📅 Original date posted:2015-06-14
📝 Original message:Discomfort with Sourceforge
For a while now people have been expressing concern about Sourceforge's
continued hosting of the bitcoin-dev mailing list. Downloads were moved
completely to bitcoin.org after the Sept 2014 hacking incident of the SF
project account. The company's behavior and perceived stability have been
growing to be increasingly questionable.
http://www.theregister.co.uk/2013/11/08/gimp_dumps_sourceforge_over_dodgy_ads_and_installer
November 2013: GIMP flees SourceForge over dodgy ads and installer
https://lwn.net/Articles/646118/
May 28th, 2015: SourceForge replacing GIMP Windows downloads
http://seclists.org/nmap-dev/2015/q2/194
June 3rd, 2015: Sourceforge hijacked nmap's old site and downloads.
When this topic came up over the past two years, it seemed that most people
agreed it would be a good idea to move. Someone always suggests Google
Groups as the replacement host. Google is quickly shot down as too
controversial in this community, and it becomes an even more difficult
question as to who else should host it. Realizing this is not so simple,
discussion then dies off until the next time somebody brings it up.
http://sourceforge.net/p/bitcoin/mailman/bitcoin-development/thread/1943127.DBnVxmfOIh%401337h4x0r/#msg34192607
Somebody brought it up again this past week.
It seems logical that an open discussion list is not a big deal to continue
to be hosted on Sourceforge, as there isn’t much they could do to screw it
up. I personally think moving it away now would be seen as a gesture that
we do not consider their behavior to be acceptable. There are also some
benefits in being hosted elsewhere, at an entity able to professionally
maintain their infrastructure while also being neutral to the content.
Proposal: Move Bitcoin Dev List to a Neutral Competent Entity
Bitcoin is a global infrastructure development project where it would be
politically awkward for any of the existing Bitcoin companies or orgs to
host due to questions it would raise about perceived political control.
For example, consider a bizarro parallel universe where MtGox was the
inventor of Bitcoin, where they hosted its development infrastructure and
dev list under their own name. Even if what they published was 100%
technically and ideologically equivalent to the Bitcoin we know in our
dimension, most people wouldn't have trusted it merely due to appearances
and it would have easily gone nowhere.
I had a similar thought process last week when sidechains code was
approaching release. Sidechains, like Bitcoin itself, are intended to be a
generic piece of infrastructure (like ethernet?) that anyone can build upon
and use. We thought about Google Groups or existing orgs that already host
various open source infrastructure discussion lists like the IETF or the
Linux Foundation. Google is too controversial in this community, and the
IETF is seen as possibly too politically fractured. The Linux Foundation
hosts a bunch of infrastructure lists
<https://lists.linuxfoundation.org/mailman/listinfo>; and it seems that
nobody in the Open Source industry considers them to be particularly
objectionable. I talked with LF about the idea of hosting generic
Bitcoin-related infrastructure development lists. They agreed as OSS
infrastructure dev is already within their charter, so early this week
sidechains-dev list began hosting there.
>From the perspective of our community, for bitcoin-dev it seems like a
great fit. Why? While they are interested in supporting general open
source development, the LF has literally zero stake in this. In addition
to neutrality, they seem to be suitable as a competent host. They have
full-time sysadmins maintaining their infrastructure including the Mailman
server. They are soon upgrading to Mailman 3 <http://wiki.list.org/Mailman3>;,
which means mailing lists would benefit from the improved archive browser.
I am not personally familiar with HyperKitty, but the point here is they
are a stable non-profit entity who will competently maintain and improve
things like their Mailman deployment (a huge improvement over the stagnant
Sourceforge). It seems that LF would be competent, neutral place to host
dev lists for the long-term.
To be clear, this proposal is only about hosting the discussion list. The
LF would have no control over the Bitcoin Project, as no single entity
should.
Proposed Action Plan
-
Discuss this openly within this community. Above is one example of a
great neutral and competent host. If the technical leaders here can agree
to move to a particular neutral host then we do it.
-
Migration: The current list admins become the new list admins. We
import the entire list archive into the new host's archives for user
convenience.
-
http://sourceforge.net/p/bitcoin/mailman/ Kill bitcoin-list and
bitcoin-test. Very few people actually use it. Actually, let's delete the
entire Bitcoin Sourceforge project as its continued existence serves no
purpose and it only confuses people who find it. By deletion, nobody has
to monitor it for a repeat of the Sept 2014 hacking incident
<https://www.phoronix.com/scan.php?page=news_item&px=MTc4Mzg>; or GIMP-type
hijacking <https://lwn.net/Articles/646118/>;?
-
The toughest question would be the appropriateness of auto-importing the
subscriber list to another list server, as mass imports have a tendency to
upset people.
Thoughts?
