• Debian sever ties with Google?

    From Roberto =?iso-8859-1?Q?C=2E_S=E1nch@21:1/5 to All on Fri Jan 31 04:10:01 2025
    Since we as a project have left Twitter/X (as recently announced by our Publicity Team) on the basis of "We do not want to be present in a place
    where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.

    Currently, the Debian project has a much closer relationship with Google
    than we have ever had with Twitter/X. Google is listed on the Debian
    Partners Program page [2], which states:

    "Google sponsors parts of Salsa's continuous integration infrastructure
    within Google Cloud Platform."

    "Google is one of the largest technology companies in the world,
    providing a wide range of Internet-related services and products as
    online advertising technologies, search, cloud computing, software, and hardware."

    Additionally, Google is a DebConf25 sponsor [3].

    Yet, Google has for a long time closely collaborated with the United
    States Government, specifically with the Defense and Intellence arms.
    This collaboration is no longer something that our project can continue
    to turn a blind toward. Just within the last year Google has increased
    this collaboration to the point of becoming a full-fledged and
    enthusiastic participant in the US defense industrial complex.

    2024-04-09: "Google is now authorized to host classified data in the
    cloud" [4]

    "We're thrilled to announce another significant milestone for Google
    Public Sector: the authorization of Google Distributed Cloud Hosted to
    host Top Secret and Secret missions for the U.S. Intelligence Community,
    and Top Secret missions for the Department of Defense," Leigh Palmer,
    the company’s vice president of delivery and operations said at Google
    Cloud Next conference in Las Vegas. "This authorization underscores
    Google Public Sector's commitment to empowering government agencies with secure, cutting-edge technology."

    2024-04-17: "Google Public Sector ‘hitting our stride’ in government market, CEO says" [5]

    "Being authorized on secret and top secret for the most stringent
    government requirements more than anything demonstrates Google's
    commitment to this market. I’m so proud of that. You know, I'm a mission junkie, former Navy officer, this is what I came to Google for: to be
    able to deliver on the promise of Google technology and those missions."

    This goes far beyond the US Defense and Intellence agencies purchasing
    the same mass market products which are available to everyone, far
    beyond benign public sector services for education and healthcare.
    Google is specifically tailoring products and services, in close
    collaboration with the US Defense and Intellence agencies, to
    specifically increase the capabilities of those agencies.

    Since there are people within the project who will not even travel to
    the US because of problematic policies and overreach by the government, especially by intelligence agencies, it seems highly problematic for us
    to continue accepting Google as a sponsor. Especially given the fact
    that Google has become a de facto part of the US government, and
    especially of its intellegence arm. I feel far more threatened by a
    continuing relationship between Debian and Google--knowing that Debian
    shares a computing platform and resources with the monsters responsible
    for thousands of drone strikes across the world, being responsible for countless civilian deaths, as well as who knows what other atrocities
    both inside the US and across the world--than by our former use of
    Twitter/X as a platform for publishing bits of news about the project.
    And a continuing relationship between Debian and Google objectively
    poses a far greater threat of far greater harm to far more people than
    did our former use of Twitter/X.

    I am calling for those responsible for the Debian Partners Program to immediately discontinue the partner relationship with Google and then
    for those responsible for managing the various Google-integrated and Google-hosted Debian services to being the process of divestiture.

    Regards,

    -Roberto

    [0] https://lists.debian.org/debian-publicity/2025/01/msg00067.html
    [1] https://x.com/debian/status/1884897431894323375
    [2] https://www.debian.org/partners/
    [3] https://debconf25.debconf.org/
    [4] https://www.nextgov.com/acquisition/2024/04/google-now-authorized-host-classified-data-cloud/395557/
    [5] https://www.nextgov.com/acquisition/2024/04/google-public-sector-hitting-our-stride-government-market-ceo-says/395819/


    --
    Roberto C. Sánchez

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrew Pollock@21:1/5 to roberto@debian.org on Fri Jan 31 06:30:01 2025
    On Fri, 31 Jan 2025 at 13:08, Roberto C. Sánchez <roberto@debian.org> wrote:

    Since we as a project have left Twitter/X (as recently announced by our Publicity Team) on the basis of "We do not want to be present in a place where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.


    Full disclosure: I am currently employed by Google, and do not speak for
    the company.

    DFSG #6 discusses not discriminating against fields of endeavour.

    I can see the project wishing to cut ties with a social media platform that
    is unable to ensure a minimum level of civil discourse. I'm not seeing how
    this is even remotely equivalent to disengaging from a corporate sponsor because of their commercial practices?

    regards

    Andrew

    <div dir="ltr"><div dir="ltr">On Fri, 31 Jan 2025 at 13:08, Roberto C. Sánchez &lt;<a href="mailto:roberto@debian.org">roberto@debian.org</a>&gt; wrote:</div><div class="gmail_quote gmail_quote_container"><blockquote class="gmail_quote" style="margin:
    0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Since we as a project have left Twitter/X (as recently announced by our<br>
    Publicity Team) on the basis of &quot;We do not want to be present in a place<br>
    where we cannot ensure that users will be respected and where abuse<br>
    happens without consequences&quot; [0] [1], I would like start a discussion<br> about how we as a project can promptly sever ties with Google.<br> <br></blockquote><div><br></div><div>Full disclosure: I am currently employed by Google, and do not speak for the company.</div><div><br></div><div>DFSG #6 discusses not discriminating against fields of endeavour.</div><div><br></div><div>I can see the
    project wishing to cut ties with a social media platform that is unable to ensure a minimum level of civil discourse. I&#39;m not seeing how this is even remotely equivalent to disengaging from a corporate sponsor because of their commercial practices?</
    <div><br></div><div>regards</div><div><br></div><div>Andrew</div></div></div>

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco d'Itri@21:1/5 to roberto@debian.org on Thu Feb 6 12:50:01 2025
    roberto@debian.org wrote:

    Since we as a project have left Twitter/X (as recently announced by our >Publicity Team) on the basis of "We do not want to be present in a place >where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.
    I have not been abused by Google and it generally does not appear to be nazi-adjacent like Twitter, so I am good with our relationship with them.

    Yet, Google has for a long time closely collaborated with the United
    States Government, specifically with the Defense and Intellence arms.
    If you are concerned about this then I recommend that you also reflect
    on Debian preparing to cheerfully welcome a LoongArch port, which is
    obviously a tool of Chinese soft power.

