Fwd: Paying Tomasz Wasilczyk for security improvements

[Mark Doliner]

On Wed, Feb 20, 2013 at 6:48 PM, Ethan Blanton <elb at pidgin.im> wrote:
> Daniel had some comments on this matter, but can't send to the list:
>
> Daniel Atallah spake unto us the following wisdom:
>> On Wed, Feb 20, 2013 at 9:08 PM, Mark Doliner <mark at kingant.net> wrote:
>> > On Wed, Feb 20, 2013 at 3:56 PM, William Ehlhardt
>> > <williamehlhardt at gmail.com> wrote:
>> >> Forgive my ignorance, but: why is IMF acting as a middleman here at all?
>> >
>> > That's a good question.  It sounds like for Google it's easier to make
>> > a donation to us than to pay Tomasz directly.  I don't know the
>> > details.  Also maybe having IMF act as a middleman makes it more
>> > likely that Tomasz will have the greater Pidgin/Adium/libpurple
>> > community in mind when he makes his changes?  Rather than doing
>> > specific work that benefits only one company.
>>
>> If I put my devil's advocate hat on, I can think of some additional
>> questions that someone could ask. For example:
>> "Why is this being done privately instead of allowing people to apply
>> for a fellowship?"

A fair point.  Personally I think Tomasz is a good choice.  Especially
considering that many of us tend to be fairly busy, and it sounds like
Tomasz has available time.

>> I don't really have a problem with this being done this way, but that
>> seems like the type of question that could be asked once this is made
>> public.

Just want to note that this mailing list is public.  (Though I do
realize that you might have intended "public" as in "widespread news
coverage.")

>> It'd be good if there were some sort of guidelines about what would be
>> expected out of this.

Yeah, this is an interesting point.  I think we can probably trust
Tomasz to be responsible (though you could argue that "trust" is a
silly thing to depend on in a monetary transaction).  But even so,
when would his responsibilities be considered "fulfilled"?