linux-kernel - RE: 463 kernel developers missing!

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <MDEHLPKNGKAHNMBLJOLKAEDIOJAC.davids@webmaster.com>
Date:	Wed, 30 Jul 2008 08:04:48 -0700
From:	"David Schwartz" <davids@...master.com>
To:	"Stefan Richter" <stefanr@...6.in-berlin.de>
Cc:	"Linux-Kernel@...r. Kernel. Org" <linux-kernel@...r.kernel.org>
Subject: RE: 463 kernel developers missing!

Stefan Richter wrote:

> This doesn't justify what Jon did though.

No, but the GPL does.

> Jon created a new database out of formerly disparate datasets, even
> though we didn't provide him these datasets for this purpose.  The fact
> that the means to create this database are rather trivial and cheap do
> not mean that we implicitly agreed to what he did or that it wouldn't
> matter whether we agree to it or not.

Yes, it does. If you contribute to a GPL project, you *explicitly* agree to exactly this. Anything you submit may be pieced together, changed, made public, processed, and used for purposes other than you intended.

> Jon even suggested that his database is then used to combine with
> further databases (bugzilla accounts, mailinglist archives).  Again, the
> fact that something like this is possible without great difficulties
> doesn't make it right.

No, but that all the submissions were made under the GPL, whose explicit purpose is to allow information to be changed, processed, and reused for other purposes does.

If you don't want your submissions to be in the public record for all eternity to be used for any lawful purpose, don't make them to a GPL project.

You have no right whatsoever to look at how one person chooses to use them and say "I didn't agree to that". Yes, you did. You gave up the right to approve or reject each use when you made the submission. If you don't like it, submit under some other license.

DS

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/