3 ms·

> Many large companies are dependent on open-source libraries. With these regulations they now have (more) incentive to get bugs and vulnerabilities in their de

> Many large companies are dependent on open-source libraries. With these regulations they now have (more) incentive to get bugs and vulnerabilities in their dependencies fixed This is not what is going to happen, what is going to happen is that open source will be deemed a legal liability and every institution will turn to Microsoft proprietary solutions. Nobody is going to put more money into hiring people to fix bugs or vulnerabilities in open source projects.

Scandiravian 4y ago
How much are you willing to bet on that? I'm happy to put down $1000 that this will not happen Germany has for instance transitioned to using significantly more open-source software in the governmental institutions, as has many other EU member states They would not support this proposal if it would result in an expensive reversal of these efforts
- EGreg 4y ago
  Governments having standards for themselves and their contractors is just fine: https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/ https://www.whitehouse.gov/briefing-room/presidential-action... Imposing gatekeepers on the rest of the public with penalties even in private use cases is not.
  - Scandiravian 4y ago
    That's your personal opinion and you're of course welcome to that, though I'm curios why you take such an offence to other regions with a different political situation, cultural history, and most importantly security concerns, implementing laws that you're not subjected to. Could you expand on that?
    - EGreg 4y ago
      Simple: this law will affect me as a software developer. Any software “made available” in Europe can be subject to this, just like with GDPR. And most open source software is designed to be “made available” anywhere! This is the first time the developers of such free software can be hit with massive fines. And frankly, even if that wasn’t the case, I care about human beings elsewhere.

Scandiravian 4y ago

How much are you willing to bet on that? I'm happy to put down $1000 that this will not happen Germany has for instance transitioned to using significantly more open-source software in the governmental institutions, as has many other EU member states They would not support this proposal if it would result in an expensive reversal of these efforts

EGreg 4y ago
Governments having standards for themselves and their contractors is just fine: https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/ https://www.whitehouse.gov/briefing-room/presidential-action... Imposing gatekeepers on the rest of the public with penalties even in private use cases is not.
- Scandiravian 4y ago
  That's your personal opinion and you're of course welcome to that, though I'm curios why you take such an offence to other regions with a different political situation, cultural history, and most importantly security concerns, implementing laws that you're not subjected to. Could you expand on that?
  - EGreg 4y ago
    Simple: this law will affect me as a software developer. Any software “made available” in Europe can be subject to this, just like with GDPR. And most open source software is designed to be “made available” anywhere! This is the first time the developers of such free software can be hit with massive fines. And frankly, even if that wasn’t the case, I care about human beings elsewhere.