James Bottomley de la IBM Research, responsabil cu subsistemele SCSI \u0219i PA-RISC \u00een nucleul Linux \u0219i fost pre\u0219edinte al comitetului tehnic al Linux Foundation, a propus o solu\u021bie pentru problema posibilei responsabilit\u0103\u021bi legale a dezvoltatorilor de cod deschis pentru erorile din cod sau pentru remedierea necorespunz\u0103toare a vulnerabilit\u0103\u021bilor. <\/p>\n
Ideea este de a transfera responsabilitatea juridic\u0103 pentru erorile din codul surs\u0103 de la dezvoltatorii proiectelor deschise c\u0103tre furnizorii produselor comerciale finale bazate pe acest cod, adic\u0103 de a schimba responsabilitatea de la cel care dezvolt\u0103 codul la cel care c\u00e2\u0219tig\u0103 din acest cod. De exemplu, dac\u0103 o companie folose\u0219te un cod deschis de la o ter\u021b\u0103 parte \u00een produsul s\u0103u \u0219i o eroare\/vulnerabilitate din acel cod cauzeaz\u0103 daune utilizatorului, atunci \u00een aceast\u0103 situa\u021bie r\u0103spunderea \u0219i desp\u0103gubirea pentru daune trebuie s\u0103 fie asumate de produc\u0103torul produsului software comercial livrat utilizatorului, nu de dezvoltatorul bibliotecii deschise. <\/p>\n
Transferul responsabilit\u0103\u021bii se propune a fi realizat prin ata\u0219area unui articol la licen\u021b\u0103 care s\u0103 precizeze consim\u021b\u0103m\u00e2ntul de a desp\u0103gubi pierderile \u0219i de a proteja participan\u021bii la dezvoltare de orice revendic\u0103ri legale \u00een cazul utiliz\u0103rii totale sau par\u021biale a codului surs\u0103 furnizat sub aceast\u0103 licen\u021b\u0103 ca parte a unui component sau produs \u00een jurisdic\u021bii care impun obliga\u021bii suplimentare de \u00eentre\u021binere a produselor software. <\/p>\n
\u00cen practica actual\u0103, pentru a-\u0219i reduce riscurile legale, este suficient s\u0103 existe \u00een licen\u021b\u0103 o avertizare \"AS IS\", care afirm\u0103 c\u0103 dezvoltatorul nu \u00ee\u0219i asum\u0103 responsabilitatea pentru erori, nu ofer\u0103 nicio garan\u021bie privind func\u021bionarea codului \u0219i nu \u00ee\u0219i asum\u0103 obliga\u021bii de a rezolva problemele, iar consumatorul este de acord s\u0103 foloseasc\u0103 codul pe propriul risc. Lipsa garan\u021biilor din partea dezvoltatorilor a stimulat dezvoltarea unui model de afaceri bazat pe suport tehnic pl\u0103tit, care a dominat \u00een prima etap\u0103 de dezvoltare a ecosistemului software-ului open-source. <\/p>\n
Pe m\u0103sur\u0103 ce codul deschis a p\u0103truns \u00een industrie \u0219i interesul corpora\u021biilor pentru utilizarea sa a crescut, conceptul de influen\u021b\u0103 asupra dezvolt\u0103rii prin fonduri non-profit a \u00eenceput s\u0103 se dezvolte - pe baza unui proiect mare se creeaz\u0103 un fond care prime\u0219te finan\u021bare pentru dezvoltare de la mari companii, c\u0103rora li se ofer\u0103 \u00een schimb posibilitatea de a intra \u00een consiliul tehnic de supraveghere \u0219i de a participa la deciziile colegiale privind dezvoltarea ulterioar\u0103. Apari\u021bia fondurilor a transformat percep\u021bia asupra proiectelor deschise, care au \u00eenceput s\u0103 fie v\u0103zute ca un instrument de dezvoltare a industriei tehnologice, \u0219i nu ca un refugiu dezordonat pentru voluntari. A evoluat \u0219i percep\u021bia responsabilit\u0103\u021bii pentru problemele din codul deschis - \u00een loc de a proteja dezvoltatorii individuali, punctul despre lipsa obliga\u021biilor a \u00eenceput s\u0103 fie perceput ca o modalitate de a evita responsabilitatea companiilor mari care creeaz\u0103 produse deschise. <\/p>\n
Situa\u021bia privind refuzul obliga\u021biilor ar putea fi modificat\u0103 \u00een cazul \u00een care \u00een Uniunea European\u0103 va fi adoptat proiectul de lege Cyber Resilience Act, care impune o anumit\u0103 responsabilitate produc\u0103torilor de software care nu se ocup\u0103 corespunz\u0103tor de securitate \u0219i nu remediaz\u0103 rapid vulnerabilit\u0103\u021bile pe durata ciclului de via\u021b\u0103 al produsului. Proiectul de lege vizeaz\u0103 produc\u0103torii de software comercial \u0219i, din informa\u021biile disponibile, va oferi o excep\u021bie special\u0103 pentru software-ul sub licen\u021be deschise, dar nu exist\u0103 nicio garan\u021bie c\u0103 \u00een viitor nu va fi adoptat\u0103 o lege similar\u0103 f\u0103r\u0103 astfel de excep\u021bii. <\/p>\n
Ca exemplu de riscuri asociate cu responsabilitatea dezvoltatorilor, se men\u021bioneaz\u0103 de asemenea un proces judiciar ini\u021biat \u00een Regatul Unit, \u00een cadrul c\u0103ruia compania Tulip Trading, care a pierdut bitcoins \u00een valoare de aproximativ 4 miliarde de dolari \u00een urma unui hack, solicit\u0103 dezvoltatorilor sistemului Bitcoin s\u0103 modifice codul blockchain-ului pentru a returna suma pierdut\u0103. Ac\u021biunea a fost intentat\u0103 \u00eempotriva dezvoltatorilor codului de instrumentare, nu \u00eempotriva operatorilor re\u021belei Bitcoin. Tribunalul de prim\u0103 instan\u021b\u0103 a respins cererea pe baza unei clauze din licen\u021b\u0103 care stipuleaz\u0103 exonerarea de responsabilitate, dar cazul a continuat \u00een instan\u021ba de apel, care, se pare, va respinge de asemenea cererea, dar de data aceasta din cauza incapacit\u0103\u021bii companiei Tulip Trading de a dovedi de\u021binerea bitcoins la suma solicitat\u0103. \u0414\u0436\u0435\u0439\u043c\u0441 \u0411\u043e\u0442\u0442\u043e\u043c\u043b\u0438 (James Bottomley) \u0438\u0437 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f IBM Research, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b SCSI \u0438 PA-RISC \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u0432\u0448\u0438\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442 Linux Foundation, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u043a \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0418\u0434\u0435\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u0435\u0440\u0435\u043b\u043e\u0436\u0438\u0442\u044c \u044e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112162","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Propunere de transferare a responsabilit\u0103\u021bii pentru erorile din codul deschis | ProHoster","description":"James Bottomley de la IBM Research, care se ocup\u0103 de subsistemele SCSI \u0219i PA-RISC \u00een nucleul Linux \u0219i care a condus anterior comitetul tehnic al Linux Foundation, a propus o solu\u021bie pentru problema cu.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/predlozhenie-po-perekladyvaniyu-otvetstvennosti-za-oshibki-v-otkrytom-kode","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043f\u043e \u043f\u0435\u0440\u0435\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u043d\u0438\u044e \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u043a\u043e\u0434\u0435 | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u043c\u0441 \u0411\u043e\u0442\u0442\u043e\u043c\u043b\u0438 (James Bottomley) \u0438\u0437 \u043f\u043e\u0434\u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u044f IBM Research, \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0439 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u044b SCSI \u0438 PA-RISC \u0432 \u044f\u0434\u0440\u0435 Linux \u0438 \u0440\u0430\u043d\u0435\u0435 \u0432\u043e\u0437\u0433\u043b\u0430\u0432\u043b\u044f\u0432\u0448\u0438\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043a\u043e\u043c\u0438\u0442\u0435\u0442 Linux Foundation, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/predlozhenie-po-perekladyvaniyu-otvetstvennosti-za-oshibki-v-otkrytom-kode","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-12T13:10:14+00:00","article:modified_time":"2023-12-12T13:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112162","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112162"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112162\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"