IRC logs for #trustable for Thursday, 2017-01-12

*** LaurenceUrhegyi has joined #trustable08:04
*** ctbruce has joined #trustable08:30
*** toscalix has joined #trustable09:01
*** mdunford has joined #trustable09:07
*** toscalix has quit IRC09:40
*** toscalix has joined #trustable09:41
*** LaurenceUrhegyi has quit IRC11:28
*** toscalix has quit IRC12:30
*** LaurenceUrhegyi has joined #trustable12:40
*** tiagogomes has quit IRC13:33
*** toscalix has joined #trustable13:47
*** tiagogomes has joined #trustable13:48
*** tiagogomes has quit IRC14:01
*** tiagogomes has joined #trustable14:17
LaurenceUrhegyiif we do an analysis of MISRA and CERT rules and map out the over-maps / differences, we would be directly referencing propriety content. this obviously means we can't make that analysis open to the world and freely available. We have hit these brick walls in the past with 'derivative works'.15:56
LaurenceUrhegyis/over-maps/over-laps15:56
LaurenceUrhegyiif anyone has any thoughts on this...or advice, we'd be interested15:56
LaurenceUrhegyiwe can ask nicely the people who are involved in trustable and the C Saf/Sec Group and who are involved in MISRA and CERT, but that's about all i can think of15:57
paulsherwoodwe can reference propretary works citing fair use16:01
paulsherwoods/reference/reference and quote from, within reason,/16:02
LaurenceUrhegyiok, that's certainly helpful. I wonder if a deep analysis of each rule classes as 'within reason'16:02
jmacsWhich one of the fair dealing exceptions do you think it would come under?16:03
LaurenceUrhegyior does it just depend on how much we actually quote. we'll have a look into that16:03
persia"proprietary" is often over-applied.  Check the specific license under which a work was received.  If there is no explicit license, than it is probably safest to assume the Berne Convention applies.16:08
persia(which only protects the expression of an idea, not the idea itself)16:08
persiaIf you're uncertain, consult counsel (as my suggestion above is very much not that sort of advice)16:09
LaurenceUrhegyiwe will16:11
paulsherwoodcopyright exists in the text, and in the overall layout/structure. it does not exist in the ideas16:17
paulsherwoodso i believe, for example, that i could skim down the misra rules list, write my own summaries/interpretatin of each of them, and publish16:18
persiaThat matches my understanding, although I'm not qualified to assert it is true.16:19
jmacsThere's only so many ways you can write "Don't use trigraphs", though16:20
LaurenceUrhegyiI think we have a way forward here16:20
persiajmacs: And there exists precedent in some jurisdictions that when one can only write something in one way, that expression is not subject to copyright (for a software-relevant example, look at SCO vs. IBM)16:21
persiaMy memory is that the ruling was that because a C header for certain structures could only be expressed sensibly within certain limits and still be SUS-compliant, that the textual content wasn't subject to copyright.16:21
persiaBut that's Nevada, US, which may or may not be citeable, depending on who complains about whom, and where.16:22
jmacspersia: When you have a chance, could you retell your argument that git is not a version control system, or point me at an argument for the same?17:07
persiaQuick summary: git has no concept of "version".17:09
*** LaurenceUrhegyi has quit IRC17:09
persiaI'll look for some of the interviews with Linus, to see if I can find a case of him making the argument.17:09
persiagit is properly an SCM (source code management) rather than a VCS.17:10
persiaNote that this does *not* make git inappropriate for use for many things, including tracking versions: it just needs additional bolt-on things to do so.17:12
persiatags are a good start, except that tags are mutable, so one needs a bit more metadata to force git to have something equivalent to subversion's "revision" concept.17:13
persiaSome gerrits are configured to have super-repos, where each commit includes a reference to all the commits in all the repos one-level deeper, which provides an independent source of information about the sequence of commits in a given repo, although this can also be corrupted if someone has the ability to force-push or can otherwise redirect HEAD to point to a commit with a variant parentage history.17:16
persiaI suspect there are other solutions to the problem, although I'm not familiar with them.17:16
jmacsI'm afraid I'm not clear on what the problem is; why is a SHA1 not a version?17:19
persiaThere's no enforcement of either ordering  or consistent parentage in git.17:21
persiaWhen I add a new commit, and point HEAD at that commit, I can have the commit point at a history with no relation to the history of the previous commit referenced by HEAD.17:21
persiaAlternately, I can keep the same set of commits, but reorder the history of the commits.  Doing so changes the SHA1s, but not in a way that is easily noticeable to someone pulling a fresh copy of the repository.17:22
persia(actually, not in a way that is noticeable to someone updating a repository as long as all reordering happened to commits since the last update)17:23
*** ctbruce has quit IRC17:24
jmacsI don't think that having a convenient alias like HEAD which can be changed stops something being a version control system17:25
jmacsAnd the ability to reorder the history sounds like a bug to me. I'd like to read Linus's opinions on it.17:28
persiaI consider `git rebase -i` allowing reordering to be a feature :)  I will share a link as soon as I find one.17:30
jmacsI do to, but I'd never expected a reordering to produce the same hash17:32
persiaIt doesn't, but `git gc` later deletes the original hash, so that an external person with a hash reference has no means to identify what code is being used.17:33
jmacss/to/too/17:33
jmacsA hash reference to the original hash?17:34
jmacsEr17:35
jmacsthe pre-rebase branch?17:35
persiaYes.17:35
jmacsRight, so you lose a branch because git didn't think it was referenced anywhere17:37
jmacsI'm not sure what that has to do with reordering17:38
jmacsIt's also behaviour I would expect from most VCS systems17:38
persiaSCCS and SVN are not subject to that sort of problem.17:39
persiaBecause there is a core ordering of revisions.17:39
*** ctbruce has joined #trustable18:31
*** toscalix has quit IRC19:04
*** ctbruce has quit IRC20:51
rjekhttps://blog.elpassion.com/simple-and-terrifying-encryption-story-c1f1d6707c07#.smmzcu41822:32

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!