[Freedombox-discuss] Freedombox's pursuit of perfection undermines its goals

[Nick Daly]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joshua, thank you for sending this email.

Joshua Spodek <joshuaspodek at yahoo.com> writes:

> I hope the following blog post --
> http://joshuaspodek.com/freedomboxs-pursuit-perfection-undermines-goals
> -- is appropriate here.
>
> I wrote it to help motivate and contribute to this project. I hope that
> comes across. I don't claim the final word or best perspective, so I
> welcome people pointing out things I missed or misunderstood.

Your views are very welcome here.  I'm just one of many folks trying to
get as much progress done in this project as quickly as possible, and
progress is pretty continuously being made to our publicly available
goal (though as others have said, it's possible to do this yourself,
now, just without the bells, whistles, integration, and ease-of-use).
Your post actually got me to put a little something on the UI wiki page
;)

I know it seems slow at times, but there are a lot of reasons we need to
do (certain features) right the first time.  The best example is the
Haystack Project [0] which, unfortunately, leaked user information and
actually did more harm to users because they *thought* their information
was protected when it wasn't.  The worst thing we can do is to project
an incorrect *image* of security on an insecure project (personal
security theatre).

If we need to do it right the first time, doing it right takes a long
time, and we need to get it out the door now, then leaving those
features out of the first release might be the right approach.  Doing it
wrong (misleading people with our image) does a lot more harm than doing
it slowly (because people *do* trust us to do it right the first time, I
know I do).

Nick

0: http://www.h-online.com/security/news/item/Critical-bugs-stop-Haystack-anti-censorship-project-Update-1078540.html
- -- 
GPG: 0x0928D23A | D95C 3204 2EE5 4FFD B25E  C348 9F27 33F4 0928 D23A
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
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=eIP0
-----END PGP SIGNATURE-----