Bug#610257: dropbox: multiple license violations

2011-01-17 Thread Jakub Wilk

clone 610257 -1
reassign -1 ftp.debian.org
severity -1 normal
retitle -1 RM: dropbox -- RoQA; unredistributable; non-free; NPOASR
thanks

* Ivan Borzenkov ivan1...@list.ru, 2011-01-17, 09:41:

I do not care what is written in the file copyright.


Fair enough.

--
Jakub Wilk


signature.asc
Description: Digital signature


Bug#610257: dropbox: multiple license violations

2011-01-17 Thread Ivan Borzenkov
 I do not care what is written in the file copyright.
 
 Fair enough.

Granted, if you are more concerned with, then be without a program.

Who does not interfere with religious prejudices, mantras Stallman, horror 
stories about bugs and stuff ubuntu - please use this PPA:

https://launchpad.net/~ivan1986/+archive/dropbox

The package works fine in Debian.

---
Иван Борзенков ivan1...@list.ru


signature.asc
Description: This is a digitally signed message part.


Bug#610257: dropbox: multiple license violations

2011-01-17 Thread Julien Cristau
On Mon, Jan 17, 2011 at 21:44:20 +0300, Ivan Borzenkov wrote:

  I do not care what is written in the file copyright.
  
  Fair enough.
 
 Granted, if you are more concerned with, then be without a program.
 
 Who does not interfere with religious prejudices, mantras Stallman, horror 
 stories about bugs and stuff ubuntu - please use this PPA:
 
 https://launchpad.net/~ivan1986/+archive/dropbox
 
Did you even read https://help.launchpad.net/PPATermsofUse?

Your package appears to violate that for the same kinds of reasons it
was removed from Debian.

Cheers,
Julien


signature.asc
Description: Digital signature


Bug#610257: dropbox: multiple license violations

2011-01-16 Thread Jakub Wilk

Source: dropbox
Version: 1.0.10-1
Severity: serious
Justification: Policy 2.2.3, 4.5

dropbox bundles many 3rd party binary-only libraries in a way that 
violates their licenses:


1) ncrypt-0.6.4-*.egg/, according to its PKG-INFO (which is horribly 
mangled, BTW), contains a GPL-licensed library with accompanying source.  
Additionally, this library is linked to OpenSSL, but those two licenses 
are incompatible.


2) netifaces-0.5*.egg/ contains the netifaces library, which is 
MIT-licensed. One of the clause of the license is The above copyright 
notice and this permission notice shall be included in all copies or 
substantial portions of the Software. Neither is included in dropbox.


3) _dbus*_bindings.so is the python-dbus library. It is MIT-licensed, 
but copyright  permission notices are not included.


4) _librsync.so contains statically-linked librync library which is 
under LGPL-2.1+ license. No source is provided.


5) _speedups.so contains (parts of) the simplejson library. It is 
MIT-licensed, but copyright  permission notices are not included.


6) pyexpat.so contains statically linked Expat library. It is 
MIT-licensed, but copyright  permission notices are not included.


7) libcrypto.so.0.9.8, libssl.so.0.9.8 are parts of the OpenSSL library. 
Its license require that Redistributions in binary form must reproduce 
the above copyright notice, this list of conditions and the following 
disclaimer in the documentation and/or other materials provided with the 
distribution. Neither is reproduced in dropbox.


8) libncurses.so.5 is the ncurses library. It is MIT-licensed, but 
copyright  permission notices are not included.



(Disclaimer: I didn't do full audit of the shipped code. There might be 
other license problems in dropbox.)


--
Jakub Wilk



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#610257: dropbox: multiple license violations

2011-01-16 Thread Ivan Borzenkov
16 января 2011 22:28:16 Jakub Wilk писали:
 Source: dropbox
 Version: 1.0.10-1
 Severity: serious
 Justification: Policy 2.2.3, 4.5
 
 dropbox bundles many 3rd party binary-only libraries in a way that
 violates their licenses:
 
 (Disclaimer: I didn't do full audit of the shipped code. There might be
 other license problems in dropbox.)
 
 ...

If YOU need it, then please send a patch. I do not care what is written in the 
file copyright.
I make a package in my PPA because debian requirements of the heap with 
licenses and give many problems whis this (incidentally that's why I went to 
Ubuntu).

I do not care whether this package in debian and I asked to upload there 
because he is popular, given that users of debian wait until they bring in the 
beak a new version (which is exemplified in psi+) something filth you just do 
them, but they are already familiar - they have a standard response it is not 
necessary.

Package missed ftp master, but if you personally do not like it:
--

Use precompiled Librares (/usr/lib/dropbox):

many *.so files:
sqlite, wxWidgets, python, system

Necessary because of the unstable ABI in the system libraries.

-
you can write at least 10mb of any delusion that will warm the soul fanatics 
like Stallman.

---
Иван Борзенков ivan1...@list.ru


signature.asc
Description: This is a digitally signed message part.