    --
    ciao,
    Marco

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From thomas@goirand.fr@21:1/5 to All on Thu Feb 6 16:40:01 2025
    CgpPbiBGZWIgNiwgMjAyNSAxMjo0NywgTWFyY28gZCdJdHJpIDxtZEBMaW51eC5JVD4gd3JvdGU6 Cgo+IElmIHlvdSBhcmUgY29uY2VybmVkIGFib3V0IHRoaXMgdGhlbiBJIHJlY29tbWVuZCB0aGF0 IHlvdSBhbHNvIHJlZmxlY3QgCgo+IG9uIERlYmlhbiBwcmVwYXJpbmcgdG8gY2hlZXJmdWxseSB3 ZWxjb21lIGEgTG9vbmdBcmNoIHBvcnQsIHdoaWNoIGlzIAoKPiBvYnZpb3VzbHkgYSB0b29sIG9m IENoaW5lc2Ugc29mdCBwb3dlci4gCgoKWW91IG1lYW4sIGp1c3QgbGlrZSBJbnRlbCBDUFVzIGFu ZCBVU0EgPyA7KQoKCg== PGh0bWw+PGJvZHk+PGJyPjxkaXYgZGlyPSJsdHIiPk9uIEZlYiA2LCAyMDI1IDEyOjQ3LCBNYXJj byBkJiMzOTtJdHJpICZsdDttZEBMaW51eC5JVCZndDsgd3JvdGU6PC9kaXY+CjxkaXYgZGlyPSJs dHIiPiZndDsgSWYgeW91IGFyZSBjb25jZXJuZWQgYWJvdXQgdGhpcyB0aGVuIEkgcmVjb21tZW5k IHRoYXQgeW91IGFsc28gcmVmbGVjdCA8L2Rpdj4KPGRpdiBkaXI9Imx0ciI+Jmd0OyBvbiBEZWJp YW4gcHJlcGFyaW5nIHRvIGNoZWVyZnVsbHkgd2VsY29tZSBhIExvb25nQXJjaCBwb3J0LCB3aGlj aCBpcyA8L2Rpdj4KPGRpdiBkaXI9Imx0ciI+Jmd0OyBvYnZpb3VzbHkgYSB0b29sIG9mIENoaW5l c2Ugc29mdCBwb3dlci4gPC9kaXY+Cjxicj48ZGl2IGRpcj0ibHRyIj5Zb3UgbWVhbiwganVzdCBs aWtlIEludGVsIENQVXMgYW5kIFVTQSA/IDspPC9kaXY+Cjxicj48L2JvZHk+PC9odG1sPg==

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Thu Feb 6 18:50:01 2025
    Satvik Sinha dijo [Thu, Feb 06, 2025 at 09:19:59PM +0530]:
    Guys come on what the hell. Since past few days all I have been hearing on this mailing list is endless arguments sparked by debian team pulling out
    of X.Since past few days you had been also bringing geo politics into open source space. We all know when microsoft decided to pull plug on windows , for our older systems and one who cannot afford buying new ones just yet cause it hadn't been that long when they first bought their system we have
    to end up relying on Linux that is our only hope when windows start slowing down approaching end of life period.Debian is literally open source so we
    can see what code is being put into it so it's no issues.
    (...)

    Free software *is* politics. Involvement in a global-scale free software project
    *is* by itself a political statement. No, it is not partisan- or country-specific politics, but it is an expression of how a group of people want
    to influence the way society works.

    Don't bring geopolitics here yo'all forget why we joined this mailing at first place. iT was to know internal updates about debian and to see if we can contribute something to it. If debian team pulled off X , it's their choice. It was undoubtedly that x sometimes interfered with other country's politics and sometimes allowed hate speech but hey which platform didn't ? Even reddit was no less. When debian joined x they joined it to keep users informed about updates to Debian who are not in mailing list. We all hail from different parts of world and literally every country's dev contributes to open source. That's what open source is all about ,so how about we
    accept what happened and move on.

    Right, I see what you are pointing at here: all in all, the decision of the Debian Publicity team to pull out from X/Twitter is theirs, as they are the people doing that work; the decision was informed to the rest of the project and
    to the world at large, because it is relevant, but it is that team that decides how to use their time. That sparked a comment by a DD who is seemingly unhappy and relates the decision to the political events in the USA -- Of course it might be related!

    But anyway, even if you don't want to be dragged into geopolitics, debian-project is the list where we discuss non-technical aspects of the project, and as such, it is the _best_ place to air our (project-related, naturally) political positions, at least before they reach i.e. debian-vote.

    - Gunnar.

    -----BEGIN PGP SIGNATURE-----

    wr0EABYKAG8Fgmek83wJEOL2O0NT9FmJRxQAAAAAAB4AIHNhbHRAbm90YXRpb25z LnNlcXVvaWEtcGdwLm9yZ76jxwr/JHIP2sNxyUuGj2cVOHQdMzJbLOmGMAjhNTJs FiEEYLMJPZYQjly5cULv4vY7Q1P0WYkAAKQ4AQCBfQz2Bq1mZPO2v26hZjSQ2OW7 fb5wzh1MGncdQ1x45QEA1oMprI3zOfgEc23RFwC7/nHg+LyDnpw3f56GX5mucAU=
    =2J3T
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Roberto =?iso-8859-1?Q?C=2E_S=E1nch@21:1/5 to Marco d'Itri on Fri Feb 7 03:00:01 2025
    On Thu, Feb 06, 2025 at 10:32:21AM -0000, Marco d'Itri wrote:
    roberto@debian.org wrote:

    Since we as a project have left Twitter/X (as recently announced by our >Publicity Team) on the basis of "We do not want to be present in a place >where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion >about how we as a project can promptly sever ties with Google.
    I have not been abused by Google and it generally does not appear to be nazi-adjacent like Twitter, so I am good with our relationship with them.

    How fortunate you are. Perhaps we can set the project's priorities based
    only how they affect you personally.

    Yet, Google has for a long time closely collaborated with the United
    States Government, specifically with the Defense and Intellence arms.
    If you are concerned about this then I recommend that you also reflect
    on Debian preparing to cheerfully welcome a LoongArch port, which is obviously a tool of Chinese soft power.

    Maybe when we get past the Google discussion.

    Regards,

    -Roberto

    --
    Roberto C. Sßnchez

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Soren Stoutner@21:1/5 to All on Thu Feb 6 17:57:39 2025
    This is a multi-part message in MIME format.

    --nextPart2489867.n97fhnxGW3
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/plain; charset="utf-8"

    On Thursday, February 6, 2025 4:50:50 PM MST G. Branden Robinson wrote:
    My advice--not that I expect anyone to take it--is that if you work for Google, don't talk about it _and_ don't participate in any community
    decision making process involving the company in any way. These are the ethical things to do if you're involved with Debian. If the thought of
    this frustrates you, try to salve your feelings by reviewing your latest
    pay stub. And if even that doesn't work, maybe you're not working at
    the right place.

    I respectfully disagree with the above statement.

    1. It is contrary to the principles for with Debian stands to exclude someone from
    participating in Debian solely because of who employs them. This includes participating in
    discussions about Debian policies that involve their employer.

    2. It is appropriate for an employee of such a company to disclose their connection to the
    company when discussing policies regarding that company. Doing so is not a humblebrag. (Doing so when discussing policies that have no relation to the company
    would be a humblebrag.)

    --
    Soren Stoutner
    soren@debian.org

    --nextPart2489867.n97fhnxGW3
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/html; charset="utf-8"

    <html>
    <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">On Thursday, February 6, 2025 4:50:50 PM MST G. Branden Robinson wrote:</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; My advice--not that I expect anyone to take it--is that if you work for</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Google, don't talk about it _and_ don't participate in any community</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; decision making process involving the company in any way.&nbsp; These are the</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; ethical things to do if you're involved with Debian.&nbsp; If the thought of</p>
  • From Soren Stoutner@21:1/5 to All on Thu Feb 6 20:22:13 2025
    This is a multi-part message in MIME format.

