Slashdot Mirror


Click-Thru Licensing on Open Source Software?

Russ Nelson writes "At the July OSI board meeting last week, we approved the Academic Free License (think MIT/BSD/X11/Apache with a patent grant) and we sent four licenses back for reconsideration. Here's the hitch: we were asked to approve a license which includes a requirement for click-wrap. Read more to see why we're asking you about it. The submittor had already been asked if that requirement was a necessity. She said yes, because of various legal precedents. We consulted a few people and yes, it looks like a license without click-wrap is weaker at protecting your rights. So, folks, the lawyers are coming. The time is coming when you won't be able to distribute software unless you have presented the license to the user and their assent is necessary to access the software. Even free software. Our industry is maturing and we need to be more legally careful and rigorous. The question here is whether we should amend the Open Source Definition so that it is clear whether click-wrap licenses are allowable or not. We could go either way, but we want to hear from you first. Your opinions solicited, and engaged!" While I can understand some legal necessities are necessary in the software world, click-thru licenses have never, and will never, make sense to me. Maybe commercial software has soured me on the concept, but I dislike agreeing to something before I even get a chance to use it.

29 of 520 comments (clear)

  1. so what about non-gui's? by elzubeir · · Score: 3, Insightful

    I don't get it. Not only is this an incredibly annoying thing to have, it doesn't make sense on console-based apps. So what, if I want to run a given program I have to see the license and agree to it each time? Once? Twice? Will it ask me again if I'm SURE?

    I think this is a very silly idea. If the software is commercial and is a large application as well, I can understand that being there. But, mandating such a rule, and making it across the board (not case-by-case) is unthinkable.

    1. Re:so what about non-gui's? by monkeydo · · Score: 5, Insightful

      Nobody is saying click-through licenses would be required. The question is should they be allowable under the official Open Source definition.

      The OSI board doesn't force anyone to use a particular approved license on any given program. What they want to know is should they approved any license that requires assent before installing the associated program.

      In my mind this doesn't violate any of the other requirements of the Open Source Definition so I think it really matters more what is in the license than how it is presented. The questioner seems to be acknowledged the fact that the receiving party has to agree to the license for it to be valid, so I don't really understand the problem. The GPL (and any other open source license) can be violated just like commercial licenses. Instead of assuming the user agrees to the license make them say so if you want the extra legal protection. You might need it if you wind up in court.

      --
      Si vis pacem, para bellum
      The only thing more annoying than a Libertarian is an (un|mis)informed Libertarian
    2. Re:so what about non-gui's? by Buck2 · · Score: 2, Insightful

      Are you serious?

      You can edit the licensing in a GUI app using a hex editor.

      Use your head.

      --

      As my father lik@(munch munch)... ....
  2. Just a Case of CYA by reddywhipt · · Score: 4, Insightful

    It's horrible that we live in such a litigious society that people have to worry about giving something away for free.

    We've ratcheted down another couple of notches into the corporatization of everyday life.

    Jim Slattery
    Network Guy (MCSE)

    Thousands of candles can be lighted from a single candle, and the life of the candle will not be shortened. Happiness never decreases by being shared.
    - Buddha

  3. This is nuts by DaveTerrell · · Score: 3, Insightful

    In the event that a license is not legally binding (i.e. a GPL or BSD style license), the terms revert to the default, which is "All Rights Reserved", which is more restrictive than what is being granted by the GPL or BSD license.
    So taking advantage of those terms (creating derived works, redistributing, blah blah woof woof) indicates implied assent of the terms.
    Besides, the only time licenses have been held not legally binding have been when the software has been sold -- most free software is not sold, it is downloaded. Free Software vendors should be indicating the terms of the GPL (assuming some software is GPLed in their distribution) on the outside of the packaging, but even if they don't, again, the license is not restricting any of the rights you would normally have in a software sale so there is no need for prior assent.

    This is all crap until the courts rule on the applicability of licenses like this anyway. Free software licenses do not fall under the same category as normal closed licenses.

