{"id":112162,"date":"2023-12-12T15:10:14","date_gmt":"2023-12-12T13:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/predlozhenie-po-perekladyvaniyu-otvetstvennosti-za-oshibki-v-otkrytom-kode"},"modified":"2023-12-12T15:10:14","modified_gmt":"2023-12-12T13:10:14","slug":"predlozhenie-po-perekladyvaniyu-otvetstvennosti-za-oshibki-v-otkrytom-kode","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/predlozhenie-po-perekladyvaniyu-otvetstvennosti-za-oshibki-v-otkrytom-kode","title":{"rendered":"Prijedlog o prebacivanju odgovornosti za gre\u0161ke u otvorenom kodu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

James Bottomley iz IBM Research, koji se bavi SCSI i PA-RISC podsistemima unutar Linux jezgre i koji je ranije vodio tehni\u010dki odbor Linux Foundation, predlo\u017eio je mogu\u0107nost rje\u0161avanja problema mogu\u0107eg dovo\u0111enja u odgovornost programera otvorenog koda za gre\u0161ke u kodu ili nepravilno rje\u0161avanje ranjivosti. <\/p>\n

Ideja se sastoji u premje\u0161tanju pravne odgovornosti za gre\u0161ke u izvornom kodu s programera otvorenih projekata na dobavlja\u010de kona\u010dnih komercijalnih proizvoda temeljenih na tom kodu, tj. pomicanju odgovornosti s onoga tko razvija kod na onoga tko zara\u0111uje na tom kodu. Na primjer, ako tvrtka koristi vanjski otvoreni kod u svom proizvodu i gre\u0161ka\/ranjivost u tom kodu uzrokuje \u0161tetu korisniku, u toj situaciji odgovornost i naknadu \u0161tete trebala bi snositi tvrtka koja je isporu\u010dila komercijalni softverski proizvod korisniku, a ne programer otvorene biblioteke. <\/p>\n

Premje\u0161tanje odgovornosti se predla\u017ee implementirati kroz dodavanje stavke u licencu koja ukazuje na suglasnost o naknadi \u0161tete i za\u0161titi sudionika u razvoju od bilo kakvih pravnih potra\u017eivanja u slu\u010daju potpunog ili djelomi\u010dnog kori\u0161tenja pru\u017eenog pod ovom licencom izvornog koda kao komponenta ili proizvod u jurisdikcijama koje name\u0107u dodatne obveze za odr\u017eavanje softverskih proizvoda. <\/p>\n

U dana\u0161njoj praksi, za smanjenje pravnih rizika dovoljno je imati u licenci upozorenje \u00abAS IS\u00bb, u kojem je navedeno da programer ne preuzima odgovornost za gre\u0161ke, ne daje nikakva jamstva za funkcionalnost koda i ne preuzima obaveze za re\u0161avanje problema, dok potro\u0161a\u010d pristaje da koristi kod na vlastiti rizik. Nedostatak jamstava od strane programera potaknuo je razvoj poslovnog modela na temelju pla\u0107ene tehni\u010dke podr\u0161ke, koji je dominirao u ranim fazama razvoja ekosustava otvorenog softvera. <\/p>\n

Kako je otvoreni kod sve vi\u0161e ulazio u industriju i rastao interes korporacija za njegovu upotrebu, po\u010dela se razvijati koncept utjecaja na razvoj putem nevladinih fondova \u2014 na temelju velikog projekta osniva se fond koji dobiva financiranje za razvoj od ve\u0107ih kompanija, kojima se zauzvrat omogu\u0107ava ulazak u nadzorni tehni\u010dki odbor i sudjelovanje u dono\u0161enju kolektivnih odluka o daljnjem razvoju. Pojava fondova transformirala je odnos prema otvorenim projektima, koji su po\u010deli biti vi\u0111eni kao alat za razvoj tehni\u010dke industrije, a ne kao haoti\u010dno uto\u010di\u0161te volontera. Promijenilo se i shva\u0107anje odgovornosti za probleme u otvorenom kodu \u2014 umjesto za\u0161tite pojedinih programera, odredba o nepreuzimanju obaveza po\u010dela je biti vi\u0111ena kao mogu\u0107nost izbjegavanja odgovornosti ve\u0107ih kompanija koje stvaraju otvorene proizvode. <\/p>\n

Situacija s odricanjem od obaveza mo\u017ee se promijeniti u slu\u010daju usvajanja zakona o Cyber Resilience Act u Europskoj uniji, koji name\u0107e odre\u0111enu odgovornost proizvo\u0111a\u010dima softvera koji se ne brinu dovoljno o sigurnosti i hitno ne uklanjaju ranjivosti tijekom \u017eivotnog ciklusa proizvoda. Ovaj zakonodavni prijedlog odnosi se na proizvo\u0111a\u010de komercijalnog softvera i, sude\u0107i prema provedenom radu, osigurat \u0107e posebno izuze\u0107e za softver pod otvorenim licencama, ali nema garancija da u budu\u0107nosti negdje ne\u0107e biti usvojen sli\u010dan zakon bez takvih izuze\u0107a. <\/p>\n

Kao primjer rizika povezanih s odgovorno\u0161\u0107u programera, tako\u0111er se spominje pravni postupak pokrenut u Ujedinjenom Kraljevstvu, u kojem tvrtka Tulip Trading, koja je izgubila bitcoine u vrijednosti od oko 4 milijarde dolara tijekom hakiranja, od programera sustava Bitcoin tra\u017ei da unesu promjene u kod blockchaina kako bi se vratio izgubljeni iznos. Tu\u017eba je podnesena protiv programera alata, a ne operatora mre\u017ee Bitcoin. Prvi sud odbio je tu\u017ebu temeljem stavke u licenci o odricanju odgovornosti, ali postupak je nastavljen na vi\u0161em sudu, koji se \u010dini da tako\u0111er odbija tu\u017ebu, ali ovaj put zbog nemogu\u0107nosti tvrtke Tulip Trading da doka\u017ee vlasni\u0161tvo nad bitcoinima u tra\u017eenom iznosu.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u043c\u0441 \u0411\u043e\u0442\u0442\u043e\u043c\u043b\u0438 (James Bottomley) \u0438\u0437 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f IBM Research, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b SCSI \u0438 PA-RISC \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u0432\u0448\u0438\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442 Linux Foundation, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0418\u0434\u0435\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u043b\u043e\u0436\u0438\u0442\u044c \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112162","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ponuda o prebacivanju odgovornosti za gre\u0161ke u otvorenom kodu | ProHoster","description":"James Bottomley iz IBM Research, koji se bavi SCSI i PA-RISC podsustavima u Linux kernelu i koji je prethodno vodio tehni\u010dki odbor Linux Foundation, predlo\u017eio je rje\u0161enje problema s.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/predlozhenie-po-perekladyvaniyu-otvetstvennosti-za-oshibki-v-otkrytom-kode","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043d\u0438\u044e \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u043a\u043e\u0434\u0435 | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u043c\u0441 \u0411\u043e\u0442\u0442\u043e\u043c\u043b\u0438 (James Bottomley) \u0438\u0437 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f IBM Research, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b SCSI \u0438 PA-RISC \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u0432\u0448\u0438\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442 Linux Foundation, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/predlozhenie-po-perekladyvaniyu-otvetstvennosti-za-oshibki-v-otkrytom-kode","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-12T13:10:14+00:00","article:modified_time":"2023-12-12T13:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=112162"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/112162\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=112162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=112162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=112162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}