Slashdot Mirror


Castle Technology UK Ripping off Kernel Code?

Jonathan Riddell writes "`It would appear that Castle Technology Limited, UK, have taken some of the Linux 2.5 code, and incorporated it into their own product, "RISC OS", which is distributed in binary ROM form built into machines they sell. This code is linked with other proprietary code.' Full details from Russell King on lkml."

41 of 745 comments (clear)

  1. Test for the GPL by Picass0 · · Score: 4, Funny


    Let's see if the goat has teeth!

  2. Sue them by HanzoSan · · Score: 4, Insightful


    They should know better than to do this, they deserve to get sued and the money should go back to kernel development.

    --
    If you use Linux, please help development of Autopac
    1. Re:Sue them by JamPonyXpress · · Score: 5, Interesting

      Actually, what's much more important than any money involved is that a case like this could provide a precedent that would prove that the GPL is legally enforceable - something that has not occurred to date, AFAIK. For this reason it might be a good thing if Castle is (a) guilty and (b) obstinate about it and Linus sues. (I just love the thought of Microsoft quivering.) It would have to be appealed a level or two for the precedent to be strong and widely binding.

    2. Re:Sue them by Black+Copter+Control · · Score: 5, Informative
      Who would be the initiator of such a lawsuit?

      It depends on who holds copyright to the associated pieces of code. Best bet is that it's been assigned to the EFF, but it could also be Linus and/or some of the people who wrote the bulk of the code.

      It'll actually be rather interesting (in ~200 years) when it comes time to determine when the code's copyright expires. Just who's lifetime does each piece of code expire in relation to?

      --
      OS Software is like love: The best way to make it grow is to give it away.
    3. Re:Sue them by wass · · Score: 5, Interesting
      RMS and other folks at GNU typically respond to issues such as these. That is, when people/companies have not followed the licencsing of GPL'd software. I believe the offending party has usually changed their policies and was never actually taken to court.

      IIRC, RMS has actually been anticipating for a serious GPL breach to rear its head, so it can provide an actual legal acid test of the GPL. I don't believe any organization/company has ever gone to court over GPL violations. Winning any courtroom legal victory would be a huge boon to for the GPL, as it would demonstrate it's legal resiliance. IANAL, of course.

      --

      make world, not war

    4. Re:Sue them by glwtta · · Score: 5, Interesting

      I believe the FSF's stance on this is, the later that the first GPL case goes to court, the better. The thinking is that there is the potential of the judges (and the media, and the public in general) becoming more tech savvy as time goes on; as well as the hope that traditional copyright laws will be adapted to software issues more fully by then.

      --
      sic transit gloria mundi
    5. Re:Sue them by mindstrm · · Score: 5, Insightful

      I'm not sure which part everyone thinks needs to be enforced. If it's "release your code", it's being looked at backwards.

      One thing copyright is clear on: You need permission to use other's copyrighted works.

      If you are taking someone's code, which is available under the GPL, and using it in your own product... the only way you have legal grounds to use it is if you either a) abide by the GPL, or b) get permission from the author.

      If the author goes and says "They are using my code illegally", the company would have to prove they have a license to do so. It's not about the enforceability of the gpl.

  3. They've recieved one warning by Anonymous Coward · · Score: 5, Funny

    And apparantly it just resulted in them trying to better hide the incriminating code in later versions of the product.

    Okay, then. Let's get everybody forming into single-file lines; you'll receive your pitchforks on the left, torches on the right. Please, no shoving, there will be plenty for everyone.

  4. KING writes about CASTLE? by monadicIO · · Score: 4, Funny

    Is this for real?

    --

    The law of excluded middle : Either I'm foo or I'm foobar

  5. How to prove anything? by dk.r*nger · · Score: 5, Interesting

    Being a relatively non-hardcore geek, I wonder how it is possible to actually prove that GPL'd code was used?

    Once compiled and linked and what-know-I, the source would be rather obscure, and after all, other products seem to do the same tasks, yet not using GPL code..

