Hacker News new | past | comments | ask | show | jobs | submit
still_grokking | on: Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
> Really, this profession has become a complete clown show.

Always has been because there is so far zero liability for anything someone programs and distributes commercially. That's the single root cause. If not that software wouldn't be in general such major shit show. What we have is the result of being allowed to throw out even the most toxic shit out without any consequences if it causes damage, no mater how large the damage is. Software companies caused so far over the decades likely hundreds of billions, or even a few trillion damages in sum, yet nobody responsible ever got the bill. It's wild west—since now over 60 years. This has to stop finally!

Let's see where things will move as soon as we have regular product liability for software:

https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=legissum...

Just a few days left! Looking forward.

rixed | parent | next
That, and NIS2. Looks like a good trend, hopefully it's not just protectionism.
still_grokking | root | parent
Well, if something than it's "anti-protectionism".

This is going to cause some major argument between the EU and the US, maybe even a trade war. Trouble is already underway:

https://www.reuters.com/legal/government/us-lawmakers-urge-t...

Despite that I also think that this is the right and long overdue move on the EU side. We need to break the basic pattern that nobody cares as long as the responsible effectively never get the bill when they mess up.

Software is "Unsafe at Any Speed" [ https://en.wikipedia.org/wiki/Unsafe_at_Any_Speed ] to bring a striking analogy — even we have since about 60 years the tech to build software which provably (in the mathematical sense) matches its specification. Still what you have on the market is utter garbage, and instead of getting better it gets currently actually worse with lowering the garbage quality level even more with "AI" slop. That EU legislation could become the escape hatch; that's why I'm looking forward.

duskdozer | parent
I'm having trouble understanding what effects that directive could have. Liability under what circumstances and to what degree?
still_grokking | root | parent
It's the biggest fundamental change which ever happened in how software is treated legally. This is a revolution!

Under the new legislation software products become regular products; there is no liability exception any more.

If you commercially distribute defective products to end user you're in general liable for the damages these defective products cause. This now includes pure software just as any other (physical) product on the market.

If you don't know how product liability generally works in the EU, and what this means for software see here:

https://cms.law/en/int/publication/the-new-eu-product-liabil...