{"id":112550,"date":"2023-12-28T15:10:16","date_gmt":"2023-12-28T13:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act"},"modified":"2023-12-28T15:10:16","modified_gmt":"2023-12-28T13:10:16","slug":"razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","title":{"rendered":"Dezvoltatorii Debian au publicat o declara\u021bie legat\u0103 de proiectul de lege Cyber Resilience Act","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Au fost publicate rezultatele votului general (GR, rezolu\u021bie general\u0103) al dezvoltatorilor proiectului Debian, care particip\u0103 la \u00eentre\u021binerea pachetelor \u0219i la men\u021binerea infrastructurii, \u00een cadrul c\u0103ruia a fost aprobat textul declara\u021biei cu privire la pozi\u021bia proiectului fa\u021b\u0103 de propunerea de legisla\u021bie din Uniunea European\u0103 numit\u0103 Cyber Resilience Act (CRA). Proiectul de lege introduce cerin\u021be suplimentare pentru produc\u0103torii de software, menite s\u0103 stimuleze men\u021binerea securit\u0103\u021bii, s\u0103 dezv\u0103luie informa\u021bii despre incidente \u0219i s\u0103 remedieze rapid vulnerabilit\u0103\u021bile pe parcursul ciclului de via\u021b\u0103 al produsului. <\/p>\n

\u00cen cazul nerespect\u0103rii cerin\u021belor, se preconizeaz\u0103 aplicarea unor amenzi care pot ajunge la 15 milioane de euro sau 2,5% din cifra de afaceri anual\u0103 a companiei. Dup\u0103 adoptarea proiectului de lege, produc\u0103torii vor fi obliga\u021bi s\u0103 furnizeze mijloace pentru livrarea corec\u021biilor de vulnerabilit\u0103\u021bi, s\u0103 efectueze evalu\u0103ri ale riscurilor de securitate \u00eenainte de a lansa produsul pe pia\u021b\u0103, s\u0103 efectueze teste de securitate a produsului (pentru sistemele critice se introduce un audit extern obligatoriu), s\u0103 remedieze vulnerabilit\u0103\u021bile pe parcursul \u00eentregului ciclu de via\u021b\u0103, \u0219i s\u0103 transmit\u0103 informa\u021bii despre incidentele de securitate \u00een termen de 24 de ore de la descoperirea problemei. <\/p>\n

Cu toate c\u0103, judec\u00e2nd dup\u0103 tendin\u021bele emergente, proiectul de lege va afecta doar produc\u0103torii de software comercial, comunitatea este \u00eengrijorat\u0103 de impactul s\u0103u negativ asupra ecosistemului dezvolt\u0103rii software-ului open-source \u0219i consider\u0103 proiectul de lege ca un factor care fr\u00e2neaz\u0103 promovarea proiectelor deschise \u0219i \u00eempiedic\u0103 dezvoltarea software-ului liber ca mi\u0219care interna\u021bional\u0103. Companiile care dezvolt\u0103 produse bazate pe proiecte interna\u021bionale deschise sau care utilizeaz\u0103 biblioteci open-source vor fi responsabile pentru problemele de securitate \u0219i pentru corectarea necorespunz\u0103toare a vulnerabilit\u0103\u021bilor din cod, chiar dac\u0103 acest cod a fost scris de entuzia\u0219ti din alte \u021b\u0103ri. Se estimeaz\u0103 c\u0103 apari\u021bia unor riscuri suplimentare pentru afaceri va reduce atractivitatea cre\u0103rii de software pe baza codului deschis. <\/p>\n

\u00cen acela\u0219i timp, consecin\u021bele legale pot afecta \u0219i proiectele independente care includ cod de la produc\u0103tori de produse comerciale. De exemplu, apare incertitudinea \u00een ceea ce prive\u0219te responsabilitatea \u00een cazurile \u00een care codul deschis dezvoltat de o companie comercial\u0103 poate fi transferat \u00een proiecte non-profit externe \u0219i utilizat \u00een distribu\u021bii Linux. <\/p>\n

Proiectul de lege introduce responsabilitate juridic\u0103 pentru nerespectarea cerin\u021belor de siguran\u021b\u0103, ceea ce contrazice obliga\u021biile sociale ale Debian de a distribui software pentru orice scopuri \u0219i f\u0103r\u0103 restric\u021bii. Debian nu urm\u0103re\u0219te implicarea codului \u00een proiecte comerciale, angajarea dezvoltatorilor \u0219i sursele de finan\u021bare pentru dezvolt\u0103rile incluse \u00een distribu\u021bie, de aceea impunerea cerin\u021belor stipulate \u00een proiectul de lege cre\u0219te riscurile juridice \u00een utilizarea distribu\u021biei. <\/p>\n

Exist\u0103 riscul ca proiectele upstream s\u0103 \u00eenceteze s\u0103 ofere codul lor din cauza temerilor de a c\u0103dea sub inciden\u021ba CRA \u0219i a aplic\u0103rii sanc\u021biunilor corespunz\u0103toare. CRA poate, de asemenea, s\u0103 complice procesele de transmitere a comunit\u0103\u021bii codului deschis \u2014 pentru a oferi codul, dezvoltatorul va trebui s\u0103 evalueze posibilele consecin\u021be legale. \u00cen plus, proiectul de lege reduce atractivitatea procesului deschis de dezvoltare, deoarece activitatea se desf\u0103\u0219oar\u0103 la vedere \u0219i transparent pentru to\u021bi, iar codul poate fi folosit \u00een procesul de dezvoltare, ceea ce permite aplicarea cerin\u021belor CRA pe parcursul lucrului la produs, \u00een timp ce software-ul proprietar este dezvoltat \u00een spatele u\u0219ilor \u00eenchise \u0219i intr\u0103 sub inciden\u021ba legii dup\u0103 lansarea final\u0103. <\/p>\n

Dezvoltatorii Debian fac apel s\u0103 se exclud\u0103 complet procesul deschis de dezvoltare de sub inciden\u021ba CRA \u0219i s\u0103 se aplice legea doar produselor finale. De asemenea, se propune ca cerin\u021bele CRA s\u0103 nu se aplice produselor antreprenorilor individuali \u0219i micilor \u00eentreprinderi, deoarece acestea nu pot respecta toate cerin\u021bele stabilite de CRA \u0219i vor fi nevoite s\u0103 \u00ee\u0219i \u00eenchid\u0103 afacerea. <\/p>\n

Declara\u021bia men\u021bioneaz\u0103, de asemenea, caracterul \u00eendoielnic al cererii de transmitere c\u0103tre Agen\u021bia European\u0103 pentru Securitatea Re\u021belelor \u0219i Informa\u021biilor (ENISA) a informa\u021biilor despre problemele de securitate \u00een termen de 24 de ore de la identificarea problemei sau primirea informa\u021biilor despre o vulnerabilitate. Centralizarea informa\u021biilor despre toate vulnerabilit\u0103\u021bile nesolu\u021bionate \u00eentr-un singur loc poate duce la probleme semnificative pentru to\u021bi utilizatorii \u00een cazul unei scurgeri de informa\u021bii, al transmiterii datelor c\u0103tre servicii secrete sau al compromiterii ENISA.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u0431\u0449\u0435\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f (GR, general resolution) \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Debian, \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d \u0442\u0435\u043a\u0441\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u0432\u044b\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u0432 \u0415\u0432\u0440\u043e\u0441\u043e\u044e\u0437\u0435 \u0437\u0430\u043a\u043e\u043d\u043e\u043f\u0440\u043e\u0435\u043a\u0442\u0430 Cyber Resilience Act (CRA). \u0417\u0430\u043a\u043e\u043d\u043e\u043f\u0440\u043e\u0435\u043a\u0442 \u0432\u0432\u043e\u0434\u0438\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0441\u0442\u0438\u043c\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u0445 \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112550","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dezvoltatorii Debian au publicat o declara\u021bie legat\u0103 de proiectul de lege Cyber Resilience Act | ProHoster","description":"Au fost publicate rezultatele votului general (GR, rezolu\u021bie general\u0103) al dezvoltatorilor proiectului Debian, care particip\u0103 la \u00eentre\u021binerea pachetelor \u0219i a infrastructurii, \u00een cadrul c\u0103ruia a fost aprobat textul declara\u021biei.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Debian \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0435, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0435 \u0441 \u0437\u0430\u043a\u043e\u043d\u043e\u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Cyber Resilience Act | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043e\u0431\u0449\u0435\u0433\u043e \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u044f (GR, general resolution) \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Debian, \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0432 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0435\u043d\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0431\u044b\u043b \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d \u0442\u0435\u043a\u0441\u0442 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0441.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/razrabotchiki-debian-opublikovali-zayavlenie-svyazannoe-s-zakonoproektom-cyber-resilience-act","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-28T13:10:16+00:00","article:modified_time":"2023-12-28T13:10:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112550"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112550\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}