[liberationtech] TrueCrypt: Status of Community Effort to keep on developments

[Aymeric Vitte]

So, let's restart.

I missed the "WebCrypto last call" interesting thread, particularly from 
[1], and I do agree with some comments from Carlo or Anders, as a member 
of the WG I still support the WebCrypto effort and will implement it 
when available but unfortunately not very actively since my areas of 
interest are not really part of the current proposal.

This is related to my point: whether we are talking about specifications 
groups, bugs/enhancements reports, open source projects or anything else 
where the community gets involved, the community is divided in people 
getting paid to contribute and people not getting paid trying to 
participate, improve the projects and raise their voice, which the 
members of the first category find interesting when they like it (but 
without rewarding the members of the second category and thinking that 
they have all their time to contribute) and disregard when they don't 
like it.

The weight and influence of the second category is very low, as a 
perfect illustration I got a very nice and polite private message just 
after the moderation of this thread from a superior member of the first 
category who thinks he has the right to send me this kind of thing.

By "the open source model is not adapted", I meant in fact that for 
anything related to the community there should be something like a 
common fund managed by some non profit organization and funded by the 
first category to reward the second category, so not based on personal 
interests of the first category, openssl is an example, everybody uses 
it, nobody funds it, nobody audits it.

Probably an utopia, but that's my opinion, it's obvious that the current 
process leads to huge specifications mistakes and important bugs 
impacting everybody.

For node-Tor/peersm project I have been litteraly harassed to put it 
open source (and blocked sometimes because it was not open source, some 
kind of censorship again). For what? So people can take it over if I 
fail? I don't see this perspective very interesting, it's a js project 
so much more transparent than anything else, open source or not, it will 
become open source when/if appropriately funded.

[1] 
https://mailman.stanford.edu/pipermail/liberationtech/2014-May/013704.html

Le 06/06/2014 02:32, Yosem Companys a écrit :
> Per our list guidelines, this thread doesn't seem to be offering
> advice, discussing issues, or sharing information.
>
> If anything, the past few messages appear to be extraneous or
> off-topic.  As such, the thread has been moderated.
>
> Yosem
> One of the list moderators
>
>
>

-- 
Peersm : http://www.peersm.com
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms