privacyguides/privacytools.io
Archived
1
0
Fork 0
Code Issues 304 Pull Requests 47 Activity

Add gNewSense #978

Closed
gjhklfdsa wants to merge 2 commits from patch-19 into master
pull from: patch-19
merge into: :master
Conversation 6 Commits 2 Files Changed 1
+2 -2
gjhklfdsa commented 2019-06-08 04:45:04 +00:00 (Migrated from github.com)
Copy Link
Copy Source

Description: Add GNewSense to OSes.
Why? GNewSene is a fully free'd version of Debian.
How?: I recommend changing the Debian description to:

Debian is a Unix-like computer operating system and a Linux distribution that is composed of free and open-source software, most of which is under the GNU General Public License, and packaged by a group of individuals known as the Debian project. GNewSense is a completely free/libre and open source version of Debian.

But isn't Debian fully free'd: Yes and no, this is what the FSF has to say:

Debian's Social Contract states the goal of making Debian entirely free software, and Debian conscientiously keeps nonfree software out of the official Debian system. However, Debian also provides a repository of nonfree software. According to the project, this software is “not part of the Debian system,” but the repository is hosted on many of the project's main servers, and people can readily find these nonfree packages by browsing Debian's online package database and its wiki.

There is also a “contrib” repository; its packages are free, but some of them exist to load separately distributed proprietary programs. This too is not thoroughly separated from the main Debian distribution.

Debian is the only common non-endorsed distribution to keep nonfree blobs out of its main distribution. However, the problem partly remains. The nonfree firmware files live in Debian's nonfree repository, which is referenced in the documentation on debian.org, and the installer in some cases recommends them for the peripherals on the machine.

Debian's wiki includes pages about installing nonfree firmware.

Instead of this nonfree distribution, use one of the free distros which are made from it: gNewSense, and PureOS.

This is very similar to the way Parabola is listed as a free'd version of Arch.

About the comments on non-free vulnerability fixes:
To address the concerns made in #936 , I edited the banner to educate users on any possible risks on installing non-free OSes.

Has this been discussed before?: Yes, #936

As always, feedback is welcome! :)

**Description**: Add [GNewSense](https://www.wikipedia.org/wiki/GNewSense) to OSes. **Why?** [GNewSene](https://www.wikipedia.org/wiki/GNewSense) is a fully free'd version of Debian. **How?**: I recommend changing the Debian description to: > Debian is a Unix-like computer operating system and a Linux distribution that is composed of free and open-source software, most of which is under the GNU General Public License, and packaged by a group of individuals known as the Debian project. GNewSense is a completely free/libre and open source version of Debian. **But isn't Debian fully free'd**: Yes and no, this is what the FSF has to say: > Debian's Social Contract states the goal of making Debian entirely free software, and Debian conscientiously keeps nonfree software out of the official Debian system. However, Debian also provides a repository of nonfree software. According to the project, this software is “not part of the Debian system,” but the repository is hosted on many of the project's main servers, and people can readily find these nonfree packages by browsing Debian's online package database and its wiki. > > There is also a “contrib” repository; its packages are free, but some of them exist to load separately distributed proprietary programs. This too is not thoroughly separated from the main Debian distribution. > > Debian is the only common non-endorsed distribution to keep nonfree blobs out of its main distribution. However, the problem partly remains. The nonfree firmware files live in Debian's nonfree repository, which is referenced in the documentation on debian.org, and the installer in some cases recommends them for the peripherals on the machine. > > Debian's wiki includes pages about installing nonfree firmware. > > Instead of this nonfree distribution, use one of the free distros which are made from it: gNewSense, and PureOS. This is very similar to the way [Parabola](https://www.wikipedia.org/wiki/Parabola_GNU/Linux-libre) is listed as a free'd version of [Arch](https://www.wikipedia.org/wiki/Arch_Linux). **About the comments on non-free vulnerability fixes:** To address the concerns made in #936 , I edited the banner to educate users on any possible risks on installing non-free OSes. **Has this been discussed before?**: Yes, #936 As always, feedback is welcome! :)
netlify[bot] commented 2019-06-08 04:47:32 +00:00 (Migrated from github.com)
Copy Link
Copy Source

Deploy preview for privacytools-io ready!

