4 ms·
I guess the foundations are hyped because CRA basically forces companies to pay for security of OS projects (which the foundations try to be the main receiver o
by snowpid 2y ago
I guess the foundations are hyped because CRA basically forces companies to pay for security of OS projects (which the foundations try to be the main receiver of the money)
But in the end the OS ecosystem becomes much more secure.
Otherwise all the SV dudes complaining about the over burocratics: How to improve Software security? Only alternative I can think of, is the goverment pays for the security. For me thats a worser solution.
- lars_francke 2y ago"Hyped" is not the word I'd use. Most of us are or were concerned and it took a lot of long meetings to even move "us" out of the category of "software manufacturer" and into a new category of "steward" which is currently not well defined. Also not hyped because the required standards are written at the EU level and there is no established process for foundations to participate in these standards. So it's more like: Trying to do the best with the cards we've been dealt. I agree wtih everything else you're saying.