Live data from Hacker News

Xsnow "protestware" in Debian

lwn.net

121–130 of 132 posts

Re: Xsnow "protestware" in Debian

#121
post #16

One of the comments that struck me on the lwn.net site is the (albeit small) possibility that someone in Russia could be running the software and unintentionally land themselves in hot water if someone discovers these images on their computer. I'm sure that's not the intended consequence, but I could be problematic.

The issue with that claim is xsnow already displayed the Ukrainian flag regardless. And it's in no way a critical app most people would even have installed to begin with. I had no idea it was even still being maintained.

No it didn't, the ukrainian flag was a recent addition by the guy who took over xsnow to add this protestware.

Just go look at the repo history on sf.

Re: Xsnow "protestware" in Debian

#122
post #111

Earlier quoted context omitted.

They aren't talking about Russia…

It's not clear who else they'd be talking about, because only idiotic propaganda claims Ukraine supports nazis, so that can't be it.

dude, go look up Polish news about this

reburial of the mass murderer of poles literally happened in the last month or so

Re: Xsnow "protestware" in Debian

#123
post #111

Earlier quoted context omitted.

It's well documented that Russia is kidnapping its citizens off the streets to send them on an invasion of a sovereign country, but I hadn't heard that they're honoring nazis now. I'm not sure I believe that.

They aren't talking about Russia…

please learn to count to one. I'm not multiple people

Re: Xsnow "protestware" in Debian

#124
post #68
post #61

Earlier quoted context omitted.

That may be, but if I do in fact live in a place where my "government are the baddies," why does it follow that open software should punish me—for nothing more than happening to be alive within that jurisdiction—by provoking my "baddie" government to visit its badness upon me personally? For speech I wasn't even trying to make—for speech that you kind of put in my mouth without asking me? It would be fine if you gave…

What exactly is the punishment in seeing a Ukrainian flag?

Downvotes but no explanation.

What is the punishment in seeing a normal flag of a country?

It’s not like showing the swastika to people in Israel. More like the opposite.

Re: Xsnow "protestware" in Debian

#125

Earlier quoted context omitted.

In rural Oklahoma, it is entirely acceptable to have “anyone of colour” portrayed in something like a screensaver. I don’t know much about Iran, but depictions of women seem common in advertising there.

Most women whom one would display inspirational quotes wouldn't be displayed in a head scarf as they would come from a range of cultures most of which don't have the same restrictions. I think that the point is that political moral and cultural norms aren't neutral and many are just morally deficient and free software shouldn't be in the business of pretending that Nazis and Jews are 2 different groups with equally v…

I would hesitate to say “Russian culture is evil”. I don’t dehumanise people or denounce entire ethnic groups.

Re: Xsnow "protestware" in Debian

#126

Earlier quoted context omitted.

Most women whom one would display inspirational quotes wouldn't be displayed in a head scarf as they would come from a range of cultures most of which don't have the same restrictions. I think that the point is that political moral and cultural norms aren't neutral and many are just morally deficient and free software shouldn't be in the business of pretending that Nazis and Jews are 2 different groups with equally v…

I would hesitate to say “Russian culture is evil”. I don’t dehumanise people or denounce entire ethnic groups.

Russia is a political entity Russian culture inside Russia like MAGA culture glorifies and justifies violence against others.

This doesn't mean everyone of Russian ethnicity shares the same flaws.

Re: Xsnow "protestware" in Debian

#127
post #37

Earlier quoted context omitted.

The naïveté of that position is that the users are not informed ahead of time that there's a random chance of a political protest popping up on their screen, so do not get to make an informed choice before it is perhaps too late. It's not mentioned in the doco. It's obfuscated in the source code as an 'extra tree' in an array of xpmtrees. The commit that added this had the commit message 'willem'.

So 3% of the pop uses Linux. I shouldn't be surprised that 3% of those use Debian. I WOULD be surprised to find that more than 1 in 10k has EVER used xsnow 1 in 1M running it continually. Note this is actually wildly overstated. I have not even touched on the settings which would show flags. Then we have to imagine they run xsnow all the time and somehow don't notice the dangerous political stuff OR run it for the fi…

What is the acceptable number of, say, tortured people, before this becomes an issue for you? What if your math is a little off and exactly one person dies? Are you okay with that?

We have to draw the line somewhere.

Re: Xsnow "protestware" in Debian

#128
post #14

One comment really nails the problem with this sort of thing: " People in Western countries don't realize how bad the situation on the ground actually is¹; random Ukrainian flags showing up on your work monitor can result in severe problems for you (like losing you job, or worse), especially if you work in the government sector. If they show up on your laptop in a random cafe or an airport, you might very well get a…

Slackware-current upgraded xsnow to the latest version in June 20th but applied a patch from ALT Linux that removed the protestware bits just because of this reason. I support this.

I use xsnow 1.42 . The new release is crap and according to this post, even more so.

Re: Xsnow "protestware" in Debian

#129
post #44

So next time something like this slips through and it runs rm -rf /* ? Then what? Shit like this erodes trust.

I wonder how many people immediately thought about whether similar things had been snuck into xfishtank and xpenguins.

How about something like this? https://www.cve.org/CVERecord?id=CVE-2022-23812

Re: Xsnow "protestware" in Debian

#130
post #109

Earlier quoted context omitted.

Yeah, but is open source so if some of the extra rare "good Russians" do not like this super small chance of getting hurt then they diserve their regime, they will finally protest when the regime will affect their own lives but stay silent while other people get genocided. I do not own any popular software to put anti Zed/Putin shit in it so sorry I can inconvinience those super rare good Russians.

Are you currently located in DC protesting about the war in Iran? If not, rules for thee but not for me?

I am from Romania, we have experience with dictators and with Moscowites screwing our lives. As things go I tink Russians will start protesting soon, not for the reason that they are against genociding their brothers in Ukraine but because they are starving.
Post reply on HN