diff --git a/forge_comparison.md b/forge_comparison.md index fe565cf..df62d69 100644 --- a/forge_comparison.md +++ b/forge_comparison.md @@ -8,10 +8,14 @@ The following forges have no significant ethical issues: | *forge* | *registration publicly open* | *software* | *Tor-hostile* | *Cloudflare MitM* | *forced re/hCAPTCHA* | *forced execution of non-free software* | *notes* | |---|---|---|---|---|---|---|---| [git.fuwafuwa.moe](https://git.fuwafuwa.moe)([🧅](http://git.fuwafuwaqtlkkxwc.onion))|🟢|Gitea|n|n|n|n|SSH over Tor [broken](http://git.fuwafuwaqtlkkxwc.onion/levena/fuwafuwa/issues/1); HTTPS over Tor works| +[gitea.it](https://gitea.it)|🟢|Gitea 1.12.4|n|n|n|n|| +[git.kiwifarms.net](https://git.kiwifarms.net)|🟢|Gitea 1.13.1|n|n|n|n|| [git.nixnet.services](https://git.nixnet.services)|🔴|Gitea 1.13.1|n|n|n|n|formerly git.nixnet.xyz| [git.sdf.org](https://git.sdf.org)|🟢|Gitea 1.13.1|n|n|n|n|SSH over Tor broken but HTTPS over Tor works| [git.disroot.org](https://git.disroot.org)|🟢|Gitea 1.13.6|n|n|n|n|SSH over Tor works; based in NL| +[git.safemobile.org](https://git.safemobile.org)|🟢|Gitea 1.13.6|n|n|n|n|| [git.slashdev.space](https://git.slashdev.space)|🟢|Gitea 1.13.6|n|n|n|n|SSH over Tor broken (try HTTPS over Tor)| +[de.edumat.io](https://de.edumat.io)|🟢|Gitea 1.5.2|n|n|n|n|| [framagit.org](https://framagit.org)|🟢|Gitlab (CE 13.10.2)|n|n|n|n|[may become more restricted](https://framablog.org/2019/09/26/lets-de-frama-tify-the-internet) in mid-2021| [notabug.org](https://notabug.org)([🧅](http://qs3zumwfci4tntnd.onion))|🟢|Gogs|n|n|n|n|based on [liberated](https://notabug.org/hp/gogs) fork of Gogs; [supports Tor](https://notabug.org/tor) (the *onion* web UI is currently disabled in response to attack but the onion site accepts git connections); supports SSH keys and SSH over Tor to NAB's onion service; no e-voting; NAB doesn't associate PGP keys to users, so PGP signed commits may be unavailable or more manual work needed.| [launchpad.net](https://launchpad.net)|🟢|Launchpad|n|n|n|n|It's [unknown](https://wiki.freephile.org/wiki/Comparison_of_git_hosting_options) whether it functions without JavaScript; no wiki| @@ -21,6 +25,7 @@ The following forges have no significant ethical issues: [git.shivering-isles.com](https://git.shivering-isles.com)|🔴|Gitlab (CE)|n|n|n|n|Registration is open but broken-- requires 2FA using a device that can QR-scan, and the email verification link is DoA: ![](images/shivering-isles_broken_reg.png) That stale link error triggers even when accessed immediately.| [gitlab.freedesktop.org](https://gitlab.freedesktop.org)|🟢|Gitlab (CE)|n|n|n|n|possibly restricted to Freedesktop efforts| [gitlab.gnome.org](https://gitlab.gnome.org)|🟢|Gitlab (CE)|n|n|n|n|possibly restricted to Gnome efforts| +[gitlab.tails.boum.org](https://gitlab.tails.boum.org)|🟢|Gitlab (CE)|n|n|n|n|possibly restricted to Tails efforts but no AUP says otherwise| [gitlab.torproject.org](https://gitlab.torproject.org)|🟢|Gitlab (CE)|n|n|n|n|open registration; repo creation possibly restricted; Google reCAPTCHA is [allegedley](https://lists.gnu.org/archive/html/repo-criteria-discuss/2021-03/msg00000.html) used, but [not at registration time](https://gitlab.onionize.space)| [source.small-tech.org](https://source.small-tech.org)|🔴|Gitlab (CE)|n|n|n|n|| [source.puri.sm](https://source.puri.sm)|🟢|Gitlab (EE)|n|n|n|n|open registration but activity is [restricted](https://social.librem.one/@kyle/106030358887310621) to puri.sm efforts; no CAPTCHA (confirmed March 2021); is the JavaScript non-free with the enterprize edition?| diff --git a/gitlab-dot-com.md b/gitlab-dot-com.md index 0450de2..259fa5b 100644 --- a/gitlab-dot-com.md +++ b/gitlab-dot-com.md @@ -109,6 +109,13 @@ of CAPTCHAs: work for humans. The fruits of the human labor does not go to the laborer, but instead hCAPTCHA [pays][cfpaid] CloudFlare a cash reward. Consequently the laborers benefit their oppressor. +1. Gitlab.com neglects to obtain *informed* consent to use the + CAPTCHA. That is, users are not informed about what information is + being captured by who prior to solving the CAPTCHA (e.g. they don't + know Google will get their IP address). Users are also + deceived. E.g. after solving an hCAPTCHA for Cloudflare they may be + forced to also solve a Google reCAPTCHA. This exploitation treats a + person [merely as a means][asAmeans] to a highly unethical extent. 