FSF Suggests That Google Free Gmail Javascript
Phoe6 writes "Apparently, FSF is calling it a 'JavaScript Trap' and wants 'useful websites' such as Gmail and others such as Twitter, Facebook to release their JavaScript code under Free Software License so that users can trust their service."
FSF wants Windows, Office, Photoshop, and everything else to be free. That's their job. People need to be able to make money on software, or large corporations won't invest in it. That's why FOSS-friendly companies like Sun are going under and being snapped up by profit-hungry pricks like Larry Ellison. Film at 11.
You do realize that you can already debug it and step through because it's client side?
XML is a known as a key material required to create SMD: Software of Mass Destruction
The FSF wants all software released under a free software license. So it really isn't news that they want Javascript software released under a free software license.
Well, the source is already technically available, since they ship you non-compiled javascript code. FSF's has several problems with this. 1) Gmail has not granted the user the right to modify the Javascript code. 2) Even if (1) is conceded, the FSF is arguing that the obfuscated code transmitted to the client browser does not truly constitute source code. They would like a link to be placed in a comment in the obfuscated code to the original, un-obfuscated code. There is a broader problem, however; even if a website transmits GPL'd code in the clear, the user does not have any easy way to replace the transmitted code with their modified code. They would like browsers to support hot-swapping websites' scripts with modified copies.
Considering that Javascript runs on the client side, I don't see how someone couldn't already do that. On top of that, if someone can hack the server side by exploiting a flaw found in client side code, then that is EXACTLY the reason why the unobfuscated source code should be released. Server side could should not be susceptible to an exploit a client can induce by manipulating code or data packets.
What I don't understand is what the hell the FSF is asking for. JavaScript runs on the client side and the source code is already available.
Releasing the client-side code isn't a big deal (it's right there in the page source!) I'd be more interested in the server-side code.
What exactly makes the complaint over the top? The purpose of the free software foundation is to promote free software. A web app is software, and the AGPL has not exactly caught on yet. It seems entirely reasonable and in line with their goals for the FSF to push for Gmail to become free software.
We cannot go around talking about how modern and awesome web apps are, then turn around and claim that the FSF has no business discussing the implications of web apps on software freedom.
Palm trees and 8
You should be able too. You can always replace the code on your devices to be sure.
Most people might not care, but that does not mean anything. Most of those people would be ok without freedom of speech or freedom of thought either.
Wow, that is one really good troll.
They already give you a copy of this code numbnuts, the FSF just wants them to change the license on it. Confiscation is done against your will. the FSF does not have the force of law they just are asking.
The FSF is never demeaned when they try to have software come under a free software license, that is their goal at all times.
You may not know it, but the website you're reading RIGHT NOW is a festering hotbed of evil. EVIL. Evil code that will steal your information, kill your wife and children, and damage the transmission on your car.
The ONLY way around that is to use our new FSF GnuWebScript, which is Totally Open and Free. Not only is it a Force for Good, it whitens your teeth and makes your toes smell nicer. It will never do those evil and nasty things that the Javascript does, because it's not Javascript - it's GnuWebScript!
GnuWebScript is a free side-set* of ECMAscript, a tragically unfree industry standard. GnuWebScript implements everything in ECMAscript slightly differently using free, non-proprietary language extensions.
GnuWebScript - to be free you must chain yourself to it!
* side set is not a superset or a subset - it's a sideset.
The problem with this logic is that cross-site-scripting, flash, hell, even your garden-variety "computer virus" all require you to run software "only on your own computer." Any hot-swapping technology has to be implemented with extreme care, and even then, you're still opening up a new attack vector. I seem to recall Greasemonkey, an open-source Firefox addon which allowed users to run external scripts within their browsers, having a history of vulnerabilities to this type of attack.