    --nextPart4295761.uADA5c2rLh
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/plain; charset="utf-8"

    On Thursday, February 6, 2025 7:12:09 PM MST G. Branden Robinson wrote:
    Hi Soren,

    Thank you for the serious follow-up.

    At 2025-02-06T17:57:39-0700, Soren Stoutner wrote:
    On Thursday, February 6, 2025 4:50:50 PM MST G. Branden Robinson wrote:
    My advice--not that I expect anyone to take it--is that if you work for Google, don't talk about it _and_ don't participate in any community decision making process involving the company in any way. These are the ethical things to do if you're involved with Debian. If the thought of this frustrates you, try to salve your feelings by reviewing your latest pay stub. And if even that doesn't work, maybe you're not working at
    the right place.

    I respectfully disagree with the above statement.

    1. It is contrary to the principles for with Debian stands to exclude someone from participating in Debian solely because of who employs
    them.

    I agree. To be clear, I neither said or implied otherwise.

    This includes participating in discussions about Debian policies that involve their employer.

    Here I must disagree. I think your statement is equivalent to claiming
    that "there is no such thing as a conflict of interest", an ethical
    stance with a poor track record of producing socially desirable
    outcomes.[1]

    That is not what I am saying. What I am saying is that when it comes to discussions in
    Debian, they are evaluated on the merits of the claims. If someone makes a bad
    argument, it will be refuted by others based on its bad merits. If someone makes a good
    argument, it will be accepted by the project based on its good merits.

    Whatever conflict of interest exists by a Google employee participating in the discussion is
    adequately handled by their announcing their status as an employee, which alerts me to
    read over their argument carefully looking for anything that would unfairly benefit
    Google. After I have made that careful review, if they have made a good argument, then it
    should receive the same consideration as any argument presented by any other member
    of the Debian community.

    Debian’s democratic decision making processes are strong enough to resist any hidden
    infiltration by conflicts of interest with Google. Of that I have no doubt. So, I don’t need to
    fear being exposed to the best arguments anyone can make in Google’s favor.

    --
    Soren Stoutner
    soren@debian.org

    --nextPart4295761.uADA5c2rLh
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/html; charset="utf-8"

    <html>
    <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">On Thursday, February 6, 2025 7:12:09 PM MST G. Branden Robinson wrote:</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Hi Soren,</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; Thank you for the serious follow-up.</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; </p> <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; At 2025-02-06T17:57:39-0700, Soren Stoutner wrote:</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; &gt; On Thursday, February 6, 2025 4:50:
  • From Tiago Bortoletto Vaz@21:1/5 to Andrew Pollock on Fri Jan 31 15:20:01 2025
    Hi,

    On Fri, Jan 31, 2025 at 02:25:19PM GMT, Andrew Pollock wrote:
    On Fri, 31 Jan 2025 at 13:08, Roberto C. Sßnchez <roberto@debian.org> wrote:

    Since we as a project have left Twitter/X (as recently announced by our Publicity Team) on the basis of "We do not want to be present in a place where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion about how we as a project can promptly sever ties with Google.


    Full disclosure: I am currently employed by Google, and do not speak for
    the company.

    DFSG #6 discusses not discriminating against fields of endeavour.

    I can see the project wishing to cut ties with a social media platform that is unable to ensure a minimum level of civil discourse. I'm not seeing how this is even remotely equivalent to disengaging from a corporate sponsor because of their commercial practices?

    I'm still digesting Roberto's email and don't have a strong opinion
    about the whole thing, but if I'd to argue for or against his request,
    I guess the DFSG wouldn't be the place to look at. DSFG #6 is clearly
    about licensing, while the concerns pointed in his email appear to be
    far broader.

    Bests,

    --
    Tiago Vaz

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEOAYLMZqeqHbTW+jfgVxjVIQAXyEFAmec2mIACgkQgVxjVIQA XyFEoxAAnbmQs+uXksI16Ktpvsdixzhy2Ovp5tqDkyxi7cQ+5NPqMqp0Ua/Y/cxC lhcTakozy6r+OmadDNULZRry0J19HcpusFxwUpBN6QIRzSO8p+qssHgKBkZB+RKA 6XcWHB5m7sk8mi3tt9wfxZxZ6IUayNFZCXb/61e1SCTG3UylWz5CEb4/nQ+7RfRw h9GmRgHoXE8qozzbSFiSZJk5FU1MrZxS3zo7jD2XCRmIYVjiCSowkL+/I0c0eFOZ CPb3ZU/02yNx4l1/dAnzOrAuXkRCiKRuaNzA76Vej3S9s7jqB5NvzSTyttqZV/f0 Vp5oOybqkLxcxo8q62yFsySNJ03NUKdHL5cO9QzVoCc4QZH8WMAaVQNzSUrl7dq+ qwbpqgPL/z+seh7McRs/ZP6hrK57txVXh1hXCsTwklxH/pKFov89kaUx0ko1qnvX VimvYG5R1pzg8cEprj4VP7jvnZoSgINGo18UEXjac8Ucsz3X3NN4tMEb5lvvsLxs BgwABdR2NXkdjHDycvL9/WL0z8Xnx/LYNPzGiCz6Mw2O4nj9508nSTxs6Phjpz0t 9hGxb2pnLSbHsH0V2SZ9TKIMC6BRpdfroTVI1Xa/vC+rykzTVLHbAb18lHu3zA37 Qi7ztLSrUnxarEAIFkPuGYuEad6w/3rsW8IoDJKcp4OC2gcNccg=
    =aTdp
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jeremy Stanley@21:1/5 to Thomas Goirand on Fri Jan 31 15:40:02 2025
    On 2025-01-31 13:46:57 +0100 (+0100), Thomas Goirand wrote:
    [...]
    To do this, Debian would need to run its own cloud platform as a
    replacement. I've been advocating for it, and volunteered to
    maintain an OpenStack cloud deployment for Debian own use.

    If you wish that Debian gets out of using Google, engage in this
    effort, and find somewhere we can host such a deployment (then
    Debian can spend the money for buying the hardware). At this time,
    I have no clue where we should go, and I have no time to research
    it, plus I do not wish to get my employer involved to avoid any
    type of conflict of interest.

