• C/GTK
• Ruby/Gtk
• Python/Gtk
• Perl/Gtk

1. clause 2.f (you agree to defend and indemnify Sun and its licensors from and against any damages ... and so forth) is IMHO unacceptable, even for non-free, because debian isn't in a position where it can risk to see that clause exercised by Sun ;
2. section 4 (and others of the same sort) makes the existence of java in non-free depending of Sun's mood: exercising clause 4 is trivial they just have to imagine a new kernel feature our kernel should support that we can't provide to terminate the license retro-actively. Many instances of that problem exists in the license.

• why did that announce has been hurried like that ? yes Sun hadn't published their license, but I still don't understand how it can explain such a hurry.
• will debian switch to python 2.5 directly, so that we can skip one transition ? (that could explain why some maintainer have more time to dedicate to non urgent non-free packages, whereas some other would need its plain attention for etch)
• a more polite version of the previous question is: why do some people have been working soooo fast on this, when those people have other very real problems to deal with for etch ? that looks like a childish schedule, that puts shiny-public-things first^[2] instead of the problems that block a lot of DDs in their allday's work (some complains about NEW beeing stuck and it is, and was even before Debconf , other complain about the python2.4 transition that lags since ages, and other examples exists )
• why did only 3 persons worked on that, for a package that :
  • is well known ;
  • will obviously make noise, given to its history wrt the free software world ;
  • has a license that seem to have some obvious problems ;

• why does this come 1 week after that ubuntu made it clear they had some things going on with Sun ?

1. Plenty of sunshine Love the sunshine. It was a bit wet in winter and early spring, but I'm told that it should be pretty much rain (and cloud) free for the rest of the year. Daylight saving also helps make enjoying the copious amounts of sunshine easier, it doesn't get dark until well after 8pm.
2. The public transport options, particularly in San Francisco are vast Particularly in San Francisco, your options for getting around the city are huge. You've got the BART, the Muni (which covers about three distinct forms of public transport in itself), and the VTA overhead electric and petrol powered buses. Elsewhere in the Bay Area, you've got the Caltrain, and VTA light rail and buses.
3. Petrol pumps You need never darken the door of a petrol station. Everywhere has pay at the pump (with plastic of course), and the pumps all have the automatic latch, so you don't even need to stand at the side of the car holding the handle while it fills up.
4. Free parking This was a big change, coming from Canberra, which has a love affair with pay and display parking. Even the multi-storey and underground carparks in the downtown areas are free.
5. Pedestrian crossings that countdown No excuse to get skittled because you thought you could make it in time. You known exactly how long you've got before you'll get mowed down before you step off the side of the road.
6. The postal system Saturday delivery. Every mailbox is an outgoing mailbox (just put the little flag up).
7. Right turns on red This is a real time saver. I can't see why Australia couldn't adopt this for left turns. The only downside is you can spend so much time looking to your left for a break in the traffic to dart out in, that you miss your green arrow (but that's what the guy behind you and his horn is for).
8. Corporately run rental apartment complexes Instead of having an apartment complex where individual landlords own each apartment, the entire complex (and they tend to be larger) is owned by a mega-corporation that employs half a dozen people to maintain it and run it as a business. The upside is they tend to have better facilities, an onsite office (great for receipting packages delivered during the week), onsite maintenance (some places even have a service-level agreement). This offers some economies of scale that you wouldn't otherwise have.
9. At least the perception of a low cost of living I haven't done the sums, and it's probably partially because the bills come monthly instead of quarterly, but all the utility bills seem fairly low and reasonable. Dollar for dollar, petrol is also cheaper, even though it's jumped a dollar a gallon in the time we've been here.

