Bonum Certa Men Certa

Nepotism and Conflicts of Interest in Free Software

Reprinted with permission from Debian Community News

AS the Mollamby affair has emerged, some people have rushed to defend the privacy of Chris Lamb and Molly de Blanc (Mollamby) or dismissed it as mere innuendo without understanding the ethical issues.



What is the difference between innuendo and public interest? Evidence.



Privacy is a valid consideration, but it is not the only one. We delayed publishing our own commentary about the subject while weighing the privacy implications against the ethical issues.



Let's consider some of the evidence backing up the facts about Mollamby. Parts of the evidence have been redacted for the privacy of third parties but the material presented here accurately reflects the situation.



This is the opening comment sent by a student applying for GSoC in 2018 (Fact 2):



Date: 14 March 2018



I am [redacted/student name], ... from [redacted/country]. I’m [redacted/relationship] of [redacted/full name]


The student clearly identified a conflict of interest, giving the name of the other party and the type of relationship. The other party had also sent a similar email:



Date: 12 March 2018



... there are some students who might be interested in [redacted/project]. Even my [redacted/relationship] has been ....


As they were honest and transparent from the outset, there is no question over their integrity and no need to discuss their identities.



This is the statement one volunteer made when agreeing to be a GSoC admin in 2018:



-------- Forwarded Message --------
Subject: Re: Google Summer of Code 2018
Date: Mon, 22 Jan 2018 08:41:49 +0100
From: Daniel Pocock <daniel@pocock.pro>
To: mollydb <deblanc@riseup.net>



On 22/01/18 02:25, mollydb wrote: > I mmissed this on the application before! We need 2-5 administrators for > the application. Who else wants to be one? >

You can use my name temporarily while looking for other people to help you in this role.

... [redacted/name of other community] ...

However, I can't officially commit to help with the duties of an administrator right now.

Regards,

Daniel


No volunteer is under any obligation to provide details of their personal life. This statement alone looks like it was made honestly and in good faith, that is what teamwork is all about.



A selection meeting was scheduled for 16 April 2018 and Pocock was the volunteer who reminded people about somebody having a conflict of interest (Fact 3). He was not a party to this conflict of interest. de Blanc both acknowledged and agreed with the way it was handled (Fact 6):



<pocock> yes, but [redacted] is not involved in the
  selection process because one candidate is [redacted]
<pocock> that could be one reason we are waiting
   until the last minute to confirm the selections
[redacted/other mentor acknowledgement]
<mollydb> nice responsibile decision making :)
<mollydb> thanks for being so consciencious


People had been reminded about it in a number of emails at each stage of the selection process, it wasn't sprung on people at the last minute. de Blanc had simply left the GSoC emails to other team members:



Date: 12 July 2018
From: Molly de Blanc <deblanc@riseup.net>



As an additional note, I generally check my email once a week. For anything immediate, -please- ping me on IRC as I'll be responsive there (and can know to dive into my email).


When alerts were sent about the conflict of interest in March and April, other team members were unaware that de Blanc wasn't reading them.



Technically, it was a special case that was not strictly covered by Google's official rules. Given the huge effort volunteers make interacting with students, nobody had made the extra effort to seek Google clarification.



Now let's look at the complaint that Stephanie Taylor from Google sent to Debian on 13 July 2018 (yes, that was Friday the 13th):



Subject: Concerns around Debian GSoC students and conflict of interest
Date: Fri, 13 Jul 2018 08:23:36 +0200
From: Stephanie Taylor <sttaylor@google.com>
To: [redacted/private gmail addresses of all Debian GSoC admins]



Hello Debian Org Admins,

It has come to our attention that [redacted/position in Debian], [redacted/full name], is the [redacted/relationship] of [redacted/name], ...

This is incredibly disturbing as the Debian folks have been valued members of the GSoC community for many years and this threatens the integrity of the program.


Taylor is complaining about conflicts of interest in Debian, this confirms Fact 7.



Who would investigate Taylor's complaint? Chris Lamb and Molly de Blanc. Mollamby.



Subject: Re: Concerns around Debian GSoC students and conflict of interest
Date: Fri, 13 Jul 2018 14:49:50 +0200
From: Molly de Blanc
To: Daniel Pocock



Just as a quick heads up, I'll be talking with the DPL later today to get on the same page -- I know he also contacted Stephanie off-channel.

If you'd like to ping me on IRC, I can try to be online and accessible (today turned into quite a busy day for me) at a time that works for you.

Cheers, Molly


Notice that de Blanc does not mention her conflict of interest (romantic relationship with the DPL, Chris Lamb) in that email. Lamb never mentioned it either. Neither of them recused themselves (Fact 8). Pocock was travelling that weekend and couldn't make time to join a hastily organized meeting. As boyfriend and girlfriend, Lamb and de Blanc, Mollamby, had a meeting without the rest of the Debian GSoC admin team. When the boyfriend is also the leader of the project and when the girlfriend's conduct is in question, is it any surprise that another volunteer is blamed and the girlfriend takes over the team?



That email is the smoking gun: two people at the very top of the free software ecosystem (Debian and OSI) using a volunteer as a scapegoat for a communication breakdown that one of them had been party to.



This farce is further compounded by the fact the original complaint was about conflicts of interest.



Mollamby hid their own conflict of interest while investigating a conflict of interest.

Is this a new style of disruptive leadership? Or is it simply good old fashioned cronyism?



Even this hidden conflict of interest may not be enough to justify discussing the relationship publicly. However, they have meted out severe punishments on numerous other volunteers. de Blanc even went to FOSDEM and gave a talk boasting about demoting somebody and putting volunteers behind bars. If these people want to take on leadership positions and preach about harming other volunteers they also need to accept that their own conduct will come under public scrutiny. It is clearly not possible to talk about the way they both concealed and benefitted from a conflict of interest without also making their relationship a public matter. In this situation, the ethical transgressions heavily outweigh the concerns about their privacy.



What's more, Pocock announced his resignation from the Debian GSoC team in August 2018, if people had not behaved immaturely after that, it is unlikely any of these facts would be under public scrutiny right now.



In a non-apology email sent by the new DPL Sam Hartman, Debian confirms there were conflicts of interest and that Debian is completely unprepared for these situations:



I regret that we didn’t have better tools for dealing with conflict
of interest and hope we will develop those tools going forward.



...

The conflict of interest issue had no easy answer... There was not a clear conflict of interest policy. Sometimes in situations like that you don’t have good options.


The GNOME community have also done an excellent job of reducing this complicated situation into a concise query to their own leadership. From the GNOME Foundation mailing list:



Nobody appears to be asking about Molly.



People are asking about you (Neil McGovern). You and Lamb both come from this Debian Cambridge grouping. You are the Executive Director.

How long did you know that your new hire was also your friend Lamby's girlfriend?

Please respond transparently, we would all like to see this cleaned up so there will be no discomfort or embarrassment at GUADEC.


It is interesting to see that a student applying to GSoC appears to be demonstrating more integrity than the leader of the Debian Project and the OSI board president combined.



OSI Board at Microsoft

Conflict of interest? OSI board meeting, Spring 2018, Microsoft, San Francisco

Recent Techrights' Posts

We Are Sad to Hear the Story of Jonathan Riddell, Champion of KDE and GNU/Linux on Desktops/Laptops
I have enormous respect for Jonathan and everything he has done
UEFI "Secure Boot Doesn’t Play Nice at the Moment"
UEFI "Secure Boot" does not improve security. It's an artificial obstacle in service of monopoly.
 
