开源社用户8870
拯救开源:《网络韧性法案》即将带来的悲剧
输入“/”快速插入内容
拯救开源:《网络韧性法案》即将带来的悲剧
拯救开源:《网络韧性法案》即将带来的悲剧
用户88702023年8月13日修改
SAVE OPEN SOURCE: THE IMPENDING TRAGEDY OF THE CYBER RESILIENCE ACT
发布者：Apache 软件基金会，2023 年 7 月 18 日
作者：德克-威廉·范古利克 (Dirk-Willem van Gulik)，Apache 软件基金会公共事务副总裁
By: Dirk-Willem van Gulik, VP, Public Affairs, ASF
翻译者：刘天栋 Ted
TLDR；如果觉得本文太长者，可以只看摘要
包括开源软件在内的软件正在受到全世界的监管。这篇冗长的博文解释了欧盟《网络韧性法案》的背景、优点、缺陷以及对开源软件可能产生的负面影响。此外，它还解释了该法案在欧盟系统中的复杂流程，以帮助人们了解时间表和如何推动改变。
Software, including open source, is becoming regulated the world over. This lengthy blog post explains the background to the Cyber Resilience Act in the European Union, what is good, its flaws and the likely negative impact on open source. And it also explains the arcane process by which it moves through the EU system, to help understand the timeline and how to make a change.
如果您需要更多的口头介绍，Eclipse 的 Mike Milinkovich 提供了一个非常新颖、清晰的演示，涵盖了相同的内容。如果您更喜欢简短的行动呼吁，那么不妨试试 GitHub、CNLL（法语内容）、Linux 基金会或更广泛的行业响应。
译者注：
•
一个非常新颖、清晰的演示 Update on the European Cyber Resilience Act：https://www.youtube.com/watch?v=AmsM5_5QO5A
If you are looking for a more verbal introduction – Mike Milinkovich at Eclipse gave a very up-to-date and lucid presentation that covers the same ground. If you are more into short calls to action – then try GitHub, CNLL (in French), the Linux Foundation, or the more comprehensive response of the wider industry.
背景
Background
虽然与其他大型行业和部门相比，IT 行业的规模还很小，但在过去的几十年里，它已成为社会的关键。现在，在新闻中经常可以看到软件和 IT 行业的大型事件。而且，更常见的是由某种灾难引发的故事：配置错误、漏洞或显然太容易 "进入" 的犯罪分子和国家行为。现在，不良的 IT 实践也影响到了主要行业，从能源运输、制造业到金融业，再到民主进程和治理良好的政府。
Although the IT industry is still small compared to other large industries and sectors, over the past decades it has become crucial to society. It is now common to see large events in the software and IT industry in the news. And, more often than not, it’s a story triggered by some sort of disaster: a misconfiguration, bug, or criminals and state actors that “got in” apparently too easily. With poor IT practices now also affecting the major industries, from energy transport to manufacturing to finance to democratic processes and good government.
正因为如此，社会和各种管理机构当然也注意到了这一点，因此，世界各地都在制定各种软件管理条例和立法。
Because of this, societies and various governing bodies have certainly taken notice and, as a result, around the world, all sorts of software regulation and legislation are being prepared.
历史
History
以工程史为例，这种监管是再正常不过的结果。19 世纪末，机械行业取得了惊人的发展，这在一定程度上要归功于蒸汽机的发明。但随着这一行业的发展，蒸汽锅炉爆炸事故也随之增多。这些事故通常会夷平半个城镇。
Using engineering history as an example, such regulation is a perfectly normal result. In the late 1800s, the mechanical industry saw incredible growth thanks, in part, to the invention of the steam engine. But as this industry grew; so did the number of accidents with exploding steam boilers. Often flattening half of a given town.
1865 年，蒸汽船 Sultana 号发生爆炸，造成 1,167 人丧生。因此，美国锅炉制造商协会（以下简称 ABMA）成立，开始对该行业进行自律。经过数百次此类爆炸，以及 1905 年在波士顿一家鞋厂发生的一次代价特别高昂的爆炸，政府才开始采取干预政策。
After the explosion of the steamship Sultana in 1865, which saw 1,167 people killed, pressure was placed on the industry in the United States. This resulted in the creation of the American Boiler Manufacturers Association (ABMA) to start self-regulation of the industry. It took several hundreds of such explosions; and a particularly expensive one in 1905 at a Boston shoe factory for the intervention of government policies to come into being.