1. The currency Not a big fan of the notes. I miss the one and two dollar coins, and the distinctiveness between each denomination. I figure that vending machines over here must be so much more expensive because they have to have a note reader, and even then, the treasury decides to produce some new oddball note that half of the readers don't recognise... I blame tipping. If there were no tipping, the utility of one dollar bills would diminish enormously.
2. The government bureaucracy As my blog records, I haven't exactly had a smooth run with the system over here...
3. The banking system The banking system in general is woeful by comparison. The cheque (or check) still reigns supreme, whereas it's nearly obsolete in Australia. There's no such animal as BPay (and oh how I miss it). In fact, the equivalent system here often involves the bank cutting a cheque on your behalf and mailing it to the biller. How ridiculously antediluvian is that? Oh, and I miss vaguely decently authenticated electronic payments. I've been at cafes were I've paid by credit card, and haven't even had to provide a signature. Given that the credit card is actually a debit card, it's pretty disturbing how easily someone can clean out your bank account.
4. Ex-tax pricing I'm so glad that when they introduced the GST in Australia, they required by law that all prices include it. Most prices here don't, but the occasional food outlet does (like Subway for example), so it's sufficiently confusing that you can't budget for how much you're going to actually fork out.
5. ATM fees The ATM fees are more in your face. Instead of the bank charging you a fee at the end of the month for every transaction conducted at an ATM that isn't theirs, the ATM itself tacks on an extra amount to the withdrawal and effectively skims the money. I've seen fees as high as $5 a transaction, but $2 is fairly common. It's kind of weird seeing an ATM withdrawal of $42 on your bank statement... So having a bank account that doesn't charge you feeds for non-bank ATM withdrawals is all well and good, but it doesn't stop the ATM from charging you.
6. Inaudible pedestrian crossings Oh, the number of times I haven't been paying attention and missed the walk light at a pedestrian crossing... In some places, they do make noises like birds, or talk to you when you can walk, but they're definitely not the norm.
7. The road surface For the highways, they seem to have gone for quantity and not quality, or they're too busy to take offline to resurface. Either way, the road surface quality is pretty poor.
8. Sugar Everything is loaded with sugar. Absolutely everything.
9. Alcohol labelling Light beer is low calorie, not low alcohol. I miss Australia's concept of "standard drinks". Makes it very hard to drink and drive responsibly.

Note: This article is part of my OS Install Experiences series.

1. First, I downloaded a Debian sarge 3.1r2 CD image, burned it on a CD, and booted from that.
2. An installer menu showed up, where you can press F3 for boot options. I chose "expert26", which will ask me more questions and give me a 2.6 Linux kernel instead of 2.4.
3. The installer (newt-based, i.e. not graphical) will now start to boot a base Linux system.
4. Now, you can choose your language (used in the installer), country, region, and keyboard layout.
5. You'll be asked which additional kernel modules you want to load (default: all), and whether you want PCMCIA support. Also, you can choose which extra installer components should be loaded (LVM, PPP, serial, IrDA, ...).
6. Your hardware can be automatically detected (my Realtek card was successfully detected, the "8139too" kernel module was then loaded).
7. The network was successfully auto-configured via DHCP within seconds.
8. Now you can choose a hostname and domain name for the box. I used "hydra" as hostname (guess why), and "local.domain" as domain name.

Disk /dev/hda: 81.9 GB, 81964302336 bytes
255 heads, 63 sectors/track, 9964 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
      Device Boot      Start         End      Blocks   Id  System
   /dev/hda1   *           1        1216     9767488+  83  Linux
   /dev/hda2            1217        1824     4883760   83  Linux
   /dev/hda3            1825        2432     4883760   83  Linux
   /dev/hda4            2433        9964    60500790    5  Extended
   /dev/hda5            2433        2554      979933+  82  Linux swap / Solaris
   /dev/hda6            2555        2676      979933+  83  Linux
   /dev/hda7            2677        2798      979933+  83  Linux
   /dev/hda8            2799        3406     4883728+  83  Linux
   /dev/hda9            3407        4014     4883728+  83  Linux
   /dev/hda10           4015        4622     4883728+  83  Linux
   /dev/hda11           4623        5230     4883728+  83  Linux
   /dev/hda12           5231        5838     4883728+  83  Linux
   /dev/hda13           5839        6446     4883728+  83  Linux
   /dev/hda14           6447        7054     4883728+  83  Linux
   /dev/hda15           7055        7662     4883728+  83  Linux
   /dev/hda16           7663        8270     4883728+  83  Linux
   /dev/hda17           8271        8878     4883728+  83  Linux
   /dev/hda18           8879        9486     4883728+  83  Linux
   /dev/hda19           9487        9964     3839503+  83  Linux

