Programming

17350 readers

313 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Follow the programming.dev instance rules
Keep content related to programming in some way
If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]

founded 1 year ago

MODERATORS

[email protected]

159

Fast memory vulnerabilities, written in 100% safe Rust (github.com)

submitted 8 months ago by [email protected] to c/[email protected]

15 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 45 points 8 months ago (3 children)

That software license is incredible

[–] [email protected] 38 points 8 months ago

The author has absolutely no fucking clue what the code in this project does. It might just fucking work or not, there is no third option.

lmfao

[–] [email protected] 15 points 8 months ago (1 children)

I mean, pretty sure legally that that'd be very bad for whoever makes contributions-

This is the exact reason why I've released this [license] with GLWT license and I have no intention to spend my time discussing or change the license. Try to figure out how you can use it on your project. Or don't use it at all. I don't care. Good luck.
—Ahmed Shamim, 2021

[–] [email protected] 5 points 8 months ago* (last edited 8 months ago) (2 children)

The sentence "IN NO EVENT SHALL THE AUTHORS BE LIABLE" doesn't fly where I live. You don't get to choose wether or not you're liable - the law decides who is liable. This thing is about as enforceable as those sovereign citizen license plates and would get the same reaction in a court room.

Plenty of other commonly used licenses have the same issue unfortunately and and the biggest nightmare (at least in my country) is laws against "misleading" or "deceptive" conduct. Telling someone you're not liable for anything is blatantly misleading/deceptive.

Even if your software works perfectly, you are still breaking the law... a victimless crime that would normally fly under the radar or result in a "cut that shit out" order by the court... but it'll really hurt your case if there is actually a victim (e.g. if your software has a bad security flaw that caused real damage).

That's why organisations with big legal teams tend to choose licenses like Apache 2.0. Ones with language like "unless required by applicable law (such as deliberate and grossly negligent acts)".

[–] [email protected] 8 points 8 months ago (1 children)

What country is that?

[–] [email protected] 2 points 8 months ago* (last edited 8 months ago)

Most of them with any sort of cybersecurity law

[–] [email protected] 3 points 8 months ago (1 children)

At least nobody would actually want to infringe on the rights of this code.

[–] [email protected] 1 points 8 months ago

@Aatube Oh I wouldn’t be so sure… we’ve all had those colleagues and vendors where we think they’d import something like this to make our lives miserable ;)

@programming

[–] [email protected] 4 points 8 months ago

GLWTSPL is my new favorite license lol