Slashdot Log In
SourceForge Terms of Service Change, Users Unhappy
Posted by
CmdrTaco
on Wed Feb 13, 2002 01:34 PM
from the stuff-to-think-about dept.
from the stuff-to-think-about dept.
An email fluttering around a few mailing lists has been submitted in
various forms here today. It's about changes to the SourceForge
terms of service. Some relevant links unclude the
old terms,
new terms,
old privacy statement,
new privacy statement
and
contact for "questions or concerns"
(Patrick McGovern, Site Director). Obviously since SF is owned by the
same parent company as Slashdot, I'm biased and corrupt and you should
ignore my opinions on the subject, but while
I don't particularly like this any more then anyone else, I also
don't think it's the huge deal that others are making of it. Especially
considering projects aren't paying for the free service. You get
what you pay for after all.
I have attached a summary to this article of the changes that are
being called into question if you don't want to do a mental diff
on the links above.
This list was submitted by a few different users and was apparently originally posted to several mailing lists, although I don't know who actually originally wrote it. I just quote it here for reference.
- They can henceforth change the terms without notice, just by posting the new terms on the website. (Currently they are obliged to give 15 days notice by email, a period that we are currently in for this change.)
- They can henceforth remove user accounts without giving a reason. (Currently they are obliged to have a reason, though the set of acceptable reasons is open-ended.)
- They're no longer obliged to make the contents of a deleted account available to its owner. (There was previously a "reasonable effort" clause to that effect.)
- They're no longer obliged to provide notice of changes to the privacy policy, unless the changes are "substantive". (Currently they are obliged to provide notice of any change.)
- The privacy policy is acquiring a disclaimer that amounts to "this is not true". It actually disclaims the entire privacy policy.
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
I dunno ... (Score:3, Interesting)
Re:I dunno ... (Score:3, Informative)
Having a useless "Privacy Policy" is a common tactic by commercial web sites to decieve users. It fools most users into thinking that there are protections on thier data due to the fact that the policy exists, or if the user bothers to read it the goal is make it worded such that the lack of protections is concealed.
Re:I dunno ... (Score:5, Informative)
Hotmail. After avoiding them for ages, I created an account in order to scope Passport.
The "Greet-King" spam I received within a week of creating a hotmail account that I never used resulted in a lengthy bout of mails to their abuse department and to "TrustE" (the supposed industry "watchdog" which is actuallly just a shill to prevent guvmnt action).
Despite MS assurances that my information would not be shared, their insistence remained that Greet-King got my name and email address from me, when it was not at all possible. Despite the statement that "Hotmail will not sell, lease or rent its member lists with any third parties," they refuse to accept any statement on the user's part that the email address and my name were not shared anywhere.
Hence, a "useless" privacy policy. And a deception -- even if it was just a renegade MS employee that pilfered some user names, MS is uninterested in knowing about it. Carelessness that is not, I believe, an uncommon phenomenon.
Parent
I can understand what the controversy is about (Score:5, Funny)
What this basically means is that they reserve the right to call you on the phone at 3 AM and breathe heavily.
Why isn't everyone kicking CmdrTaco's ASS? (Score:3, Interesting)
Did CmdrTaco, one of the helmsmen of the most popular Free/OS news sites in existence just mimic what Microsoft PR/FUD machine has been saying since Linux showed up on its threat radar?
Why isn't everyone kicking CmdrTaco's ASS?
Re:Why isn't everyone kicking CmdrTaco's ASS? (Score:5, Insightful)
I was thinking something along those same lines, but then I remembered that he's talking about a service that it costs money to continue providing. He's not talking about source code or software, he's talking about a website providing a service.
There is a very big difference.
We're lucky to live in a time when people are giving away their code, but we're luckier still to live in a time when there are SO many entirely free (except for ads) web services.
All the same, free or not, I can't think of an above-the-board reason a why site would need a policy allowing it to change it's terms of use without first notifying it's users. That just seems low down and shady.
Parent
Re:Why isn't everyone kicking CmdrTaco's ASS? (Score:5, Insightful)
And in case you didn't know... alot of the volunteer housing projects aren't exactly examples of fine craftsmanship... but it is the BEST people can offer. they are trying to help and make a difference. So shut up and take it... or shut up and dont' take it... or speak up and DO something about it. What have you done?
Parent
hmm (Score:5, Interesting)
Re:hmm (Score:5, Insightful)
Also, considering SourceForge is their product and SourceForge.net is a great demo of their functionality/scalability they'd have to be looking to sell the whole SourceForge business, not just SourceForge.net for it to make sense... Logical buyers would probably be RedHat or IBM. It would be a PR coo for whoever buys it, and if it's IBM and they move it over to their hardware it'd be a REALLY good marketing point... especially for their new Linux mainframe...
Nothing like fanning the flames of random speculation =)
Parent
Sourceforge.net not a viable business (Score:5, Informative)
SourceForge will eventually either need to charge money or will be spun off as a (soon to be bankrupt) spinoff business, leaving VA Software with just the various web sites. The web sites are probably (barely) profitable with the cost-cutting that has been done on them over the past year or so. SourceForge is not profitable, and never can be.
I currently have four projects hosted at SourceForge. I download the CVS web-ball every night in my crontab, and am investigating alternatives. At the moment it appears that any alternative will require developers to fork up money to help pay for the bandwidth. SourceForge itself has too many big (bandwidth) projects to make money even then, because if they charged what the bandwidth costs, most of those projects would end up hosted elsewhere shortly with companies who can hide the bandwidth costs in their accounting noise.
Does this mean that I wish SourceForge ill? Of course not. I just don't see how it can ever be profitable, and thus while I'll use it while it lasts, I'm not banking on it.
Parent
Re:Sourceforge.net not a viable business (Score:3, Informative)
what is a viable business? (Score:3, Insightful)
Let's see, Microsoft spends $1,000,000,000 to promote XP through print, TV, Radio, purchase of journalists, politicians and stenographers and billboards. This brings abslolutlly nothing in return but some marginal good will that they nullify with poor programs and scandal. Their sales are kept through extortion and other monopoly tricks. Yet people consider it a viable business.
You would conclude that Red Hat, IBM and Source Forge taken as a unit are not a viable business? Source Forge returns good will and programs for free use to both Red Hat and IBM. Without that kind of PR, what does Open Source have? The scale of losses you quote, if accurate are nothing to a company with revenues in the billions. Those paltry millions, spent on ordinary adverts, could hardly push a brand of soap.
The only think that can kill source forge is a betrayal of free software or some other greedy grab move. It's bad enough that they would switch to comercial databases and made the site an advertisment for software they would sell rather than a demonstration of free software they would service and issue with equipment. Anything to lessen Source Forge good will or software contribution would hurt them more than any direct costs.
Re:Sourceforge.net not a viable business (Score:3, Insightful)
If either company wanted to be more targeted, they could set something like SF up and be more selective of their projects.
Big deal (Score:4, Insightful)
I think this is perfectly reasonable; they're running the show, and a lot of the time in communities, there are members you need to deal with. I think the changes listed are more of an administrative streamlining than a major conspiracy.
Now, if they start abusing things, folks will be all over them, and they'll be sorry they did. So that ain't gonna happen.
Not a big deal.
-me
Re:Big deal (Score:4, Insightful)
Parent
Re:Big deal (Score:3, Informative)
Sourceforge reality. (Score:5, Interesting)
Anyone who's using Sourceforge to host their project, as I am, should be realistic about what they're getting and for how long they'll get it.
First of all, I love sourceforge. It gives me all of the things I want right out of the box and for free. User forums, bug tracking, SSH CVS, and so on.
However, it is free and I think we all know has a pretty slim chance of making money. With that in mind, no matter what their polcies state there seems to be a pretty good chance of them just exploding one fine morning and taking a whole bunch of source down with them. Make backups, I should too.
Other than that, we can be a demanding lot so try to go easy on these guys, let's give them a chance to survive.
gnu savannah (Score:3, Informative)
Re:gnu savannah (Score:3, Interesting)
This is round 1, round 2 will sneak by (Score:5, Insightful)
It seems like this is laying the ground work for real changes that can be slipped by when they think no one is paying attention!
It's inevitable (Score:5, Funny)
Anytime you get a wide user base to anything, ranging from a development site to a game site to a bbs or chatroom, if the powers that be add a period to the end of a sentance in thier policies, there will be:
Now, watch the comments here, and have your scorecards ready.
I got more than what I paid for (Score:5, Insightful)
Big whoop.
There is nothing they can take from me. I have the source code. I update my local cvs daily. The project webpage is garbage, and half of the discussions about development are in email. The greatest benefit is that the package I run has been difficult to find, and now it has a 'permanent' home.
