would appreciate a "yes" or "no" answer from all candidates, and a longer explanation what and why I am asking. Question: If elected, will you commit to have a lawyer specialized in that area review

Re: Question to all candidates: What are your technical goals

2024-04-05 Thread Sruthi Chandran
On 03/04/24 01:42, Marc Haber wrote: Dear Candidates, There are many people who see Debian as a technology project, with the technical goal of producing The Universal Operating System. I believe that Debian is both a technology project and a community. What are you planning to do to Debian

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-05 Thread Andreas Tille
Hi Scott, Am Thu, Apr 04, 2024 at 01:12:45PM + schrieb Scott Kitterman: > On April 4, 2024 12:59:34 PM UTC, Andreas Tille wrote: > >I would like to learn what options I have to realise paragraph > > > > Packaging standards > > > >of my platform. > > Obviously the DPL has an outsized voice

Re: Question to all candidates: GDPR compliance review

2024-04-05 Thread Andreas Tille
Hi Adrian, Am Fri, Apr 05, 2024 at 12:41:17AM +0300 schrieb Adrian Bunk: > this email has two parts: > A short question where I would appreciate a "yes" or "no" answer from > all candidates, and a longer explanation what and why I am asking. > > > Question: > > If elected, will you commit to

Re: Question to all candidates: What are your technical goals

2024-04-05 Thread Luca Boccassi
On Fri, 5 Apr 2024 at 11:18, Andreas Tille wrote: > > Am Thu, Apr 04, 2024 at 02:41:00PM +0100 schrieb Luca Boccassi: > > > Please don't get me wrong: I do not consider Fedora a commercial > > > entity. I simply subscribe the statement that we are facing some > > > problems in Debian since we

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-05 Thread Holger Levsen
On Fri, Apr 05, 2024 at 12:26:03PM +0200, Andreas Tille wrote: > > also: (NMU-)uploads to DELAYED/15 are great. > Sorry, I do not feel my time well spent on just curing a symptom > (unfixed RC bug) via NMU instead of addressing the underlying cause > that the package is maintained by a single

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-05 Thread Andreas Tille
Hi Tobias, Am Thu, Apr 04, 2024 at 07:59:56PM +0200 schrieb Tobias Frost: > > There is the possilbity to salavage the packagei [1], but that of course will > only work if the person agrees to take over maintainance and add their name to > Uploaders: or Maintainer: [2]. I want to be able to

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-05 Thread Andreas Tille
Am Fri, Apr 05, 2024 at 09:55:56AM + schrieb Holger Levsen: > On Thu, Apr 04, 2024 at 02:32:45PM +0200, Andreas Tille wrote: > > [...] I could follow the normal NMU procedure but I do not consider > > this a sustainable solution. > [...] > > I did not uploaded my work but I would like to

Re: Question to all candidates: What are your technical goals

2024-04-05 Thread Andreas Tille
Am Thu, Apr 04, 2024 at 02:41:00PM +0100 schrieb Luca Boccassi: > > Please don't get me wrong: I do not consider Fedora a commercial > > entity. I simply subscribe the statement that we are facing some > > problems in Debian since we are not a commercial entity. > > I think the framing is

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-05 Thread Holger Levsen
On Thu, Apr 04, 2024 at 02:32:45PM +0200, Andreas Tille wrote: > [...] I could follow the normal NMU procedure but I do not consider > this a sustainable solution. [...] > I did not uploaded my work but I would like to know what action is > considered acceptable by the voters. I repeat that

Re: Question to all candidates: What are your technical goals

2024-04-05 Thread Andreas Tille
Hi, Am Thu, Apr 04, 2024 at 09:55:33PM +0100 schrieb Luca Boccassi: > On Thu, 4 Apr 2024 at 21:30, Salvo Tomaselli wrote: > > > > > In practical terms, it would probably be made easier if it was > > > mandatory for all packages to be on Salsa, either in the 'debian' > > > namespace or in a team

Question to all candidates: GDPR compliance review

2024-04-04 Thread Adrian Bunk
Hi, this email has two parts: A short question where I would appreciate a "yes" or "no" answer from all candidates, and a longer explanation what and why I am asking. Question: If elected, will you commit to have a lawyer specialized in that area review policies and practices around handling

