[personal profile] mjg59
Free software communities don't exist in a vacuum. They're made up of people who are also members of other communities, people who have other interests and engage in other activities. Sometimes these people engage in behaviour outside the community that may be perceived as negatively impacting communities that they're a part of, but most communities have no guidelines for determining whether behaviour outside the community should have any consequences within the community. This post isn't an attempt to provide those guidelines, but aims to provide some things that community leaders should think about when the issue is raised.

Some things to consider

Did the behaviour violate the law?

This seems like an obvious bar, but it turns out to be a pretty bad one. For a start, many things that are common accepted behaviour in various communities may be illegal (eg, reverse engineering work may contravene a strict reading of US copyright law), and taking this to an extreme would result in expelling anyone who's ever broken a speed limit. On the flipside, refusing to act unless someone broke the law is also a bad threshold - much behaviour that communities consider unacceptable may be entirely legal.

There's also the problem of determining whether a law was actually broken. The criminal justice system is (correctly) biased to an extent in favour of the defendant - removing someone's rights in society should require meeting a high burden of proof. However, this is not the threshold that most communities hold themselves to in determining whether to continue permitting an individual to associate with them. An incident that does not result in a finding of criminal guilt (either through an explicit finding or a failure to prosecute the case in the first place) should not be ignored by communities for that reason.

Did the behaviour violate your community norms?

There's plenty of behaviour that may be acceptable within other segments of society but unacceptable within your community (eg, lobbying for the use of proprietary software is considered entirely reasonable in most places, but rather less so at an FSF event). If someone can be trusted to segregate their behaviour appropriately then this may not be a problem, but that's probably not sufficient in all cases. For instance, if someone acts entirely reasonably within your community but engages in lengthy anti-semitic screeds on 4chan, it's legitimate to question whether permitting them to continue being part of your community serves your community's best interests.

Did the behaviour violate the norms of the community in which it occurred?

Of course, the converse is also true - there's behaviour that may be acceptable within your community but unacceptable in another community. It's easy to write off someone acting in a way that contravenes the standards of another community but wouldn't violate your expected behavioural standards - after all, if it wouldn't breach your standards, what grounds do you have for taking action?

But you need to consider that if someone consciously contravenes the behavioural standards of a community they've chosen to participate in, they may be willing to do the same in your community. If pushing boundaries is a frequent trait then it may not be too long until you discover that they're also pushing your boundaries.

Why do you care?

A community's code of conduct can be looked at in two ways - as a list of behaviours that will be punished if they occur, or as a list of behaviours that are unlikely to occur within that community. The former is probably the primary consideration when a community adopts a CoC, but the latter is how many people considering joining a community will think about it.

If your community includes individuals that are known to have engaged in behaviour that would violate your community standards, potential members or contributors may not trust that your CoC will function as adequate protection. A community that contains people known to have engaged in sexual harassment in other settings is unlikely to be seen as hugely welcoming, even if they haven't (as far as you know!) done so within your community. The way your members behave outside your community is going to be seen as saying something about your community, and that needs to be taken into account.

A second (and perhaps less obvious) aspect is that membership of some higher profile communities may be seen as lending general legitimacy to someone, and they may play off that to legitimise behaviour or views that would be seen as abhorrent by the community as a whole. If someone's anti-semitic views (for example) are seen as having more relevance because of their membership of your community, it's reasonable to think about whether keeping them in your community serves the best interests of your community.


I've said things like "considered" or "taken into account" a bunch here, and that's for a good reason - I don't know what the thresholds should be for any of these things, and there doesn't seem to be even a rough consensus in the wider community. We've seen cases in which communities have acted based on behaviour outside their community (eg, Debian removing Jacob Appelbaum after it was revealed that he'd sexually assaulted multiple people), but there's been no real effort to build a meaningful decision making framework around that.

As a result, communities struggle to make consistent decisions. It's unreasonable to expect individual communities to solve these problems on their own, but that doesn't mean we can ignore them. It's time to start coming up with a real set of best practices.

Re: Interesting, but incomplete picture…

Date: 2017-12-23 09:03 am (UTC)
From: (Anonymous)
Tony Morris being banned from ScalaZ might be, depending on what exactly actually triggered his banning. (To this day various members of typelevel give contradictory reasons for why he was banned; some even flatly deny that he ever was banned. But certainly there's enough uncertainty around his banning to make for a chilling effect on important discussions)

Re: Interesting, but incomplete picture…

Date: 2017-12-23 08:15 pm (UTC)
tim: Tim with short hair, smiling, wearing a black jacket over a white T-shirt (Default)
From: [personal profile] tim
I can't take you seriously if you're defending Tony Morris.

Re: Interesting, but incomplete picture…

Date: 2017-12-24 09:15 am (UTC)
From: [identity profile] m50d.wordpress.com
Morris is thoroughly unpleasant and any project leader with a spine would've banned him long ago, sure. But I'm not aware of him harassing any particular individuals (unless isolated insults on IRC count as harassment), nor do I believe he was racist, sexist, body-shaming or anything that would violate the CoC in question on its face.

Project leaders need to take responsibility for conduct in their project. But codes, as I've seen them applied in the Scala world, combine the worst of a formal system with the worst of an informal judgement. If it's not clear what kind of actions do and don't violate your CoC then I'd sooner trust the project leader to use their judgement directly.

Re: Interesting, but incomplete picture…

Date: 2017-12-24 10:35 am (UTC)
From: (Anonymous)
> I can't take you seriously if you're defending Tony Morris.

That is not a very useful contribution to the discussion; particularly for somebody who hasn't been involved in the event(s). Was the thread below the trigger for Tony Morris' banishment?


> Morris is thoroughly unpleasant

I have a counterexample which clearly invalidates this claim, as long as you are willing to agree that he was far from unpleasant in this sub-thread:


I would say that no matter how unpleasant Tony Morris could be *in some circumstances*, "thoroughly" seems to be excessive as a characterization.

You may think that it does not matter, but it is something which will be perceived, with cause, as character assassination by some. (I don't think you did it on purpose; just pointing out the bias.)

I would agree that from a limited glance at his contributions, Tony Morris seems to be a bit "twitchy" and overreactive. How much of that is willful, I don't know.

It also seems that it brings a lot to the table, if not in "conventional" ways. From a limited sample, I find it very hard to classify him as a "troll" or "vandal." "Ill-adjusted" at worst, but that's certainly not a "sin" in itself.

> and any project leader with a spine would've banned him long ago, sure. […] Project leaders need to take responsibility for conduct in their project.

You guys scare me.

You discuss establishing totalitarianism in your little kingdoms as if it was noncontroversial. "Leader," "with a spine," "banned"? "Leaders [have] responsibility for conduct [of others]."

Welcome to the Democratic People's Community of Whatever; a model which will conquer the world!

> I'd sooner trust the project leader to use their judgement directly.

As far as I can tell, this whole post & discussion is about events which are *not* *even* *covered* by the relevant "CoC"s—no matter how illegitimate the latter are.

In my view, you are only making progress if the end goal is a medieval system—and an amateurish one, at that. One of us is missing something important here.


P.-S. — I'm (obviously) the person who keeps asking for the definitions you rely on when elaborating the planned social models of your private utopias.


Matthew Garrett

About Matthew

Power management, mobile and firmware developer on Linux. Security developer at Google. Ex-biologist. @mjg59 on Twitter. Content here should not be interpreted as the opinion of my employer.

Page Summary

Expand Cut Tags

No cut tags