developers need to identify themselves by providing an OpenPGP key that is signed by at least two existing members of the project" 20:35 <+prometheanfire> ya 20:36 <+prometheanfire> I'd be fine with that 20:36 <@K_F> so given Gentoo is less known, if we make that Gentoo or Debian developer.. it already makes it rather easy to become a contributor 20:36 <@K_F> and easy enough to control.. 20:36 <+prometheanfire> true 20:31 <+prometheanfire> cross trust between the two groups would be cool 20:31 <@K_F> cross wouldn't likely be case, as we'd trust them, but they not us to begin with 20:31 <@K_F> but that'd be fine 20:32 <+prometheanfire> maybe we should just limit this to non-anon for now, I'm not sure who made that a req to begin with 20:32 <@K_F> https://download.sumptuouscapital.com/gentoo/openpgp-wot/gentoo-devs.pdf < see very blue one 20:33 <@K_F> very blue means signign a lot of other people without having incoming signatures 20:33 <+prometheanfire> the sky blue? 20:33 <@K_F> but yeah.. debian has very easy requirements on it 20:33 <@K_F> lets just say I've never met the individual in question but my keyblock is signed 20:34 <@K_F> it doesn't really matter, what is perinent is "When joining the Debian project, developers need to identify themselves by providing an OpenPGP key that is signed by at least two existing members of the project" 20:35 <+prometheanfire> ya 20:36 <+prometheanfire> I'd be fine with that 20:36 <@K_F> so given Gentoo is less known, if we make that Gentoo or Debian developer.. it already makes it rather easy to become a contributor 20:36 <@K_F> and easy enough to control.. 20:36 <+prometheanfire> true 20:37 <@K_F> or for that matter any other distro we trust 20:37 <@K_F> my go-to is typically debian 20:37 <+prometheanfire> personally I'm fine with signing keys over video chat, if that's the only way 20:37 <+prometheanfire> ya, debian is generally top for me too https://t.co/zFZgkXVvbd 20:40 < WSJ> [1c47] 'It’s meditative. You just hear the wind and the birds.' The life of a Napa vineyard manager (which has its share of drama, too) 20:37 <@K_F> that is a matter of discussion, but better than nothing 20:37 <+prometheanfire> yep 20:38 <@K_F> ultimately there are certainly government agencies influencing things 20:45 < nytimes> [1c4f] A rapidly growing number of British patients are going to France for medical treatment https://t.co/VIrogNMPrm 20:45 < CNN> [1c50] "We have no future": Fleeing Putin's Russia for freedom in Latvia https://t.co/iJC6KXisTF https://t.co/N3ZiETWZ0m 20:45 < cnni> [1c51] "We have no future": Fleeing Putin's Russia for freedom in Latvia 20:38 <@K_F> and the FOSDEM fiasco of 2016 shows that people don't verify things to begin with 20:38 <@K_F> SSN 000000000000 and printed "Sample" across the ID... 20:39 <+prometheanfire> I missed that 20:39 <@K_F> some people had fun on that one 20:40 <+prometheanfire> probably going to miss the next one too (2019), going through life days. 20:47 < k8em0> [1c5d] RT @Rumi_Quote: Seek the wisdom that will untie your knot. Seek the path that demands your whole being. 20:47 < pimmfox> [1c5e] RT @dcexaminer: Democrat offers to hire Andrew McCabe so he could violation. [@joshgerstein: DOJ is taking the position that Sessions recusal covers only the 20:48 < pimmfox> investigations themselves and not employee discipline or professional changes 20:40 <+prometheanfire> it'd be neat to have that type fo thing as a test of who signs 'bad' keys 20:40 <@K_F> I don't particilate in those key signing parties, I only do smaller ones and picture of it. We are proud of you ❤️ thank you for standing with us and countless others that have lost people. https://t.co/ymEywluNbz 20:52 < WSJecon> [1c68] Banks look to break government’s hold on student-loan market https://t.co/cAqNwxbhil bilateral exchanges 20:41 <+prometheanfire> we had one at work that was run fairly well 20:41 <+prometheanfire> that does set off red flags, yes 20:42 <@K_F> its actually the only one flagged 20:44 <@K_F> the reason I'm conceding that we shoudl include debian is that Gentoo isn't spread widely enough 20:44 <@K_F> but at some point I'd certainly require gentoo only.. it really isn't that much of a requirement Next meeting: 2018-03-11 18:00 UTC | https://www.timeanddate.com/worldclock/fixedtime.html?is 20:45 <@K_F> we have >= 200 devs 20:45 <@K_F> so it isn't that difficult to get in touch if we have those devs participating in conferences 20:47 -!- mode/#gentoo-council [+v prometheanfire] by ChanServ 20:48 <@K_F> on some level that comes down to existing devs not being involved enough for new people to get in touch, or potential new devs not being involved enough in the general ecosystem to be considered 20:48 <@K_F> in particular if going the debian inclusive route.. the latter isn't a problem 20:52 <@K_F> by all means I can talk with debian to get a cross part of things, but that seems like further down the road 20:53 <@K_F> and something that restricts things more than our own policies, we can easily say we accept them without them accepting us per se 20:53 <@K_F> they are already CVE CNAs etc without us 20:53 <@K_F> but we can build things one step at a time 20:59 <+prometheanfire> looks like I dc'd a few minutes ago 20:59 <+prometheanfire> 14:42 < K_F@> its actually the only one flagged 20:59 <+prometheanfire> 14:48 < K_F@> on some level that comes down to existing devs not being involved enough for new people to get in touch, or potential new devs not being involved enough in the general ecosystem to be considered 21:00 <@K_F> let me bring up backlog [21:00] [@K_F(+Zi)] [6:FreeNode/#gentoo-council [Act: 4,10,11,14,15,19,20,21,25,26,28,31,33] [