    I'd be happy to get my employer involved though if it will help
    (i.e. the OpenInfra Foundation that represents the upstream
    OpenStack community).
    --
    Jeremy Stanley

    -----BEGIN PGP SIGNATURE-----

    iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmec3b1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WClRdQ//bz3noG9W6vjuiy18vtnwJvzLYk0pVTSkjZkcM211hq5p3TymafdpR/T1 FzWYfsmDIPPjcsYi7eW02SVy9nmAfHOSiOtTxWQlIV+n26tDF4BvLpc4rZyRF9OE ihRnumLCmBqlL1rJ1cb/PlFwzBVsg6yyFHTgm78VzDub78kI6aPbYr765VKpdsJ7 GjZrAH2GPY5zNUAATgUJ1iFgm1q93ydpuGbNvgZoj2Hf86FyHpsCUJsWUbLIpbkG w1ugf5eOu3CHkG5xCMFwpRQHeploc/JqT4HALoD/2n2QbJ+K0a54kPwTfB5jejfK Mddvvb6onVtxqKnwWQKsZjYEGMwuH9h8AcBXywDF0fyNXmsK01FCDPA29x96RY8h s5+Nbs0RjkfQdehBh6hj4qSAmcLVuvWYVHhPmVyvlZ68Bz4DPWLeozus3h7LzaV2 0RS09Q+1dwSN6fqsch0qtLG3IFRkJowwj8jle31ITZ9YCGO0hmczXRnVrN2HEris GoNGGF91Q5/PvUMl/wk6NabEJg0Voi6qkRsSxjMW/rE8d28Si3Yaj5zULs9bSVUo qFrgHL3uKsGUx2ucDjyjQdUkrTNofJtPY5Nnyb+QgwI6mmUL3CVT2hEIa7KQB7kA JoPmXBtRvaqG3ZzoluV2heiq18a4Rz9FpOstSP1XiMmLlyyoEf8=
    =JsYg
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32
  • From Roberto =?iso-8859-1?Q?C=2E_S=E1nch@21:1/5 to Andrew Pollock on Fri Jan 31 21:30:01 2025
    On Fri, Jan 31, 2025 at 02:25:19PM +1000, Andrew Pollock wrote:
    On Fri, 31 Jan 2025 at 13:08, Roberto C. Sßnchez <[1]roberto@debian.org>
    wrote:

    Since we as a project have left Twitter/X (as recently announced by our
    Publicity Team) on the basis of "We do not want to be present in a place
    where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.

    Full disclosure: I am currently employed by Google, and do not speak for
    the company.
    DFSG #6 discusses not discriminating against fields of endeavour.
    I can see the project wishingáto cut ties with a social media platform
    that is unable to ensure a minimum level of civil discourse. I'm not
    seeing how this is even remotely equivalent to disengaging from a
    corporate sponsor because of their commercial practices?
    regards
    Andrew

    The formula I am applying here is directly:

    "We do not want to be present in a place where we cannot ensure that
    users will be respected and where abuse happens without consequences."

    "We [Debian] do not want to be present in a place [on Twitter/X] where
    we cannot ensure that users will be respected and where abuse happens
    [causing certain people to feel unsafe] without consequences [moderation/banning]."

    It seems quite natural, then, that this follows:

    "We [Debian] do not want to be present in a place [Google Cloud Platform
    and other Google services] where we cannot ensure that users will be
    respected and where abuse happens [directly assisting the US government
    to prepare and execute missions that result in unconscionable civilian casualties] without consequences [legal reprecussions]."

    If the former results in leaving a social media platform, then the
    latter should result in at least the same (leaving the platform and
    services) and, I would argue, also calls for terminating the sponsor relationship. To do otherwise would be to tacitly endorse things that
    are objectively far worse than things we have *already* publicly stated
    as a project we find reprehensible.

    Regards,

    -Roberto

    --
    Roberto C. Sßnchez

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Iustin Pop@21:1/5 to All on Fri Jan 31 23:00:01 2025
    Hi all,

    I'm employed by Google, but I don't speak on Google's behalf, but:

    On 2025-01-31 14:33:39, Roberto C. Sánchez wrote:
    On Fri, Jan 31, 2025 at 02:25:19PM +1000, Andrew Pollock wrote:
    On Fri, 31 Jan 2025 at 13:08, Roberto C. Sánchez <[1]roberto@debian.org>
    wrote:

    Since we as a project have left Twitter/X (as recently announced by our
    Publicity Team) on the basis of "We do not want to be present in a place
    where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.

    Full disclosure: I am currently employed by Google, and do not speak for
    the company.
    DFSG #6 discusses not discriminating against fields of endeavour.
    I can see the project wishing to cut ties with a social media platform
    that is unable to ensure a minimum level of civil discourse. I'm not
    seeing how this is even remotely equivalent to disengaging from a
    corporate sponsor because of their commercial practices?
    regards
    Andrew

    The formula I am applying here is directly:

    "We do not want to be present in a place where we cannot ensure that
    users will be respected and where abuse happens without consequences."

    "We [Debian] do not want to be present in a place [on Twitter/X] where
    we cannot ensure that users will be respected and where abuse happens [causing certain people to feel unsafe] without consequences [moderation/banning]."

    It seems quite natural, then, that this follows:

    "We [Debian] do not want to be present in a place [Google Cloud Platform
    and other Google services] where we cannot ensure that users will be respected and where abuse happens [directly assisting the US government
    to prepare and execute missions that result in unconscionable civilian casualties] without consequences [legal reprecussions]."

    This makes no sense to me.

    What relation is there between Debian using Google's services/money, and
    the US government? How would Debian using $1 of Google money would be
    related to anything that "a user" would do, or that the US government
    would do? If Debian uses for example CI services hosted on GCP, how is
    "a user" be affected by whatever the US government does?

    There are countries in this world that do not respect human rights.
    Should we, then, restrict our social contract to prevent Debian's use in
    those countries, because "users" could be harmed by those governments?

    To me this all smells of communism and cancellation. Either as malicous
    intent, or as very naive intent, as if in this world there are "good"
    and "bad" people/organisations, and there's a clear line between them,
    and the desire to be ideologically pure.

    Debian as a whole will do whatever Debian decides, but man, this sounds
    off to me. Maybe because I've lived under communism, so I'm more
    sensitive to that evil than to whatever-you-think-the-US-government-is.

    regards,
    iustin

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jonas Smedegaard@21:1/5 to All on Fri Jan 31 23:00:01 2025
    Quoting Roberto C. Sánchez (2025-01-31 20:33:39)
    On Fri, Jan 31, 2025 at 02:25:19PM +1000, Andrew Pollock wrote:
    On Fri, 31 Jan 2025 at 13:08, Roberto C. Sánchez <[1]roberto@debian.org>
    wrote:

    Since we as a project have left Twitter/X (as recently announced by our
    Publicity Team) on the basis of "We do not want to be present in a place
    where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.

    Full disclosure: I am currently employed by Google, and do not speak for
    the company.
    DFSG #6 discusses not discriminating against fields of endeavour.
    I can see the project wishing to cut ties with a social media platform
    that is unable to ensure a minimum level of civil discourse. I'm not
    seeing how this is even remotely equivalent to disengaging from a
    corporate sponsor because of their commercial practices?
    regards
    Andrew

    The formula I am applying here is directly:

    "We do not want to be present in a place where we cannot ensure that
    users will be respected and where abuse happens without consequences."

    "We [Debian] do not want to be present in a place [on Twitter/X] where
    we cannot ensure that users will be respected and where abuse happens [causing certain people to feel unsafe] without consequences [moderation/banning]."

    It seems quite natural, then, that this follows:

    "We [Debian] do not want to be present in a place [Google Cloud Platform
    and other Google services] where we cannot ensure that users will be respected and where abuse happens [directly assisting the US government
    to prepare and execute missions that result in unconscionable civilian casualties] without consequences [legal reprecussions]."

    If the former results in leaving a social media platform, then the
    latter should result in at least the same (leaving the platform and
    services) and, I would argue, also calls for terminating the sponsor relationship. To do otherwise would be to tacitly endorse things that
    are objectively far worse than things we have *already* publicly stated
    as a project we find reprehensible.

