Github messages for voidlinux
 help / color / mirror / Atom feed
* [ISSUE] Chromium package contains non-free components (Widevine)
@ 2021-03-06 18:05 selfisekai
  2021-03-06 18:44 ` ericonr
                   ` (14 more replies)
  0 siblings, 15 replies; 16+ messages in thread
From: selfisekai @ 2021-03-06 18:05 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 1308 bytes --]

New issue by selfisekai on void-packages repository

https://github.com/void-linux/void-packages/issues/29273

Description:
<!-- Don't request update of package. We have a script for that. https://alpha.de.repo.voidlinux.org/void-updates/void-updates.txt . However, a quality pull request may help. -->
### System

* xuname: `Void 5.10.19_1 x86_64 AuthenticAMD uptodate rrmFF`
  *output of ``xuname`` (part of xtools)*
* package: `chromium-88.0.4324.182_1` 
  *affected package(s) including the version*: ``xbps-query -p pkgver <pkgname>``

### Expected behavior
A package downloaded from outside of the nonfree repository should not contain/download non-free components

### Actual behavior
Chromium downloads the Widevine component and uses it, which is not really transparent to the user.
![image](https://user-images.githubusercontent.com/11798442/110215944-a903b800-7eac-11eb-82b4-90ead6423f65.png)
![image](https://user-images.githubusercontent.com/11798442/110216334-dd787380-7eae-11eb-8fba-9830627671f2.png)

### Steps to reproduce the behavior
- `xbps-install chromium`
- `chromium`
- open `chrome://components` and force an update of Widevide CDM, or just wait until it gets triggered itself
- try playing a Widevine-protected video, like here: https://bitmovin.com/demos/drm


^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
@ 2021-03-06 18:44 ` ericonr
  2021-03-06 22:09 ` selfisekai
                   ` (13 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: ericonr @ 2021-03-06 18:44 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 257 bytes --]

New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792016685

Comment:
Afaik this is a *feature* for anyone who wants to play netflix or similar. I'm not sure we'd like to disable it...

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
  2021-03-06 18:44 ` ericonr
@ 2021-03-06 22:09 ` selfisekai
  2021-03-06 22:19 ` q66
                   ` (12 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: selfisekai @ 2021-03-06 22:09 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 633 bytes --]

New comment by selfisekai on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792071892

Comment:
I don't really have a problem with an _option_ to use Widevine, if it is either a package from the nonfree repository, or it's transparent to the user (like in Firefox, which explicitly asks the user if they want to install and enable the Widevine add-on) 
![image](https://user-images.githubusercontent.com/11798442/110222152-82f00f00-7ed0-11eb-9aca-c47a7830506f.png)

Placing Chromium, which does this automatically, in a free repository, creates an illusion of using free software.

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
  2021-03-06 18:44 ` ericonr
  2021-03-06 22:09 ` selfisekai
@ 2021-03-06 22:19 ` q66
  2021-03-06 22:19 ` q66
                   ` (11 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: q66 @ 2021-03-06 22:19 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 343 bytes --]

New comment by q66 on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792073131

Comment:
this is an upstream decision, we generally don't override upstream decisions

we also don't adhere to strict free software guidelines, so requirements from the likes of FSF are entirely irrelevant to us

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (2 preceding siblings ...)
  2021-03-06 22:19 ` q66
@ 2021-03-06 22:19 ` q66
  2021-03-06 23:42 ` ptrcnull
                   ` (10 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: q66 @ 2021-03-06 22:19 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 424 bytes --]

New comment by q66 on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792073131

Comment:
this is an upstream decision, we generally don't override upstream decisions (as for widevine, you can already install it from packages: `chromium-widevine`)

we also don't adhere to strict free software guidelines, so requirements from the likes of FSF are entirely irrelevant to us

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (3 preceding siblings ...)
  2021-03-06 22:19 ` q66
@ 2021-03-06 23:42 ` ptrcnull
  2021-03-06 23:43 ` ptrcnull
                   ` (9 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: ptrcnull @ 2021-03-06 23:42 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 460 bytes --]

New comment by ptrcnull on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792119673

Comment:
I don't think the issue is about FSF or any other guidelines; it's just not cool that a supposedly open-source package downloads a backdoor from Google, considering that it's possible to disable it, as [https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23960454](Debian package maintainers) have been able to do it.

