Re: Ethical problems with MathJax as default - Was: Faulty SVG width

2022-04-05 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]]
[[[ whether defending the US Constitution against all enemies, ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

  > On the other hand, I think it is more preferable and more
  > privacy-conscious to forbid loading from Cloudflare and use a local copy
  > of MathJax embedded in LibreJS instead:

I agree.  Perhaps GNU/Linux distros should start packaging MathJax
for local installation, so that the local copy will be used instead.

-- 
Dr Richard Stallman (https://stallman.org)
Chief GNUisance of the GNU Project (https://gnu.org)
Founder, Free Software Foundation (https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)





Re: Ethical problems with MathJax as default - Was: Faulty SVG width

2022-04-05 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]]
[[[ whether defending the US Constitution against all enemies, ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

In general, being free software does not automatically assure that the
program has no malicious features.

What it does is assure that the users can check the source code for
any malicious features, and fix any that are spotted.

  > I understand the problem, however I do not see why LibreJS could not
  > whitelist MathJax. It is a technical limitation of current LibreJS
  > implementation, not the problem of software freedom.

Perhaps it should do that.

I think we could use more help to maintain LibreJS.
Anyone who would like to help, please write to maintain...@gnu.org.

-- 
Dr Richard Stallman (https://stallman.org)
Chief GNUisance of the GNU Project (https://gnu.org)
Founder, Free Software Foundation (https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)





Re: Ethical problems with MathJax as default - Was: Faulty SVG width

2022-04-04 Thread Ihor Radchenko
Yuchen Guo  writes:

>> The license is declared in the script. You can see it by following the
>> script url. It is right on top.
>
> True. My fault.  The problem is that the declaration is not
> machine-readable by LibreJS.

I understand the problem, however I do not see why LibreJS could not
whitelist MathJax. It is a technical limitation of current LibreJS
implementation, not the problem of software freedom.

> On the other hand, I think it is more preferable and more
> privacy-conscious to forbid loading from Cloudflare and use a local copy
> of MathJax embedded in LibreJS instead:
>
> - One can not trust Cloudflare.
> - Even if it is trusted, Cloudflare would still (at least)
>   log the IP address.

To clarify, software freedom has little to do with privacy. Currently,
ox-html does comply with
https://www.gnu.org/prep/standards/standards.html

Of course, it does not mean that privacy should be ignored. If you have
any ideas or patches that can improve the current situation with
the mathjax coudflare link, feel free to share them.

>> I am not sure what is the problem here. Apache licence does not restrict
>> modifications and you can use your modified MathJax source by
>> customising org-html-mathjax-options.
>
> Oh, I meant the freedom of the website visitor replacing MathJax with a
> modified version on-the-fly, not of the website authors.  That is not
> trivial.

greasemonkey script? I guess that one can just replace all the scripts
linking to .+/MathJax.js with local script references.

Best,
Ihor




Ethical problems with MathJax as default - Was: Faulty SVG width

2022-04-04 Thread Yuchen Guo


Ihor Radchenko  writes:

> The license is declared in the script. You can see it by following the
> script url. It is right on top.

True. My fault.  The problem is that the declaration is not
machine-readable by LibreJS.

On the other hand, I think it is more preferable and more
privacy-conscious to forbid loading from Cloudflare and use a local copy
of MathJax embedded in LibreJS instead:

- One can not trust Cloudflare.
- Even if it is trusted, Cloudflare would still (at least)
  log the IP address.

> I am not sure what is the problem here. Apache licence does not restrict
> modifications and you can use your modified MathJax source by
> customising org-html-mathjax-options.

Oh, I meant the freedom of the website visitor replacing MathJax with a
modified version on-the-fly, not of the website authors.  That is not
trivial.

Thanks for the tip!  I will certainly use a local copy of MathJax when
necessary.

-- 
Yuchen Guo