[liberationtech] Seeking comments - [ALPHA] List of digital security list of services, tools and resources of interest

[hellekin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 11/27/2014 10:53 AM, Robert Guerra wrote:
> 
> https://docs.google.com/spreadsheets/d/1YQFfwEypPsiIWbogosQslBlccYEgfr-mlDLHXPhMoRA/edit?usp=sharing
>
*** Hello Robert,

thank you for making this list.

I think the notion of "free/paid" is not only useless, but nocive.  It
does not matter whether the system is available at a fee or not.  What
matters is that the source code is available for review or not.

Another important matter is whether the system is proprietary or free
software: in the former case, users are totally dependent on the trust
of the proprietor of the software, and unable to detect or correct any
flaws they might discover, nor to adapt the software to their own
specific needs, nor to share that software, modified or not, with other
people who might need it--including security fixes, and including for a fee.

Therefore, I would change this column to "Gratis/Paid" to avoid any
confusion, and move it to the end.  In its place I would indicate
whether it's free software (guarantees the four freedoms describes in
the previous paragraph), open source (code is reviewable by the users
and independent parties), or proprietary (code is not available, or only
under NDA).

In a post-Snowden world, not taking this into account amounts to fraud.

Note that software freedom does not apply to services[0].

The Android system uses Linux as its kernel, so it is improper to say
"Android" and "Linux": you should use "Android" and "GNU/Linux" instead
to differenciate the two[1].

Finally, I think you may contribute this (corrected) information to the
Prism-Break project[2].  If you license it under free terms, then other
people would be able to include it in their own derivative works.

==
hk

[0]
http://www.gnu.org/philosophy/network-services-arent-free-or-nonfree.html
[1] http://www.gnu.org/gnu/why-gnu-linux.html
[2] http://prism-break.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=m7HX
-----END PGP SIGNATURE-----