
Tobias?
03.09.2017
12:11:03
We are, widely.

VC321xb47@aperture:~#
03.09.2017
12:11:12
as in more packages in there

Tobias?
03.09.2017
12:11:19
Its the main source of media players, nvidia drivers (nonfree) and co.

VC321xb47@aperture:~#
03.09.2017
12:11:43
yes, the more popular packages

Google

Tobias?
03.09.2017
12:12:14
Which one did you miss?

VC321xb47@aperture:~#
03.09.2017
12:12:53
i miss a lot of my software in there actually, phpstorm, discord, spotify, etc.
mostly nonfree

Tobias?
03.09.2017
12:13:42

VC321xb47@aperture:~#
03.09.2017
12:13:52

Tobias?
03.09.2017
12:14:38
Because they are privacy problematic, change installation and behaviour every release and have some legal problems when you try to repackage them for systemwide installation.
Especially spotify, less so phpstorm but that one really loves to be userinstalled too.
And to be honest, i wouldn't want any of those in rpmfusion.

VC321xb47@aperture:~#
03.09.2017
12:15:46
So rpmfusion is not as open

Tobias?
03.09.2017
12:16:19
So rpmfusion is not as open
"Not wanting legal trouble with a music company that has backing by almost all of the industry" is not as open, yes.
And to me "not running the risk of a dcma takedown from lawyers making new installations using it impossible tomorrow" is good too.

VC321xb47@aperture:~#
03.09.2017
12:17:24

Google

Tobias?
03.09.2017
12:17:36
You want to put yourself up for suing?
Fine by me, honestly.
But dont take down your whole infrastructure with it if it happens.
Arch is harder to sue away because its a hobbyist project - Fedora has RHEL behind it. And lawyers are just waiting to milk both dry.

VC321xb47@aperture:~#
03.09.2017
12:18:46
AUR has been moving along just fine with Spotify and phpStorm
They could've long vouched to get those packages out of there

Tobias?
03.09.2017
12:19:27
If you want to curate it tough you are in hells kitchen
Because then you are a publisher and responsible for the output by law

L
03.09.2017
12:19:53

VC321xb47@aperture:~#
03.09.2017
12:20:06

Tobias?
03.09.2017
12:20:17

VC321xb47@aperture:~#
03.09.2017
12:20:27
The only thing you're publishing is a set of build instructions

Tobias?
03.09.2017
12:20:37

VC321xb47@aperture:~#
03.09.2017
12:20:53
how? you're not even including the actual thing in your package

Tobias?
03.09.2017
12:21:04
The second you employ any kind of control and anything you then let trough that can do harm or is breaking any kind of law, you are up for it.

VC321xb47@aperture:~#
03.09.2017
12:21:29
guess i'll stop breathing by that logic, then

Tobias?
03.09.2017
12:22:01

Google

VC321xb47@aperture:~#
03.09.2017
12:22:38

Tobias?
03.09.2017
12:22:42
Again.
User uploaded with no control but when someone notifies you:
a-ok.
You read trough if a script does hack.melol | sh and sign it off
hello lawyers
thats why the aur is going free because it has 0 control but user reports.

VC321xb47@aperture:~#
03.09.2017
12:23:12
Exactly.
therefore *anything* I do can be sued
by that logic

Tobias?
03.09.2017
12:23:17
and thats also its biggest problem

VC321xb47@aperture:~#
03.09.2017
12:24:37
different question, how does signing it off put you in control

Tobias?
03.09.2017
12:25:09

VC321xb47@aperture:~#
03.09.2017
12:25:35
if all you're saying is 'it's ok, put it in there'

Tobias?
03.09.2017
12:25:51
how?
Because someone wrote it into law, no matter how stupid it is.

VC321xb47@aperture:~#
03.09.2017
12:26:02
how does something like Chocolatey operate anyway though? They ship tons and tons of proprietary software like Spotify
and sign them off as well

Tobias?
03.09.2017
12:27:20
Going by the youtube example - youtube would need a broadcast license, an agency controlled by the government for screening and review and operate all the things and pay large sums of money if
one human reviewed a single video when it was uploaded and before it was marked as a-ok for the public

Google

Tobias?
03.09.2017
12:27:37
If its an algorithm doing it there is no problem.

VC321xb47@aperture:~#
03.09.2017
12:28:26

Tobias?
03.09.2017
12:28:28
Plus you get your software to people that enjoy having it as service with no fuss. Why would you cut that and destroy trust in you as software maker?

VC321xb47@aperture:~#
03.09.2017
12:28:53

Tobias?
03.09.2017
12:29:03

Fadlun
03.09.2017
12:29:12

Tobias?
03.09.2017
12:29:32

Admin
ERROR: S client not available

VC321xb47@aperture:~#
03.09.2017
12:29:42

Tobias?
03.09.2017
12:29:45
And a legal team that checks any NDA's, problems and co that can arise.

VC321xb47@aperture:~#
03.09.2017
12:30:27
well, story barely makes any sense imo but i have to go
guess we got the law to blame

Vitaly
03.09.2017
12:31:55

norj
03.09.2017
12:32:22
negativo17?

VC321xb47@aperture:~#
03.09.2017
12:32:58
anyway i'm out

Tobias?
03.09.2017
12:33:11
And again, the company has little interest to do so unless he packs in a crack or hacking/tracking scripts.

Google

Vitaly
03.09.2017
12:33:55

Akadi
03.09.2017
16:58:53
So, if rpmfusion publishes a new package, called kinda spotify-installer-1.0.fc26.noarch.rpm, which contains single script used just for downloading original file and building the rpm package, they might be sued?
Am i right?

Vitaly
03.09.2017
17:06:07

Sheogorath
03.09.2017
17:08:01

Akadi
03.09.2017
17:08:28
Something similar can be found in packman repo for opensuse

Sheogorath
03.09.2017
17:09:02
But when it comes to spotify: https://community.spotify.com/t5/forums/v3_1/forumtopicpage/board-id/001/thread-id/8303/page/1

Vitaly
03.09.2017
17:09:04
Noone will accept such package to repositories.

Tobias?
03.09.2017
17:10:20
Am i right?
Yes but that will never happen because rpms are made to be ready for atomic upgrades and contain all files to just unpack them. running scripts that load live sources is dangerous and unwanted.

Akadi
03.09.2017
17:10:28

Tobias?
03.09.2017
17:11:30

Vitaly
03.09.2017
17:11:33

Akadi
03.09.2017
17:11:38

Sheogorath
03.09.2017
17:11:42
in this case the torbrowser is downloaded and installed in usercontext

Tobias?
03.09.2017
17:11:48
That is a different story - it installs a fully selfcontained launcher application.
what you do once you launch that application is your problem.

Vitaly
03.09.2017
17:12:18
https://github.com/micahflee/torbrowser-launcher

Tobias?
03.09.2017
17:12:22
And yes thats also only possible because its open sauce and spotify would still not be legally installable that way