Hacker News Reader

I don't understand what's going on. Could someone give me a birds eye view of what this is about?

- What is the regulation aimed at?

- What did the open source community communicate?

The legislation (Cyber Resilience Act) aims to enforce some standards and add liability around software products, to enforce that vendors don't just throw something out, never touch it again and it becomes a problem (customers stuck with paperweights, security holes exploited). The problem is that if you enforce that sort of thing on random open source projects, many will be simply incapable of even trying to follow the legislation because they're a small one-two dev team that cannot navigate complex laws. So, progressively, more and more exceptions have been added to who does the regulation apply to.

Liability for software developers and vendors. The only problem is they forgot to make an exception for free and open source software developers. It simply makes no sense for me to publish free software out there for free if that can get me sued.

TFA is about how they did make those exceptions in the final text

Did they though? The article says that the final text mitigated "pretty much all" of the issues. What wasn't mitigated?

Reply on news.ycombinator.com