Language Selection

English French German Italian Portuguese Spanish

Daniel Pocock: Mollamby, Conflicts of Interest vs Privacy

Filed under
Debian

As the Mollamby affair has emerged, some people have rushed to defend the privacy of Chris Lamb and Molly de Blanc or dismissed it as mere innuendo without understanding the ethical issues.

What is the difference between innuendo and incrimination? Evidence.

Privacy is a valid consideration, but it is not the only one. I delayed publishing my own blog about the subject while weighing the privacy implications against the ethical issues.

Let's consider some of the evidence backing up the facts about Mollamby. Parts of the evidence have been redacted for the privacy of third parties but the material presented here accurately reflects the situation.

[...]

Notice that de Blanc does not mention her conflict of interest (romantic relationship with the DPL, Chris Lamb) in that email. Lamb never mentioned it either. Neither of them recused themselves. I was travelling that weekend and couldn't make time to join a hastily organized meeting. As boyfriend and girlfriend, they had a meeting without the rest of the Debian GSoC admin team. When the boyfriend is also the leader of the project and when the girlfriend's conduct is in question, is it any surprise that another volunteer is blamed and the girlfriend takes over the team?

That email is the smoking gun: two people at the very top of the free software ecosystem (Debian and OSI) using a volunteer as a scapegoat for mistakes one of them had been party to.

This farce is further compounded by the fact the original complaint was about conflicts of interest.

Read more

Anonymous mail explaining the conflict

People have been arriving to DebConf trying to pick apart the
recent concerns.  The version of events commented officially and
the Regrets email published by Sam Hartman is very disparaging
to some people while other people seem to evade any responsibility.

Here are some facts that have emerged through debian-private and
discussions at DebConf that some of us feel very uncomfortable
about.  We are posting anonymously because Sam Hartman's report is
too biased and we don't want to be subject to the next
Anti Harassment humiliations for questioning the DPL.

There is a growing perception that Debian and other associated
groups have become too incestuous.  For everybody else, it means
we don't know who we can trust.

Fact 1: Mollamby
----------------

A clandestine relationship that existed between the Debian Project
Leader (DPL), Chris Lamb and his subordinate, Molly de Blanc,
the head of the Outreach team who is also a member of the controversial
Anti-Harassment team.  Mollamby.

Clandestine relationships are not automatically wrong.  It is
the surrounding facts that make this both scandalous and worthy
of the same scrutiny and media coverage forcefully imposed on
other Debian Developers.  Mollamby.

Fact 2: a GSoC conflict of interest
-----------------------------------

A student applying to GSCoC informed about his relationship
with another member of the community.  The other community
member is named in a delegation by former DPL Chris Lamb.  Neither
the student nor the other community member are under
suspicion:  Both declared the relationship up front.

There were over 100 student applications to GSoC 2018 and only 20%
were selected.  It has not been stated whether the student
in this case was one of those selected.

Fact 3: mentors acted responsibily
----------------------------------

A member of the Outreach team, not a party to the conflict of
interest, reminded other team members about the conflict of
interest in the April 2018 selection meeting.

Fact 4: no policy
-----------------

Debian has no conflict of interest policy.

There was nothing for the GSoC admins or mentors to refer to.

Fact 5: vested interests
------------------------

Debian's list of delegations, equivalent to managers or office-holders
in other organizations, doesn't reveal employment details or any other
clues about vested interests and conflicts of interest.

Fact 6: Molly de Blanc signed off on it
---------------------------------------

In reply to Fact 3, Molly de Blanc acknowledged and signed off on
the conflict of interest.  Her commented has been shared widely
on a blog:

 nice responsibile decision making
 thanks for being so consciencious

Fact 7: Google complained
-------------------------

July 2018, Google's head of GSoC, Stephanie Taylor, made a
written complaint about conflicts of interest in Debian.

Fact 8: Mollamby investigated themselves
----------------------------------------

Mollamby investigated the complaint.  This was clearly
inappropriate.  How could Molly de Blanc investigate a complaint
against something she signed off on?  How could Chris Lamb, as Debian
Project Leader, investigate a complaint against a team where
his love interest was a prime suspect?

It would have been possible for them to recuse themselves
without declaring the fact there was a relationship.  They could simply
state that because Google was disputing conflicts of interest, they
need help from somebody neutral and not involved in day-to-day
Debian, like a past DPL.

Even in the absence of a relationship, Molly de Blanc never should
have been part of the investigation anyway.

Mollamby investigating themselves.  Mollamby.

Fact 9: opportunistic scapegoating
----------------------------------

Mollamby used another team member as a scapegoat.  The same team
member who reminded everybody about the conflict of interest
during the selections.

Fact 10: inters/students suffer
-------------------------------

Before conducting any investigation, Google sent aggressive and highly
demotivating communications to some students.  It appears Mollamby rushed
Google into this shoot-first-ask-questions-later response.