1. The Debian partitioning tool allowed me to do all of the above via a friendly menu. As it does not modify the partition table until you say "done", I could revert many changes, and play around with different layout ideas until I was satisfied.
2. Next thing you can choose is the Kernel flavor (386, 686, smp).
3. You may now configure and install GRUB, the bootloader. I installed it at "(hd0)", the master boot record of the hard disk.
4. Soon the CD ejects, and you have to reboot.
5. After a restart (which also shows whether GRUB works fine), you can now choose your timezone, and decide whether you want shadow passwords (say yes!).
6. Now enter the root password, and decide whether you want to create an additional user account (say yes, and enter a different password here).
7. You can now configure apt, e.g. tell it which sources you'd like to use (CDROM, FTP, HTTP, ...). You'll be asked whether you want to install software from Debian's "non-free" archive. After choosing a mirror (and proxy settings, if you like), you can (should!) also say yes to the question whether you want security updates...
8. Finally, you may now choose "tasks" (desktop, web server, file server, ...) your machine should be able to perform; this will influence which packages will be installed. You may choose "manual package selection", of course, if you want more control. I used "desktop".
9. That's about it. You'll see a few more application-specific questions (configuration of MTA, ssh, fonts, X11, gdm, and others), and after that you'll be left with a GNOME login window.

• Portscan from another box:
  

  PORT    STATE SERVICE
  22/tcp  open  ssh
  111/tcp open  rpcbind
  113/tcp open  auth
  785/tcp open  unknown
  

  Not good. A default install should not have any ports open, IMHO. There are more daemons running: exim (port 25), and famd (port 771) for example. Those are fine however, as they only listen to the loopback interface and are not exposed to the Internet (eth0).
• Some permissions:
  

  drwxrwsr-x   3 root staff  4096 2006-05-17 22:48 /home
  drwxr-xr-x  11 uwe uwe     4096 2006-05-18 23:19 /home/uwe
  drwxr-xr-x  10 root root   4096 2006-05-17 23:43 /root
  drwxrwxrwt   8 root root   4096 2006-05-17 23:41 /tmp
  /dev:
  crw-rw----  1 root video    10, 175 2006-05-17 23:13 agpgart
  crw-------  1 root root      5,   1 2006-05-17 23:13 console
  crw-rw----  1 root audio    14,   3 2006-05-17 23:13 dsp
  brw-rw----  1 root floppy    2,   0 2006-05-17 23:13 fd0
  crw-rw-rw-  1 root root      1,   7 2006-05-17 23:13 full
  brw-rw----  1 root disk      3,   0 2006-05-17 23:13 hda*
  brw-rw----  1 root cdrom    22,  64 2006-05-17 23:13 hdd
  crw-r-----  1 root kmem      1,   2 2006-05-17 23:13 kmem
  crw-rw----  1 root root      1,  11 2006-05-17 23:13 kmsg
  crw-r-----  1 root kmem      1,   1 2006-05-17 23:13 mem
  crw-rw-rw-  1 root root      1,   3 2006-05-17 23:13 null
  crw-rw-rw-  1 root root      5,   0 2006-05-17 23:13 tty
  crw-rw----  1 root root      4,   0 2006-05-17 23:13 tty0
  crw-------  1 root root      4,   1 2006-05-17 23:24 tty1
  crw-------  1 root tty       4,   2 2006-05-17 23:13 tty[2-6]
  crw-rw----  1 root root      4,   7 2006-05-17 23:13 tty7
  [...]
  crw-rw----  1 root root      4,  63 2006-05-17 23:13 tty63
  crw-rw----  1 root dialout   4,  64 2006-05-17 23:13 ttyS*
  crw-rw-rw-  1 root root      1,   8 2006-05-17 23:13 random
  cr--r--r--  1 root root      1,   9 2006-05-17 23:13 urandom
  crw-rw----  1 root root      7,   1 2006-05-17 23:13 vcs*
  crw-rw-rw-  1 root root      1,   5 2006-05-17 23:13 zero
  

  Most of that looks sane to me (a "chmod 700 /home/uwe /root" would be nice, though), but maybe it can be tightened/secured a bit more? Ideas?
• Default users and shells:
  I installed some more popular applications (apache, mysql) to have more data.