    1. Re:This is nuts by DaveTerrell · · Score: 4, Insightful

      dbt: Free Software vendors should be indicating the terms of the GPL (assuming some software is GPLed in their distribution) on the outside of the packaging, but even if they don't, again, the license is not restricting any of the rights you would normally have in a software sale so there is no need for prior assent.

      pmz: What if you are evaluating a software package based on the ability to redistribute it or reuse parts of it? Prior assent is essential no matter the license, because even the GPL restricts some rights as a compromise for allowing others.

      The GPL does not restrict any rights you, as a recipient of a copywritten work, already have. It does place requirements on you if you choose to exercise the rights of redistribution, modification, or creating derived works -- but those are rights that you do not have except as granted by the license, so the default assumption is that you cannot copy, redistribute, etc.

  4. Software licenses make no sense by Anonymous Coward · · Score: 2, Insightful

    Copyright (and patent) laws already protect "your rights". If something is not listed in either of those, then they are not "your rights" and you are not entitled to them. Why is any license necessary?

    There's a difference with the GPL etc., which are not EULAs but rather distrubution agreements that give the user rights, not take them away. No click-thru is needed for those because nothing else would give the user the right to distribute copyrighted software.

  5. Massive Overhaul? by P!Alexander · · Score: 4, Insightful

    Is it just me or would this require a massive re-working of the current Open Source system. How do you provide a user with a click-through interface on a tarball? Would you have to distribute source code through a binary just so that you could have an interface for the user to agree to the license? How would the package management/distribution software maintainers respond? How would Open Source OS distributers respond? Contact the maintainers for all pieces of software included in the distribution and get together to have an all-encompasing license?

    My personal favorite would be to build a system like Gentoo. It already takes forever to compile the software. But then to wait for the user to interact with each piece as it installs?

    Ridiculous. I agree that the Open Source software industry is evolving but I never saw it going in the direction of a massive beuracracy. One of the beautiful things about this software is that it can avoid all of that crap. The industry can turn on a dime. Would it be able to with a requirement like this?

  6. I'm suspicious of this... by wowbagger · · Score: 4, Insightful

    I'm suspicious of this, and here's why:

    How do you verify that I have indeed clicked-through the wrapper? I've oft seen people on /. saying "I didn't get the click-through because (insert complicated avoidance proceedure here) so it doesn't apply to me." What if I have a child click through?

    In short, how do you have a legally binding contract in the absence of a bidirectional communication that "... the party of the first part, being legally able to enter into a contract and freely entering into the contract, and the party of the second part, being legally able..." zzzzzzzz-snork! (Sorry, nodded off there...)

    I question whether click-wrap really improves the strength of the contract or not. I'd like to hear from a professional on this matter, however (Dr. Hawk? You reading this?)

  7. No. by Bruce+Perens · · Score: 3, Insightful
    I don't think so. And I'm not ready to accept your attorneys arguments without seeing them.

    Bruce

  8. Hrm....Unlicensed Demo? by dasmegabyte · · Score: 3, Insightful

    No, I'm not talking about warez...but perhaps, if software can't be used without agreeing to the license, shouldn't the seller provide an unlicensed demo? I mean, you aren't required to buy a car just because you test drive it, nor are you required to buy a screwdriver just for taking it off the shelf at Sears.

    Software, however, comes with no such luck. You can't try it out at the shop (Apple Store excluded). You can't open it, discover it's shit (*cough* daikatana *cough* *cough* windows xp), and return it. You are required to guess whether you need it, shell out $50-$400 for it, and sign away your rights to share it, sell it, fix it, critize it and in some cases, even use it for its intended purpose, as well as the company's liabilities for their own mistakes.

    Can you imagine buying a hammer and having to sign a form saying you won't use it to hammer anything unapproved by Stanley tools?

    Not that you'd be buying Stanley tools, what with their moving all their plants to China and Israel and their corp office to Bermuda to avoid taxes, unamerican shitheads.

    --
    Hey freaks: now you're ju
  9. Give me a BSD/GPL/MIT program with clickthrough.. by lpontiac · · Score: 3, Insightful

    .. and I'll fork the project. The sole difference between my codebase and the original will be a lack of a clickthrough.

    Seriously, if a new license springs up requiring a click through, that could work on a desktop, but what about when I rip out the program's optimised hashtable implementation for use in an embedded controller? How is a clickthrough supposed to work then?

