Gemini version available ♊︎

International Women’s Day 2020, Debian’s Cover-up of Harassment, Abuse and Exploitation

Posted in Debian, Finance, Free/Libre Software, Google at 3:51 am by Guest Editorial Team

Related: Arjen Kamphuis Spoke About Free Software Influence and Control Games Before His Disappearance

Reprinted with permission from Debian Community News

Sunday, March 8 is International Women’s Day. The challenges that women face in their professional lives are one of the core themes of the day.

In computer science education, approximately thirty percent of students are female. This drops to ten percent in the workforce. In free software organizations, the representation of women is far worse: a little bit over one percent of Debian Developers are female. With the recent concerns about Outreachy internships, harassment and abuse, there couldn’t be a better time to consider some of the hard facts and recent scandals that keep things this way.

Many free software organizations are now paying diversity bursaries to women to facilitate travel to free software events. Some organizations are also hosting female interns under programs like Outreachy. Debian funds are used to pay approximately four Outreachy interns each year, the overall cost being approximately $US25,000 per year. This has produced some odd side-effects. The Debian Social Contract, point 3, promises transparency yet attempts to question the problems of Outreachy on the debian-project mailing list have routinely been censored:

Debian Community News image

The missing messages have been captured elsewhere, here is one of them:

Subject: Re: Outreachy and smearing campaign

Date: Sat, 22 Feb 2020 16:31:41 +0000

From: Ken Starr <kenstarr@protonmail.com>

To: debian-project@lists.debian.org <debian-project@lists.debian.org>

‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐

On Saturday, February 22, 2020 1:31 PM, Steffen Möller <steffen_moeller@gmx.de> wrote:

> @Debian, we should find ways to objectively discuss what has been

> brought up. For instance – Ken reporting on someone attending DebConf,

> finding a mentor and jointly sketching a project they want to work

> together – I mean, that is why we have DebConf in the first place -

> @Ken, this is a success story. I am not sure if Outreachy then needs to

> fund this any further, but from a Debian perspective – please do.

An Outreachy who was privileged to be in that discussion at DebConf has an unfair advantage over other candidates.

That is contrary to the values Outreachy claims to promote a level playing field.

Women suffer from these disadvantages and lack of networks. Outreachy promised to provide a fix for that. Debian has short-circuited the process. If posts are designed that way the Outreachy is redundant.

Nobody is claiming the woman did something bad. The candidates are not expected to understand everything about the integrity of this process. That is the mentors job. It must be the men. It’s always the men and their money.

These appear to be legitimate concerns but they are dismissed as a smearing campaign. The person who added smearing campaign to the subject line is Ulrike Uhlig, a former recipient of Outreachy money herself. Why can’t other volunteers ask questions about this money?

Up to 2017, the Google Summer of Code (GSoC) and Outreachy internships were paid at the same rate, $US5,500 per intern. Google cut the pay-out so that many students in developing countries get only half of the old rate. Outreachy payments are the same as before. This has created an arbitrage situation: as the work is done remotely, a talented male student may get more money if they help a female friend complete Outreachy. The male student usually completes all the work up to the mid-point payment. At this point, he can blackmail the woman: give me all of the mid-point payment or I don’t help you finish the second half of Outreachy. Some women have approached mentors to ask for help in situations like this.

This is only one of many ways in which women are finding themselves under uncomfortable influence. While organizations like Debian have no limit on the number of male developers who can join through the normal process, a program like Outreachy encourages women to compete against each other for just two places in each round.

Some of the censored emails have raised the risk of a casting couch culture. It is not clear if those posts were derogatory or if they were being made in good faith. While any reference to casting couches is awkward, it is worth contemplating the question: do the women at an early stage of an IT career feel the same pressures as women at the early stage of an acting career in Hollywood? Wikipedia documents the economics of the casting couch:

According to economists Thomas Borcherding and Darren Filson, the high risk and returns in Hollywood cinema encourage the casting couch phenomenon. The possibility of high returns incentivizes unestablished actors to accept minimal wages in exchange for roles. With the exception of a few extremely talented actors, producers are unable to evaluate the aptitude of the vast majority of qualified actors due to uncertainty. As a result, some actors give sexual favors to producers to obtain a perceived advantage in the casting; the casting couch functions as a counterpayment that effectively reduces their wages. This creates a conflict of interest in which corrupt producers substitute aptitude (an unquantifiable variable) with sexual activity in their decision-making.

Can you spot the similarities? Outreachy is a program with high risk: every candidate has to risk many hours doing unpaid code contributions and other voluntary work on open source projects yet only two interns selected each round. We also see high returns: an Outreachy salary is more than triple the salary of a local job for women in a developing country.