Fact 11: Google rushed into decision then backflip
--------------------------------------------------

After making enquiries with the entire admin team Google had to
backflip and completely retract their action against students.  Mollamby
had rushed Google into an awkward situation that had to be rolled back.
Mollamby.

Fact 12: interns complained about Molly de Blanc
------------------------------------------------

August 2018, an astute intern made a complaint about Molly de Blanc
not doing any real work, it has already been shared in various places,
including debian-project.

Other community members had made similar observations but none had
ever dared to say it.

Fact 13: previous mentor summit procedure
-----------------------------------------

In previous GSoC rounds before 2018, the two places to attend the
mentor summit were always awarded randomly to any two mentors, with
a preference for mentors who never visited the summit before.

Fact 14: privileges for the admins
----------------------------------

For 2018, Molly de Blanc suggested that one of those two places
should be reserved for an admin.

Fact 15: Molly de Blanc got the free trip
-----------------------------------------

Molly de Blanc, as admin, attended the GSoC mentor summit in
October 2018 and only one other mentor received a place.

Fact 16: Molly de Blanc as AH insider
-------------------------------------

Molly de Blanc formally joins the Anti-Harassment team.  The name
of the team is misleading.  Its real purpose appears to involve
preventing people asking inconvenient questions to the project
leaders: in other words, de Blanc participating in a vigilante group
to prevent people holding her boyfriend, the Debian Project Leader,
to account.  de Blanc was privvy to any complaints against her boyfriend
and also privvy to potential complaints or discussions about
his political rivals.

Fact 17: DAMs rushed into decisions, just like Google
-----------------------------------------------------

The Debian Account Managers are rushed into removing two Debian
Developers from the Debian keyring.  It is the same pattern as the
way Google was rushed into punishing students.  Mollamby.

Fact 18: another intern complains
---------------------------------

A mentor received a complaint from an intern about somebody
in the Anti-harassment team.  The mentor was unable to do anything
due to fear and mistrust of the leadership.

The complaint hasn't been leaked yet, hold on to your seats.

Fact 19: DPL's girlfriend pronounced Developer
----------------------------------------------

Molly de Blanc, girlfriend of the Debian Project Leader, is
controversiallly promoted to become a Debian Developer.
She has not created any packages and she had been subject
to various complaints during 2018.

Fact 20: scapegoat abused
-------------------------

At almost the same time, the Developer who highlighted the conflict
of interest is removed from the Debian keyring, threatened and
insulted in various ways, starting from September 2018, long
before anything overflowed into the public domain.

Fact 21: Google pay offs
------------------------

Debian receives large payments of cash from Google on dates overlapping
with punishments.

Fact 22: Payments from Google obfuscated
----------------------------------------

Details about the largest payment are hidden or obfuscated in
official communications.

Fact 23: censorship
-------------------

It is alleged that an email to the debian-project mailing list asking
about the Google payments and pressure has been censored.

Fact 24: DPL gives delegation to girlfriend
-------------------------------------------

In his last act as Debian Project Leader, Chris Lamb writes a
delegation formally appointing his girlfriend (or ex-girlfriend
at this point), now a Debian Developer, to the Outreach team.

Fact 25: Open Source Initiative (OSI) board kept in the dark
------------------------------------------------------------

Mollamby serve together on the OSI board.  They never informed other
board members or the organizations they are affiliated with (FSF and
Debian respectively) about their conflict of interest.  Molly de Blanc has
become OSI board president in 2019.

Fact 26: DPL budget control
---------------------------

Chris Lamb, as Debian Project Leader, had discretion to approve
his own travel expenses using Debian funds.

Fact 27: subsidised long-distance relationship costs
----------------------------------------------------

Molly de Blanc resides in the US while Chris Lamb resides in the UK.
This was a long distance relationship.  They would meet each other at
events where their travel was paid by free software organizations.

Fact 28: spreading defamation
-----------------------------

Mollamby have both circulated defamatory and politically motivated
allegations against other members of the community.

Molly de Blanc's FOSDEM 2019 talk explicitly boasts about a whisphering
network, this appears to be a call-to-gossip.

Fact 29: misleading denial by DPL
---------------------------------

When Chris Lamb was publicly asked about the defamatory allegations
he circulated, it appears that he has lied by denying it in an
email to debian-project the week before Christmas.

Evidence that Lamb really did send the offensive email was subsequently
posted on a blog.

This very public and dishonest denial makes a serious dent in Lamb's
integrity.  As he was the DPL, dishonesty like this dents Debian's
reputation too.

Fact 30: Molly de Blanc breaks up with FSF and Lamby
----------------------------------------------------

Molly de Blanc's FSF employment terminates at about the same time that
Mollamby break up.

She writes a blog about the breakup.

Fact 31: revolving doors
------------------------

Despite the circumstances, Molly de Blanc immediately begins working
for another former Debian Project Leader, now at GNOME.

