Le 2025-01-08 18:07, Peter Pentchev a écrit :
in the context of "this was pulled in automatically, there was no
human being who initiated that action, so there is nobody but
the site admins to be held responsible".
Actually the chain of responsibility can be traced back to another human
even in that case:
- the mirroring should be activated by an identified individual after
validating that it is permitted by the license of the project and the
ToS (if any) of the remote site
- the remote project is supervised by identified individuals
- the remote project should only allow contributions from identified
individuals (some may even require a formal CLA), and these
contributions must be comply with the licensing of the project, the ToS
of the platform if any, and the code of conduct of the platform if any.
Here "identified" means that they have reasonably stable e-mail
addresses and registered accounts, not necessarily that we know their
real names or anything else about their real identity. That's still
enough for law enforcement to issue search warrants should some serious
wrongdoing happen.
We can probably expect some "interesting" issues in the future with
automated (AI) contributions in the future though ....
BTW I'm not sure that the Debian Machine Usage Policy covers online
services such as Salsa in its current form. This might be worth fixing,
and advertising on the services.
Cheers,
--
Julien Plissonneau Duquène