Re: Question to all candidates: What are your technical goals

2024-04-04 Thread Luca Boccassi
On Thu, 4 Apr 2024 at 21:30, Salvo Tomaselli wrote: > > > In practical terms, it would probably be made easier if it was > > mandatory for all packages to be on Salsa, either in the 'debian' > > namespace or in a team namespace (but not under individual users). > > Realistically, even if you

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Tobias Frost
Hi Andreas, On Thu, Apr 04, 2024 at 02:32:45PM +0200, Andreas Tille wrote: > Hi, > > in the light of the previous discussion I have a question to all voters. > Due to bug #1066377 more than 30 testing removal warnings hit my mailbox > today (I stopped counting after 30). While the Debian Med

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Soren Stoutner
On Thursday, April 4, 2024 5:32:45 AM MST Andreas Tille wrote: >[ ] Its not acceptable, don't do that >[ ] We should discuss this on debian-devel, possibly do some GR >before things like this are permitted >[ ] Wait one week before uploading >[X] Wait one day before

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Andreas Tille
Am Thu, Apr 04, 2024 at 01:04:49PM + schrieb Holger Levsen: > On Thu, Apr 04, 2024 at 02:59:34PM +0200, Andreas Tille wrote: > > I would like to learn what options I have to realise paragraph > >Packaging standards > > of my platform. > > I also think this feels a bit like abusing the

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Marc Haber
On Thu, Apr 04, 2024 at 02:32:45PM +0200, Andreas Tille wrote: >[ ] Its not acceptable, don't do that >[ ] We should discuss this on debian-devel, possibly do some GR >before things like this are permitted >[ ] Wait one week before uploading >[X] Wait one day before

Re: Question to all candidates: What are your technical goals

2024-04-04 Thread Luca Boccassi
On Thu, 4 Apr 2024 at 13:40, Andreas Tille wrote: > > Hi Luca, > > Am Thu, Apr 04, 2024 at 12:47:11PM +0100 schrieb Luca Boccassi: > > > > That's the price we currently pay for being not a commercial entity, > > > > > > I fully subscribe to this statement. > > > > I don't think commercial

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Scott Kitterman
On April 4, 2024 12:59:34 PM UTC, Andreas Tille wrote: >Hi Scott, > >Am Thu, Apr 04, 2024 at 12:42:11PM + schrieb Scott Kitterman: >> I'm interested to understand what you think this has to do with the DPL >> election or the role of the DPL within the project? > >I would like to learn

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Holger Levsen
On Thu, Apr 04, 2024 at 02:59:34PM +0200, Andreas Tille wrote: > I would like to learn what options I have to realise paragraph >Packaging standards > of my platform. I also think this feels a bit like abusing the election audience for a topic which should be discussed on -devel outside

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Andreas Tille
Hi Scott, Am Thu, Apr 04, 2024 at 12:42:11PM + schrieb Scott Kitterman: > I'm interested to understand what you think this has to do with the DPL > election or the role of the DPL within the project? I would like to learn what options I have to realise paragraph Packaging standards of

Re: Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Scott Kitterman
On April 4, 2024 12:32:45 PM UTC, Andreas Tille wrote: >Hi, > >in the light of the previous discussion I have a question to all voters. >Due to bug #1066377 more than 30 testing removal warnings hit my mailbox >today (I stopped counting after 30). While the Debian Med package >clustalo is the

Re: Question to all candidates: What are your technical goals

2024-04-04 Thread Andreas Tille
Hi Luca, Am Thu, Apr 04, 2024 at 12:47:11PM +0100 schrieb Luca Boccassi: > > As far as I know other major distributions do not undertake the time_t > > 64bit transition (whether this marks leadership or not is questionable > > but it will make us the leading distribution on those architectures in

Question to all voters: Is team upload in some example case OK? (Was: Question to all candidates: What are your technical goals)

2024-04-04 Thread Andreas Tille
Hi, in the light of the previous discussion I have a question to all voters. Due to bug #1066377 more than 30 testing removal warnings hit my mailbox today (I stopped counting after 30). While the Debian Med package clustalo is the only package that's responsible for this due to its

