Seeing how codeberg is FOSS only, I’m not suprised. Vibe-coded projects is a HUGE legal trap considering licensing. And seeing how it’s based in Germany (notorious about siding with license owner against regular individuals) it only makes sense
They hand it off to other companies that specialize in auditing and overseeing the hack resolvement. If their partner company decide, that it’s worth paying. Then they pay.
If the partner company decides to try and negotiate, they can I guess… Hard to say, never saw how insurance plays out when a true hack occurs.
There is insurance for ransomware. Most companies I know, has bought it (surprisingly popular). I’m not surprised that the companies would be willing to pay
I doubt it would be of any use. Most companies underfinance IT and security, while CISO just writes “rules” on how things should be, instead of overseeing actual hardening.
CEOs on the other hand being financially or criminally responsible, may lead to something.
At least the EU NIS2 directive has the right idea about it
What? The point I was trying to make is that AI generated content is going to be treated as CC licensed. It is difficult to incorporate under other FOSS projects. Mostly considering that it doesn’t exactly distinguish between code, library, binary and patents. It’s simplier to avoid it altogether if your primary mission is FOSS
Considering your comment about verification of authorship, it’s likely to be treated the same as it is now. You are the author, unless proven otherwise. And you are right. Even if you are the author and wrote every single code yourself, you can infringe on someones paten