    If a new input paradigm springs up for desktops, will code licensed under explicit clickthrough terms that aren't satisfied by it be left to rot?

    If you're that afraid of people using your stuff, and you don't feel that copyright gives you adequate protection, then you probably shouldn't open the code.

  10. If it quacks like a contract... by CrazyBrett · · Score: 3, Insightful

    If software companies really want to enforce click through licenses like a contract, why don't they just make it a formal contract? Print it out on official legal paper, require all customers to sign (with witnesses, etc) before they buy, and take people to court if they violate it?

    Oh right, because that would mean that people would be paranoid out of their minds whenever they went to buy software. Not to mention that no one under age 18 would be able to buy software (or use it, for that matter). No, software giants WANT the click through license to be as easy and brainless as possible, so people don't realize just how much they're getting screwed. Plus, they don't want the idea of click-through to get too much legal scrutiny, since it would probably be ruled unenforcable. No, they're just interested in the fear factor they get from being able to say "Hey, you clicked to agree that you wouldn't do that! Don't make us come after you!"

  11. Re:No. by MattW · · Score: 5, Insightful

    Having read some of what Eben Moglen wrote, I'm inclined to agree. Software is covered under copyright, and copyright grants your work protection by default. We don't need a shrinkwrap on a book to note that copying it is illegal; the same should remain true of software.

  12. Re:The GPL doesn'[t need a click-through agreement by Bruce+Perens · · Score: 4, Insightful
    All I can think of is that the click-through might be required for the disclaimer of warranty in some UCITA states. This is not a copyright issue. But we are working that angle by going for modification or withdrawl of UCITA.

    I see this as a slippery slope. Accept it, and then there will be an incremental series of other "legaly necessary" requirements, until we can't be distinguished from shared source.

    No, no, a thousand times no!

    Bruce

  13. Re:No. by Bruce+Perens · · Score: 3, Insightful
    Well, my suspicion is that this is related to the disclaimer of warranty issue, and not copyright. But there are two ways to go at that - push Open Source licensing, and push to reform the law. I'd rather push to reform the law. If we continue to back up, we'll eventually have our backs to a wall. The Debian Free Software Guidelines, later called the OSD, were all about drawing a line in the sand. We need to hold that line.

    Bruce

  14. This doesn't make sense by Anonymous Coward · · Score: 1, Insightful

    1) Software in binary form is without source code, so it wouldn't make any much difference if the GPL with it died
    2) Source code Can Not have any click-through licence anyway

    So, does this make sense?

  15. Re:That's not the issue! by Bruce+Perens · · Score: 4, Insightful
    Well, from a liability standpoint, I would recommend that distributions who are worried about this include a click-through notice at distribution-install time. The notice should say that the software included in general disclaims warranties, and where the licenses are found on the system, and that it's a good idea to read them if you feel you deserve a warranty. I would not recommend that any license require one to maintain that click-through notice.

    Bruce

  16. The GPL is not an EULA by Jeremy+Erwin · · Score: 3, Insightful

    The GPL is not a End User License Agreement. EULAs restrict the rights of the End User.

    If you want to install emacs on your computer, you don't have to agree to anything. If you want to install Microsoft Word, you are bound by the EULA.

    If, however, you want to redistribute emacs or modify the program, you are bound by the GPL. If you want to modify of redistribute Microsoft Word, you may be held liable for civil and criminal penalties.

    I suppose if you distributed emacs without source, those same penalties might still apply. The GPL is so much easier...

  17. Re:whats wrong with a click thru license ? by Hater's+Leaving,+The · · Score: 2, Insightful

    There's more than just "a lot wrong" in my book. As soon as you wrap a program up with some obligation for the user (installer) to actaully _do_ something particular (read and affirm an agreement), you are restricting the user's freedom to simply to do what he wants with the code (for himself), i.e. going against the OSI way of thinking.

    I don't think click-through and OSI mix, and I'm glad the decision was made that way.

    THL.

    --
    Keeping /. cynic density high since the fscking Kwhores/trolls arrived.
  18. But this goes beyond copyright... by Pollux · · Score: 3, Insightful

    I took an Econ class this summer for college. It was rather boring, but the one thing that I really got out of the class was this: the more expensive the lawyer, the better a chance you'll win when someone sues you.

    What does this have to do with software? Well, a cheap lawyer will tell you this:

    Software is covered under copyright, and copyright grants your work protection by default. We don't need a shrinkwrap on a book to note that copying it is illegal; the same should remain true of software.

    An expensive lawyer will laugh at that response and will tell you that you need to set up every possible legal defense if you don't want to get sued for millions of dollars. And the best line of defense: be the first to state the rules of the game. If the other team has to play by your rules, you have much better odds of winning.

    So, when it comes to software, be it commercial or open source, it's always safer for the publisher to present the license (which goes far beyond the limits of ordinary copyright), because it gives them the advantage in court. Whether or not the license is legal under Copyright Law doesn't matter, because (the other thing I learned in Econ) the first line of defense in court is not the law, it is FUD. If you have the more expensive lawyer, the bigger contract, and the Italian-quality suits, you stand a better chance at frightening the other party into submission.

    1. Re:But this goes beyond copyright... by Bruce+Perens · · Score: 4, Insightful
      Aren't you actually proposing that we let the other side state the rules of the game? After all, Free Software is a rebellion against all of this litigious nonsense. I think we need to push back here.

      This is not to say that there is no need for a set of guidelines on how to communicate to users the NO WARRANTIES message. But I don't feel that requiring click-through in licenses is the right approach.

      Bruce

  19. Re:That's not the issue! by Bruce+Perens · · Score: 5, Insightful
    This has got to be a troll.

    Obviously, Free Software producers must be able to deny warranties, since they are not getting the consideration (money) necessary to provide them. People who want warranties should be able to buy them, either from the software producer, another software shop, or an insurance company.

    It's different with cars, because cars have a high potential to do physical injury to people and are thus expected to be built to a higher standard.

    Bruce

  20. Re:That's not the issue! by Bruce+Perens · · Score: 4, Insightful
    The problem is that Red Hat (for example) can pass on damages that they are forced to pay in court to the original developer by turning around and suing that developer. Would they? Of course not. But of course management of companies changes, that is why we have contracts.

    That said, I still don't recommend click-through. I would instead publish a set of guidelines for distributions that would tell them how to direct attention to individual software licenses.

    Bruce

  21. Copyright vs. Warranty by Bruce+Perens · · Score: 4, Insightful
    IANAL.

    First, it's necessary for you to divorce copyright from warranty in your mind. Warranty does not necessarily follow copyright. In many cases, the warrantor will be the person you got the software from, regardless of whether they hold a copyright. And they may be able to pass on damages to the person they got the software from, perhaps the original developer. I think the risk to FTP sites is low, but to distributions, who put more active work into the process, and sometimes get a cash consideration, it's high.

    The problem is what is the default in the law regarding warranties. If the default were clearly no warranty, Free Software would be OK. To the extent that the default is otherwise, we are less OK, and must deal with imperfect instruments for disclaiming warranties, and getting the user to agree to indemnify us (pay for our damages). But our goal is not to go to court at all. The minute someone has us in court, we're already losing money. So, we want it to be so clear that there is no warranty that nobody will ever try to sue. This is why people are tempted to use click-wrap. But I don't think that requiring it is the right solution.

    Bruce

  22. Re:It's time for OSI to return the OSD to SPI by Bruce+Perens · · Score: 5, Insightful
    They've had a request for approval of a licence. Is it not reasonable for them to consult the wider community on this issue?

    Do you really believe they even had to ask? This one seems pretty clear to me.

    I'm intrigued by this statement. Some time ago I compared briefly read the Debian Social Contract and the OSD and I didn't notice any substantive differences.

    When OSI was proposed to me, it was a way of marketing Free Software to business. It's been instead driven as a schism from Free Software. And the OSD continues to diverge from the DFSG. I also reject that the folks running OSI are representative of any Open Source community anywhere. In the case of SPI, there is a membership and elections. And unfortunately, most of the OSI board don't have time for OSI - they're too busy with their companies, etc. So 2 or 3 people end up running it.

    The whole thing makes me very uncomfortable.