  root:x:0:0:root:/root:/bin/bash
  daemon:x:1:1:daemon:/usr/sbin:/bin/sh
  bin:x:2:2:bin:/bin:/bin/sh
  sys:x:3:3:sys:/dev:/bin/sh
  sync:x:4:65534:sync:/bin:/bin/sync
  games:x:5:60:games:/usr/games:/bin/sh
  man:x:6:12:man:/var/cache/man:/bin/sh
  lp:x:7:7:lp:/var/spool/lpd:/bin/sh
  mail:x:8:8:mail:/var/mail:/bin/sh
  news:x:9:9:news:/var/spool/news:/bin/sh
  uucp:x:10:10:uucp:/var/spool/uucp:/bin/sh
  proxy:x:13:13:proxy:/bin:/bin/sh
  www-data:x:33:33:www-data:/var/www:/bin/sh
  backup:x:34:34:backup:/var/backups:/bin/sh
  list:x:38:38:Mailing List Manager:/var/list:/bin/sh
  irc:x:39:39:ircd:/var/run/ircd:/bin/sh
  gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/bin/sh
  nobody:x:65534:65534:nobody:/nonexistent:/bin/sh
  Debian-exim:x:102:102::/var/spool/exim4:/bin/false
  uwe:x:1000:1000:,,,:/home/uwe:/bin/bash
  identd:x:100:65534::/var/run/identd:/bin/false
  sshd:x:101:65534::/var/run/sshd:/bin/false
  messagebus:x:103:104::/var/run/dbus:/bin/false
  hal:x:106:106:Hardware abstraction layer,,,:/var/run/hal:/bin/false
  saned:x:109:109::/home/saned:/bin/false
  gdm:x:104:110:Gnome Display Manager:/var/lib/gdm:/bin/false
  mysql:x:105:111:MySQL Server,,,:/var/lib/mysql:/bin/false
  

  Not too good, IMHO. Almost all system accounts have a valid shell instead of /bin/false or /usr/sbin/nologin. Most of those should not need one, and security-wise it's a lot better to not give them a valid shell. The good news is that many daemons (ssh, mysql, etc.) don't have a valid shell. Uh, why is "Debian-exim" capitalized? Update: That's why.
• Setuid/setgid files:
  

