Re: Proposal -- Interpretation of DFSG on Artificial Intelligence (AI) Models

Stefano Zacchiroli <[email protected]>
Newsgroups gmane.linux.debian.devel.vote
Message-ID <[email protected]>
On Tue, Apr 22, 2025 at 02:14:34PM -0700, Russ Allbery wrote:
> I suspect no source technically exists for those weights anywhere, since
> upstream's training work was fairly manual as I recall and is not
> something they tend to work iteratively on, but it's possible that one of
> the upstream developers has all of the data and scripts somewhere.

FWIW, I looked specifically in the gnubg case a while ago, because it
was an interesting test case for this discussion. Here's what I found
out:

- The training program (using the language from the GR draft) is
  allegedly available and licensed under GPL3.

- The training data is allegedly available as well, but comes without
  any declared license. I tend to concur with you, Russ, that it's very
  likely non-copyrightable material. But that's only partly reassuring
  to me, because I'm not sure how Debian would practically go about
  ruling that certain stuff that comes without copyright/license is fine
  for main, whereas other stuff in the same situation is not.

Links to the above two element are public, but not very well documented.
I had to dig them up discussing on the gnubg mailing list and some links
were provided to me only in private mail (I don't know why).

I wrote "allegedly available" above because while I have been able to
retrieve all of it, I was not able to reproduce/rerun it. (Just to
mention the *first* hurdle one would encounter to do so in modern
Debian: it's all Python 2.)

My gut feeling is that gnubg might be salvagable to remain in main if
this GR is adopted (provided significant work is poured into it to test
reproducibility at least once), but it'd be wise to have a broader
impact analysis, for the good reasons mentioned by Simon.

Cheers
-- 
Stefano Zacchiroli . [email protected] . https://upsilon.cc/zack  _. ^ ._
Full professor of Computer Science              o     o   o     \/|V|\/
Télécom Paris, Polytechnic Institute of Paris     o     o o    </>   <\>
Co-founder & CSO Software Heritage            o o o     o       /\|^|/\
Mastodon: https://mastodon.xyz/@zacchiro                        '" V "'
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEE8ZooXsFA+JEz681OfH5Cj5NBJ5kFAmgOnSkACgkQfH5Cj5NB
J5k7Vg//cDQOK3sJ/ONwfeVB1gpPTAUpjoUUJ6IfZipg+1YyN52/JMFkV8bNovUu
Q/MqoyHxCNNCPTycDw0ZgbLXtMhpnvXgAEiCexxUrmJFm3NZva8YtGdlOMqYTQ1o
80dbkSnKh8KKnMrrM7IduEUwgBSgQOUb60hbByM81nOY9pk0hFh4Ih66ke4uBxDl
nBOh5/UaaG+AkYj7aTmLpqs98euaHThhHnZfCQpXVK5QKJBEmz7VSDyLnCX1+DZe
YztvH8ge5pb6TLP/XIJk0uSph6AJqQKPF7tYUIsvO4FbluR2mhpmwjEX1KxWMjDE
TzL1zn/YMQaE9VbW2Q1WV38+YC3uLKILNGiqbQao4w1fSEN8Ma0Rmc6ieTX0b3c0
NI9qClQSmXMpVf4WqqiV7yUEq1khZllwN5Wbt/zZO0TWd4RlT3oETc0u/CA5IJ2F
cw237sTqLg6cLqW/PygpTP6IzRsE//punVxrKLEIrmvIFvZYXYn/E9G+DsoeAlAs
Kltfv0fihxvKW/92ua5onF8uO4LBBU1Xf9dc96X9lQctHy9hMCqsUDg6fdk1w5/p
FSrV9OtlZ/GQcQBDPWW3olaKcfomDNPwVvtRQ/2AvVxMIWaAotdGTPiJO4KCdaKq
4lb64S0N4LCg22mvHr8RIiaWQhWkyyBcUWBLLXEIynOaKlFRP34=
=nw4H
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.