I'd have more problems with, oh, say, Comcast changing the TOS. Or M$. Or AOL. When those guys change things, I always get the "I changed the bargain, just pray I don't alter it any further" impression. With sourceforge, I AM A LEECH. I live at the whim of my host.
If they piss me off, it's off to the FSF hosted site. No problem.
Hey, I don't like the VA Systems->Linux->Software scam. I'm part of the gang whinging about the 'post'. And I often question the integrity of folks. But sourceforge.net never promised anything, and they haven't disappointed me yet.
Nothing to see. Move along.
What are the chances ... (Score:5, Interesting)
SF is a great resource and all, but there needs to be some way to filter out the abandoned stuff.
Re:What are the chances ... (Score:4, Insightful)
Parent
Re:What are the chances ... (Score:5, Informative)
I was thinking the same thing, but the OP has a point. Why not create a "Sourceforge attic" with an option to exclude the attic from searches? A project would go into the attic if it had less than a minimum number of downloads and/or changes for a period of 6 months.
The attic could be hosted on older, slower servers, or on a configuration that worked well under low demand. Or perhaps it could even be archived on CD or DVD and distributed to various mirrors.
Regardless of how it is maintained, old code is a valuable resource, even if it's just there to let people know about methods that have been tried and failed. How can we learn from mistakes if we can't *see* them?
Parent
Coincidence? (Score:4, Funny)
Projects (Score:3, Informative)
It's a bit questionable if you need a CVS somewhere else, a mailing list archive somewhere else, a patch archive somewhere else, project homepage somewhere else.. whether it's any use to have them a SourceForge at all.. too bad since it really is a great tool, even if sometimes really laggy.
This sure ain't good news for maintainers of small projects.. especially of projects of questionable usefulness..
It's true, it's not true (Score:5, Insightful)
1. The privacy policy is acquiring a disclaimer that amounts to "this is not true". It actually disclaims the entire privacy policy.
To say that the clause at the end claims the privacy policy is "not true" is pretty simplistic. It attempts to avoid iablility for circumstances beyond their control, which is a far cry from disclaiming the entire thing.
In other words if armed men break into our facilities and steal our database and sell it to spammers, or our daatabase administrator gets a brain tumor and tries to "MAKE MONEY FAST!", we think we shouldn't be sued.
Privacy Statement (Score:5, Insightful)
While this Privacy Statement expresses SourceForge.net's standards for maintenance of private data, SourceForge.net is not in a position to guarantee that the standards will always be met. There may be factors beyond our control that may result in disclosure of data. As a consequence, SourceForge.net disclaims any warranties or representations relating to maintenance or nondisclosure of private information.
Since I don't think we're dealing with an vast evil corporate conspiracy here, I don't think the proper reading of this is "these statements are not true."
Basically they're protecting themselves against crackers. If someone steals the password list, they aren't responsible. I don't think that this means they're going lax on security or forgetting about privacy, it just means that shit happens, and they don't want to be sued.
As to the rest of the changes: this is their perrogative. They don't have to warn you about service changes. And if that fact alone bothers you, you can take your (non-paying) business elsewhere. It's how they use this priviledge that matters, and I don't think that they are going to radically alter their service in an attempt to scam users.
slashdot editors propogating yet another myth (Score:5, Insightful)
Amazing. Now I understand why the slashdot editors really appear to not "get" a lot of fundamental things, like the ongoing, direct harm the Copyright Cartels (Hollywood and the music industry in particular) are doing to free software.
"You get what you pay for," is demonstrably a myth. (c.f. GNU/Linux, FreeBSD, non-paid sex, love be it familial or romantic, and as a counter example underscoring the very same point, Windows vis-a-vis quality, used cars, enron stock, and so on ad nauseum.). Air is the most valuable substance to any living, breathing human. Don't believe me? Try going ten minutes without it. Yet it costs nothing.
With free software you don't "get what you pay for," you get what many thousands have contributed to a public commons to give themselves and you, with a resulting value far greater than any single enterprise could possibly offer. These contributions are often completely unrelated to any economic value as defined in the traditional market sense, and are only very indirectly related to any sort of free market or monetary value at all.
If you don't understand this (because of your libertarian bent of capitalism ueber alles, perhaps
In this particular case the area is more gray
I should point out that the Free Software Foundation's GNU project offers a similar service to sourceforge called Savannah [gnu.org], which I highly recommend. Will the laws of supply and demand as created out of scarcity apply, or are there enough willing donars, and enough inexpensive (or free) resources available that the laws of plenty will apply? In this gray area the answer is probably both yes, and no, depending on local circumstances and conditions.