    Please enlighten me!

    - rnger

    1. Re:How to prove anything? by Ark42 · · Score: 5, Interesting

      As I understand it, there were function signatures (linking information) indendical to all the functions from certain pieces of Linux kernel code. After their first request for source under GPL, they removed that information but the rest of the binary code remained unchanged. I would consider that pretty strong proof that they are knowingly stealing from the Linux kernel.

    2. Re:How to prove anything? by bwt · · Score: 5, Informative

      During the discovery phase of the trial, the defendent would have to produce the complete source code and build instructions for their product. The plaintiff would have an expert follow the build instructions and verify that they result in the exact exectuable that the defendent ships. Then the expert would examine the source code for "substantial similarity" to the copyrightable elements of the linux kernel code. A judge would hear this testimony and rebuttals and examine the evidence it was based on.

      Legal arguments on affirmative defences of fair use and licence compliance could be made. The judge would rule on infringement, then if the plaintiff prevails, he would rule on damages. Factors influencing damages would be willfulness of the infringement and the presense or absense of commercial gain as a result of the infringement.

    3. Re:How to prove anything? by Black+Copter+Control · · Score: 4, Interesting
      During the discovery phase of the trial, the defendent would have to produce the complete source code and build instructions for their product.

      They might not have to. At the very least, the defendant could probably delay execution by arguing over whether they really had to produce their entire source code (on the basis of trade secret). This would, however, probably preclude them from producing code in their defence later on.

      In any case, I don't think that there would be need. The GPL owners would simply have to produce the original (copyright) source code and show that it compiled down to something that looked like the impugned binaries. If this was convincing, then the defendant would have to prove that there was some other source for those binaries (at which point, producing their own (non-GPL) source code would be the one of the few choices).

      On the other hand, given that they've already distributed these binaries with strings identifying them as the GPLed Linux code, we've already got a smoking gun. That they then pulled the signatures but continued to distribute (substantially) the same code, is pretty damning as proof of malicious intent.
      (Remember: burden of proof in civil suits is only balance of probabilities, not beyond a reasonable doubt)

      Legally speaking (IANAL), I'd say that these bastards are pretty much cooked.

      Legal arguments on affirmative defences of fair use and licence compliance could be made.

      Yep. Wholesale copy of the code probably fails the 'fair use' defence, and lack of source distribution pokes a big hole in the 'license compliance' defence.

      The judge would rule on infringement, then if [when!] the plaintiff prevails, he would rule on damages. Factors influencing damages would be willfulness of the infringement and the presense or absense of commercial gain as a result of the infringement.

      Deletion of the signatures after the first letter is pretty good proof (IMHO) of willful infringement, and they're selling the code (with the systems).

      --
      OS Software is like love: The best way to make it grow is to give it away.
    4. Re:How to prove anything? by boots@work · · Score: 5, Interesting

      Here's a step-by-step walkthrough proving that a scumbag called Stephen Kapp wripped off some GPL'd code that I wrote.

      You can see that the functionality is very similar, and that by using some simple tools to compare the binaries we can see they're the same on the inside. What we see here is mostly the names of functions which carry through from the source to the binary, to support debugging, run-time-linking, and similar things. The LKML post said that these strings were also found to be the same, and then Castle removed them, which is clearly evidence that they knew they'd been caught stealing.

      Basically we're looking for patterns and similarities. Although somebody could (legally) write a program that had the same user interface, it's astronomically unlikely that they'd call their functions the same thing and have the exact same design.

      Stephen Kapp crawled back under his rock once this was published. I expect Castle will do something similar: just continue to deny that it ever happened, but remove the code.

      Similar things have happened to other major open-source projects. It hasn't been to court yet because, as far I know, every case has either been an honest misunderstanding, or an intentional violation but the perpetrator skulked away when challenged. I suppose in both cases it's not worth the FSF's time&money to take it further, but the drawback is that there's no clear example to others.

