1 |
I feel like I should ask a pertinent question (the same sort that just |
2 |
earned me a seat among the foundation's members). |
3 |
|
4 |
Whose privacy, exactly, is at stake if comrel were to breach |
5 |
confidentiality on this issue? I'd rather ask for a full list. |
6 |
|
7 |
And as someone else mentioned regarding "noise", is there another mailing |
8 |
list better suited for these sorts of discussions? |
9 |
|
10 |
On Thu, Dec 1, 2016 at 9:59 PM, William L. Thomson Jr. <wlt-ml@××××××.com> |
11 |
wrote: |
12 |
|
13 |
> I have read this a few times now. I cannot see it being taken any other way |
14 |
> than written. Nothing states the problems shall remain hidden indefinitely. |
15 |
> |
16 |
> Specifically mentioning BOTH security and developer relations. Meaning |
17 |
> neither |
18 |
> receives special treatment over the other. Neither should be private, |
19 |
> unless |
20 |
> requested to not publicize before a deadline. Implying by default it is |
21 |
> public |
22 |
> including developer relations information. Developer bugs remain visible, |
23 |
> as |
24 |
> are bugs filed to comrel. |
25 |
> |
26 |
> The fact that it mentions developer relations information implies that |
27 |
> those |
28 |
> problems should be open and not hidden. That developer relations is also |
29 |
> handled via Bugzilla at least in part. That further links developer |
30 |
> relations |
31 |
> problems to the social contract and not hiding problems there. |
32 |
> |
33 |
> If requests to publicize problems are denied. That seems like a clear |
34 |
> breach |
35 |
> of the Social Contract. I would expect the Foundation to fulfill its |
36 |
> obligation |
37 |
> to protect the community and enforce total adherence to the Gentoo Social |
38 |
> Contract. |
39 |
> |
40 |
> "We will not hide problems |
41 |
> We will keep our bug report database open for public view at all times; |
42 |
> reports that users file online will immediately become visible to others. |
43 |
> |
44 |
> Exceptions are made when we receive security-related or developer relations |
45 |
> information with the request not to publicize before a certain deadline." |
46 |
> |
47 |
> https://www.gentoo.org/get-started/philosophy/social-contract.html |
48 |
> |
49 |
> -- |
50 |
> William L. Thomson Jr. |
51 |
> |