2 ms·

> The general concept is that you want to insure against your counterparty being unable to fulfill their obligations, which is exactly the concern here So vend

> The general concept is that you want to insure against your counterparty being unable to fulfill their obligations, which is exactly the concern here So vendors are going to have to take insurance policies out on each of their customers? > The money comes from the insurance that pays out because they defaulted. The insurance company still exists and is required to pay the claim. Pay who? Money is not source code. Money can't hire people to work at a company that doesn't exist. > This doesn't make any sense. Can you cite the specific statute or regulation that requires this? 47 C.F.R. § 15.5, Prevention of Harmful Interference. Manufacturers must design devices in a way that reasonably prevent their users from operating the device outside of allowable criteria. And under 47 U.S.C. § 302a and 47 C.F.R. § 2.803, the devices will be tested to ensure that they can't be changed to operate outside of that criteria. If the software allows the testers to modify them to do so, they will fail testing. > What secret is even being protected here? Surely the method of operation for baseband modems is not classified information. Nothing. It has nothing to do with keeping secrets -- it is about preventing the user from changing the way it operates. > Once the code is leaked, intentionally or otherwise, you're now intentionally selling a device with publicly available code. Why should the response to that be any different than selling a device for which the code was intentionally published to comply with the laws of another jurisdiction? 1. Leaks are never part of design intent, there's no transitive property of intent. 2. Devices are certified and tested before they're released, so the timelines are unlikely to line up. 3. I'm not sure what the FCC would do if this did happen, I'm not sure it ever has, but would be interesting to know. I'd bet it would depend on the severity of the problem. > What do you think currently happens if you go to Walmart and buy a product manufactured in China with faulty wiring and it starts a fire? Or a foreign-made wireless access point that exceeds FCC regulatory limits on transmit power out of the box? They might be liable for a recall after the problem is identified, or liable if they knowingly sold products that weren't compliant -- but the actual product design regulations, and UL/ETL/FCC testing requirements all lie on the original manufacturer.

AnthonyMouse 2y ago
> So vendors are going to have to take insurance policies out on each of their customers? They don't have to, but they can in any case they want to do business with a company they fear is at significant risk of insolvency. > Pay who? Money is not source code. Money can't hire people to work at a company that doesn't exist. Money can pay the people who used to work at the company, or some entirely different people, to continue to support the hardware for a defined period of time even if the company fails to secure any new customers or revenue. Contracts or escrow ahead of time ensures that those people have access to what they need to do it. > 47 C.F.R. § 15.5, Prevention of Harmful Interference. Manufacturers must design devices in a way that reasonably prevent their users from operating the device outside of allowable criteria. 47 C.F.R. § 15.5: https://www.law.cornell.edu/cfr/text/47/15.5 https://www.law.cornell.edu/cfr/text/47/15.5 It appears to say you're not allowed to operate a device that causes harmful interference. I don't see anything in it that says manufacturers are required to prevent the user from modifying the device. 47 U.S.C. § 302a is the generic grant of authority by Congress to the FCC to make this category of rules, not a specific rule. 47 CFR § 2.803 is a multi-part section but I don't see anything in it about manufacturers having an obligation to prevent modification, and it references subpart J which contains 47 CFR § 2.909 "Responsible Party" and seems to imply the opposite, i.e. that if an independent third party modifies the device they're taking the compliance burden onto themselves. What am I missing? > Devices are certified and tested before they're released, so the timelines are unlikely to line up. Wouldn't that imply the source code could be released by the manufacturer or someone else after the certification to the same effect? > I'm not sure what the FCC would do if this did happen, I'm not sure it ever has, but would be interesting to know. I'd bet it would depend on the severity of the problem. There have been WiFi chips with open source firmware, e.g. Atheros pre-Qualcomm. I'm not aware of any current ones but also not aware of any serious problems occurring when those chips were current. What is someone even supposed to do that they couldn't still do with hardware modifications or SDR anyway?

AnthonyMouse 2y ago

> So vendors are going to have to take insurance policies out on each of their customers? They don't have to, but they can in any case they want to do business with a company they fear is at significant risk of insolvency. > Pay who? Money is not source code. Money can't hire people to work at a company that doesn't exist. Money can pay the people who used to work at the company, or some entirely different people, to continue to support the hardware for a defined period of time even if the company fails to secure any new customers or revenue. Contracts or escrow ahead of time ensures that those people have access to what they need to do it. > 47 C.F.R. § 15.5, Prevention of Harmful Interference. Manufacturers must design devices in a way that reasonably prevent their users from operating the device outside of allowable criteria. 47 C.F.R. § 15.5: https://www.law.cornell.edu/cfr/text/47/15.5 https://www.law.cornell.edu/cfr/text/47/15.5 It appears to say you're not allowed to operate a device that causes harmful interference. I don't see anything in it that says manufacturers are required to prevent the user from modifying the device. 47 U.S.C. § 302a is the generic grant of authority by Congress to the FCC to make this category of rules, not a specific rule. 47 CFR § 2.803 is a multi-part section but I don't see anything in it about manufacturers having an obligation to prevent modification, and it references subpart J which contains 47 CFR § 2.909 "Responsible Party" and seems to imply the opposite, i.e. that if an independent third party modifies the device they're taking the compliance burden onto themselves. What am I missing? > Devices are certified and tested before they're released, so the timelines are unlikely to line up. Wouldn't that imply the source code could be released by the manufacturer or someone else after the certification to the same effect? > I'm not sure what the FCC would do if this did happen, I'm not sure it ever has, but would be interesting to know. I'd bet it would depend on the severity of the problem. There have been WiFi chips with open source firmware, e.g. Atheros pre-Qualcomm. I'm not aware of any current ones but also not aware of any serious problems occurring when those chips were current. What is someone even supposed to do that they couldn't still do with hardware modifications or SDR anyway?