      I really hope the FSF does help the copyright owners bring a lawsuit, it's time for a demonstration and I'd certainly throw in a hundred bucks to help fund it.

      This isn't just a free software problem though: people who publish proprietary reusable code (development libraries, ...) have lots of trouble preventing copyright infringement. I don't think I've ever seen a Windows developer's machine that didn't have pirated, or at least unregistered-shareware, software.

  6. Who files a lawsuit? by tinrobot · · Score: 4, Interesting

    Here is a question... Most OSS, and this kernel, specifically, is created by the contibutions of many individuals. So, who in the world can file a lawsuit over matters like this?

    Would it be the many individuals? (They're probably not that rich) Would it be some benefactor, like Mitch Kapor/FSF? (He's rich, but has to pick his battles) Or perhaps a money hungry lawyer working for a fat contingency... Who files the lawsuit and pays the fees?

    Have cases like this gone to court in the past?

  7. Hold on. by Quasar1999 · · Score: 5, Interesting

    I have a question, perhaps it does not pertain to this situation... but where do you draw the line about code being stolen?

    For example, if lets say I stole a simple 3 line chunk of code that converts a date from one format to another, and threw it in my multi-thousand line project (which is all original except for those 3 lines), would it really be breaking the GPL? I understand that it of course technically is.. but at what point would the 'borrowing' of code be of such basic elements that really, there is no other way to solve a particular problem?

    Sure my above example sucks (it's friday afternoon, brains already gone)... but what amount of code warrants a "you're stealing you son of a b*tch" title, and what warrants a "meh... it's not rocket science, hell, there's no other way to do it, even if he hadn't looked at the code, this is the logical solution anyone with half a brain would come to..."...???

    --

    ---
    Programming is like sex... Make one mistake and support it the rest of your life.
    1. Re:Hold on. by JoeBuck · · Score: 4, Interesting

      A three-line chunk would probably come under fair use. Also, there are some code sequences that pretty much can only be written one way; again it's fair use. The fact that it's the GPL makes no difference here.

      The line between fair use and copyright infringement is fuzzy.

    2. Re:Hold on. by bwt · · Score: 5, Insightful

      Are you sure that it makes the GPL irrelevant? You may not be violating copyright law by using the code, but you are violating the terms of your license. As such, you are bad, and can be reasonably sued, and compelled to do what the judge tellys you to do if you lose.

      Violating the terms of the licence is only illegal if it results in copyright infringement. Fair use is an affirmative defense to copyright infringement. One factor (of four) in determining whether fair use applies is the quantity of work copied. For three lines of code, that would be small.

      The most important factor, however, is commerical impact. If those three lines add a feature that fills a marketing gap, then the result of the copying is unfair competition and thus improperly obtained revenue.

  8. Re:Pirates! by wcmcgr · · Score: 4, Funny

    isn't it a little ironic a messanger titled "IntegrityMessenger" ripping off someone elses code?

  9. Re:Does that mean... by bwt · · Score: 5, Informative


    No, it means that they are commiting willful copyright infringement for commercial gain. The penalties for that are severe and include the larger of statutory and actual damages. The statutory damages can be up to $100K, iirc. Actuals include any revenue which results from the infringement.

    I hope somebody tears them a new sphincter, if this is true.

  10. Re:For damages? by Beryllium+Sphere(tm) · · Score: 4, Informative

    Copyright law allows for something called "statutory damages", which means that if someone infringes on your (registered) copyright you can collect a fixed amount without having to document monetary loss.

    "Nobody lost anything", except control over their creations.

    Copyright grants a partial legal monopoly on distribution of the copyrighted work. The owner can make people pay for it (the usual approach), or make them accept the GPL, or even prevent circulation of the work altogether (the way Sinatra pulled the movie "Suddenly" off the market after the Kennedy assassination).

  11. How sad it sullies the Acorn name by DrSkwid · · Score: 4, Interesting

    Acorn Computers is the daddy of all UK computing. While the rest of the geeky kids were using Ti's the UK kids were hacking away on BBC Micros.

