I'm very sympathetic to Ukraine and the desire to demonstrate or speak out, but I don't see how this instance is very effective, and doing it has a significant cost to the integrity of Debian, as this argument says:
> Russ Allbery agreed that the DFSG was not relevant; he also warned that citing the Social Contract and DFSG ""turns the conversation into rules lawyering without addressing the actual issue"". However, even though xsnow is DFSG-compliant, he did say that the flag display may be something Debian does not want in its archives:
> > I would, in general, say that software that behaves in deceptive ways, which includes hidden behavior changes based on usernames, locales, or other local settings or information that no user would reasonably expect to change behavior in this way is probably not something that we want to have in Debian. It's a very slippery slope and also likely to create a lot of drama to very little benefit.
It is interesting to read M. Allbery's comment side by side with the discussion here on Hacker News about a CLAUDE.EXE program with hidden behaviour that subtly changes the way that it outputs an information banner based upon timezones, hostnames, and domain names.
Further LWN commentary (as observed at https://news.ycombinator.com/item?id=48736518) is that the result would not be solely drama but potentially some fairly nasty real world consequences for some people.
The simple solution that should make everyone happy is to simply document it. That way it is no longer a hidden behavior, and the Debian maintainer could even do that as a patch without the help of upstream.
That might be responding too narrowly to this objection.
Then there's the question of singling out some subset of Debian users based on their country, for different behavior they presumably don't want and that is against their individual interests (see the other comment, about displaying a flag getting you beaten).
The solution is to treat everyone fairly and honestly, and to set an example for how people can get along. Imagine Debian is an international space station: the astronauts will help each other, not bicker and backstab. There are other venues for conflicts.
The deceptive aspect is the stronger part of the objection. Banning any and all political messages in Debian packages would go too far and I doubt the community would support it. People and in extension developers, can be quite political active and will put some of that into their works. I am sure (as in I don't need to verify) that the pride flag is somewhere in Debian right now, in some package, and banning it would cause much more conflict than allowing it to remain where it is. The problem really only exist if people would have it shoved into their faces through deception.
An other example of political message is when projects redirect donations to a cause. Should projects be banned from having a "donate to Ukraine" somewhere in a program, maybe with a Ukraine flag next to it?
One comment really nails the problem with this sort of thing:
" People in Western countries don't realize how bad the situation on the ground actually is¹; random Ukrainian flags showing up on your work monitor can result in severe problems for you (like losing you job, or worse), especially if you work in the government sector. If they show up on your laptop in a random cafe or an airport, you might very well get a beating from one of many "war heroes" that walk around the cities these days.
No, the government sector doesn't just make missiles and bombs, it also covers schools, hospitals, many other things."
And that's not even so bad compared to what would happen to somebody in occupied Ukraine: they would be sent to "the basement." That's the euphemism for the local torture chamber, outside of which they deposit the dead bodies of the tortured to let everybody in the area know what happens if they do something like speak Ukrainian.
When I've looked at academic language comparisons, Polish, Russian, and Ukrainian are all about the same distance from each other. Somewhere in the range of distances of Portuguese/Spanish/Italian, which have lots of very similar words. A single word isn't going to get somebody in trouble, but a sentence? Going to raise eyebrows, and likely capture unless you've got people to vouch for you being a patriotic newly Russian citizen, just trying to catch up to the new reality. The areas that are currently occupied, as well as Russian lands that border Ukraine, have a mixed vernacular called Surzhyk, which uses Ukrainian sounds and grammar but lots of Russian vocabulary and idioms.
Early on in the occupation, one form of resistance was simply graffiti with a letter that's in the Ukrainian alphabet that's not in the Russian alphabet, like ї. That sort of symbolic resistance has been replaced entirely by far more strategic resistance these days, according to recent reporting.
Honestly, this is like saying that someone who speaks Italian would mistake your for speaking Spanish. That's how it sounds. If you disagree - you clearly don't speak both languages. Just because some words are similar doesn't make them sound same.
Note that xsnow already displayed such flags randomly, and this just changes the probability.
So, if you're in a location where displaying the Ukraine flag will get you shot, 1) it was already not safe to run xsnow, and 2) much more importantly, I genuinely hope you can successfully escape your situation.
When the war started, Europeans were forcing famous Russians living in Europe to denounce their government's evils. For example an opera house demanded a Russian opera singer to say something against the regime or be "blacklisted".
As if it's so fucking easy to denounce a dictator who has murderous tendencies and who rules your homeland, as if it's so easy to insult him, and then what, not be able to return home and see your friends and family until that dictator is defeated?
I found those demands so unthinkingly heartless, it's responding to tyranny with your own tyranny...
Oh, russians re-elected same govenment for past 35 years cheering invading neighbors every couple years since inception of russain federation.
Problem is not in dictator. Problem is imperialistic russia and every russian citizen who does nothing about it. They should be denied every service from civilized world until they stop their fascism.
And before you ask, yes, I did protest and depose dictator.
Well the voting is heavily manipulated since more than 10-15 years already, and many candidates are banned from running too (not to forget many opposition and critical figures were killed).
Of course they should change the government but I don't think it's possible to achieve that through elections.
Slackware-current upgraded xsnow to the latest version in June 20th but applied a patch from ALT Linux that removed the protestware bits just because of this reason. I support this.
The naïveté of that position is that the users are not informed ahead of time that there's a random chance of a political protest popping up on their screen, so do not get to make an informed choice before it is perhaps too late. It's not mentioned in the doco. It's obfuscated in the source code as an 'extra tree' in an array of xpmtrees. The commit that added this had the commit message 'willem'.
So 3% of the pop uses Linux. I shouldn't be surprised that 3% of those use Debian. I WOULD be surprised to find that more than 1 in 10k has EVER used xsnow 1 in 1M running it continually. Note this is actually wildly overstated. I have not even touched on the settings which would show flags.
Then we have to imagine they run xsnow all the time and somehow don't notice the dangerous political stuff OR run it for the first time.
If we start with 140M Russians this has certainly never happened and will almost certainly NEVER happen.
It is actually far more likely that someone should actually get caught using it trying to see the flags and have to explain that to their boss.
How many victims should something generate before considering removing it from Debian?
Funny thing how here we are talking about keeping it despite it can apparently cause people to die, while Debian was so quick to decide that the offensive fortunes that nobody had complained about for the past 23 years were incredibly harmful and had to be removed right away :D
It could also be 302. You cannot just invent a massive user base because you have no information. Given how niche the software is there is no reasons to believe it is widely used in places where that would cause issues. I suspect not a single person has been impacted by seeing Ukrainian flags.