  # find / -type f \( -perm -4000 -o -perm -2000 \) -exec ls -ld ' ' \;
  -rwxr-sr-x  1 root tty 9784 2005-09-18 09:04 /usr/bin/wall
  -rwsr-xr-x  1 root root 22872 2005-05-18 08:33 /usr/bin/newgrp
  -rwxr-sr-x  1 root shadow 34488 2005-05-18 08:33 /usr/bin/chage
  -rwsr-xr-x  1 root root 28056 2005-05-18 08:33 /usr/bin/chfn
  -rwsr-xr-x  1 root root 28088 2005-05-18 08:33 /usr/bin/chsh
  -rwxr-sr-x  1 root shadow 16696 2005-05-18 08:33 /usr/bin/expiry
  -rwsr-xr-x  1 root root 34904 2005-05-18 08:33 /usr/bin/gpasswd
  -rwsr-xr-x  1 root root 26616 2005-05-18 08:33 /usr/bin/passwd
  -rwsr-xr-x  1 root root 34488 2002-01-18 09:13 /usr/bin/at
  -rwxr-sr-x  1 root tty 7992 2004-11-01 20:29 /usr/bin/bsd-write
  -rwxr-sr-x  1 root crontab 26872 2004-07-28 22:44 /usr/bin/crontab
  -rwxr-sr-x  1 root mail 9860 2004-06-04 17:21 /usr/bin/dotlockfile
  -rwsr-xr-x  1 root root 18136 2004-12-01 08:29 /usr/bin/traceroute.lbl
  -rwsr-xr-x  1 root root 809836 2006-03-10 12:19 /usr/bin/gpg
  -rwxr-sr-x  1 root mail 7764 2006-01-31 01:48 /usr/bin/mutt_dotlock
  -rwsr-sr-x  1 root lp 24184 2004-07-27 23:48 /usr/bin/lpq
  -rwsr-sr-x  1 root lp 22232 2004-07-27 23:48 /usr/bin/lprm
  -rwsr-sr-x  1 root lp 24440 2004-07-27 23:48 /usr/bin/lpr
  -rwsr-xr-x  1 root root 44024 2004-12-12 20:35 /usr/bin/mtr
  -rwsr-sr-x  1 root mail 71640 2005-03-01 16:37 /usr/bin/procmail
  -rwxr-sr-x  1 root mail 12712 2005-03-01 16:37 /usr/bin/lockfile
  -rwxr-sr-x  1 root ssh 57304 2004-11-28 16:33 /usr/bin/ssh-agent
  -rwsr-xr-x  1 root root 10894 2004-06-04 12:02 /usr/bin/fileshareset
  -rwsr-xr-x  1 root root 5144 2006-01-15 14:37 /usr/bin/kgrantpty
  -rwsr-xr-x  1 root root 5588 2006-01-15 14:37 /usr/bin/kpac_dhcp_helper
  -rwsr-xr-x  1 root root 98488 2006-03-20 23:03 /usr/bin/sudo
  -rwsr-xr--  1 root plugdev 19096 2005-05-18 15:47 /usr/bin/pumount
  -rwsr-xr--  1 root plugdev 26680 2005-05-18 15:47 /usr/bin/pmount
  -rwxr-sr-x  1 root nogroup 45600 2005-09-08 07:32 /usr/bin/kdesud
  -rwsr-xr--  1 root dip 575192 2005-05-24 09:18 /usr/bin/kppp
  -rwsr-xr-x  1 root root 544332 2005-04-08 15:53 /usr/bin/gpg2
  -rwxr-sr-x  1 root games 34872 2005-03-02 19:20 /usr/games/same-gnome
  -rwxr-sr-x  1 root games 57152 2005-03-02 19:20 /usr/games/gnomine
  -rwxr-sr-x  1 root games 65752 2005-03-02 19:20 /usr/games/gnome-stones
  -rwxr-sr-x  1 root games 70296 2005-03-02 19:20 /usr/games/mahjongg
  -rwxr-sr-x  1 root games 48952 2005-03-02 19:20 /usr/games/gtali
  -rwxr-sr-x  1 root games 36652 2005-03-02 19:20 /usr/games/gnotravex
  -rwxr-sr-x  1 root games 94200 2005-03-02 19:20 /usr/games/gnobots2
  -rwxr-sr-x  1 root games 28776 2005-03-02 19:20 /usr/games/gnotski
  -rwxr-sr-x  1 root games 42584 2005-03-02 19:20 /usr/games/glines
  -rwxr-sr-x  1 root games 61944 2005-03-02 19:20 /usr/games/gnibbles
  -rwxr-sr-x  1 root games 78096 2005-03-02 19:20 /usr/games/gnometris
  -rwsr-xr-x  1 root root 5668 2006-04-02 15:32 /usr/lib/pt_chown
  -rwxr-sr-x  1 root mail 10940 2006-03-13 14:30 /usr/lib/evolution/2.0/camel/camel-lock-helper
  -rwxr-sr-x  1 root utmp 9144 2005-03-09 18:21 /usr/lib/libvte4/gnome-pty-helper
  -rwsr-xr-x  1 root root 13304 2005-09-06 15:13 /usr/lib/apache/suexec.disabled
  -rwsr-xr-x  1 root root 668568 2006-04-11 14:33 /usr/sbin/exim4
  -rwsr-xr--  1 root dip 265880 2005-05-05 19:32 /usr/sbin/pppd
  -rwsr-xr--  1 root dip 29420 2004-09-30 04:13 /usr/sbin/pppoe
  -rwxr-sr-x  1 root lp 32248 2004-07-27 23:48 /usr/sbin/lpc
  -rwsr-sr-x  1 root root 7860 2005-09-02 00:44 /usr/X11R6/bin/X
  -rwsr-xr-x  1 root root 35512 2005-05-18 08:33 /bin/login
  -rwsr-xr-x  1 root root 23416 2005-05-18 08:33 /bin/su
  -rwsr-xr-x  1 root root 68440 2005-09-18 09:04 /bin/mount
  -rwsr-xr-x  1 root root 40920 2005-09-18 09:04 /bin/umount
  -rwsr-xr-x  1 root root 30764 2003-12-22 23:18 /bin/ping
  -rwsr-xr-x  1 root root 26604 2003-12-22 23:18 /bin/ping6
  -r-sr-xr-x  1 root root 15000 2004-06-28 20:39 /sbin/unix_chkpwd
  

  Quite a bunch, I'd say. The games are "only" "setgid games", but I'd really, really remove them on any production machine which should be halfway secure. Some of those binaries probably need the setuid/setgid bit (su, passwd, ...), but others probably don't. Maybe we should ship more of that non-setuid per default and add a note to the READMEs which tells the admin how he can make the apps setuid if he should want that?

