EU to vote regulation that has a considerable potential to hurt OSS

Re:EU to vote regulation that has a considerable potential t... by AugustoCAS on Saturday July 15, 2023 @03:08PM (#36739962)

TL;DR The EU is working on the Cyber Resilience Act (CRA) which will be voted on the 19th of July. The current wording makes it look like it will affect open source projects that receice donations; which have contribution from corporate developers; and might break coordinated vulnerability disclousure.

If you live in the EC area, there's a link on the blog to contact to MEP.

The blog also links to other posts from OSS organisations sharing the same concer.

* https://blogs.eclipse.org/post/mike-milinkovich/european-cyb...

* https://pyfound.blogspot.com/2023/04/the-eus-proposed-cra-la...

* https://blog.opensource.org/the-ultimate-list-of-reactions-t...

[ Parent | on HN ]

Re:EU to vote regulation that has a considerable potential t... by smarx007 on Saturday July 15, 2023 @03:34PM (#36740202)

Please take time to understand CRA before contacting MEPs: https://digital-strategy.ec.europa.eu/en/policies/cyber-resi...

[ Parent | on HN ]

Re:EU to vote regulation that has a considerable potential t... by bonzini on Saturday July 15, 2023 @04:19PM (#36740576)

I have not yet fully made up my mind, but notice that there is a lot of nuance in the actual text. For example "Accepting donations without the intention of making a profit should not count as a commercial activity, unless such donations are made by commercial entities and are recurring in nature".

[ Parent | on HN ]

Re:EU to vote regulation that has a considerable potential t... by tremon on Saturday July 15, 2023 @04:31PM (#36740672)

That doesn't sound like nuance, just a quagmire of uncertainty. That means that if I have a Patreon account, and any business decides to fund me for a couple of months (let's say, for the duration of a Summer of Code), my project is now commercial? Is it only commercial during those months? Will such a donation affect all projects I'm working on at the same time?

[ Parent | on HN ]

Re:EU to vote regulation that has a considerable potential t... by thayne on Saturday July 15, 2023 @06:33PM (#36741549)

Or what if a business funds you for like $5 a month? Are you then required to comply with the regulations?

[ Parent | on HN ]