The push back in this is obviously coming from an anti Ukraine sentiment
I do agree that the user base is possibly minuscule. But as I said in other comments, even if it only happened to one single person, I wouldn't consider it an acceptable risk.
We've removed stuff from debian for way less than this.
> The push back in this is obviously coming from an anti Ukraine sentiment
I'd understand it if the flag is added by someone from Ukraine or another country invaded by Russia. But it looks like it was added by someone with a Dutch name.
Westerner putting random people's lives at risk just so he can give himself a justice boner doing some cheap virtue signaling. Classic.
So, are you American? What are you doing about your governments funding and supplying of genocide? Your litany of excuses also apply to the average Russian...
Nope, European, from a country that did the most to oppose Israel, despite the fact it is very difficult for any continental European country to do so as we are tainted by the Shoah...
And America is electing more and more anti-israel politicians.
Of the Russians I know (some still in Russia), not a single one supports United Russia party, although that does mean we have to communicate rather… secretly? these days.
I know a lot of Russians, but all of them left and are critical. Can't say I know any Russians in Rusia, but papers such as Meduza report on and give interviews with them frequently.
> For most ordinary Russians, the war is not a central concern. This may sound cynical, but it’s the truth.
> When they do think about it, they tend to view it much like the weather: something that one may or may not like, but which lies beyond individual control and to which one simply adapts.
I admire a friend of mine in London who every weekend went to anti-genocide rallies in London. But at the same time I can imagine it's excruciating work, yelling and protesting and not saving any single Palestinian child's life. Meanwhile in Russia, protesting will get you arrested and probably be sent to the frontline (as a man) or prison (as a woman). Given those choices, would you also not say "Well, I can be angry and depressed about the Ukranians (and my fellow countrymen forced to fight the war) being killed, or I can just go about my day and put this exhausting thought aside"...
Meanwhile in America, there's a political party using the Nazi playbook to subvert democracy and succeeding. Are you American? Are you doing everything to stop that, or do you see yourself powerless and so you go about your day and put that exhausting thought aside?
Eh, you'd be wrong. It's a different issue in the US, half the population believe and vote for nonsense, the other half are strongly against it.
> What proof do you have, or do you "just know it"?
Friends with Russians, and try to read useful sources like Meduza. It's absolutely very much the case that most of that population are brainwashed and believe the state propaganda.
> Meanwhile in Russia, protesting will get you arrested and probably be sent to the frontline (as a man) or prison (as a woman).
Yes, so an armed uprising is necessary if voting is not an option. But if there is no will, there will be no effort.
> Meanwhile in America, there's a political party using the Nazi playbook to subvert democracy and succeeding.
America will still have elections, and we won't have to deal with our Putin-wannabe again after their term is up.
> America will still have elections, and we won't have to deal with our Putin-wannabe again after their term is up.
Heh.. Russia has "elections" too.
So easy to point and jeer and say "they're bad, but over here the circumstances are different!"...
As if armed uprisings are child's play, and those not rising against tyrants are cowards. I bet if you were in Russia, you'd also made excuses why you haven't joined the resistance and learned how to make bombs and kill FSB soldiers. Fact is "the will" only comes with backs against the wall, like when food runs out (Arab uprising) or it's no longer tolerable (Iran). And then what will the revolution bring? Who's in charge in Iran, Libya, Egypt? It's easy to be an armchair revolutionary calling people cowards and brainwashed from 10000 miles away..
Addendum: and if a Russian has sympathy for the Ukranians but is powerless to do anything, wouldn't it be attractive to start believing the lie that it's the Ukranians that are assholes, that they're also doing bad things (just look at the average Israeli's support of the genocide - "it's because they want to annihilate us!"); if you start believing that stuff, you can "forgive" yourself not doing anything against your tyrannical government.
The 'heh' indicates a misplaced smugness.Our elections actually result in a change in leadership. There is a lot of yammering, but no evidence the US is about to become an actual dictatorship.
> So easy to point and jeer and say "they're bad, but over here the circumstances are different!"...
Because they are drastically different. You're just trying to downplay that because it breaks your entire argument.
Yeah, but is open source so if some of the extra rare "good Russians" do not like this super small chance of getting hurt then they diserve their regime, they will finally protest when the regime will affect their own lives but stay silent while other people get genocided.
I do not own any popular software to put anti Zed/Putin shit in it so sorry I can inconvinience those super rare good Russians.
This sounds like a you problem. Suppose you have software that shows famous faces and quotes as a screensaver would you make it by default not show anyone of color so it would be acceptable in rural Oklahoma or make it show no women so it would be acceptable in Iran?
Most women whom one would display inspirational quotes wouldn't be displayed in a head scarf as they would come from a range of cultures most of which don't have the same restrictions. I think that the point is that political moral and cultural norms aren't neutral and many are just morally deficient and free software shouldn't be in the business of pretending that Nazis and Jews are 2 different groups with equally valid rights not to be offended.
This is a corporate mindset we adopt because we want everyone's business not a useful or correct attitude for individuals who aren't the beneficiaries of the publics money in the first place.
The Russian aggression is evil, the Russian culture as a whole is abhorrent. We shouldn't be afraid to call it out and fight back. I would be ok if every Debian terminal printed a message raising donations for the defense of Ukraine.
Its free software so Russians worried about political correctness herein meaning defense of mass murder torture and genocide can run a fork which boots up to Russian military propaganda if they like.
Wouldn't that be.. acceptable, if not entirely the point? Raising awareness? Some rando getting arrested for a screensaver they didn't know contained a flag is pretty efficient propaganda and would likely turn at least the involved people and their inner circles? It might not be the point but I doubt they'd be disappointed
I really really really hope the point of stuff of like this is NOT to make martyrs of randomly selected people in a foreign country. That would be an absolutely demented thing to try for. Not to mention the arrogance of thinking you need to show foreign people what their country is like. They know that better than you.
How is this an issue? Xsnow is a novelty. You have to make two decisions: the first to still be using Xorg at all, the second to install the application itself which is essentially a gag screensaver.
The idea that some govt employee would get fired for this is extremely far fetched.
So, if someone were to modify a Debian package to show Palestinian flag for Hebrew speakers or Iranian flag for ...Enligsh speakers, the change won't be instantly reverted and the user won't be restricted, right?
I could not be less sympathetic on this. If you don't want people protesting your actions, don't, like, invade their country.
"But what if it was the US doing the invading?" Yes, even then. If some Iraqi author made an Xsnow that waved little Iraq flags, that's their right. Even if I disagree, it doesn't harm me, and it might inspire me to consider our actions.
"But what if it makes someone's boss get mad at them?" If my boss saw an Iraq flag on my screensaver, I'd say "huh, look at that! I guess that was added in the new version. I'll change it to another screensaver." And if you live in a country there the likely reaction is that your boss might execute you, your government are the baddies.
I think there is in fact a discrepancy between displaying flags and advocating directly for gendered violence:
> Debian contributor "NoisyCoil" said that they had wanted to argue in favor of keeping the packages, but after looking at the content they had decided against it:
> > I went peeking at the package and, unless I'm completely missing something, the second offensive Italian fortune says that women's "no"s should be interpreted as "yes", while the third one explicitly calls for violence on women [1]. Like, it literally says women should be beaten on a regular basis. I'm afraid I can't help you here, sorry.
> I think there is in fact a discrepancy between displaying flags and advocating directly for gendered violence
NosiyCoil forgot to mention that I removed hundreds of fortunes containing racist/sexist jokes from the regular section, installed by default to every Italian user and displayed by default.
I basically grew up reading them and 20 years later, I forked fortunes-it to get rid of them and put them in the offensive section. And then Cater unilaterally decided to remove it.
But neither NoisyCoil, nor Cater, not anyone else stepped up to actually read the fortunes that were not tagged as offensive and were being installed and displayed by default.
One year later, I'm still the only person doing this work.
Archlinux is still using the pre-fork version where this content is still present in the main section.
That article is very one sided. The author spoke to Cater but did not think of reaching out to me for comments.
NoisyCoil is of the opinion that offensive stuff in the offensive section (not installed nor displayed by default) are worse than quotes from fascist writers that in 2026 still inspire people to beat up journalists in Italy, installed and displayed by default.
I think the point of all this is that there is no absolute scale of "offensiveness". Different societies have different values. Obviously, enough people found the Ukrainian flag easter egg offensive enough for the matter to have landed on LWN and the HN front page.
That may be, but if I do in fact live in a place where my "government are the baddies," why does it follow that open software should punish me—for nothing more than happening to be alive within that jurisdiction—by provoking my "baddie" government to visit its badness upon me personally? For speech I wasn't even trying to make—for speech that you kind of put in my mouth without asking me?
It would be fine if you gave me a beautiful and whimsical way to choose to express my feelings, and I took it. But when you're disguising the flag in code as an "EXTRATREE," that signals to me that you're trying to slip through a surprise without my noticing:
I think it's great that you live somewhere—and enjoy a relationship to your working environment—where you don't have to worry about that kind of thing! I wish more people got to enjoy those kinds of freedoms. I don't think the way to make that happen is to rub individual people's faces in the crappiness of their predicament.
I'm reminded of a situation I encountered some years ago where a person opened a web browser in front of a classroom—no porn in their history, nothing untoward, just going to a high-profile mainstream news site or something in service of a classroom discussion—and all the targeted ads were for things like HIV medicines and mainstream campaigns choosing ad variants that depicted gay couples.
Not the time or the place, that person didn't ask for it, and it led to deep consequences for them—from "outing" on one side, to accusations of "grooming that classroom full of students" and "probably being riddled with AIDS" on the other—that this good, responsible, kind, wise person did nothing to invite.
The targeters probably thought they were doing something righteous or even "accepting" by "making sexual minorities feel seen" or something—but by putting words in the person's mouth without their consent or agency, they caused great unnecessary harm to somebody who didn't deserve it.
To be explicitly clear, I have nothing to do with Xsnow. I don't even use it.
That out of the way, I can't and won't sanitize my words so that they're perfectly inoffensive all the world around. I've made comments over the years critical of a great many governments. If the fragile leadership of those countries saw my words on a screen there, perhaps they'd get angry at the person reading my writings. I do feel bad for that person and certainly didn't try to get them in trouble. But neither am I going to not criticize a government that's behaving poorly — even my own — for the sake of a hypothetical situation that may never even exist.
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
I didn't write that and I'm not arguing with you. I don't have skin in this game. That said, I think the likelihood of someone having their locale set to RU also being in Russia is substantially improved.
Which countries have I not criticized for invading others? No, seriously, please let me know if I've missed some and I'll fix that immediately. I've certainly criticized my own country's misguided attacks on others who I don't think were a direct risk to us or our allies.
It's well documented that Russia is kidnapping its citizens off the streets to send them on an invasion of a sovereign country, but I hadn't heard that they're honoring nazis now. I'm not sure I believe that.
Sorry if it sounded like it was only in Debian; that was not my intent. I tried to make clear that the Debian package maintainer and upstream maintainer were one and the same, and that the change was upstream first. That was the reason cited by the person who complained, that he didn't file a bug because the maintainer was the one who instituted the changes upstream.
A lot of people talking about how displaying the flag at all could get somebody in Russia in trouble. You could see the increasing of the likelihood as helpful then, because the flag could always appear. By making it come up more often it communicates to the user that it can appear it gives a chance to the user to notice it in a "safe" situation and not use xsnow if they are in a situation where it could cause trouble for them. The existence of the flag is not quite mentioned at https://www.ratrabbit.nl/ratrabbit/xsnow/, and the site is loading too slow to see if it is shown in https://www.ratrabbit.nl/ratrabbit/xsnow/visuals/index.html.
This change to xsnow is obviously an unalloyed negative, and the simplest test to confirm this to yourself is to imagine the political statement being something you disagree with, e.g. if the locale were set to an EU country, only the US flag would show.
One of the comments that struck me on the lwn.net site is the (albeit small) possibility that someone in Russia could be running the software and unintentionally land themselves in hot water if someone discovers these images on their computer. I'm sure that's not the intended consequence, but I could be problematic.
The issue with that claim is xsnow already displayed the Ukrainian flag regardless. And it's in no way a critical app most people would even have installed to begin with. I had no idea it was even still being maintained.
I haven't heard of this package personally and it's not on my desktops so it must not be pulled in by any of the task- desktop environment metapackages I use. So you probably have to go looking for it.
I really don't care about this package or protest but what might be more interesting to consider is what if this were in a default package and what if the affected locales were different?
