From: fungi@yuggoth.org 
  
 On 2025-10-05 08:51:02 +0200 (+0200), Andreas Tille wrote: 
 [...] 
 > The advice concerns how Debian should handle potential copyright 
 > violations €€€ cases where code has been published without the right 
 > to do so. As you perfecctly know we do our best to avoid this. Its 
 > just for cases if something might have slipped through. In the 
 > very improbable case that someone claims the distribution of some 
 > code may be unlawful, Debian needs to react quickly to minimize 
 > legal risks. The 48-hour timeframe mentioned is not a hard rule 
 > but an example I came accross of what might be considered €€€speedy€€€ 
 > action in a potential court case; the key point is that we must 
 > not knowingly continue to distribute code that infringes 
 > copyright. 
 [...] 
  
 As SPI is the "legal person" representing the Debian project, such 
 cases would typically be notified by physical mail to SPI's retained 
 counsel who would then review the claims and provide recommendations 
 for further action. The turn-around time for this sort of thing 
 could easily be weeks, so expecting the project to then react 
 comparatively instantaneously on counsel's suggested course is 
 unrealistic. I'm not a lawyer, but from what I've seen courts tend 
 to understand that these things take time to address and if you can 
 demonstrate good faith/best effort compliance that's usually enough. 
  
 If there is truly concern, I recommend reaching out to get feedback 
 from counsel; it's what they're for. 
  
 [Not replying in my capacity as a director/officer but merely as an 
 interested community member who doesn't want to see the project 
 waste time and energy unnecessarily.] 
 -- 
 Jeremy Stanley 
  
 -----BEGIN PGP SIGNATURE----- 
  
 iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmjie3JfFIAAAAAALgAo 
 aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 
 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ 
 WCmgxw//TY5Jin/DTfvd3WNqBPv5N7VXxHkXKtk798TLaIV7A9J8yzgjHZXJuBfG 
 nVLtuiiXWS8UNQ6KT1JSHOYd5M4OpUSyOSJGnOnS38kda4Cd3pfI+OXlhJZ4Thp9 
 pHA3ubZHztnqjJHH3FcOUL8HaxJL8S9AgCfVXYeEe9Htg+gUBHKfLLWsb61jGRhd 
 WRCaX6QrJ6aqhPzrrvlpS0kxy89v30TstfoCMCvEscxvicgPn2yeyT/RPmzFiroO 
 unyvM/mJt++RLhC/SHLTVR4OyETIxx9mZltr0o27CeYdTVpMCnH1dQXYRprO+dEW 
 TEEyFNGMbEfxkpVJiJVpWB+lG4xdycafqA4mGOsujbr0aJlc9YitrfAjmj3pStft 
 02YA8xpJGtQ22FZ5cmVx9YWBF+VLFtfOgrvfSeVlaWfQ4RfNc8T1KRXbrpyVtF7O 
 j7uARbaDSmfP9u9yjtbWM1mMpr+MoCGfy4Hj6S5qEY32S3QlyRxtF7KOZRCqv9dw 
 t7uHbbqxMXMU2EM/AxiBpzVyqZYXkoySuogsqzR+ipYl00vWA0ic2VCLttchxlBT 
 0skVw3xxceRho3Syk1Z43NBv52AJKHqu1Y0+f1jzb/ltXcVsOx5DSXf6MxkhZmKp 
 emcMhtKmBzDVdMJGz7f3ryDK8m31U4VyZDN4nKM/kOS59k6uWC0= 
 =2kmJ 
 -----END PGP SIGNATURE----- 
  
 --- SoupGate-Win32 v1.05 
  * Origin: you cannot sedate... all the things you hate (1:229/2)