> UK's Online Safety Act 2023 would require us to do a prohibitively complicated risk assessment for our service. We're talking reading through thousands of pages of legal guidelines.
> We're a volunteer operation and would likely be held responsible as individuals. There is talk of fines up to 18 million GBP which would ruin any single one of us, should they get creative about how to actually enforce this.
> Our impression is that this law is deliberately vague, deliberately drastic in its enforcement provisions, and specifically aimed against websites of all sizes, including hobby projects. In other words, this seems to us to be largely indistinguishable from an attempt to basically break the internet for all UK citizens.
> If we could afford to just hope for the best, we'd love to.
The way I understand this is that it's not feasible for them to assess how the legislation impacts them, so they would rather stay safe than risk having their lives destroyed.
actually, it would ruin all of them collectively should "they" get creative enforcing it.
Would you pay their legal fees if they are sued? It's easy to say when you don't have your future on the line.
[1] https://wikimediafoundation.org/news/2025/09/12/wikimedia-fo...
I'd say the right answer is to move/add a content addressed model/system for obtaining sources.
Isn't that almost what the nix file already is while being legal. Having a cache of all build files is not legal to do.
Having a content hash as (part of) the address is common way to this.
IPFS multihash is a well-known example. As opposed to HTTP.
https://github.com/magnet-linux/magnet-linux
Not really ready for prime time, but I think I have some interesting ideas there at least.
A distributed git object cache is what is really needed at the moment.
I suspect this law isn’t popular. Just the messaging of doing nothing is more unpopular. So it gets spun as this is popular.
The internet is full of dishonest "we've tried nothing and we're all out of ideas."
The real answer is to repeal this nonsense (IMHO as a non-UK citizen)
It as always a stupid idea, see recent discord leak of ID’s.