If I make a list of all the countries who have recently been at war or are currently engaged in hostilities or have ethnic animus towards each other and just choose to taunt them all, that would really be a dick move and it's probably OK for Debian to drop the package. FWIW I'd rather see them adopt a kindhearted fork than override an author/ maintainer when possible.
If there's no special pleading for the ru/ua conflict then it's not too concerning.
The debian maintainer and the original author are the same person. If they added this feature in the original version, I doubt they will drop the package or fork it and place the fork in debian.
Has anyone confirmed who this 'Alexander Ivanov' person is or even if this is a real person and not some AI bot? I searched for the email address used and it only appears recently in these handful of posts about xsnow.
How is seeing more Ukrainian flags a discrimination?
Discrimination implies something harmful. Like invading neighbor country and perpetrating genocide. This complaint says more about Ivanov than anything else.
> People in Western countries don't realize how bad the situation on the ground actually is; random Ukrainian flags showing up on your work monitor can result in severe problems for you (like losing you job, or worse), especially if you work in the government sector. If they show up on your laptop in a random cafe or an airport, you might very well get a beating from one of many "war heroes" that walk around the cities these days.
Oh no! Imagine the horror of losing your job. It compares nothing to literal genocide their army perpetrating.
And yes, it is their, not their government, not some mysterious leaders. Russians reelected same government for 35 years with it invading neighbours pretty much every 5 years.
Imagine living in the occupied part and being sent to the basement for this. Probably not that black and white now... although seeing both activist and slacktivist types being very loud about the land but not the people over and over again, I wouldn't be entirely surprised if you don't care.
you mean nationalists/imperialists like Navalny whose main beef with current russian administration is that is corrupt, meaning it is not being effective enough?
Honestly, not sure why westerners yearn to find good fascists.
It's still selective degradation of functionality, as presumably people who download a snowglobe animation program don't do it to see any sort of statement apart from normative depictions of wintery things. The problem would be the same if it showed Russian flags only to users with Ukrainian locale, or ads for Mountain Dew only when the user's locale is set to French, or even just something as impossible to interpret as offensive on its own as adding lots of little cactus men whenever the locale is Dutch.
right, which means the software is less useful and as such you might not want to use it. Plenty of software like that listed on repositories, which I think is fine.
So it's "selective degradation of functionality" based entirely on your assumptions regarding the motivations of the users? How is this a useful description?
Given the number of colonized people that speak Russian, including residents of Ukraine, Georgia, Uzbekistan, etc. etc. etc. I think this sort of Easter Egg based on language rather than geographical location is quite appropriate.
My family speaks both Ukrainian and Russian, and in Russian speaking spaces here in California we find many many many eager supporters of Ukraine's sovereignty, because when they hear Ukrainian spoken they tell us! And also tell us they wish they had been able to keep their non-Russian family language alive too. Most of these supporters are not from the Moscow or St. Petersburg areas though...
I thought we all agreed that flags-as-political-statement in software were Certified Cringe after the one-click “add a French flag overlay to your Facebook profile photo” thing, eleven years ago?
Protestware as a whole has never worked to solve anything. Awareness of a particular issue is the only positive thing "protest" software has successfully tried, with the second order effect being better supply chain management.
I don't use Linux or Xsnow but it baffles me how distributions would allow something like this. Sure, it's just flags now, but if you look at faker and colors.js, you'll see the other side of the coin of what happens when you allow software like this.
Distributions didn't "allow" anything. The author just uploaded it. That's all there is to it.
The asset file isn't called "ukraine flag" so unless you open all the images or run this as a russian you will probably be completely unaware of this behaviour.
I'm very sympathetic to Ukraine and the desire to demonstrate or speak out, but I don't see how this instance is very effective, and doing it has a significant cost to the integrity of Debian, as this argument says:
> Russ Allbery agreed that the DFSG was not relevant; he also warned that citing the Social Contract and DFSG ""turns the conversation into rules lawyering without addressing the actual issue"". However, even though xsnow is DFSG-compliant, he did say that the flag display may be something Debian does not want in its archives:
> > I would, in general, say that software that behaves in deceptive ways, which includes hidden behavior changes based on usernames, locales, or other local settings or information that no user would reasonably expect to change behavior in this way is probably not something that we want to have in Debian. It's a very slippery slope and also likely to create a lot of drama to very little benefit.
It is interesting to read M. Allbery's comment side by side with the discussion here on Hacker News about a CLAUDE.EXE program with hidden behaviour that subtly changes the way that it outputs an information banner based upon timezones, hostnames, and domain names.
* https://news.ycombinator.com/item?id=48734373
Further LWN commentary (as observed at https://news.ycombinator.com/item?id=48736518) is that the result would not be solely drama but potentially some fairly nasty real world consequences for some people.
The simple solution that should make everyone happy is to simply document it. That way it is no longer a hidden behavior, and the Debian maintainer could even do that as a patch without the help of upstream.
That might be responding too narrowly to this objection.
Then there's the question of singling out some subset of Debian users based on their country, for different behavior they presumably don't want and that is against their individual interests (see the other comment, about displaying a flag getting you beaten).
The solution is to treat everyone fairly and honestly, and to set an example for how people can get along. Imagine Debian is an international space station: the astronauts will help each other, not bicker and backstab. There are other venues for conflicts.
The deceptive aspect is the stronger part of the objection. Banning any and all political messages in Debian packages would go too far and I doubt the community would support it. People and in extension developers, can be quite political active and will put some of that into their works. I am sure (as in I don't need to verify) that the pride flag is somewhere in Debian right now, in some package, and banning it would cause much more conflict than allowing it to remain where it is. The problem really only exist if people would have it shoved into their faces through deception.
An other example of political message is when projects redirect donations to a cause. Should projects be banned from having a "donate to Ukraine" somewhere in a program, maybe with a Ukraine flag next to it?
The maintainer and upstream are the same person
One comment really nails the problem with this sort of thing:
" People in Western countries don't realize how bad the situation on the ground actually is¹; random Ukrainian flags showing up on your work monitor can result in severe problems for you (like losing you job, or worse), especially if you work in the government sector. If they show up on your laptop in a random cafe or an airport, you might very well get a beating from one of many "war heroes" that walk around the cities these days.
No, the government sector doesn't just make missiles and bombs, it also covers schools, hospitals, many other things."