Fact 32: fake sorries
---------------------

An email sent to debian-project on 8 July 2019, "Regrets Handling
Conduct Concerns Earlier this Year", from the new DPL, Sam Hartman,
appears to try and put blame back on the developers who spoke up.

It feels like a pretend sorry or conditional sorry email.

This persistent blaming and conditional sorries from leaders
reeks of high arrogance, it is harmful to the victims and it is
perpetuating the problems.

Most ordinary people can recognize the difference between a pretend
sorry and a sincere sorry even if they don't know the people or
the facts.

It is obviously, deceptively and repetitively trying to deflect
responsibility to other parties and distract from the elephant in
the room, Mollamby, so it is hardly an apology at all, it feels more
like a political statement.

Fact 33: new DPL acknowledged conflicts of interest existed, hides names
------------------------------------------------------------------------

The same email referred to in Fact 32 confirms there were
conflicts of interest in the second abusive keyring change too.
Both abusive keyring changes were therefore compromised by
Mollamby and other hidden relationships.

But the names of the culprits are hidden.  They have immunity.

Fact 34: malicious intent and DPL's vendetta
--------------------------------------------

At the same time that a developer was removed from the keyring,
Chris Lamb immediately sent messages out to other organizations
to harm the developer's reputation.  Many independent people
see this as an aggravated and politically motivated breach of
a private decison by Debian Account Managers.  Lamb's indulgence
in doing this appears to be a major reason the issues exploded into
public discussion and drag other Developers into the mess.


This is all a textbook example of nepotism.

Mollamby



Sent with ProtonMail Secure Email.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

digiKam 7.7.0 is released

After three months of active maintenance and another bug triage, the digiKam team is proud to present version 7.7.0 of its open source digital photo manager. See below the list of most important features coming with this release. Read more

Dilution and Misuse of the "Linux" Brand

Samsung, Red Hat to Work on Linux Drivers for Future Tech

The metaverse is expected to uproot system design as we know it, and Samsung is one of many hardware vendors re-imagining data center infrastructure in preparation for a parallel 3D world. Samsung is working on new memory technologies that provide faster bandwidth inside hardware for data to travel between CPUs, storage and other computing resources. The company also announced it was partnering with Red Hat to ensure these technologies have Linux compatibility. Read more

today's howtos

  • How to install go1.19beta on Ubuntu 22.04 – NextGenTips

    In this tutorial, we are going to explore how to install go on Ubuntu 22.04 Golang is an open-source programming language that is easy to learn and use. It is built-in concurrency and has a robust standard library. It is reliable, builds fast, and efficient software that scales fast. Its concurrency mechanisms make it easy to write programs that get the most out of multicore and networked machines, while its novel-type systems enable flexible and modular program constructions. Go compiles quickly to machine code and has the convenience of garbage collection and the power of run-time reflection. In this guide, we are going to learn how to install golang 1.19beta on Ubuntu 22.04. Go 1.19beta1 is not yet released. There is so much work in progress with all the documentation.

  • molecule test: failed to connect to bus in systemd container - openQA bites

    Ansible Molecule is a project to help you test your ansible roles. I’m using molecule for automatically testing the ansible roles of geekoops.

  • How To Install MongoDB on AlmaLinux 9 - idroot

    In this tutorial, we will show you how to install MongoDB on AlmaLinux 9. For those of you who didn’t know, MongoDB is a high-performance, highly scalable document-oriented NoSQL database. Unlike in SQL databases where data is stored in rows and columns inside tables, in MongoDB, data is structured in JSON-like format inside records which are referred to as documents. The open-source attribute of MongoDB as a database software makes it an ideal candidate for almost any database-related project. This article assumes you have at least basic knowledge of Linux, know how to use the shell, and most importantly, you host your site on your own VPS. The installation is quite simple and assumes you are running in the root account, if not you may need to add ‘sudo‘ to the commands to get root privileges. I will show you the step-by-step installation of the MongoDB NoSQL database on AlmaLinux 9. You can follow the same instructions for CentOS and Rocky Linux.

  • An introduction (and how-to) to Plugin Loader for the Steam Deck. - Invidious
  • Self-host a Ghost Blog With Traefik

    Ghost is a very popular open-source content management system. Started as an alternative to WordPress and it went on to become an alternative to Substack by focusing on membership and newsletter. The creators of Ghost offer managed Pro hosting but it may not fit everyone's budget. Alternatively, you can self-host it on your own cloud servers. On Linux handbook, we already have a guide on deploying Ghost with Docker in a reverse proxy setup. Instead of Ngnix reverse proxy, you can also use another software called Traefik with Docker. It is a popular open-source cloud-native application proxy, API Gateway, Edge-router, and more. I use Traefik to secure my websites using an SSL certificate obtained from Let's Encrypt. Once deployed, Traefik can automatically manage your certificates and their renewals. In this tutorial, I'll share the necessary steps for deploying a Ghost blog with Docker and Traefik.