zlacker

[return to "Debian Statement on the Cyber Resilience Act"]
1. 63+at[view] [source] 2023-12-28 01:09:05
>>diyftw+(OP)
A lot of folks seem very angry about this and are making some broad statements with no specific citations. Can someone please give me a specific quote from the bill and explain how that will for sure be detrimental to open source projects?
◧◩
2. gavinh+Su[view] [source] 2023-12-28 01:26:59
>>63+at
I'm using [1].

Page 15:

> In order not to hamper innovation or research, free and open-source software developed or supplied outside the course of a commercial activity should not be covered by this Regulation. This is in particular the case for software, including its source code and modified versions, that is openly shared and freely accessible, usable, modifiable and redistributable. In the context of software, a commercial activity might be characterized not only by charging a price for a product, but also by charging a price for technical support services, by providing a software platform through which the manufacturer monetises other services, or by the use of personal data for reasons other than exclusively for improving the security, compatibility or interoperability of the software.

This sounds sane-ish, but it the key is that it says Open Source Software is not exempted if it is part of commercial activity.

So what is commercial activity?

Page 34:

> 'making available on the market' means any supply of a product with digital elements for distribution or use on the Union market in the course of a commercial activity, whether in return for payment or free of charge

That "free of charge" connected with "commercial activity" is what has people up in arms.

Does it include free stuff like Debian? Does it include donation-based FOSS like Zig?

These are the things that worry people.

[1]: https://eur-lex.europa.eu/resource.html?uri=cellar:864f472b-...

◧◩◪
3. eek212+qy[view] [source] 2023-12-28 02:03:29
>>gavinh+Su
The fact that I had to read this far in to determine that a) this is an EU law (I think?) and b) still have no idea what this (proposed?) law is/does is frustrating to me. This link could have used some context. I don't have an issue with clicking the link, but from there?
[go to top]