    Bruce

  23. Re:That's not the issue! by Bruce+Perens · · Score: 3, Insightful
    The GPL's no-warranty statement is a disclaimer, it does not request your agreement. The legal question is whether or not a simple disclaimer is adequate, and when the user must see it for it to be effective. I am for a single notice at distribution install time that there are licenses, that they disclaim warranties, and how you can view them. I don't think it's necessary for licenses to require that, it should be a guideline. Requiring click-through in a license would cause all sorts of problems for the distributions that they don't really need - there are better ways to solve this problem.

    Bruce

  24. Re:whats wrong with a click thru license ? by TheCarp · · Score: 4, Insightful

    And how would you propose to impliment it?

    This isn't windows where you can be sure that everyone is using a GUI, and
    doing the install on a GUI... how about an OS install?

    When I install even a very minimal Debian system I am sure that the software beinbg instatalled is not all licensed from Debian, in fact, only a versy small amount of it is. Some of it is the FSF, some of it is Xfree86, some of it is Berkley, some of it is licensed from other people entirely.

    I should have to "click through" how many hundreds of times to get the OS on my box? How about if I want to impliment automated installs? Like say my office mate whpose job it is going to be to setup a research computing cluster... installing software in parallel on a whole cluster of boxen at once?

    Secondly, I don't knbow if you read it but neither the GPL nor any other Free Software license that I have seen says much about USE of the software. USE is implied by posession, its Fair Use. You only need these licenses to DISTRIBUTE the software. Thats the whpole reason the GPL exists... to give people terms of a distribution license.

    I think thats the major disconnect here, these are not USE licenses (frankly IMNSHO use should be covered under fair use doctrine anyway, making the whole "click through" issue moot) they are distribution licenses.... and not neede dfor use at all...

    Its very simple. Legally you have no right to redistribute a copyrighted work by default. So if you don't accept the distribution license (GPL, BSD, whatever it is) then you have no legal right to distribute. So distribution implies agreement with the license.

    -Steve

    --
    "I opened my eyes, and everything went dark again"
  25. Please don't allow click-through. by Eric+Seppanen · · Score: 5, Insightful
    If there is a legal mindset that distribution of copyrighted content requires a legal contract between the distributor and each and every user or customer, I hope the OSI will consider it in the public interest to attempt a countering trend: the view that existing copyright law (as applied to books for the last hundred years) is good enough.

    There are many reasons why click-through licenses are bad:

    • They obviously place the software distributor in a place of power over the end user, something that free software is supposed to combat.
    • There is no clear way to define who agreed to what. What if the purchaser isn't the same as the user? What if a user installs software on a computer and then resells that computer, with it's software, to another user.
    • Software licensing is too complicated. That complication is a barrier to entry for small, independent software authors. Promotion of a software "fair use" doctrine that says that click-through licenses are unnecessary seems to be in the public interest.
    • Click-through licenses provide a convenient method for a downhill slide towards prohibition of other fair uses, such as reverse engineering or published benchmarks or criticism. They may also provide a mechanism for other onerous goals: censorship ("you agree not to use this software to produce communist manifestos"), patent abuse ("you agree that our patents are valid"), barring trade or competition ("you agree not to sell this program to Pakistan or the FBI")... The list is endless. Not that this is what's planned, but once the door is opened, who knows where it leads?
    • Every additional click-through license in use marginalizes the existing non-click-through licenses, making them seem more like some lunatic fringe rather than plain use of copyright law. No matter how OSI feels about the FSF and the GPL, I as a user understand and appreciate the GPL's stand on this issue: "You are not required to accept this License, since you have not signed it.
    • Click-wrap licenses, if they spread to other media, will quickly lead us into a "pay-per-use" world. Click-wrap issues have barely been touched by the courts, and a small push in the right direction now may help keep us away from that path.
    Please fight to keep click-wrap licenses away from Free and Open-Source Software. I understand that overly cautious lawyers (is there another kind?) will wring their hands over the idea of bucking the trend, but this is a battle worth fighting.

    "Use" contracts make no sense (and have been shot down by courts when applied to other copyrighted content). Though you have not provided any details as to why the party in question wants them, I fail to see a compelling legal reason why they should be allowed.

    Please reply to eds at reric.net if I can be of any assistance.

    --
    314-15-9265