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (4 preceding siblings ...)
  2021-03-06 23:42 ` ptrcnull
@ 2021-03-06 23:43 ` ptrcnull
  2021-03-06 23:52 ` ptrcnull
                   ` (8 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: ptrcnull @ 2021-03-06 23:43 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 460 bytes --]

New comment by ptrcnull on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792119673

Comment:
I don't think the issue is about FSF or any other guidelines; it's just not cool that a supposedly open-source package downloads a backdoor from Google, considering that it's possible to disable it, as [Debian package maintainers](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23960454) have been able to do it.

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (5 preceding siblings ...)
  2021-03-06 23:43 ` ptrcnull
@ 2021-03-06 23:52 ` ptrcnull
  2021-03-07  1:30 ` q66
                   ` (7 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: ptrcnull @ 2021-03-06 23:52 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 624 bytes --]

New comment by ptrcnull on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792119673

Comment:
I don't think the issue is about FSF or any other guidelines; it's just not cool that a supposedly open-source package downloads a backdoor from Google, considering that it's possible to disable it, as [Debian package maintainers](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23960454) have been able to do it.

As far as I know, Michel's patch would allow users to still download Widevine via the `chromium-widevine` package, but makes it actually opt-in and transparent.

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (6 preceding siblings ...)
  2021-03-06 23:52 ` ptrcnull
@ 2021-03-07  1:30 ` q66
  2021-03-07  1:40 ` ericonr
                   ` (6 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: q66 @ 2021-03-07  1:30 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 257 bytes --]

New comment by q66 on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792146760

Comment:
hm, i guess this is simple enough

probably worth adding into https://github.com/void-linux/void-packages/pull/29205

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (7 preceding siblings ...)
  2021-03-07  1:30 ` q66
@ 2021-03-07  1:40 ` ericonr
  2021-03-07  1:40 ` ericonr
                   ` (5 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: ericonr @ 2021-03-07  1:40 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 260 bytes --]

New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792150148

Comment:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23960454#54 <-- can we be sure it won't be introducing new bugs?


^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (8 preceding siblings ...)
  2021-03-07  1:40 ` ericonr
@ 2021-03-07  1:40 ` ericonr
  2021-03-07  2:11 ` q66
                   ` (4 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: ericonr @ 2021-03-07  1:40 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 285 bytes --]

New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792150148

Comment:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23960454#54 <-- can we be sure it won't be introducing new bugs? (besides being chromium)


^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (9 preceding siblings ...)
  2021-03-07  1:40 ` ericonr
@ 2021-03-07  2:11 ` q66
  2021-03-07  2:27 ` ericonr
                   ` (3 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: q66 @ 2021-03-07  2:11 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 315 bytes --]

New comment by q66 on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792165657

Comment:
well, installing `chromium-widevine` is probably already the preferrable way to get the plugin and then you won't get autoupdates at all (but it updates together with chromium)

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (10 preceding siblings ...)
  2021-03-07  2:11 ` q66
@ 2021-03-07  2:27 ` ericonr
  2021-03-07  2:32 ` q66
                   ` (2 subsequent siblings)
  14 siblings, 0 replies; 16+ messages in thread
From: ericonr @ 2021-03-07  2:27 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 387 bytes --]

New comment by ericonr on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792174564

Comment:
AFAIK we have kept `chromium-widevine` mostly for qutebrowser uers :p

From a supply chain perspective, the package is indeed better, but I think most chromium users will be relying on the convenience of the automatic download (I know I was).

