I really don't understand the panic. The target is big tech, not open source.

Think of GDPR: this goes primarily after big tech with big fines. What liability can be applied to software you don't pay for?

Open source will be caught in blast radius, that's the problem. You will not get a cent for it and will be liable for at least 5 million euros. Who would accept such a "deal"? It's not just big, fat, money rich companies who does software development.

Heck, I heard Apple requires to close your personal Github account when you get employed. You can't do anything personal without approval when you work there. This shit will get just more common due to company lawyers erring on the side of caution to protect the company. This is how stuff like this works in real life.

It really won't. It's targeted at corporations, especially big tech, not open source where there is no money.

If anything, it will likely toss more resources to open source by those very same big tech companies, to protect their liabilities

> If anything, it will likely toss more resources to open source by those very same big tech companies, to protect their liabilities

I don’t think that's how it will work. The moment the big company ships an open-source library as part of their commercial software, they will be liable for it (but not the original non-commercial open-source authors, if any). As soon as it's used as part of a commercial product, being open source or not won't matter for the liability.

how dystopian and cyberpunk - where the identity and background of the worker is erased, and hiding from customers that their call is handled by someone abroad. This is evil, and exploitative

yes

all this, plus recommending videos it already shows me i watched, and return soon after having marked them "not interested/already watched the video"

i like this - it still shows someone cares. It feels genuine to me. At least it makes your day a little bit more pleasant

Thanks Jay! I strongly suspected some people would find the gesture meaningful but it’s nice to get confirmation on here. :-)

- Huelights control - PiHole - NFC card hacking - ARM assembly programming - Kubernetes + OpenFaas cluster - Postgres DB (with SSD harddrive)

Probably the most egregious example would be Weev/Andew Auernheimer and AT&T

https://www.wired.com/2013/03/att-hacker-gets-3-years/ https://www.wired.com/2014/04/att-hacker-conviction-vacated/

weev attempted to extort and blackmail AT&T. To paint him as an innocent well-intentioned security research is a slap in the face to everyone who is.

Charging him under the CFAA was a ridiculous abuse of that law

This is excellent

Everything about this project is weird. I started looking into it since I do IoT stuff and there was so much hype.

Then you find out about the curl issue. The unnecessary ternary. Read the white paper and all issues with tip selection was "solved" with hand waving. Then you find out it doesn't even have a client that works on a typical IoT device... Reading the email chain made it ultimately clear: these people have no idea what they're doing. They just threw a bunch of random ultra cool sounding tech together ("post-quantum crypto", of course) and started hyping, while the code never worked. Obvious scam.