And that's not even so bad compared to what would happen to somebody in occupied Ukraine: they would be sent to "the basement." That's the euphemism for the local torture chamber, outside of which they deposit the dead bodies of the tortured to let everybody in the area know what happens if they do something like speak Ukrainian.
> if they do something like speak Ukrainian.
Sheesh, how different are the languages? Would it be an honest mistake to say a word in Ukrainian and not realize?
When I've looked at academic language comparisons, Polish, Russian, and Ukrainian are all about the same distance from each other. Somewhere in the range of distances of Portuguese/Spanish/Italian, which have lots of very similar words. A single word isn't going to get somebody in trouble, but a sentence? Going to raise eyebrows, and likely capture unless you've got people to vouch for you being a patriotic newly Russian citizen, just trying to catch up to the new reality. The areas that are currently occupied, as well as Russian lands that border Ukraine, have a mixed vernacular called Surzhyk, which uses Ukrainian sounds and grammar but lots of Russian vocabulary and idioms.
Early on in the occupation, one form of resistance was simply graffiti with a letter that's in the Ukrainian alphabet that's not in the Russian alphabet, like ї. That sort of symbolic resistance has been replaced entirely by far more strategic resistance these days, according to recent reporting.
No it won't.
Honestly, this is like saying that someone who speaks Italian would mistake your for speaking Spanish. That's how it sounds. If you disagree - you clearly don't speak both languages. Just because some words are similar doesn't make them sound same.
I speak Spanish so this makes sense. Thank you. I am unfamiliar with both languages and was unsure how they deviated.
Note that xsnow already displayed such flags randomly, and this just changes the probability.
So, if you're in a location where displaying the Ukraine flag will get you shot, 1) it was already not safe to run xsnow, and 2) much more importantly, I genuinely hope you can successfully escape your situation.
When the war started, Europeans were forcing famous Russians living in Europe to denounce their government's evils. For example an opera house demanded a Russian opera singer to say something against the regime or be "blacklisted".
As if it's so fucking easy to denounce a dictator who has murderous tendencies and who rules your homeland, as if it's so easy to insult him, and then what, not be able to return home and see your friends and family until that dictator is defeated?
I found those demands so unthinkingly heartless, it's responding to tyranny with your own tyranny...
> not be able to return home and see your friends and family until that dictator is defeated?
Assuming they're still alive.
I mean, it's easy to be apolitical and stay in russia. They can always do that and not break the russian social contract.
Молчание - знак согласия
Oh, russians re-elected same govenment for past 35 years cheering invading neighbors every couple years since inception of russain federation.
Problem is not in dictator. Problem is imperialistic russia and every russian citizen who does nothing about it. They should be denied every service from civilized world until they stop their fascism.
And before you ask, yes, I did protest and depose dictator.
Well the voting is heavily manipulated since more than 10-15 years already, and many candidates are banned from running too (not to forget many opposition and critical figures were killed).
Of course they should change the government but I don't think it's possible to achieve that through elections.
Slackware-current upgraded xsnow to the latest version in June 20th but applied a patch from ALT Linux that removed the protestware bits just because of this reason. I support this.
They don’t have to use the software. It’s such a non issue. Xsnow is closer to art than critical software, you can easily ditch it
The naïveté of that position is that the users are not informed ahead of time that there's a random chance of a political protest popping up on their screen, so do not get to make an informed choice before it is perhaps too late. It's not mentioned in the doco. It's obfuscated in the source code as an 'extra tree' in an array of xpmtrees. The commit that added this had the commit message 'willem'.
So 3% of the pop uses Linux. I shouldn't be surprised that 3% of those use Debian. I WOULD be surprised to find that more than 1 in 10k has EVER used xsnow 1 in 1M running it continually. Note this is actually wildly overstated. I have not even touched on the settings which would show flags.
Then we have to imagine they run xsnow all the time and somehow don't notice the dangerous political stuff OR run it for the first time.
If we start with 140M Russians this has certainly never happened and will almost certainly NEVER happen.
It is actually far more likely that someone should actually get caught using it trying to see the flags and have to explain that to their boss.
How many victims should something generate before considering removing it from Debian?
Funny thing how here we are talking about keeping it despite it can apparently cause people to die, while Debian was so quick to decide that the offensive fortunes that nobody had complained about for the past 23 years were incredibly harmful and had to be removed right away :D
Please, tell me, who is ever using xsnow in a place where that would be problematic? It’s such a niche software. Again, complete non-issue.
> who is ever using xsnow
We don't know? Debian doesn't spy on users.
popcon shows 302 users as of now: https://qa.debian.org/popcon.php?package=xsnow
302 installs, could be one person with 302 virtual machines, and could be 1 million with popcon disabled (which is the default).
It could also be 302. You cannot just invent a massive user base because you have no information. Given how niche the software is there is no reasons to believe it is widely used in places where that would cause issues. I suspect not a single person has been impacted by seeing Ukrainian flags.
The push back in this is obviously coming from an anti Ukraine sentiment
I do agree that the user base is possibly minuscule. But as I said in other comments, even if it only happened to one single person, I wouldn't consider it an acceptable risk.
We've removed stuff from debian for way less than this.
> The push back in this is obviously coming from an anti Ukraine sentiment
You can read minds?
I'd understand it if the flag is added by someone from Ukraine or another country invaded by Russia. But it looks like it was added by someone with a Dutch name.
Westerner putting random people's lives at risk just so he can give himself a justice boner doing some cheap virtue signaling. Classic.
That's also a good argument for completely removing rainbow flags from everything, in more countries than one. Will we see that happening?
[flagged]
So, are you American? What are you doing about your governments funding and supplying of genocide? Your litany of excuses also apply to the average Russian...
Nope, European, from a country that did the most to oppose Israel, despite the fact it is very difficult for any continental European country to do so as we are tainted by the Shoah...
And America is electing more and more anti-israel politicians.
https://www.axios.com/2026/06/28/republican-party-israel-net...
https://www.axios.com/2026/04/15/iran-war-israel-democrats-c...
Except most Russians support their government and believe its lies...
Of the Russians I know (some still in Russia), not a single one supports United Russia party, although that does mean we have to communicate rather… secretly? these days.
I know a lot of Russians, but all of them left and are critical. Can't say I know any Russians in Rusia, but papers such as Meduza report on and give interviews with them frequently.
I can say that about Americans. What proof do you have, or do you "just know it"?
https://nestcentre.org/what-russians-think-about-the-war-aga...