    I still have mine here.

    The ARM processor is one of the best CPUs in existence.

    how ironic that on on this page :
    http://www.castle.uk.co/castle/rpcalt.htm

    the fish in the picture is clearly too big for the inadequate bowl.

    They might find that their GPL rip-off is equally dead in the water.

    It's a sad day all round. Time to flush them down the toilet.

    whoring :

    if anyone lives nearby maybe they could pop in on Monday and get the sourcecode

    Castle Technology Ltd
    Ore Trading Estate
    Woodbridge Road
    Framlingham
    Suffolk
    IP13 9LL UK

    Sales Telephone Line: 01728 723 200
    Lines Open: Monday-Friday 9:00-5:00

    Sales Fax Line: 01728 727 427
    Lines Open: 24hrs every day

    Support Line: 01728 727 424
    Lines Open: Monday-Friday 9:00-12:00

    Email: sales@castle.uk.co

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  12. Some may argue... by bill_mcgonigle · · Score: 5, Insightful

    ...that Linux is somewhat unique here. If I steal your copyrighted book and sell it, I'm taking revenue from your potential customers. You lose money and customers.

    If I steal Linux, I sell it and make money. But "Linux" doesn't lose any money (I'm personifying Linux here, bear with me) because Linux is free.

    However, Linux does suffer damages. The thing of value to Linux is its user base. The only reason somebody improves Linux is because he's a user. If I take away a potential user by offering the same feature by stealing Linux, I'm eroding its user base, future development potential, and therefore value.

    --
    My God, it's Full of Source!
    OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    1. Re:Some may argue... by MrEd · · Score: 4, Interesting
      The only reason somebody improves Linux is because he's a user.


      I would add that another reason for many developers is the knowledge that the code they contribute will remain covered under the GPL and not go towards lining the pockets of a closed-source company. Otherwise they'd use the BSD license, right?


      So a GPL copyright violation also robs Linux of a portion of its' users goodwill to develop. Wonder if that would persuade in court...

      --

      Wah!

  13. Re:Hmm... by JoeBuck · · Score: 4, Insightful

    The FSF vigorously defends its copyright on code it owns; it does not own Linux. It will be up to Linus and gang to defend their own copyright, though the FSF might offer to assist.

    And no, RMS is not a lawyer. The FSF's lawyer and chief enforcer is Eben Moglen.

  14. Re:Does that mean... by ubernostrum · · Score: 4, Informative
    Actually that's exactly how it works. For better or for worse.

    Nope. Consider the physical-property equivalent: I steal something from you. Do you have the right to come steal it back? No. Similarly, if they "steal" GPL'd code, we don't have a right to steal it back; the legally correct course of action is to file suit, get an injunction against distribution of the stolen code, and recoup losses from the infringer.

  15. Re:Does that mean... by bwt · · Score: 4, Informative


    You are confusing the conditions for complying with the licence with the penalties for infringing the copyright.

    The judge *could* order compliance with the licence as part of the penalty phase, but it is much more likely that he would award monitary damages.

    The interesting thing is that each patch to the linux kernel could be viewed as separately copyrighted by whoever the author of that particular patch is. The statutory damages can reach $100K per violation if the judge wants it to.

  16. Re:Does that mean... by io333 · · Score: 4, Interesting

    Actually, I'd prefer that they be forced to open source their code instead. Have you looked into RiscOS? It fits into something like a 4meg (yes four megabyte) rom, boots in two seconds, and screams on any old piece of junk processor. I can only imagine how it would run on my AthlonXP. A tad faster than Mandrake no doubt.

  17. Give it a couple of days by I+Am+The+Owl · · Score: 5, Insightful

    Before everyone starts clamoring for all out war against these horrible, horrible GPL violators, I would advise you at least give it a few days for the dust to settle. Slashdot, after all, is hardly known for responsible reporting, and has quite often reported such violations erroneously and caused quite a bit of damage to the reputations of various corporations.

