Debian or Arch or Ubuntu never ask for my confirmation ?
Example :
You acknowledge that openSUSE Leap 15.3 is subject to the U.S. Export Administration Regulations (the “EAR”) and you agree to comply with the EAR. You will not export or re-export openSUSE Leap 15.3 directly or indirectly, to: (1) any countries that are subject to US export restrictions; (2) any end user who you know or have reason to know will utilize openSUSE Leap 15.3 in the design, development or production of nuclear, chemical or biological weapons, or rocket systems, space launch vehicles, and sounding rockets, or unmanned air vehicle systems, except as authorized by the relevant government agency by regulation or specific license; or (3) any end user who has been prohibited from participating in the US export transactions by any federal agency of the US government. By downloading or using openSUSE Leap 15.3, you are agreeing to the foregoing and you are representing and warranting that You are not located in,under the control of, or a national or resident of any such country or on any such list. In addition, you are responsible for complying with any local laws in Your jurisdiction which may impact Your right to import, export or use openSUSE Leap 15.3. Please consult the Bureau of Industry and Security web page www.bis.doc.gov before exporting items subject to the EAR. It is your responsibility to obtain any necessary export approvals.
BCsven ( @BCsven@lemmy.ca ) 38•2 months agoIts a CYA for SUSE. Certain technologies aren’t permitted to be shared outside of USA unless you go through the ETAR and assign if it commerically restricted/unrestricted, etc. If you are in USA you are bound by this anyway, even without a EULA.
They don’t know what you may install or transfer, even though it is opensource and you could download in another country.
We get hung up with this at work. We may have a software issue and send to USA parent company for review, they then need to know if the data represents a certain class so they can direct where (country) the software review or fix can be sent for evaluation.
There are obious things like military, but then there are commercial, transit infrastructure, aero, etc.
But it can get stupid, like the parent company received a CAD file I sent in as a demomstration of a display bug. i made a cube 4x4x4. the agent wanted to know what ETAR class it was, I argued it isn’t because it is a cube I made as demo only, they would not review till i choose a class from a long list. None applied. But I had to pick one for them to proceed. So somewhere some guy is doing data chain of custody on a cube. lol
In cases where it does fall into restricted commercial interest or other restrictions only a USA citizen can work on the data.
This agreement poses no restrictiona on you that aren’t already present if you are in the USA. And you shouldn’t need to worry, unless you actively are designing or stealing data to hand over to a USA “enemy” for purposes of espionage , war, weapons etc
kbal ( @kbal@fedia.io ) 24•2 months agoCertain technologies aren’t permitted to be shared outside of USA unless you go through the ETAR
I’m guessing you mean ITAR, if anyone’s having trouble searching for it.
BCsven ( @BCsven@lemmy.ca ) 11•2 months agoYeah sorry EAR, and ITAR.
Its a CYA for SUSE. Certain technologies aren’t permitted to be shared outside of USA unless you go through the ETAR and assign if it commerically restricted/unrestricted, etc. If you are in USA you are bound by this anyway, even without a EULA.
Thanks. Yes, I noticed that openSUSE mentions it takes its sources from SLES Enterprise version (and Fedora is connected with RedHat RHLE Enterprise USA) so I guess that’s where the corporate lawyers started chiming in :)
BCsven ( @BCsven@lemmy.ca ) 3•2 months agoYeah, exactly. with OpenSUSE having SUSE binaries I’m sure they legal mumbo jumbo just tranafers for covering all scenarios
socphoenix ( @socphoenix@midwest.social ) 36•2 months agoThis has to do with encryption protocols. Offhand my assumption is either they are trying to be extra cautious as the rules are incredibly complex, or they have a different algorithm included by default that would be subject to those rules.
Possibly linux ( @possiblylinux127@lemmy.zip ) English6•2 months agoCryptography is protected under the first amendment
A while back the NSA tried to argue it was a weapon and subject to weapons export restrictions but that was shot down in court
Ardor von Heersburg ( @ardorhb@discuss.tchncs.de ) 24•2 months agoI guess it’s because US laws likes to pretend to be in force world wide … which they are not.
catloaf ( @catloaf@lemm.ee ) English17•2 months agoBecause their lawyers said so. Canonical is based in England so their lawyers didn’t say so. I don’t know where the Debian project is based. OpenSUSE is based in Germany so I’m not sure why they feel the need, but I assume that’s what the lawyers said they need to do.
IsoKiero ( @IsoKiero@sopuli.xyz ) English4•2 months agoI don’t know where the Debian project is based.
Trademark and at least some copyright for the project is owned by an entity in the New York and Ian Murdoch who started the project was US citizen. But calling the whole project as USA based is wrong, it is based ‘on the internet’ as even the core team is spread across the globe.
ReversalHatchery ( @ReversalHatchery@beehaw.org ) English1•2 months agoOP says openSUSE changed hands many times since then
NaN ( @Bitrot@lemmy.sdf.org ) English13•2 months agoCheck out https://wiki.debian.org/USExportControl
GolfNovemberUniform ( @GolfNovemberUniform@lemmy.ml ) 12•2 months agoWhy don’t you use a distro that doesn’t have such terms?
ReversalHatchery ( @ReversalHatchery@beehaw.org ) English1•2 months agoIt seems it’s often unclear whether it does. A user under this post has linked Debian’s wiki page that writes about this, and they don’t have a definitive answer either, just pointers on how to make sure that you are safe
ILikeBoobies ( @ILikeBoobies@lemmy.ca ) 11•2 months agoTo avoid being sanctioned themselves
It’s helpful to follow if you want to deal with the US government
Possibly linux ( @possiblylinux127@lemmy.zip ) English11•2 months agoCode should be protected under the first amendment
Handles ( @halm@leminal.space ) English16•2 months agoSure, but again. That is only legally binding in US jurisdiction?
hangukdise ( @hangukdise@lemmy.ml ) 3•2 months agoOnly binding in the USA. Thoroughly ignored outside of it.
technocrit ( @technocrit@lemmy.dbzer0.com ) 3•2 months agoThere’s no free speech under capitalism.
Possibly linux ( @possiblylinux127@lemmy.zip ) English2•2 months agoKeep your Communist ideals out if this please
chalk46 ( @chalk46@kbin.social ) 10•2 months agooh yeah, I’m sure that’ll work 👍
about as effective as a mystical incantation 0x0 ( @0x0@programming.dev ) 5•2 months agoI thought OpenSUSE is German, so why would you export it?
The only rationale is that it ships with cryptography that’s made in 'murica and probably stored in US servers, hence the export warning.
openSUSE has German origins, but was bought in the past by Novell in USA, then went into other USA hands, and then it was sold to a Swedish company’s German sub division, and located in Luxembourg. https://en.wikipedia.org/wiki/SUSE_S.A.
0x0 ( @0x0@programming.dev ) 1•2 months agoAnd then they continued by not implementing the certified format correctly in Office anyway.
Enter the hefty fines. Like 5% of last year’s revenue.