> For most ordinary Russians, the war is not a central concern. This may sound cynical, but it’s the truth.
> When they do think about it, they tend to view it much like the weather: something that one may or may not like, but which lies beyond individual control and to which one simply adapts.
I admire a friend of mine in London who every weekend went to anti-genocide rallies in London. But at the same time I can imagine it's excruciating work, yelling and protesting and not saving any single Palestinian child's life. Meanwhile in Russia, protesting will get you arrested and probably be sent to the frontline (as a man) or prison (as a woman). Given those choices, would you also not say "Well, I can be angry and depressed about the Ukranians (and my fellow countrymen forced to fight the war) being killed, or I can just go about my day and put this exhausting thought aside"...
Meanwhile in America, there's a political party using the Nazi playbook to subvert democracy and succeeding. Are you American? Are you doing everything to stop that, or do you see yourself powerless and so you go about your day and put that exhausting thought aside?
> I can say that about Americans.
Eh, you'd be wrong. It's a different issue in the US, half the population believe and vote for nonsense, the other half are strongly against it.
> What proof do you have, or do you "just know it"?
Friends with Russians, and try to read useful sources like Meduza. It's absolutely very much the case that most of that population are brainwashed and believe the state propaganda.
> Meanwhile in Russia, protesting will get you arrested and probably be sent to the frontline (as a man) or prison (as a woman).
Yes, so an armed uprising is necessary if voting is not an option. But if there is no will, there will be no effort.
> Meanwhile in America, there's a political party using the Nazi playbook to subvert democracy and succeeding.
America will still have elections, and we won't have to deal with our Putin-wannabe again after their term is up.
> America will still have elections, and we won't have to deal with our Putin-wannabe again after their term is up.
Heh.. Russia has "elections" too.
So easy to point and jeer and say "they're bad, but over here the circumstances are different!"...
As if armed uprisings are child's play, and those not rising against tyrants are cowards. I bet if you were in Russia, you'd also made excuses why you haven't joined the resistance and learned how to make bombs and kill FSB soldiers. Fact is "the will" only comes with backs against the wall, like when food runs out (Arab uprising) or it's no longer tolerable (Iran). And then what will the revolution bring? Who's in charge in Iran, Libya, Egypt? It's easy to be an armchair revolutionary calling people cowards and brainwashed from 10000 miles away..
Addendum: and if a Russian has sympathy for the Ukranians but is powerless to do anything, wouldn't it be attractive to start believing the lie that it's the Ukranians that are assholes, that they're also doing bad things (just look at the average Israeli's support of the genocide - "it's because they want to annihilate us!"); if you start believing that stuff, you can "forgive" yourself not doing anything against your tyrannical government.
> Heh.. Russia has "elections" too.
The 'heh' indicates a misplaced smugness.Our elections actually result in a change in leadership. There is a lot of yammering, but no evidence the US is about to become an actual dictatorship.
> So easy to point and jeer and say "they're bad, but over here the circumstances are different!"...
Because they are drastically different. You're just trying to downplay that because it breaks your entire argument.
Yeah, but is open source so if some of the extra rare "good Russians" do not like this super small chance of getting hurt then they diserve their regime, they will finally protest when the regime will affect their own lives but stay silent while other people get genocided.
I do not own any popular software to put anti Zed/Putin shit in it so sorry I can inconvinience those super rare good Russians.
Are you currently located in DC protesting about the war in Iran? If not, rules for thee but not for me?
This sounds like a you problem. Suppose you have software that shows famous faces and quotes as a screensaver would you make it by default not show anyone of color so it would be acceptable in rural Oklahoma or make it show no women so it would be acceptable in Iran?
In rural Oklahoma, it is entirely acceptable to have “anyone of colour” portrayed in something like a screensaver.
I don’t know much about Iran, but depictions of women seem common in advertising there.
Most women whom one would display inspirational quotes wouldn't be displayed in a head scarf as they would come from a range of cultures most of which don't have the same restrictions. I think that the point is that political moral and cultural norms aren't neutral and many are just morally deficient and free software shouldn't be in the business of pretending that Nazis and Jews are 2 different groups with equally valid rights not to be offended.
This is a corporate mindset we adopt because we want everyone's business not a useful or correct attitude for individuals who aren't the beneficiaries of the publics money in the first place.
The Russian aggression is evil, the Russian culture as a whole is abhorrent. We shouldn't be afraid to call it out and fight back. I would be ok if every Debian terminal printed a message raising donations for the defense of Ukraine.
Its free software so Russians worried about political correctness herein meaning defense of mass murder torture and genocide can run a fork which boots up to Russian military propaganda if they like.
Wouldn't that be.. acceptable, if not entirely the point? Raising awareness? Some rando getting arrested for a screensaver they didn't know contained a flag is pretty efficient propaganda and would likely turn at least the involved people and their inner circles? It might not be the point but I doubt they'd be disappointed
I really really really hope the point of stuff of like this is NOT to make martyrs of randomly selected people in a foreign country. That would be an absolutely demented thing to try for. Not to mention the arrogance of thinking you need to show foreign people what their country is like. They know that better than you.
How is this an issue? Xsnow is a novelty. You have to make two decisions: the first to still be using Xorg at all, the second to install the application itself which is essentially a gag screensaver.
The idea that some govt employee would get fired for this is extremely far fetched.
So, if someone were to modify a Debian package to show Palestinian flag for Hebrew speakers or Iranian flag for ...Enligsh speakers, the change won't be instantly reverted and the user won't be restricted, right?
Or LGBT flag for Arabic and Persian speakers.
Most do not acknowledge the slippery slope exists until they are sliding down it about to hit bottom...
I could not be less sympathetic on this. If you don't want people protesting your actions, don't, like, invade their country.
"But what if it was the US doing the invading?" Yes, even then. If some Iraqi author made an Xsnow that waved little Iraq flags, that's their right. Even if I disagree, it doesn't harm me, and it might inspire me to consider our actions.
"But what if it makes someone's boss get mad at them?" If my boss saw an Iraq flag on my screensaver, I'd say "huh, look at that! I guess that was added in the new version. I'll change it to another screensaver." And if you live in a country there the likely reaction is that your boss might execute you, your government are the baddies.
Isn't there discrepancy between that and The Debian Linux team removing “offensive” quotes for the “fortune” application[1]?
