Should OS makers, like Microsoft, be legally required to provide 15 years of security updates?

  • Buffalox@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 day ago

    rather than add burden to OS makers

    It’s not a burden for the OS maker, except when the OS is the product, and in that case it’s only fair.
    With Android the phone maker adapt the OS to their phones and flavor of Android, if they can’t handle maintaining it, they can use vanilla. Google is the OS maker, and I think they can handle the burden.

    • ell1e@leminal.space
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      1 day ago

      The EU has been so far bad at making sure FOSS isn’t seen as a paid product in the eyes of regulation, even in cases where it’s clearly unpaid, see here. They can’t be trusted to get this differentiation right.

      Therefore, unlockable bootloader seems like the better idea. Get people to Linux and open Android variants if the closed-source companies won’t serve them.

      • Buffalox@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 day ago

        I have no idea what I’m supposed to see from you link? I don’t see any particular legal knowledge, or description of any particular legal consequences, and I have no idea what the point is???
        Obviously software provided for free “as is”, cannot be required to be maintained. And if it is owned by the public which is the case with FOSS, there is no “owner” who can be made responsible.

        If however the software is part of a commercial package, the one supplying the package has responsibility for the package supplied, you can’t just supply open source software as part of a commercial product, and waive all responsibility for your product in that regard.

        • ell1e@leminal.space
          link
          fedilink
          English
          arrow-up
          1
          ·
          edit-2
          1 day ago

          I admit it’s a complex topic, but if you read the post in detail, it should answer your questions. The “owner” is typically the maintainer, if in doubt that’s the person with repository write access. And the EU can apparently potentially require whatever to be maintained, not that I understand the exact details. The point was that the regulation doesn’t seem to avoid FOSS fallout well.

          • Buffalox@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 day ago

            “owner” is typically the maintainer,

            Nope, AFAIK that is not legally applicable, that is very clear with licenses like MIT BSD etc, and for GPL in all versions it’s very explicitly stated in the license.
            You can also release as simply public domain, which very obviously means nobody owns as it is owned by everybody.
            Generally if you give something away for free, you can’t be claimed to be the owner.
            I have no idea where that idea should come from, some typical anti EU alarmists maybe? And I bet there is zero legal precedent for that. And I seriously doubt any lawyer would support your claim.

            If however you choose a license where the creator keeps ownership it may be different, but then it’s not FOSS.

            • ell1e@leminal.space
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              9 hours ago

              As far as I understand the license doesn’t matter at all for EU regulation, other than “non-free” software is treated even worse.

              Generally if you give something away for free, you can’t be claimed to be the owner.

              The CRA from what I can tell applies to software given away for free, sadly. I’m not a lawyer, though. But you can perhaps see why people don’t trust the EU.

              • Buffalox@lemmy.world
                link
                fedilink
                English
                arrow-up
                1
                ·
                9 hours ago

                If it’s proprietary it doesn’t, between proprietary and FOSS it absolutely does for the reasons I already stated.

                • ell1e@leminal.space
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  9 hours ago

                  https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=OJ%3AL_202402847

                  Supply in the course of a commercial activity might be characterised not only by charging a price for a product with digital elements, but also by charging a price for technical support services where this does not serve only the recuperation of actual costs, by an intention to monetise, for instance by providing a software platform through which the manufacturer monetises other services, by requiring as a condition for use the processing of personal data for reasons other than exclusively for improving the security, compatibility or interoperability of the software, or by accepting donations exceeding the costs associated with the design, development and provision of a product with digital elements

                  TL;DR, just donations can already be a problem, apparently. But IANAL.

                  • Buffalox@lemmy.world
                    link
                    fedilink
                    English
                    arrow-up
                    2
                    ·
                    edit-2
                    8 hours ago

                    but also by charging a price for technical support

                    Which exactly includes systems like RedHat which I already included, but in no way includes voluntary FOSS work for free.

                    an intention to monetise

                    Again it’s very much about the money, and being non free both as in beer and in freedom.

                    just donations can already be a problem, apparently. But IANAL.

                    NOPE!!!
                    Donations are not a charge. A donation is as the word says a donation typically to support a voluntary effort or an organization working for the common good in some way.
                    A donation does not require anything in return.

                    Why are you making scaremongering arguments from ignorance?