1 Kings 3:16-28 Then came there two women, that were harlots, unto the king, and stood before him. And the one woman said, O my lord, I and this woman dwell in one house; and I was delivered of a child with her in the house. And it came to pass the third day after that I was delivered, that this woman was delivered also: and we were together; there was no stranger with us in the house, save we two in the house. And this woman's child died in the night; because she overlaid it. And she arose at midnight, and took my son from beside me, while thine handmaid slept, and laid it in her bosom, and laid her dead child in my bosom. And when I rose in the morning to give my child suck, behold, it was dead: but when I had considered it in the morning, behold, it was not my son, which I did bear. And the other woman said, Nay; but the living is my son, and the dead is thy son. And this said, No; but the dead is thy son, and the living is my son. Thus they spake before the king. Then said the king, The one saith, This is my son that liveth, and thy son is the dead: and the other saith, Nay; but thy son is the dead, and my son is the living. And the king said, Bring me a sword. And they brought a sword before the king. And the king said, Divide the living child in two, and give half to the one, and half to the other. Then spake the woman whose the living child was unto the king, for her bowels yearned upon her son, and she said, O my lord, give her the living child, and in no wise slay it. But the other said, Let it be neither mine nor thine, but divide it. Then the king answered and said, Give her the living child, and in no wise slay it: she is the mother thereof. And all Israel heard of the judgment which the king had judged; and they feared the king: for they saw that the wisdom of God was in him, to do judgment.

Leviticus 18:20,28 Moreover thou shalt not lie carnally with thy neighbour's wife, to defile thyself with her. That the land spue not you out also, when ye defile it, as it spued out the nations that were before you. Leviticus 19:29 Do not prostitute thy daughter, to cause her to be a whore; lest the land fall to whoredom, and the land become full of wickedness.

Deuteronomy 22:13-21 If any man take a wife, and go in unto her, and hate her, And give occasions of speech against her, and bring up an evil name upon her, and say, I took this woman, and when I came to her, I found her not a maid: Then shall the father of the damsel, and her mother, take and bring forth the tokens of the damsel's virginity unto the elders of the city in the gate: And the damsel's father shall say unto the elders, I gave my daughter unto this man to wife, and he hateth her; And, lo, he hath given occasions of speech against her, saying, I found not thy daughter a maid; and yet these are the tokens of my daughter's virginity. And they shall spread the cloth before the elders of the city. And the elders of that city shall take that man and chastise him; And they shall amerce him in an hundred shekels of silver, and give them unto the father of the damsel, because he hath brought up an evil name upon a virgin of Israel: and she shall be his wife; he may not put her away all his days. But if this thing be true, and the tokens of virginity be not found for the damsel: Then they shall bring out the damsel to the door of her father's house, and the men of her city shall stone her with stones that she die: because she hath wrought folly in Israel, to play the whore in her father's house: so shalt thou put evil away from among you.

Exodus 22:16,17 And if a man entice a maid that is not betrothed, and lie with her, he shall surely endow her to be his wife. If her father utterly refuse to give her unto him, he shall pay money according to the dowry of virgins. Deuteronomy 22:28,29 If a man find a damsel that is a virgin, which is not betrothed, and lay hold on her, and lie with her, and they be found; Then the man that lay with her shall give unto the damsel's father fifty shekels of silver, and she shall be his wife; because he hath humbled her, he may not put her away all his days.

Deuteronomy 21:18-21 If a man have a stubborn and rebellious son, which will not obey the voice of his father, or the voice of his mother, and that, when they have chastened him, will not hearken unto them: Then shall his father and his mother lay hold on him, and bring him out unto the elders of his city, and unto the gate of his place; And they shall say unto the elders of his city, This our son is stubborn and rebellious, he will not obey our voice; he is a glutton, and a drunkard. And all the men of his city shall stone him with stones, that he die: so shalt thou put evil away from among you; and all Israel shall hear, and fear.

Hosea 4:13,14 They sacrifice upon the tops of the mountains, and burn incense upon the hills, under oaks and poplars and elms, because the shadow thereof is good: therefore your daughters shall commit whoredom, and your spouses shall commit adultery. I will not punish your daughters when they commit whoredom, nor your spouses when they commit adultery: for themselves are separated with whores, and they sacrifice with harlots: therefore the people that doth not understand shall fall.