2 ms·
> There's no obligation for a hobbyist to fix the stuff they publish online. I may be wrong but this might not the case anymore in 2025 (not sure about the tim
by prmoustache 2y ago
> There's no obligation for a hobbyist to fix the stuff they publish online.
I may be wrong but this might not the case anymore in 2025 (not sure about the timeline) in the European Union because of the new cybersecurity acts.
- some_furry 2y agoI don't have a business presence in the EU, so I rarely care about that for my own projects. (Insofar as I do care, it's limited to "let's not make GDPR compliance logically impossible when designing cryptographic features").
- rcxdude 2y agoThere's carve-outs in that for open source hobbyists ("not associated with commercial activity"). This was originally vaguely worded but they've now made it a lot less ambiguous, the only open source it covers is that which is being developed by a company which is also making money directly from it. (And in the case that a company takes that code and uses it in a product, they are responsible to fix any security vulnerabilities but also to report it to the author)