Re: Question to all candidates: What are your technical goals

2024-04-04 Thread Luca Boccassi
On Thu, 4 Apr 2024 at 11:39, Andreas Tille wrote: > > Hi Marc, > > Am Wed, Apr 03, 2024 at 05:53:46PM +0200 schrieb Marc Haber: > > On Wed, Apr 03, 2024 at 10:37:37AM +0200, Andreas Tille wrote: > > "we now use Wayland > > instead of X11", "please don't create your system users with adduser and >

Re: Question to all candidates: What are your technical goals

2024-04-04 Thread Andreas Tille
Hi Marc, Am Wed, Apr 03, 2024 at 05:53:46PM +0200 schrieb Marc Haber: > On Wed, Apr 03, 2024 at 10:37:37AM +0200, Andreas Tille wrote: > > I see a big problem that we do not follow common standards. While we > > have some teams with strict policies setting those standards internally > > to a

Re: Question to all candidates: What are your technical goals

2024-04-03 Thread Marc Haber
[snipped everything that I don't have an answer for. Neither removal nor quoting is endorsement or reject of what Andreas said.] On Wed, Apr 03, 2024 at 10:37:37AM +0200, Andreas Tille wrote: > Am Tue, Apr 02, 2024 at 10:12:56PM +0200 schrieb Marc Haber: > > There are many people who see Debian

Re: Question to all candidates: Bits from the DPL?

2024-04-03 Thread Sam Hartman
> "Andreas" == Andreas Tille writes: Andreas> I was told in private that a daily log in Git might be a bit tough but Andreas> I hope to manage. I consider it a good preparation for the monthly Bits. I think I recall inheriting some infrastructure from Chris for maintaining some

Re: Question to all candidates: What are your technical goals

2024-04-03 Thread Andreas Tille
Hi Marc, Am Tue, Apr 02, 2024 at 10:12:56PM +0200 schrieb Marc Haber: > There are many people who see Debian as a technology project, with the > technical goal of producing The Universal Operating System. > > What are you planning to do to Debian from a technical and technological > point of

Re: Question to all candidates: Bits from the DPL?

2024-04-03 Thread Andreas Tille
Hi Lous-Philippe, Am Tue, Apr 02, 2024 at 04:05:21PM -0400 schrieb Louis-Philippe Véronneau: > Jonathan's latest "Bits from the DPL" entry reminded me of how much I like > those :) > > What are your thoughts on the format? > > If you are elected, do you plan to publish regular "Bits"? If not,

Question to all candidates: What are your technical goals

2024-04-02 Thread Marc Haber
Dear Candidates, There are many people who see Debian as a technology project, with the technical goal of producing The Universal Operating System. What are you planning to do to Debian from a technical and technological point of view? What do we well, where do we suck on the technical site? If

Question to all candidates: Bits from the DPL?

2024-04-02 Thread Louis-Philippe Véronneau
Hello! Jonathan's latest "Bits from the DPL" entry reminded me of how much I like those :) What are your thoughts on the format? If you are elected, do you plan to publish regular "Bits"? If not, how do you plan to communicate with the rest of the project with regards to the work you are

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-03-29 Thread Sruthi Chandran
On 27/03/24 04:54, Thomas Goirand wrote: Hi, As you know, there's a large amount of money sleeping in SPI account for Debian. Do you have ideas on how to spend it? From Jonathan's mail, I think we do not have too much money unused now. Would you be ok spending 100k USD on buying hardware

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-03-29 Thread Thomas Goirand
On 3/27/24 08:51, Andreas Tille wrote: Would you be ok spending 100k USD on buying hardware for a new Debian cloud, for example? I've always volunteered to operate it for Debian, but it never went through, because I haven't spent time to find where to host it and so on, but highvoltage liked the

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-03-29 Thread Thomas Goirand
On 3/27/24 11:25, Pierre-Elliott Bécue wrote: Hi, Thomas Goirand wrote on 27/03/2024 at 00:24:30+0100: Hi, As you know, there's a large amount of money sleeping in SPI account for Debian. Do you have ideas on how to spend it? Would you be ok spending 100k USD on buying hardware for a new

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-03-27 Thread Jonathan Carter
Hi! On 2024/03/27 12:25, Pierre-Elliott Bécue wrote: Would you be ok spending 100k USD on buying hardware for a new Debian cloud, for example? I've always volunteered to operate it for Debian, but it never went through, because I haven't spent time to find where to host it and so on, but