1. CAPTCHAs are defeated. Spammers find it economical to use third-world sweat shop labor for CAPTCHAs while legitimate users have this burden of dealing with CAPTCHAs that are often broken. @@ -229,6 +236,7 @@ of CAPTCHAs: [netneutrality]: https://www.fastcompany.com/90369697/googles-new-recaptcha-has-a-dark-sideby [glbug]: https://web.archive.org/web/20210306172223/gitlab.com/prism-break/prism-break/-/issues/2146 [GRConTP]: https://lists.gnu.org/archive/html/repo-criteria-discuss/2021-03/msg00000.html +[asAmeans]: https://plato.stanford.edu/entries/persons-means [//]: # (unused links) [grcNonfree]: # ([recaptcha/api.js](https://www.google.com/recaptcha/api.js)) diff --git a/input_data/forges.sql b/input_data/forges.sql index a1a3ae1..fce86ac 100644 --- a/input_data/forges.sql +++ b/input_data/forges.sql @@ -41,6 +41,20 @@ insert into forgesTbl (url_clrnet, software, notes) values ('https://git.slashde insert into forgesTbl (url_clrnet, software, notes) values ('https://git.disroot.org','Gitea 1.13.6','SSH over Tor works; based in NL'); insert into forgesTbl (url_clrnet, software, openpubreg, cflogin, notes) values ('https://libregit.org','Gitea',0,1,'reg by invite only'); insert into forgesTbl (url_clrnet, software, notes) values ('https://git.sdf.org','Gitea 1.13.1','SSH over Tor broken but HTTPS over Tor works'); +insert into forgesTbl (url_clrnet, software) values ('https://gitea.it','Gitea 1.12.4'); +insert into forgesTbl (url_clrnet, software) values ('https://de.edumat.io','Gitea 1.5.2'); +insert into forgesTbl (url_clrnet, software) values ('https://git.kiwifarms.net','Gitea 1.13.1'); +insert into forgesTbl (url_clrnet, software) values ('https://git.safemobile.org','Gitea 1.13.6'); + +/* +Bug: the record for de.edumat.io sorts unfavorably. We need a natural sort but that's not part of Sqlite. A collation function is needed: + proper way in C requires compilation => https://sqlite.org/forum/forumpost/cff93834d2 + proper way in Python => http://blog.ozanh.com/doku.php?id=python:database:sqlite:how_to_natural_sort + (hack) cast the leading part of the version number as a real => https://stackoverflow.com/questions/11489055/sqlite-order-by-string-containing-number-starting-with-0 + (hack) without collation => https://sqlite-users.sqlite.narkive.com/aU5aV12Z/howto-adding-natural-sort-to-sqlite-database + +status quo: we do nothing because it's perhaps over-engineering to fix this +*/ /* Gitlab */ insert into forgesTbl (url_clrnet, software, notes) values ('https://framagit.org','Gitlab (CE 13.10.2)','[may become more restricted](https://framablog.org/2019/09/26/lets-de-frama-tify-the-internet) in mid-2021'); @@ -49,6 +63,7 @@ insert into forgesTbl (url_clrnet, software, cfns, notes) values ('https://git.h insert into forgesTbl (url_clrnet, software, notes) values ('https://git.jami.net','gitlab_ce','possibly restricted to Jami efforts; acces to help page blocked to non-members so CE/EE unknown'); insert into forgesTbl (url_clrnet, software, cflogin, hrecaptcha, notes) values ('https://gitlab.com','gitlab_ee',1,'unavoidable','flagship instance running the *Enterprise Edition*; uses both hCAPTCHA & reCAPTCHA; heavily restricted with discriminatory policies; [copious ethical issues](gitlab-dot-com.md)'); insert into forgesTbl (url_clrnet, software, notes) values ('https://gitlab.freedesktop.org','gitlab_ce','possibly restricted to Freedesktop efforts'); +insert into forgesTbl (url_clrnet, software, notes) values ('https://gitlab.tails.boum.org','gitlab_ce','possibly restricted to Tails efforts but no AUP says otherwise'); insert into forgesTbl (url_clrnet, software, notes) values ('https://gitlab.gnome.org','gitlab_ce','possibly restricted to Gnome efforts'); insert into forgesTbl (url_clrnet, software, hrecaptcha, notes) values ('https://gitlab.torproject.org','gitlab_ce','non-essential tasks','open registration; repo creation possibly restricted; Google reCAPTCHA is [allegedley](https://lists.gnu.org/archive/html/repo-criteria-discuss/2021-03/msg00000.html) used, but [not at registration time](https://gitlab.onionize.space)'); insert into forgesTbl (url_clrnet, software, notes) values ('https://source.puri.sm','gitlab_ee','open registration but activity is [restricted](https://social.librem.one/@kyle/106030358887310621) to puri.sm efforts; no CAPTCHA (confirmed March 2021); is the JavaScript non-free with the enterprize edition?');