In any event, the notion that "you get what you pay for" has been disproven numerous times in the physical world of scarcity-driven capitalism (ask any number of people who have purchased property or used automobiles, only to have their worth drop to zero, or climb insanely, in no relation to "what they paid for"), and in the abundant sphere of free software is demonstrably inapplicable in nearly every case.
Whats the big deal... (Score:5, Insightful)
1. They can henceforth change the terms without notice, just by posting the new terms on the website. (Currently they are obliged to give 15 days notice by email, a period that we are currently in for this change.)
It is a free service... if they want to change something should they be shackled by having to email all the users to change anything?
2. They can henceforth remove user accounts without giving a reason. (Currently they are obliged to have a reason, though the set of acceptable reasons is open-ended.)
They avoid leagle entanglement for said free service... People abuse free systems, they need to be delt with quickly and effectivly.
3. They're no longer obliged to make the contents of a deleted account available to its owner. (There was previously a "reasonable effort" clause to that effect.)
The users should have local backups... this is more then resonable.
4. They're no longer obliged to provide notice of changes to the privacy policy, unless the changes are "substantive". (Currently they are obliged to provide notice of any change.)
Hmmm, some web notice would be nice... but again it is a free service...
5. The privacy policy is acquiring a disclaimer that amounts to "this is not true". It actually disclaims the entire privacy policy.
Well, if you bother to read (and comprehend) the policy you should know what you are in for, again it is a free service...
Have you read Hotmail Terms of Use [msn.com]?
You know they have your best interest at heart.
~Sean
Re:Whats the big deal... (Score:3, Insightful)
I've always hated those "we can change things without any real notice" clauses. 15 days could be a bit long, i suppose... Why not 2 business days or something like that? Gives people enough time to move out if they really don't like the changes, and still allows reasonably fast changes to the policy.
They avoid leagle entanglement for said free service... People abuse free systems, they need to be delt with quickly and effectivly.Couldn't they still do that with having to give a reason? Hell, "abuse of site resources" is one of their explicitly listed reasons for termination. This makes me think they're going to start deleting things for reasons they don't want to be publically known...
Ok, reading the actual terms of service, these seem to be not exactly true. Since the reasons for termination were never limited, "we don't like you" is technically a good enough reason. And they were never obligated to make the information available, they just said "We'll be nice and do it if we can without too much trouble." It's still kind of shady though...
Hmmm, some web notice would be nice... but again it is a free service...That's no excuse for giving no notice. It would be nice to know what their lawyers (it always comes down to lawyers) consider "substantive". Fixing grammar and spelling mistakes is fine for no notice, but i'd want notice of anything that changed the actual policy.
"You get what you pay for"?! (Score:4, Insightful)
but I also don't think it's the huge deal that others are making of it. Especially considering projects aren't paying for the free service. You get what you pay for after all.
What the heck kind of attitude is this for the founder of a pro-Open, pro-Linux website, CmdrTaco?! I took a quick diff of the terms of use changes, and you're right, it's not a big deal. But reinforcing the myth of "you get what you pay for" doesn't help traditionally minded people embrace new paradigms such as Open and Free. Tsk tsk.
Re:"You get what you pay for"?! (Score:5, Insightful)
Parent
Journalistic efforts when covering one's self (Score:3, Insightful)
Yes, it's CmdrTaco's site, but it looks bad when a VA employee uses his position to put his opinion that a controversy involving his employer is a non-story in the article rather than in a comment.
It would be better form to use a just-the-facts approach in the story itself and then post opinions as comments like every other user. Another possibility would be to have a separate "Editorials" section for staff members to give their opinions, and to have a separate news item and editorial in cases like this.
Re:Journalistic efforts when covering one's self (Score:4, Insightful)
Obviously since SF is owned by the same parent company as Slashdot, I'm biased and corrupt and you should ignore my opinions on the subject, but while I don't particularly like this any more then anyone else, ...
then it would be OK. It's almost like he thinks he has as much right as everyone else around here. Sheesh!