    I think these are different things.

    Debian participating as a community at certain communication platforms
    is one thing.

    Debian partnering with organisation for processing our data and code is
    another thing.

    Personally I would prefer if we would only partner with ecologically and socially sustainable organisations, but I doubt that we could agree on
    that, because that is most likely economically far more expensive than
    how we currently choose to handle things.

    I am happy that you raise this question, but I think your argumentation
    is weak, because you try make it a community issue.

    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/
    * Sponsorship: https://ko-fi.com/drjones

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============h52114341943125849=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    wsG7BAABCgBvBYJnnTbICRAsfDFGwaABIUcUAAAAAAAeACBzYWx0QG5vdGF0aW9u cy5zZXF1b2lhLXBncC5vcme3BWYYKsoYj4DFCw1A10tnY3SeyfRYvZdfCUmixH8n mRYhBJ/j6cNmkaaf9TzGhCx8MUbBoAEhAAAgJw/9EMSg4tLcN6EXz8cjS2PwtOob 84IdzhEuAkQFC0hVJq/k/DBelh55nIxOA7FRwDRGcPooIb8TohsJEL20pt/akgAP 6fozyobo8KpU1hrJDiniwOcO0iSEMcz2R+8YikUr1mtacefeflAri86S6oMcL1C2 YhLkzs+TKqYR5dEPOFYJM0Y/fzqUw+rDzHbIq/dYuXnw4ol2iCkpsHlMQnQQIM6f RMVifucf0AVr33gt0qv0Q5SSymMCTp6eGWQqEw07y8m2AlitqVTgy+hDZgTa/NNM xrLRaUM7Qd9gSsABY4JTVICNRDqJX2y4FxY8WARjTdx4qJVTWL83BfABltFYu6ZN qnjT+FbLMyxDkuiYlJ4RDMjPj1TsvjYm6eagLwtl
  • From Sam Hartman@21:1/5 to All on Fri Jan 31 23:00:01 2025
    "Roberto" == Roberto C Sánchez <roberto@debian.org> writes:

    Roberto> On Fri, Jan 31, 2025 at 02:25:19PM +1000, Andrew Pollock wrote:
    >> On Fri, 31 Jan 2025 at 13:08, Roberto C. Sánchez
    >> <[1]roberto@debian.org>
    >> wrote:
    >>
    >> Since we as a project have left Twitter/X (as recently announced
    >> by our Publicity Team) on the basis of "We do not want to be
    >> present in a place where we cannot ensure that users will be
    >> respected and where abuse happens without consequences" [0] [1],
    >> I would like start a discussion about how we as a project can
    >> promptly sever ties with Google.
    >>
    >> Full disclosure: I am currently employed by Google, and do not
    >> speak for the company. DFSG #6 discusses not discriminating
    >> against fields of endeavour. I can see the project wishing to
    >> cut ties with a social media platform that is unable to ensure a
    >> minimum level of civil discourse. I'm not seeing how this is even
    >> remotely equivalent to disengaging from a corporate sponsor
    >> because of their commercial practices? regards Andrew
    >>
    Roberto> The formula I am applying here is directly:

    Roberto> "We do not want to be present in a place where we cannot
    Roberto> ensure that users will be respected and where abuse happens
    Roberto> without consequences."

    I'm not going to contribute to this discussion much, because I do not
    have a lot of time.

    I think the further away from free software something is, the higher the
    bar we should apply for getting involved in the politics.

    I think both in the X and Google cases, Debian should not get involved
    in the politics.
    I did not object to the X decision for a couple of reasons even though
    it made me uncomfortable.

    Mostly, I didn't have time and thought following the discussion closely
    would lead to a lack of happiness on my part.

    Secondly, I think we should allow people in Debian doing the work to
    have significant flexibility in how (and whether) that work gets done.
    If what the publicity team and those maintaining Debian's X presence
    were saying was that *they* felt uncomfortable being in a place where
    they were not respected, then I fully support them. Similarly, if they
    were saying that they did not want to do work in a place where users
    were not respected, then as the people previously doing that work, I
    support them in withdrawing.

    In my mind that's different than a political statement: that is Debian supporting the safety and comfort of members of our community. I think
    that support should be encouraged by the project.

    Distinguishing those cases (where we are supporting our people) from the
    cases where we are making a broader political decision is hard, and
    frankly I didn't have the energy, especially since I'm not involved in
    the publicity team enough to be a decision maker, and I do not support overriding the publicity team in this instance.

    How do I feel about the statement we made?
    honestly, I am not thrilled.
    If it really was a political decision (our people felt comfortable in
    the X environment, but wanted to make a statement by leaving), I really
    wish we had done something different.
    If it was a non-political decision (our people felt uncomfortable
    continuing the work), and we made a political statement anyway … well,
    there are many worse things in the world.

    So how would I apply this reasoning to Google?
    If the DebConf team is uncomfortable in their interactions with
    google---say because they are not treated respectfully, I absolutely
    support them in withdrawing from the relationship. (I believe that to
    be counter-factual; as far as I know Google has always treated us with respect.)
    If the Salsa team and CI team want to work on more free cloud options, I absolutely support that, even if that involves spending some Debian
    money.

    If we developed a free option for our CI infrastructure and wanted to
    make a press release about it, I'd feel a lot more comfortable if we
    focused on free software issues than broader issues with Google's
    decisions.

    I think the interesting question comes up if say Debconf wanted to put
    together a policy for what sort of sponsors were acceptable.
    Non-profits sometimes have to do that. My university, MIT, was in the
    news for some of their infamous donors in ways they really did not
    enjoy, and as a result, they have chosen to be much more clear about who
    they take money from.
    In my mind I'd rather the Debconf group put that together rather than
    the project as a whole.
    If they wanted to start including issues like environmental impact and
    issues like you bring up, I guess I would hold my nose and support the
    people doing the work making the decisions.
    I wouldn't have a lot of sympathy if there were a budget shortfall if
    the policy was too strict.

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iHUEARYIAB0WIQSj2jRwbAdKzGY/4uAsbEw8qDeGdAUCZ509VgAKCRAsbEw8qDeG dLLcAQD+u2YhSstcNm0YLMoHsDL6FvostyeDYMn31P4dpdl37gD/VlM/4F4CVOZg 4m/mCgz/ICreuFYJdicOOQeOQzo3xwY▄T8
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Jeffrey Anthony Serio@21:1/5 to All on Sat Feb 1 17:50:01 2025
    --68e22ab6a1524d4ba20e2b26188b9697
    Content-Type: text/plain
    Content-Transfer-Encoding: 7bit

    I think the broader issue that Roberto is referring to is that Google is an unethical company for the reasons Roberto mentions, and for all the reasons that are agreed upon by privacy advocates today. I personally believe these are legitimate reasons to
    sever ties with Google. The pertinent question, from this perspective, is rather whether it is practical/feasible for Debian to find an alternative to the services Google provides, and whether Debian can survive without Google sponsorship.