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-03-27 Thread Pierre-Elliott Bécue
Hi, Thomas Goirand wrote on 27/03/2024 at 00:24:30+0100: > Hi, > > As you know, there's a large amount of money sleeping in SPI account > for Debian. Do you have ideas on how to spend it? > > Would you be ok spending 100k USD on buying hardware for a new Debian > cloud, for example? I've always

Re: Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-03-27 Thread Andreas Tille
Hi Thomas, Am Wed, Mar 27, 2024 at 12:24:30AM +0100 schrieb Thomas Goirand: > As you know, there's a large amount of money sleeping in SPI account for > Debian. Do you have ideas on how to spend it? While I admit that I'm not well informed about the status of the acount currently I'm perfectly

Question to all candidates: what to do with the Debian money, shall we invest in hardware and cloud?

2024-03-26 Thread Thomas Goirand
Hi, As you know, there's a large amount of money sleeping in SPI account for Debian. Do you have ideas on how to spend it? Would you be ok spending 100k USD on buying hardware for a new Debian cloud, for example? I've always volunteered to operate it for Debian, but it never went through,

Re: Question to all candidates: Ongoing/future legal projects

2022-04-03 Thread Tiago Bortoletto Vaz
Hi Felix, It seems there's much more behind the scenes than I happen to know... So, with the little context I have, I keep believing that your reimbursement request is appropriate. And, for *just* not following the proper procedure, such a request shouldn't be ultimately refused, IMO. Bests, --

Re: Question to all candidates: GDPR compliance review

2022-04-02 Thread Adrian Bunk
he contact details of the controller is mandatory for processing of personal data (Articles 13(1)(a) and 14(1)(a)), failure to do so is subject to administrative fines of up to 20 Million Euro (Article 83(5)(b)). > This is just one of the things that, I think, would be a lot simpler if >

Re: Question to all candidates: GDPR compliance review

2022-04-02 Thread Ansgar
Hi Adrian, On Fri, 2022-04-01 at 23:48 +0300, Adrian Bunk wrote: > Will this handwritten note be available through > contributors.debian.org? > > If the personal information in the handwritten note did not come > directly from the person, who at Debian is responsible to ensure that > the person

Re: Question to all candidates: GDPR compliance review

2022-04-02 Thread Christian Kastner
ouldn't even determine which data protection authority has jurisdiction. This is just one of the things that, I think, would be a lot simpler if Debian would register as an organization, hence my question [1] to the candidates. [1] https://lists.debian.org/debian-vote/2022/03/msg00135.html

Re: Question to all candidates: GDPR compliance review

2022-04-02 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 09:25:46PM +0200, Jonathan Carter wrote: > On 2022/04/01 20:28, Adrian Bunk wrote: > > Would you commit to something more specific, like that our Data > > Protection team will reply to debian-project within 3 months discussing > > all issues mentioned in the discussion at

Re: Question to all candidates: GDPR compliance review

2022-04-02 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 04:57:38PM -0600, Sam Hartman wrote: > > "Adrian" == Adrian Bunk writes: > Adrian> Your "services" approach does not work for the non-trivial > Adrian> cases where Debian might be a (joint) controller of personal > Adrian> data. > > Adrian> The Debian

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Hideki Yamane
On Fri, 1 Apr 2022 22:16:55 +0300 Adrian Bunk wrote: > One option would be to outsource this work to our paid GDPR lawyer. Is there any option to cooperate with other FLOSS organizations? They would have the same issue and we may be able to share it and costs ;) -- Hideki Yamane

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Sam Hartman
> "Adrian" == Adrian Bunk writes: Adrian> Your "services" approach does not work for the non-trivial Adrian> cases where Debian might be a (joint) controller of personal Adrian> data. Adrian> The Debian Community Team promises confidentiality regarding Adrian> personal

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 09:18:53PM +0200, Tollef Fog Heen wrote: > ]] Adrian Bunk > > > Who will fulfill the request within the legal limit of one month if > > a person sends an email to data-protect...@debian.org asking whether > > Debian is a (joint) controller of any data about this person,

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Jonathan Carter
On 2022/04/01 20:28, Adrian Bunk wrote: Would you commit to something more specific, like that our Data Protection team will reply to debian-project within 3 months discussing all issues mentioned in the discussion at [1] so far, and with their reply having been proof-read by our GDPR lawyer?

