[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-devel
Subject:    [qubes-devel] Re: GitLab
From:       Hack <mistermyster () outlook ! com>
Date:       2017-05-13 17:31:02
Message-ID: of7fsh$upf$1 () blaine ! gmane ! org
[Download RAW message or body]

On 05/09/2017 09:13 PM, Ivan Mitev wrote:
> 
> 
> On 05/09/2017 09:46 PM, Hack wrote:
> > Hi,
> > 
> > Why do you use GitHub instead of GitLab?
> 
> Most likely because the devs historically chose github and it works well
> for the project's needs ?
> 
Useless answer, as it does not give any explanation (see below ↓)…

GitLab works well, there is even a Qubes OS repository added, 2 years 
ago, by Wojtek Porczyk, but it is not used. Why?

> If your question is instead related to the trust/security/... (or lack
> thereof) of github vs. gitlab, github isn't a trusted infrastructure [1]
> so it's not a concern.
> 
> Hope this helps,
> 
> ivan
> 
> 
> [1]
> https://www.qubes-os.org/doc/user-faq/#what-does-it-mean-to-distrust-the-infrastructure
>  
> 

 From your link:
"We believe that many attempts to make the infrastructure appear 
trustworthy actually provide only the illusion of security and are 
ultimately a disservice to real users."

With all due respect, I find this "philosophy" so stupid…

 From what I have studied, open source software are more secure than 
closed source software. And there is plenty of studies on internet that 
say the same thing… So GitLab is better…

Now if we take a concrete example:
     I have a wife, children, and I have the choice to live in a quite 
suburb in Glendale, or to live in the worst place in Detroit.

I know that I can be in danger in Glendale, but statistically, I know 
that Glendale should be better for my family.

So what? Should I go to Detroit because I can be potentially in danger 
too in Glendale? And because I would be less prudent at Glendale, I have 
to go to Detroit to protect my family and myself, in a better way? Well, 
as I am not dumb, I will choose Glendale rather than Detroit…

The same thing apply with software: Gnu/Linux is a better choice than 
Windows.

So I use Gnu/Linux, rather than Windows (and GitLab rather than GitHub)… 
But if I follow your line of reasoning, I should choose Windows? Because 
it will "disservice to real users", as I will feel being in more secure 
area… It makes no sense…

More security is better… not less…

And finally, it is sad to use GitHub, because:
     1. even if you cannot trust any infrastructure, yet, you can prefer 
a better one…
     2. you prone paranoia, but do wired choices (including your GitHub 
choice)…
     3. your "choice", to use GitHub, does not help open source…
     4. your "philosophy" sucks, because it is hypocritical (open source 
is better, and more secure, but only when it comes from us, but wait, do 
not trust us too much… and trust GitHub (closed source), but not too 
much…; blah blah blah…);
     5. it is egotistical to use GitHub instead of GitLab, "no 
solidarity", free for all…


-- 
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-devel+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-devel@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-devel/of7fsh%24upf%241%40blaine.gmane.org. \
For more options, visit https://groups.google.com/d/optout.


[prev in list] [next in list] [prev in thread] [next in thread]