@ariadne there are multiple projects in Germany for stuff like that: https://www.firemon112.de/ and https://thot-rescue.com/de/index.html both have been supported by public money grants.

@fluepke da gabs vor ner Weile neue Regelungen zum Kauf von Produkten mit digitalen Elementen in Deutschland, afaik gibts da ab demnächst auch EU-Regeln zu. Zumindest erstere könnten schon einschlägig sein, aber ist bisher, soweit mir bekannt, noch nicht so recht getestet.

@nord oh, ihr seid inzwischen auch in HH? Da hat Dataport seine HW-„Verwertung“. Da können gemeinnützige Organisationen durchaus größere Mengen Geräte als Spende anfragen. Das Prozedere scheint mir bisher nur hier dokumentiert: https://media.frag-den-staat.de/files/foi/991943/20250415-bescheid-332097_geschwaerzt.pdf (Antwort auf: https://fragdenstaat.de/anfrage/anfrage-zur-nachhaltigkeit/)Grundlage für die Anfrage war: https://www.dataport.de/unternehmen/nachhaltigkeit/

@fay59 in the end they are trying to do with the big stick what others have tried to do before (US CISA and the White House’s document about memory safety): Improving IT security and general quality to a minimum level acceptable according to its role in society. Or in other words: We as IT people have not professionalized ourselves and will find out for our continual fucking around.
For their determination: Ask around about how forgiving they are about the DMA. Apple probably should be involved.

@fay59 from what i’ve heard, it looks a bit like the EU commission officers, being highly annoyed by the fuck around and find out attitude of software companies like Microsoft, Crowdstrike and similar, remebered that they can write the rules for stuff. And are determined to make it stick.
Regardless of the fact that „What is an OS“ is still a research question, they gave these standards people three months for a legally binding technical definition. And they are not stopping nor slowing down.

@fay59 the current version is not final, but a work in progress up for public participation. I wouldn‘t be so sure. The Cyber Resilience Act is EU law and will apply to all products sold in the EU after it comes into force (afaik late 2027).
And the standards are only technical requirements to make compliance with the actual requirements (https://eur-lex.europa.eu/eli/reg/2024/2847/oj/eng#anx_II) easier. And if you don’t comply, you are liable for any damages, without the option to limit that liability in eula or similar.

@siguza @never_released @fay59 I wouldn’t be too pessimistic or unconcerned. Depending on what the new cra standards require (basically your software needs a CE-mark for the eu market) this could happen sooner than later. Draft for operating systems: https://labs.etsi.org/rep/stan4cra/en-304-626/-/blob/main/EN-304-626.md?ref_type=heads#:~:text=Use%20case:%20laptop%2C%20phone%2C%20other%20devices%20at%20higher%20risk%20of%20malicious%20code%20executionMitigation:%20Use%20software%20or%20hardware%20memory%20tagging%20feature%20for%20memory%20allocations..

@merlin @Minionflo been using it for at least a year for matrix media storage. Works without any flaw or oppsie.

@masek @Cykelsok seit dem ich davon las, überlege ich, wo man die Idee, die Schleswig-Holsteinischen Bahnstrecken zu verstaatlichen (auf Landesebene) am Besten platzieren könnte. Vorteil: Die Streckenendgelte könnten in Neu- und Ausbau im Land investiert werden, statt in der DB zu versickern. Und kein Geld vom Bund gibts jetzt schon s. vorherige Meldungen zum Bundeshaushalt.