Built with commit f70afcbca5

https://deploy-preview-978--privacytools-io.netlify.com

Deploy preview for *privacytools-io* ready! Built with commit f70afcbca59cbb92e61d9b9d1e7ad8b90acdb7e1 https://deploy-preview-978--privacytools-io.netlify.com
Mikaela (Migrated from github.com) requested changes 2019-06-08 11:21:18 +00:00
Mikaela (Migrated from github.com) left a comment

Research missing on how does gNewSense and other mentioned free distributions handle microcode updates to avoid https://cpu.fail/ .

https://github.com/privacytoolsIO/privacytools.io/issues/936#issuecomment-493655147

Research missing on how does gNewSense and other mentioned free distributions handle microcode updates to avoid https://cpu.fail/ . https://github.com/privacytoolsIO/privacytools.io/issues/936#issuecomment-493655147
danarel commented 2019-06-08 16:22:23 +00:00 (Migrated from github.com)
Copy Link
Copy Source

According to the Wikipedia article you link to, GNewSense hasn't been maintained since 2017 and it's latest release support expired in May of 2018.

Without regular security updates at best, I fail to see how this is a good recommendation for users.

According to the Wikipedia article you link to, GNewSense hasn't been maintained since 2017 and it's latest release support expired in May of 2018. Without regular security updates at best, I fail to see how this is a good recommendation for users.
kewde (Migrated from github.com) requested changes 2019-06-08 16:38:59 +00:00
kewde (Migrated from github.com) left a comment

It's way too old to be considered even remotely secure.

It's way too old to be considered even remotely secure.
ghbjklhv commented 2019-06-08 17:23:44 +00:00 (Migrated from github.com)
Copy Link
Copy Source

@kewde gNewSense does still recieve security updates from the FSF and partnering developers.

@danarel Debian releases a new stable about every 3+ years.
If I recall properly, gNewSense uses the LTS version.

@kewde gNewSense does still recieve security updates from the FSF and partnering developers. @danarel Debian releases a new stable about every 3+ years. If I recall properly, gNewSense uses the LTS version.
Mikaela commented 2019-06-09 10:58:03 +00:00 (Migrated from github.com)
Copy Link
Copy Source

According to Kewde in https://github.com/privacytoolsIO/privacytools.io/issues/936#issuecomment-500139678 it's Debian 7 and Debian 7 LTS went EOL 31st May 2018 according to Debian wiki.

They have no news since Tue 10 May 2016 08:25:14 PM UTC.

According to Kewde in https://github.com/privacytoolsIO/privacytools.io/issues/936#issuecomment-500139678 it's Debian 7 and Debian 7 LTS went EOL 31st May 2018 [according to Debian wiki](https://wiki.debian.org/LTS). They have [no news since Tue 10 May 2016 08:25:14 PM UTC](https://savannah.nongnu.org/news/?group=gnewsense).
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Mikaela
kewde
Labels
Clear labels
:mag:🤖 Search Engines
I2P
The Invisible Internet Project (I2P)
 OS
Operating Systems
 Self-contained networks
Social media
Tor
Anything covering the Tor network
 WIP
active work in progress, do not merge or PR (yet)!
 XMPP
Extensible Messaging and Presence Protocol
 [m]
Matrix protocol
 approved
approved, waiting for a PR
 dependencies
Pull requests that update a dependency file
 duplicate
feedback wanted
high priority
iOS
low priority
stale
A label for stalebot if it gets added
 streaming
Anything related to media streaming.
 todo
wontfix
Issues or bugs that will not be fixed and/or do not have significant impact on the project.
 ₿ cryptocurrency
ℹ️ help wanted
↔️ file sharing
⚙️ web extensions
Browser Extension related issues
 ✨ enhancement
❌ software removal
🆕 software suggestion
🆘 critical
🇦🇶 translations
Anything covering a translated version of the site
 🌐 Social News Aggregators
🌐 hosting
🌐 website issue
*Technical* issues with the website.
 🏠 housekeeping
Anything primarily related to site cleanup.
 🐛 bug
👁️ browsers
👥 team chat
💢 conflicting
💬 discussion
💻 hardware
📁 file storage
📝 correction
Correction of content on the website
 📧 email
🔎 research required
🔐 password managers
🔒 VPN
Virtual Private Network
 🔒 file encryption
🖊️ digital notebooks
🗄️ DNS
Domain Name System
 🗨️ instant messaging (im)
🚫 Windows
🤖 Android
🦊 Firefox
Firefox & forks, about:config etc.
 🧰 productivity tools
No labels WIP 🔎 research required
Milestone
No items
No Milestone
Assignees
Clear assignees
jonah
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: privacyguides/privacytools.io#978