Re: Cyber resilience act

Tobias Morell <[email protected]> Thu, 18 Jan 2024 11:17:49 +0100
Newsgroups gmane.comp.kde.events
Message-ID <EDD3EFC4-2556-4A5F-B8F1-7DE260235970__6248.44260034791$1705669956$gmane$org@kdab.com>
Hi Paul,

thanks for your feedback. Very interesting.

I was wondering, whether the positions in the letter from September have =
been addressed in the latest draft from November in any way.

If we understand it correctly, authors of OS and non-profit projects are =
mostly off the hook. We probably haven=E2=80=99t looked as deep into =
things as you have.=20

Cheers
Tobias



> Am 11.01.2024 um 20:07 schrieb Paul Brown <[email protected]>:
>=20
> On Thursday, 11 January 2024 15:30:18 CET frances.tait wrote:
>> Hi Paul,
>=20
> Hello Frances,
>=20
>> We=E2=80=99re planning a brief news item in our January Newsletter to =
alert people
>> to what=E2=80=99s coming down the line on this. We don=E2=80=99t want =
to take a position,
>> but want folk to know about it so they can prepare, and we=E2=80=99re =
gathering
>> links so they can inform themselves.. We wondered if KDE had thought =
about
>> it at all or have something to add.
>>=20
>> Here=E2=80=99s a link in case you hadn=E2=80=99t heard about it.
>>=20
>> =
https://www.europarl.europa.eu/news/en/press-room/20230717IPR03029/cyber-r=
es
>> ilience-act-meps-back-plan-to-boost-digital-products-security Cyber
>> Resilience Act: MEPs back plan to boost digital products security | =
News |
>> European Parliament europarl.europa.eu
>=20
>=20
> Yes: KDE is cosignatory of the letter written by the Eclipse =
Foundation:
>=20
> =
https://docs.google.com/document/d/1QM2m3OxMOI_WXM9JHQs2kvg0N8jcWLPHH2N5d8=
-nPcs
>=20
> And we agree that the CRA, as drafted
>=20
> 1. would reduce the number of OSS projects available to European SMEs =
giving=20
> more power to large corporations;=20
>=20
> 2. wouled jeopardize the fragile equilibrium that benefits SMEs =
contributing to=20
> European innovations; =20
>=20
> 3. by barring FLOSS projects from the market, would probably have the =
opposite=20
> effect from that intended and would not improve the security of =
products=20
> available to consumers.
>=20
> =
https://newsroom.eclipse.org/news/announcements/cra-should-support-open-pr=
actices-open-source-and-development-european-open
>=20
> I hope that helps. Need more details?
>=20
> Cheers
>=20
> Paul
>=20
> P.S.: Belated Happy New Year!
> --=20
> Promotion & Communication
>=20
> www: https://kde.org
> Mastodon: https://floss.social/@kde
> Facebook: https://www.facebook.com/kde/
> Twitter: https://twitter.com/kdecommunity
> LinkedIn: https://www.linkedin.com/company/kde
>=20
>=20