That open source privacy champion "Signal" asks for legal information (name, address, phone number, email address) before you get to contribute: https://signal.org/cla/
(It also requires a copyright license covering all their uses of your code under an "OSI-approved open source license", so the terms of the GPLv3 apply for you but not for them.)
@codewiz Even moving to git, they wouldn't have moved to GitHub (or GNU would have lost all meaning) and that's what the current generation is interested in. There's a big reluctance to go for other git hosts or other workflows: As coreboot admin I hear that rather often (we use Gerrit)
In 30 years: "A rapidly spreading invasive species endangers what is left of the LA ecosystem. Historical records show that some '@codewiz@mstdn.io' may have brought it in." 🤪
@codewiz Those Nest things are supposed to be "smart" so they might not only have temperature curves (to figure out how the building heats and cools) but also behavioral/location data of you to make guesses when to pre-heat so the home is comfy right when you get there?
But since you're downloading the data, you could take a look ;-)
@loke It's over two years old so maybe he already fixed it. It just supports @codewiz's claim that XEmacs has no advocates anymore when even jwz went to GNU Emacs.
@codewiz@Dashtop Webbrowsers that don't automatically promote to https? Linux users probably have a lower chrome market share, for example. This should change though: Firefox 100 just enabled https by default in various situations.
I wonder if PeerTube (which is also using webtorrent) could make use of that, presenting videos that are backed by archive.org webtorrents only, only taking care of the fediverse side of things.
But PT also does transcoding for different bitrates - I guess that would be missing, but other than that, archive.org would be the instance providing unlimited quota ;-)
@codewiz@cos Everybody can upload whatever they want to the archive, so that problem already exists in a way. Of course, a PeerTube instance might make it too easy and lead to capacity issues that way...
Still, the original poster could just upload them to archive.org, and present them there, but that's just as centralized as YouTube (but with different management), but at least it has a torrent backend already. I asked if they'd consider that, or if they'd mind somebody else doing it for them.
@codewiz You need both. The coreboot side is covered now due to Chrome OS firmware supporting it (same as with Intel post-Sandy Bridge) - but if the first impulse of any device vendor is to go for Intel because it's easier to crank out devices with them, even "highly visible" stuff like coreboot (only highly visible in certain bubbles in my experience) doesn't help.
What makes you send your visitors to that service (same "IP address is being transferred by default" situation as with Google Fonts, and obviously Bandcamp is tracking users or they wouldn't add telemetry service code to their widget) without getting consent first?
@jayrope@codewiz@nanook Popularity and a good deal explain why you use the service, sure. It doesn't explain why you're embedding it into your own site (which makes it your responsibility) without first asking for consent for the data transfer.
(I can confirm that facebook isn't part of your embeddings. Must have mixed up the two links, sorry.)
@codewiz@jayrope@nanook As already argued in that thread, CDNs typically provide data processing agreements in which they agree to abide by GDPR rules. As soon as it's a paid service, expect such an agreement to be part of the paperwork.
There's some uncertainty about US companies being able to give such guarantees given that US feds consider non-US-resident non-US-citizens to be fair game with no legal recourse, why is how the US/EU Privacy Shield was shot down, but I didn't see the court discuss that situation because there is no Google Fonts data processing agreement and so the defense didn't bring up the matter.
There _are_ tons of services that are non-compliant and are flying under the radar (unlike Google Fonts which simply by being Google, has a huge target on the back, but CDNs are the wrong place to look for examples simply because they work under contracts.
https://www.jayrope.com/music/ at some point tries to load some google analytics bits, through the embedded bandcamp players, probably. (I don't know where bandcamp is located so no idea if embedding them is by itself a problem or not)
No consent dialog anywhere to be seen, and the notion of "Learn, how to deal with that yourself." as found on your imprint page was quite specifically shot down by that court when they remarked that visitors can't be expected to "encrypt their IP addresses" (they probably meant using a VPN?)
So, good luck, but I don't see how you "serve faster & more efficiently locally" when you don't seem to serve locally in the first place.
Professional #coreboot developer, community herder, and project server therapist. Also musician and christian. Based in Germany.All my utterances here are my own, not my employers', past, present or future.