[1] https://x.com/LundukeJournal/status/1952340426892984580
I think there is in fact a discrepancy between displaying flags and advocating directly for gendered violence:
> Debian contributor "NoisyCoil" said that they had wanted to argue in favor of keeping the packages, but after looking at the content they had decided against it:
> > I went peeking at the package and, unless I'm completely missing something, the second offensive Italian fortune says that women's "no"s should be interpreted as "yes", while the third one explicitly calls for violence on women [1]. Like, it literally says women should be beaten on a regular basis. I'm afraid I can't help you here, sorry.
from https://lwn.net/Articles/1031750/, linked in the fine article
> I think there is in fact a discrepancy between displaying flags and advocating directly for gendered violence
NosiyCoil forgot to mention that I removed hundreds of fortunes containing racist/sexist jokes from the regular section, installed by default to every Italian user and displayed by default.
I basically grew up reading them and 20 years later, I forked fortunes-it to get rid of them and put them in the offensive section. And then Cater unilaterally decided to remove it.
But neither NoisyCoil, nor Cater, not anyone else stepped up to actually read the fortunes that were not tagged as offensive and were being installed and displayed by default.
One year later, I'm still the only person doing this work.
Archlinux is still using the pre-fork version where this content is still present in the main section.
That article is very one sided. The author spoke to Cater but did not think of reaching out to me for comments.
NoisyCoil is of the opinion that offensive stuff in the offensive section (not installed nor displayed by default) are worse than quotes from fascist writers that in 2026 still inspire people to beat up journalists in Italy, installed and displayed by default.
https://lists.debian.org/debian-devel/2025/07/msg00186.html
Is there no project safe from these kinds of obnoxious neo-busybodies?
You'd have to ask the respective, different sets of people involved in each situation.
What is offensive on the Ukrainian flag?
I think the point of all this is that there is no absolute scale of "offensiveness". Different societies have different values. Obviously, enough people found the Ukrainian flag easter egg offensive enough for the matter to have landed on LWN and the HN front page.
> don't, like, invade their country
I did not invade any country
At least this app just displays the flags and not prints such accusations
That may be, but if I do in fact live in a place where my "government are the baddies," why does it follow that open software should punish me—for nothing more than happening to be alive within that jurisdiction—by provoking my "baddie" government to visit its badness upon me personally? For speech I wasn't even trying to make—for speech that you kind of put in my mouth without asking me?
It would be fine if you gave me a beautiful and whimsical way to choose to express my feelings, and I took it. But when you're disguising the flag in code as an "EXTRATREE," that signals to me that you're trying to slip through a surprise without my noticing:
I think it's great that you live somewhere—and enjoy a relationship to your working environment—where you don't have to worry about that kind of thing! I wish more people got to enjoy those kinds of freedoms. I don't think the way to make that happen is to rub individual people's faces in the crappiness of their predicament.I'm reminded of a situation I encountered some years ago where a person opened a web browser in front of a classroom—no porn in their history, nothing untoward, just going to a high-profile mainstream news site or something in service of a classroom discussion—and all the targeted ads were for things like HIV medicines and mainstream campaigns choosing ad variants that depicted gay couples.
Not the time or the place, that person didn't ask for it, and it led to deep consequences for them—from "outing" on one side, to accusations of "grooming that classroom full of students" and "probably being riddled with AIDS" on the other—that this good, responsible, kind, wise person did nothing to invite.
The targeters probably thought they were doing something righteous or even "accepting" by "making sexual minorities feel seen" or something—but by putting words in the person's mouth without their consent or agency, they caused great unnecessary harm to somebody who didn't deserve it.
To be explicitly clear, I have nothing to do with Xsnow. I don't even use it.
That out of the way, I can't and won't sanitize my words so that they're perfectly inoffensive all the world around. I've made comments over the years critical of a great many governments. If the fragile leadership of those countries saw my words on a screen there, perhaps they'd get angry at the person reading my writings. I do feel bad for that person and certainly didn't try to get them in trouble. But neither am I going to not criticize a government that's behaving poorly — even my own — for the sake of a hypothetical situation that may never even exist.
In that same file it also says
What exactly is the punishment in seeing a Ukrainian flag?
Downvotes but no explanation.
What is the punishment in seeing a normal flag of a country?
It’s not like showing the swastika to people in Israel. More like the opposite.
Not everyone who speaks Russian is a Russian or lives in Russia. It's like show a Palestine flag specifically to users with a Jewish calendar.
I didn't write that and I'm not arguing with you. I don't have skin in this game. That said, I think the likelihood of someone having their locale set to RU also being in Russia is substantially improved.
Don’t you mean Iran, not Iraq? Or are you hoping Dick Cheney’s ghost will see the flag?
Argh, yes. Sorry, for most of my life we've been mad at Iraq and pals with Iran, or vice versa, and today I got that backward.
Looking at your comment history, it's odd how you feel this way about certain countries but not certain others.
Which countries have I not criticized for invading others? No, seriously, please let me know if I've missed some and I'll fix that immediately. I've certainly criticized my own country's misguided attacks on others who I don't think were a direct risk to us or our allies.
the problem isn't protesting someone's actions - it's supporting the other side
do you really want to support country that kidnaps its citizens off the streets and honorary reburied Nazi criminals?
It's well documented that Russia is kidnapping its citizens off the streets to send them on an invasion of a sovereign country, but I hadn't heard that they're honoring nazis now. I'm not sure I believe that.
They aren't talking about Russia…
please learn to count to one. I'm not multiple people
It's not clear who else they'd be talking about, because only idiotic propaganda claims Ukraine supports nazis, so that can't be it.
Before the war started, every single western news outlet claimed it too though, so I'm not entirely sure it's fully made up.
edit: also, like Finland, they were allied with nazi Germany in fighting Russia.
dude, go look up Polish news about this
reburial of the mass murderer of poles literally happened in the last month or so
I was not totally clear on this. The article makes it sound like the behavior is in the debian patches, and not upstream?
I believe upstream is here, and has the same code as quoted:
it is in upstream. but the debian package maintainer is also the upstream maintainer.
Sorry if it sounded like it was only in Debian; that was not my intent. I tried to make clear that the Debian package maintainer and upstream maintainer were one and the same, and that the change was upstream first. That was the reason cited by the person who complained, that he didn't file a bug because the maintainer was the one who instituted the changes upstream.
