[gkoberger]

I don't want to defend this company, but my company (a dev tool used by many other companies) receives a handful of these a day. It's almost the exact same email, and they're just mass-sending them. It's not personal, and it's pretty standard.

The tone feels off if you assume a human wrote it. But that's only because it's a form letter their legal department wrote for them to send off. They probably collected "dependencies" from the entire company (and someone wrote "curl"), and sent a mass email.

If you just reply with a simple "We're unaffected!" (or ignore them), you'll never hear from them again.

[throw8932894]

Better to reply "yes, we are affected. Your support contract has expired, please renew at XYZ".

[Jiro]

If there's no expired support contract, that would be making a false statement of fact in order to get someone to sign a contract and pay me money. It's plausible that that would be fraud.

Of course it's also plausible that that's not fraud at all. But I have no way to know for sure unless I ask a lawyer, which needless to say I wouldn't do. And if it turns out that it is fraud, well, the legal department of Fortune 500 companies tends to be pretty humorless.

[wombatpm]

Just say that "there is no active support contract for your company at this time."

[throw8932894]

Opensource license is a form of contract. I provide free 5 minute support to new users. And good luck suing me if I am not even US/EU based.

Departments (small managers) are authorized to spend small money without approval, lets say up to 200 euro/month. If they send this type of emails, someone ass is on fire. They will DO spend it just to get legal green light.

Anyway, I do not see reason to hold back, just because I am open source developer.

[aahortwwy]

Why would you lie about a contract being expired when you could just say, "this software is provided without warranty (see license) - I offer support services starting at $X/day" and likely see the same result?

[throw8932894]

A already have enough work on $X/day. If they need to be compliant and treat me like their corporate drone, I am happy to comply. I can charge X*5 and spend one week working on my opensource project.

This is basic marketing. Airbnb, Facebook, Amazon etc are allowed to do shady stuff, but single contractor should be clean as lilium?

[gkoberger]

So... lie to someone who is making an effort to protect customer data in order to steal money?