From debbugs-submit-bounces@debbugs.gnu.org Wed Feb 20 15:16:19 2019 Received: (at 34565) by debbugs.gnu.org; 20 Feb 2019 20:16:19 +0000 Received: from localhost ([127.0.0.1]:58578 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gwYHz-0003Cf-B3 for submit@debbugs.gnu.org; Wed, 20 Feb 2019 15:16:19 -0500 Received: from relay8-d.mail.gandi.net ([217.70.183.201]:56345) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1gwYHu-0003CT-QX for 34565@debbugs.gnu.org; Wed, 20 Feb 2019 15:16:15 -0500 X-Originating-IP: 187.181.183.29 Received: from [192.168.1.100] (unknown [187.181.183.29]) (Authenticated sender: adfeno@hyperbola.info) by relay8-d.mail.gandi.net (Postfix) with ESMTPSA id 0BD171BF207; Wed, 20 Feb 2019 20:16:11 +0000 (UTC) Subject: Re: bug#34565: ungoogled-chromium contains Widevine DRM To: 34565@debbugs.gnu.org References: <1550547897.31222.1.camel@jxself.org> <20190219070601.GA8273@jasmine.lan> <1550582906.5431.7.camel@jxself.org> <20190219144342.GA2688@jasmine.lan> <1550623152.12316.5.camel@jxself.org> <1550625137.14138.3.camel@jxself.org> <1550625587.14780.2.camel@jxself.org> <1550667811.25277.1.camel@jxself.org> From: Adonay Felipe Nogueira Openpgp: preference=signencrypt Autocrypt: addr=adfeno@hyperbola.info; prefer-encrypt=mutual; keydata= xsPuBFSdo9IRDACmvQCvDZOHZ33gwVtn//XtEmnlcl1yR6j06qvh2E22aK3bmom1y6HfgAVq l+3R16sL27Y0cEeM12Xl2h1HrFiT3Hd/LGWNVC/osPAKrrs6bMRh3uUdOVWeVuM/7c6n5hvx PAkZ6s70w1+y1ilG19aEpezFybAb9oE7+qBLjKAZPgceHeOxUthdfqDDqc/oenCGVEQNvPzK jQVzE+NnB3KdbGNQKFjTuWutxHjMY61H06a824vMd4SU5ReHlDnhCfasJUYcT6ykijf5xeCU icLvLowZl3rCjzjxFxKGnfh/vT6LqMNlfLfTKMR8zmXKHXC+KJjQG3Ohl++7BTGxIrxZtAr6 MKeNczQng0xJtGI/gSus+8Rt9GycMJ/TZh+CrMsRiWmleONsl2fYO5pd4P+hDcttVOmdI/dj H3yycUt5nzgezid+O2NzsjJNNAgDy9uxOLa01aBpaSR94IsYPCxaHh9rBo27v5L8lm2DZTmy CdTdJ/g7OETOSKGmrGywwmsBAO9f4sVideYrDJbEUcXkFSH19ctJYCgLHscWzpypGsQNC/9X iq7fMCS5kAkK/ZcsPeaI4VIDkFJAF22oJyCvJwLWpaQKXBLAFYcAltEHfjdgrrYlexlgQ7SX yX136hD8HJTe1oc2qHN/CXa+LDvxhhNLIgagKP13IIt8AS7U+3YsrCSgu1fjDpxoEP2+xXTS jjcDmnJIWv1oDjIp57OfpKokvHtEsMgXrZI4Ft3ftpzN6o/YWVQeJ7VBdVeKPkzukMfHu04q 1O6TcfSVGLSjrSdTD8/0LcRmwEwgxRBbhp3kxmnUqV+/C/Cj1G2LurKBdqC/rGTSgR1TeQji rTDvV4aReZ8swQS8dGoO4CoxG3ZVz0nsLs7Nl/wRoIMXVo/yMd03LIySSJuATWD6+0LOL5PT gsIRYpBw3jcLTAwPsQd8M8CH9b07qGJ4roVkhEj3R09WeDmSSCLcyQERTzA3EskuaDF8qrRj q68/6kZwhsmssBzAH1PWnFpBAqEaoyQZUisoCffbQwM31oYt04Ng7JXqKHVE+ZchcujtijK5 bPz9ARgL/11E5yq9Z9x+OIxVx1lhMadwH/ze2CrTUIMTo9ZAp8tBqDvXOr43FHPTYio0wycl /anW2D6+4Q49/gK8GQS4xWo/jZnCjOaVIPRbH+y/HE4eXBwKA9UKHpYdZuL2z1zFLYvZd/LT rX66q/+8YMETsu86e4J76lE0WhljWdseM4RFmKlPepSttgCS6iRcWZeuhpknqpOILBwNUtFA Dnqbe9y5ZQ8xETy4/nDMIeWmiHIhQ5bzm+dzOVwtqOpDpTvMzZbU3buBCsZFVrzxuXa66sJu W3fhc//cJ6GTlKz404tAuJrVr9q+uB4OOlkjoUYOIYnwwmKhZaqaUQDTpvK67QhWCZiDHJ/J bvuMCv/XCVh/1IdTbe518jVzfcYjlyxcSHFq8TxiGhJYaBFF4vPC9+vf7l2fQVhDzzpBqMVH 5k9nGJXJ9M0mDO9e8O4CkV55YXzVQFVipiaGyd9DBKcWHAyprxj20MBkP0npXfGErkADCUEp 1MpKt0p3U3BJkoi2Ms0uQWRvbmF5IEZlbGlwZSBOb2d1ZWlyYSA8YWRmZW5vQGh5cGVyYm9s