    I also don't think severing ties with Google the company has any bearing on whether individual contributors to Debian who are employed by Google and contributing to Debian under Google's capacity should be banned/shunned/whatever. I think Google
    employees should be allowed to make contributions to improve Debian. I think this in itself is categorically different from large-scale big corporate sponsorship (e.g., DebConf) or large-scale infrastructure dependency on unethical Big Tech companies (e.
    g., GCP).
    --68e22ab6a1524d4ba20e2b26188b9697
    Content-Type: text/html
    Content-Transfer-Encoding: quoted-printable

    <!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>I think the broader issue that Roberto is referring to is that Google is an unethical company for the reasons Roberto mentions,
    and for all the reasons that are agreed upon by privacy advocates today. I personally believe these are legitimate reasons to sever ties with Google. The pertinent question, from this perspective, is rather whether it is practical/feasible for Debian to
    find an alternative to the services Google provides, and whether Debian can survive without Google sponsorship.<br></div><div><br></div><div>I also don't think severing ties with Google the company has any bearing on whether individual contributors to
    Debian who are employed by Google and contributing to Debian under Google's capacity should be banned/shunned/whatever. I think Google employees should be allowed to make contributions to improve Debian. I think this in itself is categorically different
    from large-scale big corporate sponsorship (e.g., DebConf) or large-scale infrastructure dependency on unethical Big Tech companies (e.g., GCP).<br></div></body></html>
    --68e22ab6a1524d4ba20e2b26188b9697--

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?utf-8?Q?Pierre-Elliott_B=C3=A9cue@21:1/5 to Thomas Goirand on Sat Feb 1 20:30:01 2025
    Thomas Goirand <zigo@debian.org> wrote on 31/01/2025 at 13:46:57+0100:

    On 1/31/25 03:59, Roberto C. Sánchez wrote:
    Since we as a project have left Twitter/X (as recently announced by our
    Publicity Team) on the basis of "We do not want to be present in a place
    where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.
    Currently, the Debian project has a much closer relationship with
    Google
    than we have ever had with Twitter/X. Google is listed on the Debian
    Partners Program page [2], which states:
    "Google sponsors parts of Salsa's continuous integration
    infrastructure
    within Google Cloud Platform."
    "Google is one of the largest technology companies in the world,
    providing a wide range of Internet-related services and products as
    online advertising technologies, search, cloud computing, software, and
    hardware."
    Additionally, Google is a DebConf25 sponsor [3].
    Yet, Google has for a long time closely collaborated with the United
    States Government, specifically with the Defense and Intellence arms.
    This collaboration is no longer something that our project can continue
    to turn a blind toward. Just within the last year Google has increased
    this collaboration to the point of becoming a full-fledged and
    enthusiastic participant in the US defense industrial complex.
    2024-04-09: "Google is now authorized to host classified data in the
    cloud" [4]
    "We're thrilled to announce another significant milestone for Google
    Public Sector: the authorization of Google Distributed Cloud Hosted to
    host Top Secret and Secret missions for the U.S. Intelligence Community,
    and Top Secret missions for the Department of Defense," Leigh Palmer,
    the company’s vice president of delivery and operations said at Google
    Cloud Next conference in Las Vegas. "This authorization underscores
    Google Public Sector's commitment to empowering government agencies with
    secure, cutting-edge technology."
    2024-04-17: "Google Public Sector ‘hitting our stride’ in government
    market, CEO says" [5]
    "Being authorized on secret and top secret for the most stringent
    government requirements more than anything demonstrates Google's
    commitment to this market. I’m so proud of that. You know, I'm a mission >> junkie, former Navy officer, this is what I came to Google for: to be
    able to deliver on the promise of Google technology and those missions."
    This goes far beyond the US Defense and Intellence agencies
    purchasing
    the same mass market products which are available to everyone, far
    beyond benign public sector services for education and healthcare.
    Google is specifically tailoring products and services, in close
    collaboration with the US Defense and Intellence agencies, to
    specifically increase the capabilities of those agencies.
    Since there are people within the project who will not even travel
    to
    the US because of problematic policies and overreach by the government,
    especially by intelligence agencies, it seems highly problematic for us
    to continue accepting Google as a sponsor. Especially given the fact
    that Google has become a de facto part of the US government, and
    especially of its intellegence arm. I feel far more threatened by a
    continuing relationship between Debian and Google--knowing that Debian
    shares a computing platform and resources with the monsters responsible
    for thousands of drone strikes across the world, being responsible for
    countless civilian deaths, as well as who knows what other atrocities
    both inside the US and across the world--than by our former use of
    Twitter/X as a platform for publishing bits of news about the project.
    And a continuing relationship between Debian and Google objectively
    poses a far greater threat of far greater harm to far more people than
    did our former use of Twitter/X.
    I am calling for those responsible for the Debian Partners Program
    to
    immediately discontinue the partner relationship with Google and then
    for those responsible for managing the various Google-integrated and
    Google-hosted Debian services to being the process of divestiture.
    Regards,
    -Roberto

    Hi Roberto,

    I largely agree that we should reduce our use of sponsored hosting
    space in general, and Google (non-free) cloud platform specifically.

    To do this, Debian would need to run its own cloud platform as a
    replacement. I've been advocating for it, and volunteered to maintain
    an OpenStack cloud deployment for Debian own use.

    If you wish that Debian gets out of using Google, engage in this
    effort, and find somewhere we can host such a deployment (then Debian
    can spend the money for buying the hardware). At this time, I have no
    clue where we should go, and I have no time to research it, plus I do
    not wish to get my employer involved to avoid any type of conflict of interest.

    The thing is, having a cloud platform, hosting it and maintaining costs
    plenty money that we don't really have.

    --
    PEB

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas Tille@21:1/5 to All on Sat Feb 1 20:30:01 2025
    Am Fri, Jan 31, 2025 at 02:15:02PM -0700 schrieb Sam Hartman:

    I think the further away from free software something is, the higher the
    bar we should apply for getting involved in the politics.

    I think both in the X and Google cases, Debian should not get involved
    in the politics.

    Right. And I consider it a difference between where we post news about
    the project and who is using our operating system. Per DFSG it is OK
    if X would use Debian - finally its free for everybody.

    Secondly, I think we should allow people in Debian doing the work to
    have significant flexibility in how (and whether) that work gets done.
    If what the publicity team and those maintaining Debian's X presence
    were saying was that *they* felt uncomfortable being in a place where
    they were not respected, then I fully support them. Similarly, if they
    were saying that they did not want to do work in a place where users
    were not respected, then as the people previously doing that work, I
    support them in withdrawing.

    ACK

    How do I feel about the statement we made?
    honestly, I am not thrilled.
    If it really was a political decision (our people felt comfortable in
    the X environment, but wanted to make a statement by leaving), I really
    wish we had done something different.
    If it was a non-political decision (our people felt uncomfortable
    continuing the work), and we made a political statement anyway … well, there are many worse things in the world.

    I understand that the latter is the case. There are valid non-political reasons, but there is certainly plenty of room for interpreting the
    decision in a political way.

    So how would I apply this reasoning to Google?
    If the DebConf team is uncomfortable in their interactions with
    google---say because they are not treated respectfully, I absolutely
    support them in withdrawing from the relationship. (I believe that to
    be counter-factual; as far as I know Google has always treated us with respect.)
    If the Salsa team and CI team want to work on more free cloud options, I absolutely support that, even if that involves spending some Debian
    money.

