Re: [hrpc] FCC's new Internet regulatory gambit and human rights

Software regulation could be done in various ways.

Software needs to be hosted by an entity or self-hosted. Most of the hosts
are large corporations that can be regulated to act as App Platforms and
issue "black box warnings" when the commit hash of open source software is
not certified by some third party they recognize. This could apply to
manufacturers of things as well as cloud hosts. This would decouple the job
of certification from the open source community itself.

US healthcare regs do a version of this. The patient has a "right of
access" to their own data and can bring a client they compile from source.
The resource serving institution, typically a hospital, may not trust the
signature associated with the client but all they can do is issue a black
box warning to the patient that brings the client.

Adrian

On Thu, Mar 28, 2024 at 11:39 AM Tony Rutkowski <
trutkowski.netmagic@gmail.com> wrote:

> Bill,
>
> It is not just the "smug Eurocrats."  It appears obvious that the
> equally smug FCC-crats have been working closely with the Eurocrats, and
> in some respects, the FCC provisions are even more onerous and expansive
> that Europe's.  The FCC-crats also appear to be attempting to make its
> "voluntary" scheme effectively mandatory by hitching a ride on the
> mandatory EU regulations via a mutual recognition agreement.
>
> --tony r
>
> On 3/28/2024 11:12 AM, Bill Woodcock wrote:
> >> On Mar 28, 2024, at 15:54, Vittorio Bertola <vittorio.bertola=
> 40open-xchange.com@dmarc.ietf.org> wrote:
> >> The risk of underfunded, volunteer-based software projects used at
> large scale is just not socially bearable any more, they think; someone
> must take liability for their security, which needs to be based on some
> kind of standard practices.
> > My prediction: If this actually goes where the smug Eurocrats intend,
> they will congratulate themselves for having solved the problem.
> Meanwhile, productive European open-source authors will no longer be able
> to afford the liability of doing what they do, and will either have to
> stop, or publish from legal entities in the US, where nobody ever has to
> answer for bad software, ever.  Because, you know, then Google and
> Microsoft and Facebook would face liability, and the USG exists to prevent
> that.
> >
> >                                  -Bill
> >
> >
> > _______________________________________________
> > hrpc mailing list
> > hrpc@irtf.org
> > https://mailman.irtf.org/mailman/listinfo/hrpc
>
> _______________________________________________
> hrpc mailing list
> hrpc@irtf.org
> https://mailman.irtf.org/mailman/listinfo/hrpc
>