Debian Statement on the Cyber Resilience Act

Post by gavinhoward » Thu, Dec 28, 2023, 2:21 AM UTC

eek2121 wrote: post #42

gavinhoward wrote: post #33

Earlier quoted context omitted.

I'm using [1]. Page 15: > In order not to hamper innovation or research, free and open-source software developed or supplied outside the course of a commercial activity should not be covered by this Regulation. This is in particular the case for software, including its source code and modified versions, that is openly shared and freely accessible, usable, modifiable and redistributable. In the context of software, a…

The fact that I had to read this far in to determine that a) this is an EU law (I think?) and b) still have no idea what this (proposed?) law is/does is frustrating to me. This link could have used some context. I don't have an issue with clicking the link, but from there?

Post by erik_seaberg » Thu, Dec 28, 2023, 2:25 AM UTC

beedeebeedee wrote: post #27

giantg2 wrote: post #13

Earlier quoted context omitted.

Standardized food safety practices, pre-approved and comparatively trivial recipes, state/county inspections, etc. None of which apply to software. One is fairly trivial and standardized. The other is massively complex, rapidly changing, and unable to be boiled down to a standard set of trivial procedures. And to answer your question more directly, the flour itself causes the damage. The vulnerability is only damagin…

> Standardized food safety practices Food safety practices only became standardized after regulation was enacted. > pre-approved and comparatively trivial recipes That sounds like most software development. I think you are unwittingly making the case that software development is a lot like food production. Software development is only beginning to get regulated because it is only now reaching the level where it is ha…

Post by kube-system » Thu, Dec 28, 2023, 2:30 AM UTC

giantg2 wrote: post #45

beedeebeedee wrote: post #27

Earlier quoted context omitted.

> Standardized food safety practices Food safety practices only became standardized after regulation was enacted. > pre-approved and comparatively trivial recipes That sounds like most software development. I think you are unwittingly making the case that software development is a lot like food production. Software development is only beginning to get regulated because it is only now reaching the level where it is ha…

"Food safety practices only became standardized after regulation was enacted." Because you actually can standardize them. Software isn't so simple. "> pre-approved and comparatively trivial recipes That sounds like most software development." Lol no that does not. Why wouldn't high school graduates or drop outs work in software instead of at fast food? The number of languages, frameworks, patterns, etc are much more…

Post by Ekaros » Thu, Dec 28, 2023, 2:31 AM UTC

quacksilver wrote: post #54

kube-system wrote: post #52

Earlier quoted context omitted.

It could be done for some software, but some popular licenses like GPL don't allow additional restrictions on use.

If it were a big enough problem, could GPLv4 be published (perhaps with a clause to cover this and future laws) and products encouraged to migrate to it?

Post by zajio1am » Thu, Dec 28, 2023, 2:33 AM UTC

pjmlp wrote: post #2

Small businesses and solo-entrepreneurs have to deal with liability and permits all the time in other fields, even actual street bazaars for that matter, exception being when there is some "flexibility" between the laws and how they happen to be applied.