    If we developed a free option for our CI infrastructure and wanted to
    make a press release about it, I'd feel a lot more comfortable if we
    focused on free software issues than broader issues with Google's
    decisions.

    I think the interesting question comes up if say Debconf wanted to put together a policy for what sort of sponsors were acceptable.
    Non-profits sometimes have to do that. My university, MIT, was in the
    news for some of their infamous donors in ways they really did not
    enjoy, and as a result, they have chosen to be much more clear about who
    they take money from.
    In my mind I'd rather the Debconf group put that together rather than
    the project as a whole.
    If they wanted to start including issues like environmental impact and
    issues like you bring up, I guess I would hold my nose and support the
    people doing the work making the decisions.
    I wouldn't have a lot of sympathy if there were a budget shortfall if
    the policy was too strict.

    I agree with what you said above. IMHO, one aspect is missing here. As mentioned earlier, the DFSG does not allow us to prevent anyone from
    using Debian. If we were to reject sponsorship from our users, I fail to
    see how this would have any impact on making the world a better place.
    It’s not as if any of our users are paying us with the intent to, say, increase environmental impact or anything similar. As far as I
    understand, there are no restrictions on the donations we receive.

    The decision about how we inform our users about our work is
    fundamentally different from the decision about who we accept donations
    from to support that work—as long as the donations do not influence our
    free work.

    Kind regards
    Andreas.

    --
    https://fam-tille.de

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?utf-8?Q?Pierre-Elliott_B=C3=A9cue@21:1/5 to roberto@debian.org on Sat Feb 1 20:30:01 2025
    Roberto C. Sánchez <roberto@debian.org> wrote on 31/01/2025 at 03:59:10+0100:

    Since we as a project have left Twitter/X (as recently announced by our Publicity Team) on the basis of "We do not want to be present in a place where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.

    Currently, the Debian project has a much closer relationship with Google
    than we have ever had with Twitter/X. Google is listed on the Debian
    Partners Program page [2], which states:

    "Google sponsors parts of Salsa's continuous integration infrastructure within Google Cloud Platform."

    "Google is one of the largest technology companies in the world,
    providing a wide range of Internet-related services and products as
    online advertising technologies, search, cloud computing, software, and hardware."

    Additionally, Google is a DebConf25 sponsor [3].

    Yet, Google has for a long time closely collaborated with the United
    States Government, specifically with the Defense and Intellence arms.
    This collaboration is no longer something that our project can continue
    to turn a blind toward. Just within the last year Google has increased
    this collaboration to the point of becoming a full-fledged and
    enthusiastic participant in the US defense industrial complex.

    2024-04-09: "Google is now authorized to host classified data in the
    cloud" [4]

    "We're thrilled to announce another significant milestone for Google
    Public Sector: the authorization of Google Distributed Cloud Hosted to
    host Top Secret and Secret missions for the U.S. Intelligence Community,
    and Top Secret missions for the Department of Defense," Leigh Palmer,
    the company’s vice president of delivery and operations said at Google Cloud Next conference in Las Vegas. "This authorization underscores
    Google Public Sector's commitment to empowering government agencies with secure, cutting-edge technology."

    2024-04-17: "Google Public Sector ‘hitting our stride’ in government market, CEO says" [5]

    "Being authorized on secret and top secret for the most stringent
    government requirements more than anything demonstrates Google's
    commitment to this market. I’m so proud of that. You know, I'm a mission junkie, former Navy officer, this is what I came to Google for: to be
    able to deliver on the promise of Google technology and those missions."

    This goes far beyond the US Defense and Intellence agencies purchasing
    the same mass market products which are available to everyone, far
    beyond benign public sector services for education and healthcare.
    Google is specifically tailoring products and services, in close collaboration with the US Defense and Intellence agencies, to
    specifically increase the capabilities of those agencies.

    Since there are people within the project who will not even travel to
    the US because of problematic policies and overreach by the government, especially by intelligence agencies, it seems highly problematic for us
    to continue accepting Google as a sponsor. Especially given the fact
    that Google has become a de facto part of the US government, and
    especially of its intellegence arm. I feel far more threatened by a continuing relationship between Debian and Google--knowing that Debian
    shares a computing platform and resources with the monsters responsible
    for thousands of drone strikes across the world, being responsible for countless civilian deaths, as well as who knows what other atrocities
    both inside the US and across the world--than by our former use of
    Twitter/X as a platform for publishing bits of news about the project.
    And a continuing relationship between Debian and Google objectively
    poses a far greater threat of far greater harm to far more people than
    did our former use of Twitter/X.

    I am calling for those responsible for the Debian Partners Program to immediately discontinue the partner relationship with Google and then
    for those responsible for managing the various Google-integrated and Google-hosted Debian services to being the process of divestiture.

    Seriously, this is irksome.

    Just state that you disagree about the Publicity Team Decision instead
    of doing a ~straw man argument up to the absurd.

    We're supposed to be grown ups. Maybe act accordingly?

    --
    PEB

    --=-=-Content-Type: application/pgp-signature; name="signature.asc"

    -----BEGIN PGP SIGNATURE-----

    iQJDBAEBCgAtFiEE5CQeth7uIW7ehIz87iFbn7jEWwsFAmeeZOoPHHBlYkBkZWJp YW4ub3JnAAoJEO4hW5+4xFsLD7AP/1k8CjO5ITZmvtJliGWjnWFq4WuTepnw0XRB ZLyhqNMf/aVnHkxOslnNlDYfvNjI1hPOBdo631TG0zsUgzyiZ7WAdUKZCHgQNUUX 4cAg/qZYoBa8E7yB2m44Ok6kyYr6J6AQ7zX5wTe1h1pqV6JW0bGXqCuUWFNCw1aL 1AvasJSTwg0UalpQTaHrCAj8R5p47CdnmBe32QRyGTvjgUnMIDKF2oUTlm16Gy4e x6tvIvXf85p+fBHT14Z7BAXCFvfkzgGm17LljrgxLjSH+CzgtT3CGxgIX0hXBCN4 RC31I/5OTG8uoa1nBZ//DnWCqtovbc/Q9Qhe2LO+JkodpDx14GMh1kIQcu2K1s9L wNRVs4Ed59ie26Ip2WxjXmc3o60Uh3IyzSxiAs67ttbpzo+HwK47l2V+StcAa8Vz WFwWdyflDROw5TA7TRd0PJbNUArzyBpEW/4gVFqNpGQDjl5OhArPa+xjp5/x8iQq bzXPEnvFNj+gMs4ZZ5QbA1zK4BahB33f6cLuWP4NSdnxuj0VAkp7cj+vAFvF4Qwy OdSN5J3u2slI23FG4FBHrBtEKhoxkWSPfU8URZobKcEwHSQA5xmmppPR2Yzr8FHx 17elv6HOol8YMhc2FXc41jHPeVo8iZ9sRZk5qNw1YTg63CXEDw4vD/8hepJ6yKd7
    OVkpxKWc
    =6O70
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Soren Stoutner@21:1/5 to All on Sat Feb 1 14:18:16 2025
    This is a multi-part message in MIME format.