Anybody involved in the administration of diversity funds would be wise to contemplate the similarities and risks: the pressure women feel to get started in either acting or computing, the difficulties that hiring managers face discerning whether or not a beginner will be successful.

This is only one of many problems observed in diversity programs.

Some smaller free software organizations offer us the opportunity to study these challenges under the microscope, just as a scientist might study bacteria in a petri dish.

Debian Community News image

Consider one of the local free software groups in a developing country. The organization has been credited with attracting a large number of female members and volunteers at their events.

Yet Debian Developers who attended their events discovered irregularities. The number of women applying to outside events or participating in technical activities was far lower than the number of women who appeared at the original conference. After follow-up discussions with some women, a few patterns were discovered.

First of all, the salaries for young women in the region are incredibly low. A female student may only earn €10 per day in a part time job. When a tech conference receives thousands of euros from sponsors in rich countries, they can use €200 to pay twenty young women to show up. As a bonus, these volunteers are offered meals and other opportunities.

As these payments seem trivial, sponsors were blind to the effect their money had on women. The free software community has had the wool pulled over their eyes. Of course, organisers would happily spend even another €500 like this if it brought in another 50 women and €5,000 of diversity funds and sponsorship. That is a one thousand percent return on investment. Who wouldn’t take that bet?

Even worse, talented women who really did attend as volunteers, without any payment, were dismayed when they discovered that other volunteers were receiving payments.

This goes some of the way to explain why the women were not seen again. More observations were made by volunteers in Wikimedia Foundation and Debian: a very small group of three women applying for travel funding for external events. The same names repeated in grant applications submitted to multiple organizations. When a Debian Developer followed-up with other women from the region, he found that they were not being told about travel funds from larger organizations like Debian. Some had been ordered not to apply until the preferred women received a positive reply. In other words, local gatekeepers had created a power structure for themselves. The money from larger organizations like Debian was the enabler for this behaviour.

Further searches found that the women who were applying were listed on a company web site with the men. It appears they had been gathered together to submit cookie-cutter funding applications.

When one of the Debian Developers asked the Debian Project Leader, Chris Lamb, for support, he only encountered indifference and resentment. Absurdly, Lamb tried to replay the gatekeeper accusation against the very person who raised concerns. It turns out, the LibreOffice annual convention, LibOCon, was going to be hosted in the region and some developers didn’t want to rock the boat, challenge local gatekeepers or demotivate those “high performers” who had a “track record” of getting women to events.

Debian Community News image

Not so long ago, a major German financial company organised an event in eastern Europe with additional women who didn’t normally work there being invited to attend. The women had to wear colour-coded wrist bands. Women attending free software events on diversity bursaries are certainly not in the same profession: we include this extreme example to demonstrate men’s willingness to use money to coerce and control women, to keep women on a lower tier.

Debian’s constitution says we are volunteers, making us all equal. When women are offered a different pathway into Debian, as paid Outreachy interns, that is not equality: it places those women on a lower tier where men can control everything they do, for example, what they say and who they speak to. Rogue members of the Debian aristocracy are now actively using financial coercion, including the promise of Outreachy and travel grants, to force women to take sides in Debian politics.

When Susan Fowler blew the whistle on harassment at Uber, she described exactly the same phenomena in a blog post:

Over the course of her year at Uber, she was given negative performance reviews by another boss, who wanted to prevent her being promoted and thus keep her and other women on his team

Debian claims to be the Universal Operating System, however, there seems to be nothing more universal or timeless than the tendencies of men to control women.

Many organizations settle harassment claims from women by asking them to sign non-disclosure agreements. Several women violated those very agreements to blow the whistle on British fashion magnate Philip Green in 2018.

Yet the open source group in question took that a step further, imposing upon women to sign non-disclosure agreements at the moment of joining. These practices are conditioning women to be compliant and submissive, to maintain a code of silence, from the very first step in their professional lives. Once again, when this was raised with Lamb, the Debian Project Leader, he remained indifferent.

Women who received abuse through the private communication channels referred to by the NDA were afraid to seek help.

Lamb’s failures to respond are reminiscent of the repeated failures of Uber leadership to support Fowler and other women who tried to seek solutions through internal channels.

The Debian Developer working in the region had personally witnessed multiple cases of harassment and abuse, with female volunteers in tears. The volunteer never received any support.

Free software organisations talk endlessly about community building. Yet some people take one look and call it by a different name: exploitation.