Links 15/09/2025: "Postal Traffic to US Down by Over 80%" and 'Smart' Spinozacampus Laundry Room Goes AWOL
Links for the day
Gemini Links 15/09/2025: Dungeon Hustle and Deleting Oneself From the Net
Links for the day
Breach of EPO's Duty of Care or Cigna Reimbursement Issues
This is the sort of thing that motivated Luigi Mangione to assassinate a CEO
Ask Ubuntu About "Secure Boot" Violation and Laptops That Don't Boot GNU/Linux
Does anyone still believe that "Secure Boot" has anything at all to do with security?
Talking About the Problem vs Talking to the Problem
Wanting an audience is never a good excuse for compromising one's values and principles
Focusing on Patents
The reason we cover the EPO so much is that it's close to home
"Secure Boot Violation": The 'Joys' of Fake Security Gone Wrong
Not everyone reboots every day
Links 15/09/2025: Russia Invades Romanian Airspace, Penske Media Sues Google Over LLM Slop
Links for the day
Links 15/09/2025: Bitcoin ATMs Scam and "Conservative Cryptography" (Backdoors Fantasies)
Links for the day
EPO Imitates Microsoft: "Three Days or More Per Week" Inside the Office to Get a Desk to Work on; "the Office Breaches Its Promise Towards Staff and Acts in Breach of Its Duty of Care"
The EPO serves no actual function in Europe
Links 15/09/2025: Political Affairs, Censorship, and Copyrights
Links for the day
Gemini Links 15/09/2025: Music Genres, Invisible Networks, and Akademy 2025
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 14, 2025
IRC logs for Sunday, September 14, 2025
Satya's Plan B: Try to Hide the Massive Extent/Scale/Scope of Microsoft Layoffs
fewer people buy Microsoft
Red Hat News About De Facto Mass Layoffs (Bluewashing) Gone From Reddit (Censored by Gatekeepers), Still Online in The Register
With RTOs, PIPs, relocation etc. expect IBM to "shed off" many Red Hatters
Gemini Links 14/09/2025: ROOPHLOCH, Music, and Reddit
Links for the day
If You Want to "make your 'Windows PC' lean, mean, and fast" You Will Install GNU/Linux or Some BSD
That kind of article says a lot about IDG
Slopwatch: Google News Infested With Slop (About Half of the Results for "Linux" Today)
This is the sort of junk one finds when looking for "Linux" in Google News these days
Links 14/09/2025: Ricky Hatton Dies and McDonald's Declares War on Tipping Culture
Links for the day
Links 14/09/2025: Disasters for CEOs Obsessed With Slop and Slop Companies School Like Fish
Links for the day
"Bad Shim Signature" (Microsoft 'Secure' Boot)
"Fresh install not booting"
What Microsoft Garrett and Microsoft Lunduke Have in Common
Similar tactics, different "wings"
Links 14/09/2025: US "Economy Sagging", "Michigan Economy Wobbles From Tariffs"
Links for the day
Gemini Links 14/09/2025: Minimalist Snippet Manager and Omarchy Linux
Links for the day
The Face of the Digital Far Right: Microsoft Lunduke
Microsoft Lunduke is an online extremist that belongs to and panders to the far right
20 Years Later and Academia Isn't the Same
"I never dreamed of being a professor"
'Cancel Culture' by the Right: Microsoft Lunduke Contacts People's Employers Trying to Get Them Fired
Microsoft Lunduke panders to extremists online
"Bad Shim Signature"; So 'Secure' That It Overrides Users' Preferences and Turns Itself Back on (Coercive Measure)
This was a few hours ago
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 13, 2025
IRC logs for Saturday, September 13, 2025
Microsoft is Rapidly Dropped From Web Servers, Shows Survey
Microsoft lost about 8% "market share" in just 3 months
Many GNU/Linux Users Report MOK (Machine Owner Key) Issues in Recent Days
many people don't report this online and never post in Reddit
We Covered UEFI 'Secure Boot' Scandals. The World Listened.
To hell with UEFI 'secure boot'
Links 13/09/2025: Escalations in East Europe and POTUS’ Health Cover-Up
Links for the day
Gemini Links 13/09/2025: Lagrange Turns 5 and Lagrange 1.19.2 Released
Links for the day
Microsoft Inside Your Linux: "Security vulnerability that allowed an attacker to bypass UEFI Secure Boot."
2 hours ago
A New Low for "Linux Journal": Promoting MICROSOFT WINDOWS Using LLM Slop
They've just jumped the shark entirely
Fake News With Fake Numbers About Microsoft
"This is what happens when the world's economy is governed by sick old men"
Slopwatch: "Google News" is Fast Becoming a Mashup of Slopfarms, Linux Journal ("LJ") is a Dump of LLM Slop
Well done, Google News. Google itself can flourish as a slopfarm mashup.
Torturing Users Who Just Want to Run GNU/Linux on Their Own PC
"Linux does not want to install"
The Register MS Still Takes Money to Hype Up "AI" in Articles by Microsoft Resellers With the Term "AI" 30+ Times in Them
Notice how many times they mention "AI"
The Apache Logo News is VERY Old, Racists and 'Anti-Woke' Bigots Look for Something to Incite Other Bigots With
Nothing to see here, move along
Linux Mint 9/11: "4th One Today..." (in Reddit)
Remember that not everyone having an issue reports it to social control media like Reddit
Nepal Will Fall Without a Single Shot Fired, Thanks to Social Control Media
Or very few shots (by the authorities)
European Corruption in the European Patent Office (EPO) Targets Culture
"In reality, the project includes a new “legal instrument” shifting administrative burden and liability on EPO staff while creating new uncertainty and externalising Amicale activities."
European Authorities, Already Bribed and Infiltrated by Microsoft, Won't Help You Find BigBlueButton, Jami, Ring, and Jitsi
Because they're paid by Microsoft and are Microsoft 'addicts' themselves
UEFI Secure Boot Failing, as Expected for Nearly 15 Years Already (Techrights Said This Since 2012)
in the media
Debian 9/11
people report this issue
Gemini and Web Links 13/09/2025: MElon's Slop Grift and "Autonomous Trains"
Links for the day
Moving From Content Management Systems (CMSs) to Static Site Generators (SSGs) Saves You Time, Makes You a Lot More Productive
try to reduce the cost (financial and computational) of running your site
Pursuing Peace Through Violence
You cannot "see" a person's mind, until the mouth opens
Leak: European Patent Office (EPO) is Now Attacking Amicale Clubs
corruption has become the norm and scientists are robbed of any dignity
Can We Please Stop Celebrating Shooters?
"An important point to hammer on is that CoCs were never intended for uniform or symmetric application"
Oracle Fraud (or Defrauding Shareholders)
"the obvious [lie] is that watts are (wasted) electricity [and] and FLOPS are computing capacity"
Geminispace is Growing Faster in 2025 Than It Did in 2024
What matters is that corporations haven't ruined it and LLM slop is extremely rare
Links 13/09/2025: China Punishes for 'Negative' Posts, US Police Unable to Find Shooter
Links for the day
Who's the Mystery Financier of SLAPP Against Techrights and Is That a Millionaire/Billionaire?
Whose idea was it to fund meritless lawsuits against my wife and I?
Slopwatch: Slow Slop Day
This distracts from or may take traffic away from the original articles, actually written by actual people
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 12, 2025
IRC logs for Friday, September 12, 2025