Warren Togami
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20150614/e399d028/attachment.html>;
Warren Togami Jr. [ARCHIVE] /
npub1s5…zxem8
2023-06-07 15:37:49
in reply to nevent1q…hhru
Author Public Key
npub1s5p2xnl52ksr3a4qfa8re5znmja46ugm3x3ayy0x2c2mqrsw6ewsmzxem8Published at
2023-06-07 15:37:49Event JSON
{
"id": "471ba4e2e3c34b44fffafc33b499651f021861b131ebde0ca3df1343b5ef7f26",
"pubkey": "8502a34ff455a038f6a04f4e3cd053dcbb5d711b89a3d211e65615b00e0ed65d",
"created_at": 1686152269,
"kind": 1,
"tags": [
[
"e",
"810d20bcf991f0775ab3cca311351e013d4d782191b318764a6f2045d4a0f082",
"",
"reply"
],
[
"p",
"a23dbf6c6cc83e14cc3df4e56cc71845f611908084cfe620e83e40c06ccdd3d0"
]
],
"content": "📅 Original date posted:2015-06-14\n📝 Original message:Discomfort with Sourceforge\n\nFor a while now people have been expressing concern about Sourceforge's\ncontinued hosting of the bitcoin-dev mailing list. Downloads were moved\ncompletely to bitcoin.org after the Sept 2014 hacking incident of the SF\nproject account. The company's behavior and perceived stability have been\ngrowing to be increasingly questionable.\n\nhttp://www.theregister.co.uk/2013/11/08/gimp_dumps_sourceforge_over_dodgy_ads_and_installer\n\nNovember 2013: GIMP flees SourceForge over dodgy ads and installer\n\nhttps://lwn.net/Articles/646118/\n\nMay 28th, 2015: SourceForge replacing GIMP Windows downloads\n\nhttp://seclists.org/nmap-dev/2015/q2/194\n\nJune 3rd, 2015: Sourceforge hijacked nmap's old site and downloads.\n\nWhen this topic came up over the past two years, it seemed that most people\nagreed it would be a good idea to move. Someone always suggests Google\nGroups as the replacement host. Google is quickly shot down as too\ncontroversial in this community, and it becomes an even more difficult\nquestion as to who else should host it. Realizing this is not so simple,\ndiscussion then dies off until the next time somebody brings it up.\n\nhttp://sourceforge.net/p/bitcoin/mailman/bitcoin-development/thread/1943127.DBnVxmfOIh%401337h4x0r/#msg34192607\n\nSomebody brought it up again this past week.\n\nIt seems logical that an open discussion list is not a big deal to continue\nto be hosted on Sourceforge, as there isn’t much they could do to screw it\nup. I personally think moving it away now would be seen as a gesture that\nwe do not consider their behavior to be acceptable. There are also some\nbenefits in being hosted elsewhere, at an entity able to professionally\nmaintain their infrastructure while also being neutral to the content.\n\nProposal: Move Bitcoin Dev List to a Neutral Competent Entity\n\nBitcoin is a global infrastructure development project where it would be\npolitically awkward for any of the existing Bitcoin companies or orgs to\nhost due to questions it would raise about perceived political control.\nFor example, consider a bizarro parallel universe where MtGox was the\ninventor of Bitcoin, where they hosted its development infrastructure and\ndev list under their own name. Even if what they published was 100%\ntechnically and ideologically equivalent to the Bitcoin we know in our\ndimension, most people wouldn't have trusted it merely due to appearances\nand it would have easily gone nowhere.\n\nI had a similar thought process last week when sidechains code was\napproaching release. Sidechains, like Bitcoin itself, are intended to be a\ngeneric piece of infrastructure (like ethernet?) that anyone can build upon\nand use. We thought about Google Groups or existing orgs that already host\nvarious open source infrastructure discussion lists like the IETF or the\nLinux Foundation. Google is too controversial in this community, and the\nIETF is seen as possibly too politically fractured. The Linux Foundation\nhosts a bunch of infrastructure lists\n\u003chttps://lists.linuxfoundation.org/mailman/listinfo\u003e and it seems that\nnobody in the Open Source industry considers them to be particularly\nobjectionable. I talked with LF about the idea of hosting generic\nBitcoin-related infrastructure development lists. They agreed as OSS\ninfrastructure dev is already within their charter, so early this week\nsidechains-dev list began hosting there.\n\n\u003eFrom the perspective of our community, for bitcoin-dev it seems like a\ngreat fit. Why? While they are interested in supporting general open\nsource development, the LF has literally zero stake in this. In addition\nto neutrality, they seem to be suitable as a competent host. They have\nfull-time sysadmins maintaining their infrastructure including the Mailman\nserver. They are soon upgrading to Mailman 3 \u003chttp://wiki.list.org/Mailman3\u003e,\nwhich means mailing lists would benefit from the improved archive browser.\nI am not personally familiar with HyperKitty, but the point here is they\nare a stable non-profit entity who will competently maintain and improve\nthings like their Mailman deployment (a huge improvement over the stagnant\nSourceforge). It seems that LF would be competent, neutral place to host\ndev lists for the long-term.\n\nTo be clear, this proposal is only about hosting the discussion list. The\nLF would have no control over the Bitcoin Project, as no single entity\nshould.\n\nProposed Action Plan\n\n\n -\n\n Discuss this openly within this community. Above is one example of a\n great neutral and competent host. If the technical leaders here can agree\n to move to a particular neutral host then we do it.\n -\n\n Migration: The current list admins become the new list admins. We\n import the entire list archive into the new host's archives for user\n convenience.\n -\n\n http://sourceforge.net/p/bitcoin/mailman/ Kill bitcoin-list and\n bitcoin-test. Very few people actually use it. Actually, let's delete the\n entire Bitcoin Sourceforge project as its continued existence serves no\n purpose and it only confuses people who find it. By deletion, nobody has\n to monitor it for a repeat of the Sept 2014 hacking incident\n \u003chttps://www.phoronix.com/scan.php?page=news_item\u0026px=MTc4Mzg\u003e or GIMP-type\n hijacking \u003chttps://lwn.net/Articles/646118/\u003e?\n -\n\n The toughest question would be the appropriateness of auto-importing the\n subscriber list to another list server, as mass imports have a tendency to\n upset people.\n\n\nThoughts?\n\nWarren Togami\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/bitcoin-dev/attachments/20150614/e399d028/attachment.html\u003e",
"sig": "bda8c47540bb00e3cfda5606110828d511dc83dcbcef60c54726d230eea5483d7678ef3576e20abe4f08c380490df3e928d1b6cea18cd4043272215781fea110"
}