A lot of people talking about how displaying the flag at all could get somebody in Russia in trouble. You could see the increasing of the likelihood as helpful then, because the flag could always appear. By making it come up more often it communicates to the user that it can appear it gives a chance to the user to notice it in a "safe" situation and not use xsnow if they are in a situation where it could cause trouble for them. The existence of the flag is not quite mentioned at https://www.ratrabbit.nl/ratrabbit/xsnow/, and the site is loading too slow to see if it is shown in https://www.ratrabbit.nl/ratrabbit/xsnow/visuals/index.html.
This change to xsnow is obviously an unalloyed negative, and the simplest test to confirm this to yourself is to imagine the political statement being something you disagree with, e.g. if the locale were set to an EU country, only the US flag would show.
One of the comments that struck me on the lwn.net site is the (albeit small) possibility that someone in Russia could be running the software and unintentionally land themselves in hot water if someone discovers these images on their computer. I'm sure that's not the intended consequence, but I could be problematic.
The issue with that claim is xsnow already displayed the Ukrainian flag regardless. And it's in no way a critical app most people would even have installed to begin with. I had no idea it was even still being maintained.
No it didn't, the ukrainian flag was a recent addition by the guy who took over xsnow to add this protestware.
Just go look at the repo history on sf.
I haven't heard of this package personally and it's not on my desktops so it must not be pulled in by any of the task- desktop environment metapackages I use. So you probably have to go looking for it.
I really don't care about this package or protest but what might be more interesting to consider is what if this were in a default package and what if the affected locales were different?
If I make a list of all the countries who have recently been at war or are currently engaged in hostilities or have ethnic animus towards each other and just choose to taunt them all, that would really be a dick move and it's probably OK for Debian to drop the package. FWIW I'd rather see them adopt a kindhearted fork than override an author/ maintainer when possible.
If there's no special pleading for the ru/ua conflict then it's not too concerning.
The debian maintainer and the original author are the same person. If they added this feature in the original version, I doubt they will drop the package or fork it and place the fork in debian.
Has anyone confirmed who this 'Alexander Ivanov' person is or even if this is a real person and not some AI bot? I searched for the email address used and it only appears recently in these handful of posts about xsnow.
Debian doesn't require to create an account and submit your national ID to allow you to open bug reports or write to mailing lists.
So next time something like this slips through and it runs rm -rf /* ? Then what?
Shit like this erodes trust.
I wonder how many people immediately thought about whether similar things had been snuck into xfishtank and xpenguins.
How is seeing more Ukrainian flags a discrimination?
Discrimination implies something harmful. Like invading neighbor country and perpetrating genocide. This complaint says more about Ivanov than anything else.
The imputed discriminatory part is that the software only shows the additional flags to users with Russian locale, not that it shows the flags at all.
Not sure you know what discrimination is.
This point in the comments made me think twice:
> People in Western countries don't realize how bad the situation on the ground actually is; random Ukrainian flags showing up on your work monitor can result in severe problems for you (like losing you job, or worse), especially if you work in the government sector. If they show up on your laptop in a random cafe or an airport, you might very well get a beating from one of many "war heroes" that walk around the cities these days.
[EDIT: I see @krunck reposted this at the top level — https://news.ycombinator.com/item?id=48736518]
Oh no! Imagine the horror of losing your job. It compares nothing to literal genocide their army perpetrating.
And yes, it is their, not their government, not some mysterious leaders. Russians reelected same government for 35 years with it invading neighbours pretty much every 5 years.
Imagine living in the occupied part and being sent to the basement for this. Probably not that black and white now... although seeing both activist and slacktivist types being very loud about the land but not the people over and over again, I wouldn't be entirely surprised if you don't care.
As a reminder, the most dangerous job in Russia is "opposition leader".
you mean nationalists/imperialists like Navalny whose main beef with current russian administration is that is corrupt, meaning it is not being effective enough?
Honestly, not sure why westerners yearn to find good fascists.
Yah that's where I stand on it. The message isn't harmful or hateful, it dares only make a political statement.
It's still selective degradation of functionality, as presumably people who download a snowglobe animation program don't do it to see any sort of statement apart from normative depictions of wintery things. The problem would be the same if it showed Russian flags only to users with Ukrainian locale, or ads for Mountain Dew only when the user's locale is set to French, or even just something as impossible to interpret as offensive on its own as adding lots of little cactus men whenever the locale is Dutch.
right, which means the software is less useful and as such you might not want to use it. Plenty of software like that listed on repositories, which I think is fine.
> presumably
So it's "selective degradation of functionality" based entirely on your assumptions regarding the motivations of the users? How is this a useful description?
[flagged]
You lack context
Given the number of colonized people that speak Russian, including residents of Ukraine, Georgia, Uzbekistan, etc. etc. etc. I think this sort of Easter Egg based on language rather than geographical location is quite appropriate.
My family speaks both Ukrainian and Russian, and in Russian speaking spaces here in California we find many many many eager supporters of Ukraine's sovereignty, because when they hear Ukrainian spoken they tell us! And also tell us they wish they had been able to keep their non-Russian family language alive too. Most of these supporters are not from the Moscow or St. Petersburg areas though...
It's not even an anti-Russian statement!
I wouldn't get bent out of shape if Xsnow showed me a Canadian/Greenlandic flag in response to me using en-us.
Very much agreed. It‘s a statement by the authors of that software, and that is well within their rights.
How can anyone complain about Ukrainian flags, unless these people have a problem that the Ukraine exists.
I thought we all agreed that flags-as-political-statement in software were Certified Cringe after the one-click “add a French flag overlay to your Facebook profile photo” thing, eleven years ago?
It seems like the "we support the current thing" crowd disagrees with you.
I just wish impotent slacktivism was rightfully looked down upon rather than enshrined as something noble and worthwhile, man.
Is that really so much to ask for?
Protestware as a whole has never worked to solve anything. Awareness of a particular issue is the only positive thing "protest" software has successfully tried, with the second order effect being better supply chain management.
I don't use Linux or Xsnow but it baffles me how distributions would allow something like this. Sure, it's just flags now, but if you look at faker and colors.js, you'll see the other side of the coin of what happens when you allow software like this.
Distributions didn't "allow" anything. The author just uploaded it. That's all there is to it.
The asset file isn't called "ukraine flag" so unless you open all the images or run this as a russian you will probably be completely unaware of this behaviour.
Sorry, the article didn't really say if it was upstream or only in Debian. I assumed it was only Debian.
I still stand on the point that stuff like this should be frowned upon regardless of stance on issue.