[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#784405: ITP: rnetclient -- Client to submit the Brazilian Income Tax Report to the Brazilian Tax Authority



(reposted, because I dopped the Cc to debian-devel by mistake. I
apologise for sending it twice to the BTS and bug submitter).

On Wed, May 6, 2015, at 01:51, Sergio Durigan Junior wrote:
> Package: wnpp
> Severity: wishlist
> Owner: Sergio Durigan Junior <sergiodj@sergiodj.net>
> 
> * Package name    : rnetclient
>   Version         : 2015.1
>   Upstream author : Thadeu Cascardo, Sergio Durigan Junior, Alexandre Oliva
> * URL             : http://wiki.libreplanetbr.org/rnetclient/
> * License         : GPLv3+
>   Programming Lang: C
>   Description     : A Client to submit the Brazilian Income Tax Report
> to the Brazilian Tax Authority
> 
> rnetclient is a Free Software that can be used to submit the Brazilian
> Income Tax Report to the Brazilian Tax Authority (Receita Federal).  It
> is the outcome of reverse-engineering ReceitaNet, the official and
> proprietary software that Receita Federal develops.

What's the real point of this package?  One actually needs to install
the tax-report-building program from RFB (IRPF20xx) to have anything for
rnetclient to transmit, at which point you might as well install
ReceitaNet since you're already running RFB-provided java code anyway.

Also, what's the official position of RFB regarding the existence, and
use of this program?

Regardless of whether the process of reverse engineering the ReceitaNet
protocol is legal or not (I don't know, so I am not assuming anything),
actually connecting to RFB servers using this program might well not be
legal.

Not to mention it can cause "harm" to rnetclient users if RFB decides
that they object to tax reports submited through rnetclient, and we
might find ourselves in legal trouble over that as well, there's the
whole "enticing others to use the rnetclient program" angle that could
be played against Debian (in this case, it might well end up being
directed at Brazillian DDs since RFB won't be able to target SPI or
Debian itself).

Also, ReceitaNet is often updated, it went from version 4 (tax report of
2014) to version 7 (tax report of 2015), rnetclient would have to be
kept up-to-date if such changes in ReceitaNet are in any way related to
the protocol or servers it should connect to submit the tax report. 
This can cause operational issues if rnetclient makes it to Debian
stable, since the program must be working perfectly during the tax
submission window.

In fact, the upstream homepage has this notice (loosely translated from
pt_BR):
"Version 2015.0 did not support fully the tax report format for 2015.
This problem has been fixed in version 2015.1. We wait reports of both
sucessful and non-sucessful use of rnetclient 2015.1 in our mailing
list".

Please clarify the above points. So far, it looks like accepting this in
Debian is a lot of risk for no real gain.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique de Moraes Holschuh <hmh@debian.org>


Reply to: