Xarchiver 0.5.0rc1 released

Brian J. Tarricone bjt23 at cornell.edu
Wed Oct 29 23:44:30 CET 2008


Christoph Wickert wrote:
> Am Mittwoch, den 29.10.2008, 11:05 -0700 schrieb Brian J. Tarricone:
>> Christoph Wickert wrote:
>>
>>> I will ether patch out the donators menu and/or we will switch to
>>> Squeeze in the Fedora Xfce spin. I'm pretty sure I will get trouble with
>>> fedora-legal if I added the donators menu. Same for other distros I
>>> think.
>> Now this is just silly.  Personally I wouldn't do what Giuseppe wants to 
>> do, but what's wrong with that?
> 
> The main problem I see is that the websites are hardcoded in the app and
> cannot be changed.
> What if the content on the website is changed to something like
> extremist political statements, warez, child porn, or just something we
> can't subscribe to? What if a website gets compromised and turns into a
> source for Trojans and viruses? Once the package is released nether
> Guiseppe nor the maintainers from the distros can withdraw it.

What if xfce.org gets compromised and turns into a source for trojans 
and viruses?  How about gnome.org?  I know they've had server break-ins 
in the past.  Hell, so has RH/Fedora, not too long ago.  Guess you 
shouldn't ship software that has those URLs in them either.

Yes, I know, it's "different" -- it's a smaller number of URLs, they're 
clearly directly related to the software in question, and you in theory 
"trust" them more because they're established projects rather than just 
some random guy's website.

>>   Sounds like he just wants to give extra 
>> recognition to people who have contributed.  
> 
> To me this sounds totally different: "Your name and website here" does
> not sound like a call for participation but like an offer for
> advertisement. IMO it targets sponsors, not contributors. 
> As you said before: If it's about contribution, it should be named that
> way, if it is about donations, then it should be clearly named "Donate"
> too.

And what's wrong with having sponsors?  GNOME wouldn't be where it is 
today without sponsors.  Xfce would be a lot farther along if we had 
sponsors.

> Personally I would not contribute in a project that annoys people with
> an ad-ware like menu.

Well, that's your own personal choice, I suppose, and is irrelevant to 
whether or not shipping a piece of software is a legal risk (or even not 
a legal risk, but just a risk in general for other reasons).

>> Legal problems?  For including a name and a link to someone's webpage in 
>> a piece of software?  Please leave the armchair legal analyses to actual 
>> lawyers.  This is a legitimate mailing list, not Slashdot ^_~.
> 
> Ok ok: From a legal POV you are right. Somebody pointed me to startdict,
> which is already in Fedora and also displays random weblinks and ads. 
> But we are responsible for the software we ship and if something in this
> software links to an arguable website, people will make us hold
> responsible for that too. As a package maintainer I don't want to bear
> that risk.

Sure, I guess I can understand your desire to censor software that might 
link to sites that some of your users might find objectionable (or on 
the fear that those sites may later contain objectionable material). 
But again, please don't confuse the issue with some made-up notion of 
"legal risk."

I may not agree with what Guiseppe wants to put in his UI, but it's his 
baby, and up to him how he wants to recognise 
contributors/donors/sponsors/whatever.  If that's going to cause you to 
drop it from Fedora, that's a shame, but I suppose that's your choice.

	-brian



More information about the Xfce4-dev mailing list