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 08:46:42PM +0200, Tollef Fog Heen wrote: > ]] Adrian Bunk > > > Would you commit to something more specific, like that our Data > > Protection team will reply to debian-project within 3 months discussing > > all issues mentioned in the discussion at [1] so far, and with

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 07:40:02PM +0200, Tollef Fog Heen wrote: >... > This isn't the role of the data protection team, though, any more than > owner@bugs is responsible for fixing all the bugs in all the packages. > I'm quite happy to act as a redirector (as per the first part of the >

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Tollef Fog Heen
]] Adrian Bunk > Who will fulfill the request within the legal limit of one month if > a person sends an email to data-protect...@debian.org asking whether > Debian is a (joint) controller of any data about this person, and > if yes requests a copy of all data? To make this easier for services

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Jonathan McDowell
On Fri, Apr 01, 2022 at 09:28:53PM +0300, Adrian Bunk wrote: > Would you commit to something more specific, like that our Data > Protection team will reply to debian-project within 3 months discussing > all issues mentioned in the discussion at [1] so far, and with their > reply having been

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Adrian Bunk
On Fri, Apr 01, 2022 at 07:02:15PM +0200, Jonathan Carter wrote: > Hi Adrian Hi Jonathan, >... > I'm not sure bringing in the lawyer as a first step is optimal, they are > expensive and will probably tell us a lot of things we already know. IMHO > it's better to do some initial groundwork,

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Tollef Fog Heen
]] Adrian Bunk > Would you commit to something more specific, like that our Data > Protection team will reply to debian-project within 3 months discussing > all issues mentioned in the discussion at [1] so far, and with their > reply having been proof-read by our GDPR lawyer? I don't think

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Tollef Fog Heen
]] Jonathan Carter > So, I would appreciate it if the data protection team could look into > all of the issues we know of in Debian, but I'd also like there to be > a process where people can file issues with the data protection > team. I'll admit I had to search a bit to find the

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Jonathan Carter
exceed the expectations of these legislations around the world. There seems to be a general agreement that privacy in Debian falls short of the legal minimum requirements at least in the EU. Even the exact scope of the problem is not clear. Question to all candidates: If elected, will you ask

Re: Question to all candidates: GDPR compliance review

2022-04-01 Thread Hideki Yamane
Hi, On Thu, 31 Mar 2022 23:08:41 +0300 Adrian Bunk wrote: > If elected, will you ask our Data Protection team and our GDPR lawyer to > jointly do a review of all handling of personal data in Debian regarding > GDPR compliance, Yes. > and make the results of the review available to all >

Re: Question to all candidates: rotation on positions of power

2022-04-01 Thread Hideki Yamane
Hi Charles, On Wed, 23 Mar 2022 21:51:44 +0900 Charles Plessy wrote: > I expect a term limit to increase rotation on the positions of power, > with the following benefits: > > - reduce the risk of burn-out of the delegates, > > - motivate fresh people to have the ambition to serve in these >

Re: Question to all candidates: GDPR compliance review

2022-03-31 Thread Felix Lechner
uirements at least in the EU. > > Even the exact scope of the problem is not clear. > > Question to all candidates: > > If elected, will you ask our Data Protection team and our GDPR lawyer to > jointly do a review of all handling of personal data in Debian regarding

Question to all candidates: GDPR compliance review

2022-03-31 Thread Adrian Bunk
The discussion starting in [1] is about privacy in Debian with a focus on the GDPR of the European Union. There seems to be a general agreement that privacy in Debian falls short of the legal minimum requirements at least in the EU. Even the exact scope of the problem is not clear. Question

Re: Question to all candidates: Ongoing/future legal projects

2022-03-30 Thread Jonathan Carter
On 2022/03/30 07:33, Paul Wise wrote: On Tue, 2022-03-29 at 20:47 -0700, Felix Lechner wrote: It furthermore seems that I did not follow the proper process when filing my request, as Paul Wise pointed out. My reference to the Hardware/Wanted wiki page was referring to the procedure for after

Re: Question to all candidates: Ongoing/future legal projects

2022-03-29 Thread Paul Wise
On Tue, 2022-03-29 at 20:47 -0700, Felix Lechner wrote: > It furthermore seems that I did not follow the proper process when > filing my request, as Paul Wise pointed out. My reference to the Hardware/Wanted wiki page was referring to the procedure for after you have bought hardware, no longer

Re: Question to all candidates: Ongoing/future legal projects

2022-03-29 Thread Felix Lechner
Hi Tiago, On Sun, Mar 27, 2022 at 11:09 AM Tiago Bortoletto Vaz wrote: > > Given that Jonathan, after lots of research as he describes in this > thread, has stated that such request never reached him, can you clarify > how can you have even complied to a request for more information from him? >

Re: Question to all candidates: how is Debian doing?

