This Is Pretty Alarmist

> This is just typical corporate legal department "we do not want to cross the line and also don't want to come within 10,000 feet of the line" alarmism.

First, a caveat: I work full-time for the Linux Foundation. I'm speaking for myself here, though.

The cited article *did* lay out a case where they don't think there's a problem: "a one-way receipt of source code via an SDN therefore should be exempt from OFAC sanctions." In many cases that's all that's happening anyway.

Please note that the LF has lawyers who are quite smart & have a lot of understanding on these issues (it's literally their job). If they say "two-way communication discussing the patch..." is riskier, I would take that warning seriously. These aren't people who play being a lawyer on Reddit; they *are* lawyers, posting general advice after looking deeply at the issue.

You may think it alarmist, and it's your right to think that. It's *definitely* your right to examine these laws, and if you think they're bad, argue for changing them. But these are laws with teeth, and to my non-lawyerly eyes this seems like reasonable advice on how to comply with the current laws as they exist today.