Should OS makers, like Microsoft, be legally required to provide 15 years of security updates?

  • ell1e@leminal.space
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    21 hours ago

    The EU has been so far bad at making sure FOSS isn’t seen as a paid product in the eyes of regulation, even in cases where it’s clearly unpaid, see here. They can’t be trusted to get this differentiation right.

    Therefore, unlockable bootloader seems like the better idea. Get people to Linux and open Android variants if the closed-source companies won’t serve them.

    • Buffalox@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      20 hours ago

      I have no idea what I’m supposed to see from you link? I don’t see any particular legal knowledge, or description of any particular legal consequences, and I have no idea what the point is???
      Obviously software provided for free “as is”, cannot be required to be maintained. And if it is owned by the public which is the case with FOSS, there is no “owner” who can be made responsible.

      If however the software is part of a commercial package, the one supplying the package has responsibility for the package supplied, you can’t just supply open source software as part of a commercial product, and waive all responsibility for your product in that regard.

      • ell1e@leminal.space
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        18 hours ago

        I admit it’s a complex topic, but if you read the post in detail, it should answer your questions. The “owner” is typically the maintainer, if in doubt that’s the person with repository write access. And the EU can apparently potentially require whatever to be maintained, not that I understand the exact details. The point was that the regulation doesn’t seem to avoid FOSS fallout well.

        • Buffalox@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          18 hours ago

          “owner” is typically the maintainer,

          Nope, AFAIK that is not legally applicable, that is very clear with licenses like MIT BSD etc, and for GPL in all versions it’s very explicitly stated in the license.
          You can also release as simply public domain, which very obviously means nobody owns as it is owned by everybody.
          Generally if you give something away for free, you can’t be claimed to be the owner.
          I have no idea where that idea should come from, some typical anti EU alarmists maybe? And I bet there is zero legal precedent for that. And I seriously doubt any lawyer would support your claim.

          If however you choose a license where the creator keeps ownership it may be different, but then it’s not FOSS.

          • ell1e@leminal.space
            link
            fedilink
            English
            arrow-up
            1
            ·
            edit-2
            3 hours ago

            As far as I understand the license doesn’t matter at all for EU regulation, other than “non-free” software is treated even worse.

            Generally if you give something away for free, you can’t be claimed to be the owner.

            The CRA from what I can tell applies to software given away for free, sadly. I’m not a lawyer, though. But you can perhaps see why people don’t trust the EU.

            • Buffalox@lemmy.world
              link
              fedilink
              English
              arrow-up
              1
              ·
              3 hours ago

              If it’s proprietary it doesn’t, between proprietary and FOSS it absolutely does for the reasons I already stated.

              • ell1e@leminal.space
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                3 hours ago

                https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ%3AL_202402847

                Supply in the course of a commercial activity might be characterised not only by charging a price for a product with digital elements, but also by charging a price for technical support services where this does not serve only the recuperation of actual costs, by an intention to monetise, for instance by providing a software platform through which the manufacturer monetises other services, by requiring as a condition for use the processing of personal data for reasons other than exclusively for improving the security, compatibility or interoperability of the software, or by accepting donations exceeding the costs associated with the design, development and provision of a product with digital elements

                TL;DR, just donations can already be a problem, apparently. But IANAL.

                • Buffalox@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  2 hours ago

                  but also by charging a price for technical support

                  Which exactly includes systems like RedHat which I already included, but in no way includes voluntary FOSS work for free.

                  an intention to monetise

                  Again it’s very much about the money, and being non free both as in beer and in freedom.

                  just donations can already be a problem, apparently. But IANAL.

                  NOPE!!!
                  Donations are not a charge. A donation is as the word says a donation typically to support a voluntary effort or an organization working for the common good in some way.
                  A donation does not require anything in return.

                  Why are you making scaremongering arguments from ignorance?