In one case identified on debian-project, a woman had volunteered for six years before being offered one of those insecure three-month Outreachy internships. If you divide the $5,500 Outreachy payment over six years, what is the real hourly rate this woman achieved? There is a big difference between the noise Debian makes about diversity and what open source is really willing to pay a woman.

Yet when the LibOCon organizers started to engage, they found exactly the same problems that Debian had ignored and it was clear to them that the problems were entirely local in the group. The Debian Developer who had witnessed problems before wasn’t even there for LibOCon.

Lamb, on the other hand, had completely misread the problem or wanted to punish anybody who might speak up again, so together with the Debian Account Managers, Enrico Zini, Joerg Jaspert and Jonathan Wiltshire, he spread false accusations of harassment and abuse against the very volunteer who had asked for help. This was a sickening betrayal that continues to haunt Debian to this day.

Using a false accusation to smear a political opponent has all the ethical charm of Lance Armstrong winning the Tour de France seven times with doping.

It is particularly callous because real examples of harassment and abuse had taken place, yet those words were immediately stolen by Lamb and used as tools in his dirty political game, punishing somebody who queried the secret $300,000 from Google. By doing this, Lamb, and Debian, devalued the harrowing experiences of these women and the Debian Developer who had witnessed genuine abuse first-hand.

Lamb’s dishonesty is laid bare in an encrypted email sent to the same Debian Developer by Arjen Kamphuis before he disappeared in August 2018:

Debian Community News image

I don’t want to get caught up in internal politics but have noticed some strange events around [redacted/event]. Will have discusson about that with [redacted/group] and especially [redacted/name] who seems to put himself in positions of control in cases he should not.

Kamphuis names the same problem a Debian Developer had asked for support with, a local male organizer putting himself in positions of control over women.

If Wikimedia, LibreOffice (Document Foundation) and Kamphuis had all concluded the problem originated with the same person, how could Debian’s leader spread false accusations about one of his own volunteers?

None of these people wanted this attention, but Lamb’s decision to cultivate false accusations and roll it all up into a giant gaslighting experiment keeps forcing more and more details into the open. Out of respect, we’ve avoided including names wherever possible. Some of these people may well have changed their ways. Debian hasn’t.

Debian’s incumbent leader, Sam Hartman, has continued in much the same vein as Lamb. In another long, rambling email he attempts to blame a single volunteer for everything from harassment to climate change and the coronavirus. Nonetheless, the credibility of Hartman’s email is easily refuted by picking out contradictions like these:

I’ve been talking about trying to find better ways to resolve conflicts in Debian since at least 2014.

The primary thing I’m doing my last few months as DPL is dealing with lawyers.

Lamb and Hartman both have a history of stonewalling volunteers, forcing conflict to remain bottled up until something breaks. Lawyers have a track record of sustaining conflict until their clients have fully spent their legal budget. Volunteers who speak up about the oppression of women are not harassing anybody, they are simply being good citizens. They should not feel the least bit intimidated by Hartman and his lawyers.

To get to the root of the harassment problem and Debian’s appalling lack of women, we can learn a lot from the forced confession Dr Norbert Preining was blackmailed to write in 2019, in particular:

I also apologize for that fact that my communication style in the past has made others feel uncomfortable and was perceived as aggressive. I think that even during the heat of the systemd and coc discussions this was not appropriate, and I will do my best to use the same communication style I usually use on Debian TeX, that is friendly, open, and constructive.

If Dr Preining was observed using two different styles of communication for different communities, is that Dr Preining’s fault? Or does this indicate that each organization has a different culture, in other words, there is something bad in Debian’s culture that precipitates conflict and brings out the worst in people?

Women have a nose for this type of thing and it is no wonder they keep away from Debian. Observers may struggle to determine if the malicious accusations of harassment from rogue leaders have credibility or not (they don’t) but nobody should be fooled to believe that Debian’s long-standing failure to attract more than one percent women is due to any one person. This shocking statistic reflects a deep-rooted cultural problem. Asking women to fight over $5,500 Outreachy internships and blaming scapegoats are practices that only help preserve that culture and condemn Debian to being the type of organization where women will not take the risk of getting involved.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New

  1. Standard Life (Phoenix Group Holdings): Three Weeks to Merely Start Investigating Pension Fraud (and Only After Repeated Reminders From the Fraud's Victims)

    As the phonecall above hopefully shows (or further elucidates), Standard Life leaves customers in a Kafkaesque situation, bouncing them from one person to another person without actually progressing on a fraud investigation

  2. Standard Life Paper Mills in Edinburgh

    Standard Life is issuing official-looking financial papers for companies that then use that paperwork to embezzle staff