YS5pbmZvPsJ6BBMRCAAiBQJZkFYUAhsDBgsJCAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRDI 1uFSAe6docKxAQCAKQxT1MlVJyXdFC7sGFH00jlHeybp6qgOVfJvpqLPGgD+ITwpdjy3RD2c kuENzAKzvom8pnDrNW+oIIIYUaE5gMTOw00EVJ2j0hAQAPcu3bLnt0CqcF49mN0m7z13Fiqv wLRxJe2sEeduZl146rqyNdv4XmaCSdsbgThfw7sW60/J4Gyianv2uzm9E4DpnSh/Ie4LGqXC UALnIYhxeILOo8CvFW1hkF/AgZp0CNoXrP786Nh0rksHfwps0B7b6Vy/E0blioaijvUS2z3/ DKY6CXb7D8wRi64qTMarLaifRzIR/pbX29uBB2McOeoswSFob/McMA7AHp3p+lttR5J8eLc3 Ckj7OuJCY74XIAGq2B64RPmn617BD9ym83M3fcbEXgDBQtvLjznfKNzeMXOLXN/7/qKm1Sza 5NpeAGDg0YvXg6qIi0iyJw4RVzdCiqacO+G3Am/Ge2XDKsuBgsEf1YjlENINGS/ZmqfZd0sH jCJHb/YOlEzVw8HVMzeES8aUOBDh+d2aWhYx30jXuFbMqvuOh4t7JZjBy8TQVuvVhIps0Qyu /YnNxKzZ2F9keaN854KRtcGxaD/wOGpgoAOlyhH+pXVTTl3GCMCHonJ6Sn+jNGa6+oX7HF8h wSevwzQ11WThTPmUTlPU96jN5kqE6qLKBo2msu2MxVQRo1kLlHCRfjvbNGf2iZXRKI+RARgv a+7NZPtYDs1Sg/zw7HgUowImT6JGcN0ZgAMqw/V2nALvW+Caq03GCNiWR2elB/jmhHR+3Brj 18fsc25HAAMFEADViuPfdUqFHzmKgVdRH5A8NIZNTT/MMrYCqv5PAkEhnsXLXeHHV7a0cbfx 3yf86Pv8XMtBItShUVQ9UPVvmFW3ew5cqCCUF5MzrbOXrrso+78yflYjbh55Sf1HelG11eBT xs2auCgMWVsxRjgk9sbzh0j+R9MCMXHw0H/x63BS+due6Z0PYlsgXxbtWxB0P7kiYekXn6xo MeJco9CbWufnWdK4J5WylILQPNwI8uwrj56TUmh3PFnC2UmUa+KQ9m5gWHOIybWYZf4TTXBi N6gvhUqN9IpGFaNG26sWWiOpEWAiVTwPE/lSB+yibouSfE3XLw1Q+FH7TqwmtVS6Kj+yC4Z7 GlDcmqlQxJhBdXTEpTk0rA1Bs4okjqVoQRpLPYUFkhVA15jJGrewUJuUhL128gL2Ek0A14FW +zmi0Wi3tIrUQXovGy7eorIgq7M3/ri0ibbrS5jE4yfIZG/8nb1S/RX5JEwEaoe7izi+1GIi GkCRkzGT3VqG78ppH2166Bq9qDwGf3T/CmLMDNpxsc1qt857nz7RFBMM+dNs5h/Bh0t++i01 JJd/ykqdfUL8nHRwDO1Fkz/R5wugeJ/dB0TcqpnArjtTc+KVN/lRYfltEc5j0DqvFRwk3Ztd 5KocWrWD/MBAvZVYKzJ9Bov9FGRUIGDDTJyo5VVCSe1IeSYa9sJhBBgRCgAJBQJUnaPSAhsM AAoJEMjW4VIB7p2h7ewBAMBCaE8lh2MyK8PBZ2rOSEYIQNjxADPt9Mri7CLnZxtPAQCwCO+a x4WXJV0T1ZOOFa/esCB72RkEVZ7ArkTKQDnVng== Message-ID: Date: Wed, 20 Feb 2019 17:15:15 -0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Icedove/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK" X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 34565 Cc: Jason Self X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK Content-Type: multipart/mixed; boundary="WhmOiffMcXX1dadplzfTZATpPXP5566sS"; protected-headers="v1" From: Adonay Felipe Nogueira To: 34565@debbugs.gnu.org Cc: Jason Self Message-ID: Subject: Re: bug#34565: ungoogled-chromium contains Widevine DRM References: <1550547897.31222.1.camel@jxself.org> <20190219070601.GA8273@jasmine.lan> <1550582906.5431.7.camel@jxself.org> <20190219144342.GA2688@jasmine.lan> <1550623152.12316.5.camel@jxself.org> <1550625137.14138.3.camel@jxself.org> <1550625587.14780.2.camel@jxself.org> <1550667811.25277.1.camel@jxself.org> In-Reply-To: --WhmOiffMcXX1dadplzfTZATpPXP5566sS Content-Type: text/plain; charset=utf-8 Content-Language: pt-BR Content-Transfer-Encoding: quoted-printable Em 20/02/2019 13:18, Julien Lepiller escreveu: > I think the situation is different though. You can see the build script= > inside the "origin" record as the liberation procedure that anyone can > see and verify. It's also a procedure targeted at our build farms, so > that they can produce the liberated source code. Users never manipulate= > non-free source code, unless something is wrong on the build farm side.= I'm not taking any sides here, but to give some more information, if for example you do `guix edit ungoogled-chromium' you will be presented to the package definition of Ungoogled-Chromium, taking that as an example you can see that it has a "source (origin ...) ...)" definition, inside the inner part (the "origin") you have: * the upstream download location and method, see (method ...), (uri ...) and (sha256 ...); * patches that should be applied immediatelly after downloading and extracting the source files, per (patches ...); * snippets and modules to be used with these, also to be applied immediatelly after downloading and extracting the source files, as seen in (snippet ...) and (modules ...). When `guix build -S ungoogled-chromium' is done, first it checks the build farms for the "prepared" source that matches the given package definition, version, hash and so on; and lastly it tries to "prepare" the source according to (patches ...) and (snippet ...) declarations before even telling the user that the download is ready/done. Having the (origin ...) visible in this way brings the advantages that the people of Guix told about here, but as far as I can tell, the user also sees the original location of the non-free source from upstream if they do `guix edit ungoogled-chromium'. --=20 - P=C3=A1gina com formas de contato: https://libreplanet.org/wiki/User:Adfeno#vCard - Ativista do software livre (n=C3=A3o confundir com o gratuito). Avaliad= or da liberdade de software e de sites. - P=C3=A1gina com lista de contribui=C3=A7=C3=B5es: https://libreplanet.org/wiki/User:Adfeno#Contribs - Para uso em escrit=C3=B3rios e trabalhos, favor enviar arquivos do padr= =C3=A3o internacional OpenDocument/ODF 1.2 (ISO/IEC 26300-1:2015 e correlatos). S=C3=A3o os .odt/.ods/.odp/odg. O LibreOffice =C3=A9 a su=C3= =ADte de escrit=C3=B3rio recomendada para editar tais arquivos. - Para outros formatos de arquivos, veja: https://libreplanet.org/wiki/User:Adfeno#Arquivos - Gosta do meu trabalho? Contrate-me ou doe algo para mim! https://libreplanet.org/wiki/User:Adfeno#Suporte - Use comunica=C3=A7=C3=B5es sociais federadas padronizadas, onde o "soci= al" permanece independente do fornecedor. #DeleteWhatsApp. Use #XMPP (https://libreplanet.org/wiki/XMPP.pt), #DeleteFacebook #DeleteInstagram #DeleteTwitter #DeleteYouTube. Use #ActivityPub via #Mastodon (https://joinmastodon.org/). - #DeleteNetflix #CancelNetflix. Evite #DRM: https://www.defectivebydesign.org/ --WhmOiffMcXX1dadplzfTZATpPXP5566sS-- --fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlxttV4ACgkQyNbhUgHunaHNVwEA41S4hXRwXV64gR+YMLqtJdwt L3X1++Sj49YqiYJBGIwBAJH3LRRFBKPIszF460JesVZxb8zomm/yGCUjZ3GXCSTB =TSBl -----END PGP SIGNATURE----- --fo4N6xMxY23BiGZjd2VfApmWyfvYLYmBK--