2022-03-29 Thread Felix Lechner
Hi Ted, On Tue, Mar 29, 2022 at 1:39 PM Theodore Ts'o wrote: > > I'll note that you spent a lot of time about how the council would > appoint a chair and vice-chair, create bylaws, meet monthly, etc. > > However you didn't really answer the question regarding what the > authorities that the

Re: Question to all candidates: how is Debian doing?

2022-03-29 Thread Theodore Ts'o
On Thu, Mar 17, 2022 at 01:57:59PM -0700, Felix Lechner wrote: > Hi Lucas, > > On Thu, Mar 17, 2022 at 12:52 PM Lucas Nussbaum wrote: > > > > Interesting. What would be the composition, roles, duties of that > > Strategy Council ? > > Like all committees and boards I envision, the Strategy

Re: Question to all candidates: Ongoing/future legal projects

2022-03-27 Thread Paul Wise
On Sun, 2022-03-27 at 18:34 +0200, Jonathan Carter wrote: > One thing people have been really concerned about when asking for Debian > to buy hardware is, is what happens to the hardware after they're done > with it? So far I've just told them that they can try to pass it on to > another DD

Re: Question to all candidates: Ongoing/future legal projects

2022-03-27 Thread Stefano Rivera
Hi Richard (2022.03.27_20:17:48_+) > > The only cases of waste I know of happens when people ask for > > sponsorship for DebConf and then hotel space is made for them (and > > possibly other expenses) and then they just don't show up without any > > heads-up. Even those are rare, but it's the

Re: Question to all candidates: Ongoing/future legal projects

2022-03-27 Thread Richard Laager
On 3/27/22 11:14, Jonathan Carter wrote: The only cases of waste I know of happens when people ask for sponsorship for DebConf and then hotel space is made for them (and possibly other expenses) and then they just don't show up without any heads-up. Even those are rare, but it's the only

Re: Question to all candidates: Ongoing/future legal projects

2022-03-27 Thread Tiago Bortoletto Vaz
Hi Felix, On 2022-03-24 8:18 p.m., Felix Lechner wrote: [...] > > For example, I requested $217 for a one-time SSD & RAM upgrade to help > operate lintian.d.o in November of 2021. My request was not granted. I > didn't even receive a response from Jonathan (other than a request for > more

Re: Question to all candidates: Ongoing/future legal projects

2022-03-27 Thread Jonathan Carter
Hi Richard On 2022/03/24 22:17, Richard Laager wrote: The disbursements that I've heard about seem to be relatively "small potatoes" things. Is there some huge wasteful spending occurring that I've missed? Most of it is small potatoes (typically less than $1000, typically for hardware or

Re: Question to all candidates: Ongoing/future legal projects

2022-03-27 Thread Jonathan Carter
Hi Paul On 2022/03/26 01:27, Paul Wise wrote: We have these documents related to that: https://wiki.debian.org/Teams/DPL#Money https://wiki.debian.org/Teams/DPL/AskingForMoney https://wiki.debian.org/Teams/DPL/SponsoringGuidelines These were written by Stefano Zacchiroli in 2010 when he was

Re: Question to all candidates: Ongoing/future legal projects

2022-03-25 Thread Paul Wise
On Fri, 2022-03-25 at 11:41 +0200, Jonathan Carter wrote: > I still want to work towards having an expenditure policy, ... > The idea would be that there's some clear document that makes it > really easy for someone to know whether they can apply for something > or not, and I think if it hits a

Re: Question to all candidates: how is Debian doing?