    --

    --sdem
  18. Re:Information wants to be free by RoyBoy · · Score: 5, Insightful

    Ok, to begin with you've managed somehow to completely misunderstand that the spirit of the GPL is to produce a COPYLEFT - in other words, it exists as a product of ridiculous copyright laws in a attempt to circumvent them through their own application (that's why MS likes to call it viral).

    In any event, the comparison is obviously flawed because in the case of GPL code theft, you're talking about someone knowingly violating the license under which they acquired a product in order to PROFIT from a derivative product.

    Most 14-year olds who pirate MP3s and DVDs are interested in FAIR USE of the products in question, or at worse in depriving the copyright owners of proceeds that they could have directly collected. I have not hear of any real cases where gangs of 14-years old pirates have set-up conterfeit CD and DVD rings to sell the products on FOR PROFIT. If you really doubt this, just ask the P2P companies when their huge profits fro residuals are gonna start rolling in.

    Amazing how hard it is to see right from left, huh?

    --
    -- People who think they know it all, really annoy those of us who do!
  19. Comment removed by account_deleted · · Score: 4, Insightful

    Comment removed based on user account deletion

  20. why is anyone that stupid by Splork · · Score: 5, Insightful

    there are three perfectly good sets of BSD code to copy from with zero repercussions that do the exact same thing.

  21. Re:Who would take the case? by mongre · · Score: 4, Interesting

    Well IANAL but I expect each one of the copyright holders for the code could individually seek damages for the infringement. Alternatively they could probably all work together on a single suit.

    That is why the poster to lkml mentioned the sections since all the copyright holders of those sections are affected.

    As to comments that have or are going to be made regarding the GPL getting its day in court, the reason that this has not happened already is not because the GPL is weak, but because it is strong.


    Much murmuring...to the supposed effect that the absence of judicial enforcement, in US or other courts, somehow demonstrates that there is something wrong with the GPL, that its unusual policy goal is implemented in a technically indefensible way, or that the Free Software Foundation, which authors the license, is afraid of testing it in court. Precisely the reverse is true. We do not find ourselves taking the GPL to court because no one has yet been willing to risk contesting it with us there.

    Eben Moglen

    In fact he has written two papers on the specific issue of GPL enforcement.

    http://emoglen.law.columbia.edu/publications/lu-12 .html
    http://emoglen.law.columbia.edu/publications/lu-13 .html

    My expectation is that this company will buckle as soon as their lawyers get a look at the GPL in detail and what their developers/management did. The fact that the company actually took steps to hide their infringement is also going to look very bad in court. They are only making it worse for themselves. They should do themselves a favour and work out an agreement with the kernel developers before they really get burned.

  22. It's not though by renard · · Score: 5, Insightful
    Every time we see one of these GPL-violation cases, people start talking about "testing the GPL".

    But invariably the guilty corporations are violating copyright law first before they are violating the GPL. This makes sense, because the GPL is actually more permissive than copyright law. And copyright law has been tested, many times - and it does have teeth.

    If someone can present an argument why Castle in this case is violating the GPL, and not violating standard copyright law in the process, then I would like to hear it.

    -renard

    1. Re:It's not though by Minna+Kirai · · Score: 4, Interesting

      Huh? That question doesn't make sense. Violating standard copyright law is the entire legal mechanism the GPL operates by. Duplicating the code is illegal, but the copyright holder has agreed to give copying permission to anyone who obeys the GPL.

      Like the GPL says:
      5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License.

      A theoretical "test" of the GPL might find that the license text is all correct and legal. Or, maybe a court would declare the license invalid. This could mean that every user of Linux and other GPL software is in violation of copyright (until the authors work up another way to give out permission). That would be a major news story, and is why people get excited when the possibility of a "test" arises.

    2. Re:It's not though by Archie+Steel · · Score: 4, Informative

      I think you should read that GPL again. It does not give someone the right to distribute the code (or parts of the code) in binary form, but then requires whomever distributes it to also offer the sources as well - and give credit to the original authors. They are also prohibited from not extending these same distribution rights and obligations to who get their software. So that company can use parts from the kernel, but they have to give out the sources of their software and give credit where it's due - as well as the permission to redistribute the software under the GPL. If I understand correctly, they have failed to do this.