Parent
Something has to give somewhere (Score:3, Insightful)
Let's look at this a little more objectively. Hosting kernel.org costs about $80,000 a year (Larry McVoy posted this number to lkml about a month ago) at the least. It's an ftp site. That's bandwidth, not any warm bodies doing admin, not any fancy database stuff, nothing fancy just an ftp server and a minimal web site. Sourceforge has to cost 20 times more, probably more, to run. I have no idea what the numbers are but it has a staff and a huge amount of resources to manage and keep running. Personally, I'd assume that it's in the neighborhood of $5million+ a year, that's just my half-assed guess though. That's some substantial output for most companies, at IBM you can't spend that kind of money without producing something, people notice chunks that big. At most places, that kind of funding simply isn't available for something like that. At some point the free ride has to end, or something has to come out of it, or something has to change. Even a company like MS would see $5mill on the books in red ink and not black and there would have to be some reason to justify it and goodwill towards the community might not be enough.
Then with subjects like these, things rise up. Well they should trim dead stuff out of the tree, trimming the "dead" stuff is silly becuase it might be useful to people, that's the whole premise, if it's in use anywhere then it's not really dead. It might be dead to you and me, but that guy who is using it might want it. They should do x, y, or z to better support projects like q. They could do this or that. I think the most alarming propect is that there will be code in SF and it could be lost because of a policy change. I can get over most things, the changes to the mailing lists, and various other things they've done, it's free and you get what you pay for but a big part of the justification has been to promote interaction with developers to give VA a community they have close ties with and to promote open source software development. The idea of losing code is appauling, SF no longer serves a big part of its purpose at that point. That's what brings credibility in to question, what are they doing to prevent that from happening? Can I buy a set of DVDs that have SF backed-up on to them? Or is this it, the policy change is that there won't be any warning of future policy changes and those might cost you your code. I understand that they might have to sell stuff, or charge for services or do lot's of different things. I also understand that services like SF are prime for pirates and porn hustlers and others to use to propagate data and they need to protect themselves. It's time to look to tigris [tigris.org], Savannah [slashdot.org], and Berlio [berlios.de] more seriously.
I wonder if there is something we could add to licenses that would prevent a place like SF from shutting down and taking your code with them.
Re:Something has to give somewhere (Score:4, Informative)
Parent
Re:Sourceforge shutdown and your code (Score:3, Insightful)
(This includes mailing list archives)
Pat-
With all due respect... (Score:4, Insightful)
Something is missing..... (Score:4, Funny)
Further proof... (Score:3, Insightful)
It's the same general deal you get anywhere these days:
You can't get us for nuttin..
We don't know nuttin, and if we did, we wouldn't admit it anyway..
If you got it, it's ours, an' we're gonna take it no matter what you do..
Here's a real punchline from the Privacy Statement:
uh.. then who is in a position to guarantee what Sourceforge itself has just attested to?
No-body!
End of discussion!
And have a nice day!
t_t_b
Re:Further proof... (Score:5, Interesting)
I run a very small (read: profits are almost half my car payment) web hosting service under the flag of openness and freedom of content. I started it because I got upset that every single host I went with wanted to corral me into a year contract, tell me what I couldn't do or say and take credit and the ability to edit my personal thoughts and ideas. Originally, it was a co-op, and I began to take on extra users who wanted the same thing -- ownership of their work and a fair charge for the low bandwidth they were moving.
In the past three months we've grown a dozen times larger -- so big that I no longer know every site op by name. Now, I don't want to have to force the new people to sign a TOS or a EULA. I think that posting the rules on the frontpage should be good enough for everybody. But I'm afraid. We've had a couple users ask if they could serve porn, and when I said no a few signed up anyway. I trust them (and check my logs), but if I go away on vacation and one of them starts serving nude shots of Frankie Muniz, I'm the one who gets in trouble. I'm the one who's got his name on the tax forms, and I don't intend to incorporate the business.
So I'm stuck. I want to let users do their own thing, own their own shit, but I'm the one who's ass is on the line. If one site slips up, they all go down. Everybody loses their stuff and all the good I've tried to do, all the bright young folks I've formed relationships with are scrambling for a new host. Someday soon I'll need to call my lawyer (okay, I don't have a lawyer to call my own, I'll have to pick a name out of the phone book) and have him draw me up a plan for a TOS. It'll probably be pretty brutal. Legally, I'll have to claim responsibility or ownership over users and content so I'll have the ability to pull it if I have to. And I'll have to do the same stupid shit, bowing to C&Ds and dropping user info and so forth.