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (11 preceding siblings ...)
  2021-03-07  2:27 ` ericonr
@ 2021-03-07  2:32 ` q66
  2022-05-07  2:06 ` github-actions
  2022-05-22  2:10 ` [ISSUE] [CLOSED] " github-actions
  14 siblings, 0 replies; 16+ messages in thread
From: q66 @ 2021-03-07  2:32 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 272 bytes --]

New comment by q66 on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-792175897

Comment:
shrug, my platform doesn't have widevine or proprietary plugins in the first place, so i'll let the more qualified people decide here

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (12 preceding siblings ...)
  2021-03-07  2:32 ` q66
@ 2022-05-07  2:06 ` github-actions
  2022-05-22  2:10 ` [ISSUE] [CLOSED] " github-actions
  14 siblings, 0 replies; 16+ messages in thread
From: github-actions @ 2022-05-07  2:06 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 293 bytes --]

New comment by github-actions[bot] on void-packages repository

https://github.com/void-linux/void-packages/issues/29273#issuecomment-1120110079

Comment:
Issues become stale 90 days after last activity and are closed 14 days after that.  If this issue is still relevant bump it or assign it.

^ permalink raw reply	[flat|nested] 16+ messages in thread

* Re: [ISSUE] [CLOSED] Chromium package contains non-free components (Widevine)
  2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
                   ` (13 preceding siblings ...)
  2022-05-07  2:06 ` github-actions
@ 2022-05-22  2:10 ` github-actions
  14 siblings, 0 replies; 16+ messages in thread
From: github-actions @ 2022-05-22  2:10 UTC (permalink / raw)
  To: ml

[-- Attachment #1: Type: text/plain, Size: 1311 bytes --]

Closed issue by selfisekai on void-packages repository

https://github.com/void-linux/void-packages/issues/29273

Description:
<!-- Don't request update of package. We have a script for that. https://alpha.de.repo.voidlinux.org/void-updates/void-updates.txt . However, a quality pull request may help. -->
### System

* xuname: `Void 5.10.19_1 x86_64 AuthenticAMD uptodate rrmFF`
  *output of ``xuname`` (part of xtools)*
* package: `chromium-88.0.4324.182_1` 
  *affected package(s) including the version*: ``xbps-query -p pkgver <pkgname>``

### Expected behavior
A package downloaded from outside of the nonfree repository should not contain/download non-free components

### Actual behavior
Chromium downloads the Widevine component and uses it, which is not really transparent to the user.
![image](https://user-images.githubusercontent.com/11798442/110215944-a903b800-7eac-11eb-82b4-90ead6423f65.png)
![image](https://user-images.githubusercontent.com/11798442/110216334-dd787380-7eae-11eb-8fba-9830627671f2.png)

### Steps to reproduce the behavior
- `xbps-install chromium`
- `chromium`
- open `chrome://components` and force an update of Widevide CDM, or just wait until it gets triggered itself
- try playing a Widevine-protected video, like here: https://bitmovin.com/demos/drm


^ permalink raw reply	[flat|nested] 16+ messages in thread

end of thread, other threads:[~2022-05-22  2:10 UTC | newest]

Thread overview: 16+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-03-06 18:05 [ISSUE] Chromium package contains non-free components (Widevine) selfisekai
2021-03-06 18:44 ` ericonr
2021-03-06 22:09 ` selfisekai
2021-03-06 22:19 ` q66
2021-03-06 22:19 ` q66
2021-03-06 23:42 ` ptrcnull
2021-03-06 23:43 ` ptrcnull
2021-03-06 23:52 ` ptrcnull
2021-03-07  1:30 ` q66
2021-03-07  1:40 ` ericonr
2021-03-07  1:40 ` ericonr
2021-03-07  2:11 ` q66
2021-03-07  2:27 ` ericonr
2021-03-07  2:32 ` q66
2022-05-07  2:06 ` github-actions
2022-05-22  2:10 ` [ISSUE] [CLOSED] " github-actions

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).