I feel like it's asking too much. The concern is, "hey gmail maybe your code triggers some js machine bugs, and we dont trust it." That's valid. But asking them to open source it for inspection, well that lets other folks pick the pieces up and start hawking their own version. Isn't there a middle ground [to ask for, and be denied]? I've just become jaded enough to start agreeing with that crappy business model "let the 10% that complain cancel their service". So long ago that seemed like a joke answer a fake company would use, but now we see it all the time. And I agree with it, alas. If you dont trust gmail, dont use it. Dont ask for their trade secrets either under the veil of security auditing and the intended benefit of legally copying it, or legitimately security auditing it and haphazardly allowing competing services to glean legal copies. Ask for some NDA access to have yourself or someone you trust inspect it. Just because something can be open sourced, doesn't mean it needs to be.
slashdot: where everyone yells sarcastic metaphors to themselves to understand the issue
I at least want the circuit diagrams and all images of the (E)EPROMs so I can fix the device when it breaks. It was like this in the past (circuit diagrams were in the manuals or in some magazines, at least in the USSR). I can find service manuals for some devices, but I want them included with the device and also have images of the chips that need to be programmed before they can be used.
Nothing a glorified find-and-replace can't help with. This'll help you get started:
http://unwrongest.com/how-to-decompress-javascript/
"When information is power, privacy is freedom" - Jah-Wren Ryel
Wouldn't FSF's effort be better placed making a tool that intelligently adds whitespace and allows the user to quickly and easily change variable and function names? It would still be above the typical user's level but all it would take is one white hatter de-obfuscate the code and post it somewhere. Seriously, gmail's java script isn't that big, you could probably do it with notepad and find-replace by hand in a couple hours.
The issue is that without the essential freedoms to study, modify and distribute copies of the software, users are at a disadvantage to the developer and that's unjust.
Before parroting boilerplate lines, could you please make an effort to understand the context of what people are talking about? Your quote is great for talking about Matlab or something; here, it makes no sense.
You can already "study" Google's Javascript code: like you said, you can look at it. You can already "modify" Google's Javascript code, just like you can modify any other Javascript code. Try it sometime: type "javascript:foo();" into your browser and watch the magic happen. Nothing is stopping you from disabling Google's Javascript altogether and setting your own scripts to run every time you open mail.google.com. You could even share your custom Javascript with other people if they want to use it: behold, you're distributing copies. What rights, exactly, are you arguing for? And what are you talking about, "disadvantage to the developer"? You can see exactly what the Javascript does, and you can disable or modify some or all of it at your whim.
Dislike the Electoral College? Lobby your state to join the National Popular Vote Interstate Compact.
I don't quite see the point. Sure it would be nice to have the Javascript under a Free Software license, but that would be very far down my list of priorities, as with Javascript and the Web in general there is one very fundamental difference to regular software: You neither own that stuff nor control it, they do and that is the problem that needs attacking. It doesn't make a difference if they stick a GPL header on top of their code or not, I as I would still be forced to use whatever version they ship me, keeping around an older copy with features they might have changed/removed/whatever doesn't help me when the API to their servers has changes, that old GPL copy might either break or become unusable. The real solution would be to provide standard data driven APIs for webservices, so that I wouldn't depend on their Javascript and HTML code, but could roll my own.
The whole problem with the Web today is that I don't have direct access to my data, but instead can only access it via a whole swoop of HTML and Javascript stuff, that makes it frequently hard or even impossible to actually do certain operation. A very basic example would be backup. Yeah, I can download mail from GMail via POP or IMAP and that will give me some of my mails, but what about chat logs, mail I send, tags, contacts, etc. and a bunch of other meta data that isn't just the mail? Can I backup all that? And even more importantly: Can I actually restore it? If GMail decides to delete my account tomorrow, can I open a new one and restore my backup into the new account? Can I do that when I change mail providers? Will meta data survive the transfer? That is the problem that needs fixing, as almost all webpages suffer from it, even the glorious 100% Free Software ones generally don't give you full import and export capabilities of your data and even when they do the interfaces are often limited and cumbersome.