It won't make me as a host and as a person any more of an asshole. I won't trade email addresses for cigarettes or claim rights to rkm's work [somethingpositive.net]. But I'll look just as corporate and uncaring as the rest.
Just think about it, baby, before you hate the legalese. You can't avoid being screwed without screwing somebody on paper. At the end of the day, it all comes down to who you trust, and after these long years with Slashdot, OSDN and SourceForge, I guess I trust VA. I have to, they designed my new server!
Shameless plug: webslum.net [webslum.net]. Say you read this post and I'll give you a free shell
Parent
Let's think about exploiting p2p (Score:3, Interesting)
How can we surmount this problem? Maybe by making a set of standards (beyond the informal ones that exist now) for how to document what your software is and where to get it. This could be a variation on the old
I am concerned that a lot of good code and good projects are left to die while other people re-invent that particular wheel. Since FS/OS is based on volunteer work, we can't really afford to throw it away or waste it. I hope other people who also have ideas about this will reply to this, and perhaps we can get together a mailing list or something to brainstorm about possible solutions to this problem.
this is the part I hate.. (Score:4, Interesting)
They can henceforth change the terms without notice, just by posting the new terms on the website. (Currently they are obliged to give 15 days notice by email, a period that we are currently in for this change.)
This is the part that disgusts me about "Terms of Use". Basically, they could say anything they want, and you would be bound by it, before you can even read it!
So Tuesday, they can say they don't own the copyright in your programs, but Wednesday they can, and NOBODY WOULD KNOW until AFTER the terms went into effect.
Yes, they have the right to put pretty much anything in their terms, BUT they should have to make a reasonable effort to inform their users of any new terms.
Free markets work best when information is available about your choices. Saying "if you don't like it, go elsewhere" is silly if you don't know what it is exactly you just agreed to.
There should be a consumer protection law that says, you have 30 days before new terms go into effect, no matter what. Then you would know, just have your attorney or your web-page watcher script check the terms every 30 days. But now, they can change them twice a day, or just for 5 minutes every night, or whatever, and nobody knows.
Of course every company is completely honest and above-board and would never change their terms like that, would they??
Re:Alternatives (Score:5, Insightful)
Parent
Sourceforge has yet to compete with Bugzilla (Score:4, Interesting)
Bugzilla/bonsai/tinderbox provides a more complete solution. We were even able to modify the trio to deal with java, our many different build scripts (make is rather lacking for java), and our test automation.
What we found was that Sourceforge provided discussion groups which we got using exchange or INND, bug tracking which wasn't nearly as feature rich as bugzilla, and cvs integration which bonsai provided just as well. It was still lacking the automated builds, and by the time they got back to us after linuxworld we had allready deployed the bugzilla solution (partly thanks to some nice debian packages put together by Remi Perrot).
One large drawback is that bonsai relies on glimpse as its fulltext indexer. Glimpse used to be free but since then has gone commercial. We were, however, able to find some old glimpse source (which may have been GPL or artistic license - perhaps we should redistribute the old code as GNUlimpse).
We have made our own tweaks to bugzilla/tinderbox/bonsai and contributed a few of them back to the mozilla developers (in the future probably all will be recycled into the public implementation).
Parent
Re:Makes them look like assholes. (Score:3, Informative)
Umm, no. You don't sign away your copyright when you host something on Sourceforge. In many cases you don't even have the authority to do so if you wanted to. Sourceforge has the right to do whatever they want with the copy of data on their server, they can delete it and they can delete your account, but they don't own the data you stored there.
But that's okay. "The sky is falling!" is catchier.
Re:Savannah is a gnu.org alternative to SF; commen (Score:3, Informative)
With regards of compatibility there is an offer (when you sign up) to use your existing CVS's data on their systems. The only caveat was that they are far stricter with licensing. So if you use the Sourceforge CVS it should be easy (providing the licence is OK) to transfer to Savannah.
You also geta homepage at: http://www.freesoftware.fsf.org/yourprojectname
Which is adminned via RSYNC or CVS over SSH.
So almost identical to Sourceforge.
It doesn't seem to be as fast as Sourceforge, but this is opionion and I have no metric to support this.
Re:Conflict of interest and logical problem (Score:3, Insightful)
*My* feeling is that this TOS change is not a substantive change. The part in which the Privacy Policy is disavowed is done specifically because *if* the site is cracked, then we're lying about protecting it - not because we're going to sell anything. I'll shoot myself in the eye before we do that.