    --nextPart2242448.NgBsaNRSFp
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/plain; charset="utf-8"

    On Saturday, February 1, 2025 11:28:11 AM MST Andreas Tille wrote:
    The decision about how we inform our users about our work is
    fundamentally different from the decision about who we accept
    donations
    from to support that work—as long as the donations do not influence
    our
    free work.

    I second this.

    --
    Soren Stoutner
    soren@debian.org

    --nextPart2242448.NgBsaNRSFp
    Content-Transfer-Encoding: quoted-printable
    Content-Type: text/html; charset="utf-8"

    <html>
    <head>
    <meta http-equiv="content-type" content="text/html; charset=UTF-8">
    </head>
    <body><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">On Saturday, February 1, 2025 11:28:11 AM MST Andreas Tille wrote:</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; The decision about how we inform our users about our work is</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; fundamentally different from the decision about who we accept donations</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; from to support that work—as long as the donations do not influence our</p>
    <p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">&gt; free work.</p>
    <br /><p style="margin-top:0;margin-bottom:0;margin-left:0;margin-right:0;">I seco
  • From Emmanuel Arias@21:1/5 to All on Sat Feb 1 23:00:01 2025
    On Fri, Jan 31, 2025 at 02:33:39PM -0500, Roberto C. Sánchez wrote:
    On Fri, Jan 31, 2025 at 02:25:19PM +1000, Andrew Pollock wrote:
    On Fri, 31 Jan 2025 at 13:08, Roberto C. Sánchez <[1]roberto@debian.org>
    wrote:

    Since we as a project have left Twitter/X (as recently announced by our
    Publicity Team) on the basis of "We do not want to be present in a place
    where we cannot ensure that users will be respected and where abuse
    happens without consequences" [0] [1], I would like start a discussion
    about how we as a project can promptly sever ties with Google.

    Full disclosure: I am currently employed by Google, and do not speak for
    the company.
    DFSG #6 discusses not discriminating against fields of endeavour.
    I can see the project wishing to cut ties with a social media platform
    that is unable to ensure a minimum level of civil discourse. I'm not
    seeing how this is even remotely equivalent to disengaging from a
    corporate sponsor because of their commercial practices?
    regards
    Andrew

    The formula I am applying here is directly:

    "We do not want to be present in a place where we cannot ensure that
    users will be respected and where abuse happens without consequences."

    "We [Debian] do not want to be present in a place [on Twitter/X] where
    we cannot ensure that users will be respected and where abuse happens [causing certain people to feel unsafe] without consequences [moderation/banning]."

    It seems quite natural, then, that this follows:

    "We [Debian] do not want to be present in a place [Google Cloud Platform
    and other Google services] where we cannot ensure that users will be respected and where abuse happens [directly assisting the US government
    to prepare and execute missions that result in unconscionable civilian casualties] without consequences [legal reprecussions]."

    If the former results in leaving a social media platform, then the
    latter should result in at least the same (leaving the platform and
    services) and, I would argue, also calls for terminating the sponsor relationship. To do otherwise would be to tacitly endorse things that
    are objectively far worse than things we have *already* publicly stated
    as a project we find reprehensible.

    I'm just thinking what will be the next topic? "We should leave Internet because happens terrible things there"(?). The last post in Debian's X
    account says: "The Debian Publicity Team will no longer post on X/Twitter",
    and the Debian account still is there. Anyway, if you personally want to
    stay in X/Twitter and post, just do it :-).

    Regards,

    -Roberto

    --
    Roberto C. Sánchez

    --
    cheers,
    Emmanuel Arias

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾â â¢ â ’⠀⣿⡠eamanu@debian.org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: 13796755BBC72BB8ABE2AEB5 FA9DEC5DE11C63F1
    ⠈⠳⣄

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEE3lnVbvHK7ir4q61+p3sXeEcY/EFAmeejEgACgkQ+p3sXeEc Y/FeyxAAwFpzegNtdw2uvJO9ypRNAniRgz44DH/XsWJ12lihXt7Pgd9dL1RAPBkf FA/0rMAPu3V02gj4lT9tlUPmsVTaoCWbzqph4rXcEzMYk7r4pyZAkOu7XYYXUGEu k2DA+1CwSQKdOyQJEoNy/T1K1YVaFqFc9EUEXN4DgZnPZHFCh5QwGjHN+bO5JFD5 rF2BIrLWrtICMhbtNncQqk/zXP4KQ80GXYn2cexOpleylXU3ymdBODtaFxJNo05n pF+IhTabMPR3ikjCw+j+OeIMuW7fNbxPvfekT3VgIlz+Vik2YsCjz4GhBq+veLkQ urtRZaONfXFbJ1pbNxHFIMqZBvyTP8fYt4s6wRPBR2G2ybGgqY6dHf5h/0jqjDor Lxhi4ZM12+5AOyrAwdOpBHHuyZqK79q4IkONlqiUnAOOn4BcKMIhEM1/yKLo0pEU 1J4vdkGKrGQS1cDX2SJsdI1gvCy+SbUxRi7pTwsLrKQsrzp9YRmJrlJIkWZAvgux 3czTXE18D4gyjAvows4+sEBoYGAXFIZAu7fiDTJPDL5tzNHXdeDALt1n19lbtrNM 1sBarfoFsrrmsJjp1HdA6j9jmr7tD984fKhoeJTdL/KuWOr6yMQO9SchbGo4sicM VVFuX6y0QqN8dY6Lkizat8eDXNnEyAF4q9XD0WzxEm1+TrN
  • From Bastian Blank@21:1/5 to Thomas Goirand on Sun Feb 2 14:10:01 2025
    Hi

    On Fri, Jan 31, 2025 at 01:46:57PM +0100, Thomas Goirand wrote:
    On 1/31/25 03:59, Roberto C. Sánchez wrote:
    Yet, Google has for a long time closely collaborated with the United
    States Government, specifically with the Defense and Intellence arms.

    They provide services to whoever wants to pay for it, like almost any
    other organization. Limited by the laws they have to abide to.

    I am calling for those responsible for the Debian Partners Program to immediately discontinue the partner relationship with Google and then
    for those responsible for managing the various Google-integrated and Google-hosted Debian services to being the process of divestiture.

    What would that mean? Please list, from your perspective, all the
    different parts this affects.

    But why stop with Google?

    OSU, home of OSUOSL and with it Debian infrastructure? Takes money from
    the DoD. Brown University, home of ftp-master.debian.org? Takes money
    from the DoD. At least in the USA this is quite common for universities
    to have ties with them.

    I largely agree that we should reduce our use of sponsored hosting space in general, and Google (non-free) cloud platform specifically.
    To do this, Debian would need to run its own cloud platform as a
    replacement. I've been advocating for it, and volunteered to maintain an OpenStack cloud deployment for Debian own use.

    Could you please estimate the required funds to do that? Aka hardware
    and hosting paid full? At SPI we had around 50kUSD per year of
    donations over the last years. I can't imagine this is even remotely
    enough to do that all in a sustainable manner.

    Also, please list the people that would be capable to running an
    OpenStack of sufficient quality for our use. You alone are far from
    enough.

    Bastian

    --
    Landru! Guide us!
    -- A Beta 3-oid, "The Return of the Archons", stardate 3157.4

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)