  3. Pension Fraud Investigation Not a High Priority in Standard Life (Phoenix Group Holdings)

    The 'Open Source' company where I worked for nearly 12 years embezzled its staff; despite knowing that employees were subjected to fraud in Standard Life's name, it doesn't seem like Standard Life has bothered to investigate (it has been a fortnight already; no progress is reported by management at Standard Life)

  4. Links 20/03/2023: Tails 5.11 and EasyOS 5.1.1

    Links for the day

  5. Links 20/03/2023: Amazon Linux 2023 and Linux Kernel 6.3 RC3

    Links for the day

  6. IRC Proceedings: Sunday, March 19, 2023

    IRC logs for Sunday, March 19, 2023

  7. An Update on Sirius 'Open Source' Pensiongate: It's Looking Worse Than Ever

    It's starting to look more and more like pension providers in the UK, including some very major and large ones, are aiding criminals who steal money from their workers under the guise of "pensions"

  8. Services and Users TRApped in Telescreen-Running Apps

    TRApp, term that lends its name to this article, is short for "Telescreen-Running App". It sounds just like "trap". Any similarity is not purely coincidental.

  9. Links 19/03/2023: Release of Libreboot 20230319 and NATO Expanding

    Links for the day

  10. Great Things Brewing

    We've been very busy behind the scenes this past week; we expect some good publications ahead

  11. Links 19/03/2023: LLVM 16.0.0 and EasyOS Kirkstone 5.1 Releases

    Links for the day

  12. IRC Proceedings: Saturday, March 18, 2023

    IRC logs for Saturday, March 18, 2023

  13. Links 18/03/2023: Many HowTos, Several New Releases

    Links for the day

  14. Links 18/03/2023: Tor Browser 12.0.4 and Politics

    Links for the day

  15. Links 18/03/2023: Docker is Deleting Free Software Organisations

    Links for the day

  16. IRC Proceedings: Friday, March 17, 2023

    IRC logs for Friday, March 17, 2023

  17. New Talk: Richard Stallman Explains His Problem With Rust (Trademark Restrictions), Openwashing (Including Linux Kernel), Machine Learning, and the JavaScript Trap

    Richard Stallman's talk is now available above (skip to 18:20 to get to the talk; the volume was improved over time, corrected at the sender's end)

  18. Links 17/03/2023: CentOS Newsletter and News About 'Mr. UNIX' Ken Thompson Hopping on GNU/Linux

    Links for the day

  19. The European Patent Office's Central Staff Committee Explains the Situation at the EPO to the 'Yes Men' of António Campinos (Who is Stacking All the Panels)

    The EPO’s management is lying to staff (even right to their faces!) and it is actively obstructing attempts to step back into compliance with the law; elected staff representatives have produced detailed documents that explain the nature of some of the problems they’re facing

  20. Links 17/03/2023: Linux 6.2.7 and LibreSSL 3.7.1 Released

    Links for the day

  21. GNU/Linux in Honduras: 10% Market Share? (Updated)

    As per the latest statistics

  22. Links 17/03/2023: Update on John Deere’s Ongoing GPL Violations and PyTorch 2.0

    Links for the day

  23. IRC Proceedings: Thursday, March 16, 2023

    IRC logs for Thursday, March 16, 2023

  24. RMS: A Tour of Malicious Software, With a Typical Cell Phone as Example

    Tonight in Europe or this afternoon in America Richard M. Stallman (RMS), who turned 70 yesterday, gives a talk

  25. Skyfall for Sirius 'Open Source': A Second Pension Provider Starts to Investigate Serious (Sirius) Abuses

    Further to yesterday's update on Sirius ‘Open Source’ and its “Pensiongate” we can gladly report some progress following escalation to management; this is about tech and “Open Source” employees facing abuse at work, even subjected to crimes

  26. NOW: Pensions Lying, Obstructing and Gaslighting Clients After Months of Lies, Delays, and Cover-up (Amid Pension Fraud)

    The “Pensiongate” of Sirius ‘Open Source’ (the company which embezzled/robbed many workers for years) helps reveal the awful state of British pension providers, which are in effect enabling the embezzlement to carry on while lying to their clients

  27. Links 16/03/2023: War Escalations and More

    Links for the day

  28. Links 16/03/2023: OpenSSH 9.3 Released and WordPress 6.2 Release Candidate 2, Lapdock News

    Links for the day

  29. IRC Proceedings: Wednesday, March 15, 2023

    IRC logs for Wednesday, March 15, 2023

  30. Links 16/03/2023: OpenSSL 3.1 Released, 10,000 More Staff Cut in Facebook, and Windows Loses 10% in Speed

    Links for the day

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts