[zaroth]

This is obviously a completely useless carve out. The EU will define something as commercial based on even having paid support or enterprise features, so if there’s any company behind the open source code at all, you can be sued by your free users picking it up and misusing it.

So this seems like a really great way to stop any software from being released into Europe.

[pjmlp]

As if US and Commonwealth countries aren't also doing the same.

[zaroth]

TFA specifically states that US has gone in a totally different direction than the EU on this?

[pjmlp]

Here are some news then,

https://www.cisa.gov/cybersecurity-performance-goals

https://cybersecurity-centre.europa.eu/news/cisa-and-enisa-e...

https://www.cisa.gov/news-events/news/cisa-and-fbi-release-p...

https://www.whitehouse.gov/oncd/briefing-room/2024/03/27/rea...

[beej71]

I was wondering if the EU decides to do this first, maybe it'll be such a fiasco even the US will be sensible enough to not follow in their footsteps.

[rstuart4133]

> This is obviously a completely useless carve out.

I'm a Debian Developer. To me, that carve out is a major comfort. I doubt I'm alone. I expect it is viewed as very useful by everyone who develops open source.

Business who sell open source - well yeah, it probably is useless to them. That's kinda the point.