      In other words, yes, you were wrong, and have now been corrected. GPL does not mean Public Domain (even though the two share some similarities). It seems you're going to keep waiting a looong time for whatever gripe you have with the GPL to materialize.

      --

      Reminder: find a new sig
  23. No... read... by mindstrm · · Score: 4, Informative

    No.. the GPL ONLY gets it's strength from copyright law. IF copyright law allows it, the GPL can be IGNORED.

    The GPL is the set of terms under which you can do things OTHER than what you are allowed to do under standard copyright.

    It is not a use license, you don't agree to it in order to use said software; it is a license that grants you extra rights beyond what copyright does should you CHOOSE to use it (abide by it's terms).

  24. Re:Information wants to be free by oasisbob · · Score: 4, Insightful
    The secret to enjoying Slashdot is to realize that it should not be taken too seriously.

    No, the secret to enjoying Slashdot is to realize that it isn't a single consciousness with only one viewpoint. It has 450,000+ users, many of whom think differently than one another. If you get caught up in believing that everyone here thinks the same thoughts and believes the same things, you're missing the point.

    Sure, there are tons of copycat thinkers here; however, even they are feeding from different schools of thought.

    For example: I have no problem with the concept of copyright. It has a valid purpose. I have problems with infinite congressional extensions of copyright: they destroy this purpose. I have problems with technology being used in combination with law to restrict my rights on my own hardware to inforce copyright and restrict fair use.

    The GPL gives *more* rights than you would normally have as far as software goes. I'm not an expert on the GPL, you won't see me arguing the finer points of OS licenses, however I do understand the basics and have come to my own opinion based on my understanding.

    When you actually look at one person's beliefs, it's quite easy to see how someone can believe that abusing the GPL license like Castle has done is naughty, and at the same time believe that the RIAA, MPAA, and CSS are evil also.

  25. Re:EULA vs GPL by orthogonal · · Score: 4, Insightful

    But isn't the GPL more or less the same thing [as an End User License Agreement]? It's trying to control what you do with something after it is in your possession?

    I don't think so. After all, companies with EULAs impose whatever conditions they impose, and the conditiuon that you can't modify (or generally even see) their code.

    All the GPL says you can't do is to use the code in your own work without also making your own work available under the GPL. Sure, it's a restriction, but it's a restriction on coders who would use GPL'd code.

    A EULA is a restriction on all users, not just coders who want to create derivative works.

    The GPL does not restrict my use of the software it licenses -- I can use it as I see fit--, nor does it restrict me to a relationship with the author for the term of use (e.g., giving the author the right, as in the latest Microsoft EULAs, to modify software on my system without even so much as prior notification).

  26. Re:EULA vs GPL by ctid · · Score: 4, Insightful

    The SW isn't "in your possession" in a typical commercial EULA. What you get is a "licence" to use the software, under certain conditions. You don't own the SW after you buy it.

    In a sense, the GPL is the same, as you don't "own" the SW either (the copyright remains with the author(s)); the difference is what you're allowed to do with it. A commercial EULA usually adds a lot of restrictions to standard copyright arrangements. The GPL takes away restrictions; the simplest thing it does is to allow you to copy the SW without restriction. It also guarantees you access to the sourcecode if you've only got the binary. In exchange for these extra rights, you agree to some duties, namely to distribute the source code to whoever you distribute the binary to.

    --
    Reality is defined by the maddest person in the room
  27. Re:They have nerve by Paul+Vigay · · Score: 5, Informative

    Actually, speaking as the webmaster of www.riscos.org, that quote is mine, and I have no link to Castle Technology at all. If you're going to call someone names, at least check your facts to see who you're accusing.
    www.riscos.org is completely independent and in no way affiliated to ANY RISC OS hardware manufacturers.