2022-03-25 Thread Jonathan Carter
Hi Lucas On 2022/03/17 17:54, Lucas Nussbaum wrote: As someone who used to care a lot about Debian, but who hasn't been able to pay much attention to the project lately, I was wondering: I don't think anyone would hold it against you that you've got busy with other stuff, having a life

Re: Question to all candidates: Ongoing/future legal projects

2022-03-25 Thread Jonathan Carter
On 2022/03/25 11:41, Jonathan Carter wrote: For example, I requested $217 for a one-time SSD & RAM upgrade to help operate lintian.d.o in November of 2021. My request was not granted. I didn't even receive a response from Jonathan (other than a request for more information, with which I

Re: Question to all candidates: Ongoing/future legal projects

2022-03-25 Thread Jonathan Carter
Hi Felix On 2022/03/25 02:18, Felix Lechner wrote: For example, I requested $217 for a one-time SSD & RAM upgrade to help operate lintian.d.o in November of 2021. My request was not granted. I didn't even receive a response from Jonathan (other than a request for more information, with which I

Question to all candidates: Code of Conduct and Community Team - how do you feel about them?

2022-03-24 Thread felix . lechner
Hi Andy, On Sat, Mar 19, 2022 at 12:36 PM Andrew M.A. Cater wrote: > > We've had the Code of Conduct for about eight years now and the Community Team > for about as long. There are still significant differences about how some > people feel about them, despite the Code of Conduct having been

Re: Question to all candidates: Ongoing/future legal projects

2022-03-24 Thread Richard Laager
On 3/24/22 19:18, Felix Lechner wrote: For example, I requested $217 for a one-time SSD & RAM upgrade to help operate lintian.d.o in November of 2021. My request was not granted. I didn't even receive a response from Jonathan (other than a request for more information, with which I complied)

Re: Question to all candidates: Ongoing/future legal projects

2022-03-24 Thread Felix Lechner
Hi Richard, On Thu, Mar 24, 2022 at 1:17 PM Richard Laager wrote: > > The disbursements that I've heard about seem to be relatively "small > potatoes" things. Is there some huge wasteful spending occurring that > I've missed? I don't know. As an outside candidate, I received no confidential

Re: Question to all candidates: registering Debian as an organization

2022-03-24 Thread Richard Laager
On 3/24/22 15:45, Sam Hartman wrote: "Richard" == Richard Laager writes: Richard> On 3/20/22 07:10, Felix Lechner wrote: >> If we accidentally formed a General Partnership, as has been >> suggested elsewhere Richard> Yes, that would be really dumb for a number of reasons.

Re: Question to all candidates: registering Debian as an organization

2022-03-24 Thread Sam Hartman
> "Richard" == Richard Laager writes: Richard> On 3/20/22 07:10, Felix Lechner wrote: >> If we accidentally formed a General Partnership, as has been >> suggested elsewhere Richard> Yes, that would be really dumb for a number of reasons. The problem is that at least in the

Re: Question to all candidates: registering Debian as an organization

2022-03-24 Thread Richard Laager
On 3/20/22 07:10, Felix Lechner wrote: If we accidentally formed a General Partnership, as has been suggested elsewhere Yes, that would be really dumb for a number of reasons. I have friends who are or were high-ranking officials at the UN. With the project's permission, I might explore

Re: Question to all candidates: Ongoing/future legal projects

2022-03-24 Thread Richard Laager
On 3/20/22 11:58, Felix Lechner wrote: I would not be comfortable granting financial requests, other than on an emergency basis, without some type of community review. The disbursements that I've heard about seem to be relatively "small potatoes" things. Is there some huge wasteful spending

Re: Question to all candidates: Code of Conduct and Community Team - how do you feel about them?

2022-03-24 Thread Alastair McKinstry
On 20 March 2022 09:56:53 UTC, Hideki Yamane wrote: >Hi, > >On Sat, 19 Mar 2022 19:34:03 + >"Andrew M.A. Cater" wrote: >> We've had the Code of Conduct for about eight years now and the Community >> Team >> for about as long. There are still significant differences about how some >>

Re: Question to all candidates: rotation on positions of power

2022-03-23 Thread Charles Plessy
Le Thu, Mar 17, 2022 at 04:27:49PM +0900, Hideki Yamane a écrit : > > I'm sorry, but could you explain "what do you want to improve with > a term limit"? Good evening Hideki, I expect a term limit to increase rotation on the positions of power, with the following benefits: - reduce the risk

  1   2   3   4   5   6   7   8   9   10   >