Gitea
/
Gitea-Italia
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Aggiornare 'README.md'

This commit is contained in:
Filippo DB 2020-08-13 09:11:50 +02:00
parent bb0ca88b9c
commit f675c8ef48
1 changed files with 39 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

38
README.md
View File

@ -1,3 +1,41 @@
# Gitea
Perché usare Gitea, l'alternativa etica a Gitlab e Github
## Perchè non usare Gitlab
“Free software” that forces execution of non-free software isn’t really free.
* There is nothing particularly wrong with the gitlab software, but that software must be hosted and configured and there are copious ethical problems with the [gitlab.com](http://gitlab.com) service that the OP suggested:
* Sexist treatment toward saleswomen who are [told to wear](https://web.archive.org/web/20200309145121/https://www.theregister.co.uk/2020/02/06/gitlab_sales_women/) dresses, heels, etc.
* Hosted by Google.
* [Proxied](https://about.gitlab.com/blog/2020/01/16/gitlab-changes-to-cloudflare/) through privacy abuser CloudFlare.
* [tracking](https://social.privacytools.io/@darylsun/103015834654172174)
* Hostile treatment of Tor users trying to register.
* Hostile treatment of new users who attempt to register with a @spamgourmet.com forwarding email address to track spam and to protect their more sensitive internal email address.
* Hostile treatment of Tor users after they’ve established an account and have proven to be a non-spammer.
Regarding the last bullet, I was simply trying to edit an existing message that I already posted and was forced to solve a CAPTCHA (attached). There are several problems with this:
* CAPTCHAs break robots and robots are not necessarily malicious. E.g. I could have had a robot correcting a widespread misspelling error in all my posts.
* CAPTCHAs put humans to work for machines when it is machines that should work for humans.
* CAPTCHAs are defeated. Spammers find it economical to use third-world sweat shop labor for CAPTCHAs while legitimate users have this burden of broken CAPTCHAs.
* The reCAPTCHA puzzle requires a connection to Google
* 1. Google’s reCAPTCHAs compromise security as a consequence of surveillance capitalism that entails collection of IP address, browser print.
* 1. * anonymity is [compromised](https://cryptome.org/2016/07/cloudflare-de-anons-tor.htm).
* 1. * (speculative) could Google push malicious j/s that intercepts user registration information?
* 2. Users are forced to execute [non-free javascript](https://libreplanet.org/wiki/Group:Free_Javascript_Action_Team#Ideas_for_focus) ([recaptcha/api.js](https://www.google.com/recaptcha/api.js)).
* 3. The reCAPTCHA requires a GUI, thus denying service to users of text-based clients.
* 4. CAPTCHAs put humans to work for machines when it is machines who should be working for humans. PRISM corp Google Inc. benefits financially from the puzzle solving work, giving Google an opportunity to collect data, abuse it, and profit from it. E.g. Google can track which of their logged-in users are visiting the page presenting the CAPTCHA.
* 5. The reCAPTCHAs are often broken. This amounts to a denial of service. ![gitlab_google_recaptcha](https://user-images.githubusercontent.com/18015852/51769530-9d494300-20e3-11e9-9830-1610b3ae9059.png)
* 5. * the CAPTCHA server itself refuses to give the puzzle saying there is too much activity.
* 5. * E.g.2: ![](https://user-images.githubusercontent.com/18015852/55681364-07713600-5926-11e9-8874-137e4faaf423.png)
* 6. The CAPTCHAs are often unsolvable.
* 6. * E.g.1: the CAPTCHA puzzle is broken by ambiguity (is one pixel in a grid cell of a pole holding a street sign considered a street sign?)
* 6. * E.g.2: the puzzle is expressed in a language the viewer doesn’t understand.
* 7. * (note: for a brief moment [gitlab.com](http://gitlab.com/) switched to hCAPTCHA by Intuition Machines, Inc. but now they’re back to Google’s reCAPTCHA)
* 8. * Network neutrality abuse: there is an access inequality whereby users logged into Google accounts are given more favorable [treatment](https://www.fastcompany.com/90369697/googles-new-recaptcha-has-a-dark-sideby) the CAPTCHA (but then they take on more privacy abuse). Tor users are given extra harsh treatment.
The reason for the reCAPTCHA stuff being hosted on Google.com is shared cookies. This allows reCAPTCHA to gain more information about what you trust Google with online…
This is why gitlab.com should be listed as a service to avoid, like MS [Github](https://github.com).