> Where are the dozens of European tech winners? Seriously. They have the best education system in the world, strong social safety nets, cheap healthcare, and great lifestyles. Why have they not created innovative technologies that turn into worldbeating companies?
Maybe that is because there are US companies competing in the same space that are not held to the same regulations because of treaties like this one. It's hard to build a competitor to AWS, not just technically (although it very much is), but also business-wise - who would choose the unproven startup if you can go with the accepted best practise? By forcing US companies to equal footing, you give European startups more of chance. (Which is a Chinese playbook, too.)
IANAL, but GPL3 is compatible with selling the software (see Linux distros). However, it forces you to open up the complete source code and it allows the users to fork and recompile it as they see fit (but they must also open up their changes if they distribute it).
No, defense in depth is a best practice because you assume that each layer can fall. It is more practical to have many layers that are very secure than to have one layer that has to be perfectly secure.
They say this about sports, which is (usually) a zero-sum game: If I'm attacking, no matter how badly, my opponent cannot attack at all. Therefore, it is preferable to be attacking.
In cyber security, there is no reason the opponent cannot attack as well. So, my red team is attacking is not a reason that I do not need defense, because my opponent can also attack.
Maybe that is because there are US companies competing in the same space that are not held to the same regulations because of treaties like this one. It's hard to build a competitor to AWS, not just technically (although it very much is), but also business-wise - who would choose the unproven startup if you can go with the accepted best practise? By forcing US companies to equal footing, you give European startups more of chance. (Which is a Chinese playbook, too.)