-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 12/06/2018 01:39 PM, Luke Kenneth Casson Leighton wrote: > On Thu, Dec 6, 2018 at 4:58 PM Paul Boddie <[email protected]> > wrote: > >> Discussion can be had about the FSF criteria, of course, but >> since Luke is actually seeking such endorsement, the only thing >> that might be helpful for him is to indicate to him that various >> FSF concerns are now addressed in the more mainstream >> distributions, such as there not being random firmware binaries >> in kernel packages, and so on. > > the RYF Criteria are extremely specific: it's not enough to have a > non-free section that's "disabled", it must be *not possible* for > an average end-user to *accidentally* end up installing non-free > software by complete accident such as "running a GUI and > arbitrarily clicking random buttons". > > the absolute worst-case is where an inexperienced end-user, > running e.g. synaptics, goes "i have no idea what this does, i'm > just gonna click it" and it happens to enable the "non-free" > section, happens to silently and happily perform an apt-get update, > and wow, suddenly there's binary firmware available... all WITHOUT > warning the user of the consequences. > > the "convenience" scripts that download mstruetypefonts. > > the "convenience" script that gets the latest adobe flash player. > > the broadcom wifi firmware extractor scripts > > my feeling is, here, that if aptitude, apt, synaptics and other apt > front-ends added a simple warning dialog "hello you are adding the > non-free section, this can have severe consequences as the source > is not available for review", that would quite likely eliminate one > of the FSF's major concerns.
Just a note, the only way to add the non-free section in Debian involves typing the word "non-free" into a particular spot on a text file, or if using the GUI interface, to edit the entry for the Debian repo to type "non-free" into the "Components" textbox in the "Edit Source" dialog box. So it's not really possible to accidentally enable the non-free repository. I honestly tend to disagree with the FSF's classification of Debian for this reason. That being said, it's the FSF's rules, so Parabola is the only real option regardless of what one might think of the FSF's classification. And as for 32-bit MIPS... just outta luck, I guess, at least until an FSF-approved distro starts supporting it. - -- Julie Marchant http://onpon4.github.io Encrypt your emails with GnuPG: https://emailselfdefense.fsf.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJcCd0yAAoJEObQhGZrE45FGdEQAJEz6C4zJVQxpw/6Vukf/4mX hudsDdjEeublmAyzDhXbbWa5esalcsU1N78jK3Jcf+7J9wXsn1f41XQY39mAQFCq 9h+uWxm3kKON6c3Of/MQvKUSwB9T68Kno8QGbshlPMfRJvlxACu9vNxs83x2wm1U Z+JJ0UFpOKMg0qLZJkMzw+6ewT8sNqShuiv3dltBfweAILACcqJXbIP95wgCpXWX E0sDa+2LJqVzu/YKtLEPK3agDrJzb/Kwlc4MMo0+7xZSp8FHUqE0Qkg4KCjg/Vv1 B2lkdDvj/uVQKZEWcSQ2JXoUvBpho5CnOeqFJQpoIEuL/TFX1WNlN1XE0iNJMubC keydF+8tDnc7rUhXwtuDLBQRlkrxLOZx8pqd1onY/vcuz6pjYmOtT4GfyQzOhIVd m8ArLzLwgfu2ycyMHoNo97MyOUCzIbX/Ru1BESeG0ey5hY0VBxqMpUgJ7ZK9yVFW gioJe446M6hZD7Owxz3CDQHNEUOFC39sbosPfjixk1muvGF2aICllHShggmBeZUa m0TLJHK6ucPIfon7MfL3KUijJlKZqaV/0meVtMqhfnsR4PSkiqSm3ceBN5EdZ20T HGlHamFLLsR+34cY3a7qcEaG6CFz8zIDON7aPO9SCPq0h9gQHCMWDc+X7acpI2EC IhcEnoihFruV9z8l58eF =tAm/ -----END PGP SIGNATURE----- _______________________________________________ arm-netbook mailing list [email protected] http://lists.phcomp.co.uk/mailman/listinfo/arm-netbook Send large attachments to [email protected]
