Hi, On Sat, Mar 08, 2025 at 05:43:32PM -0000, Greg wrote: > Why wouldn't Debian's Firefox sell or share user data whereas a > non-Debian package or binary might or would, according to the vague > legalese of the new EULA? If Debian users are not bound, by what > method or procedure are they exempted?
By never having agreed to the EULA. Users of Mozilla's binary agree to their EULA at the point of downloading it from them. Users of a binary built and distributed by Debian are not presented with any such EULA. Of course, the program might still collect user data and send it back to Mozilla and Mozilla might still sell it without us knowing. Maybe they even would try to argue that any binary built from their source anywhere is the same as agreeing to some terms they put on their web site. It is not usually thought that people can be bound by an EULA they haven't explicitly agreed to though. There are a few things in the Debian archive that require agreement to terms upon use. Perhaps the best known would be certbot and other ACME clients. They go to quite some lengths to present the question at first run time. Thanks, Andy -- https://bitfolk.com/ -- No-nonsense VPS hosting