Slashdot Mirror


Do You Know UNIX Secrets?

ESR writes "You can help stop the SCO attack on IBM and the Linux community. I'm looking for ways to prove that Unix trade secrets have been legally nullified. I want to know if you have ever had read access to proprietary Unix source code (not just binaries and documentation) under circumstances where either no non-disclosure agreement was required or whatever non-disclosure agreement you had was not enforced. To help out, see my No Secrets page."

31 of 392 comments (clear)

  1. I'd tell you by Anonymous Coward · · Score: 5, Funny

    But then I'd have to kill -9 you.

    1. Re:I'd tell you by Evil-G · · Score: 5, Funny

      You could always trap me inside user mode linux, then i wouldnt be able to tell anyone anyway...

    2. Re:I'd tell you by zakezuke · · Score: 5, Funny

      My pid is Inigo Montoya. You "kill -9" my parent process. Prepare to vi!

      --
      There is no sanctuary. There is no sanctuary. SHUT UP! There is no shut up. There is no shut up.
  2. Start with Lion's Unix Source Code commentary by Anonymous Coward · · Score: 5, Interesting

    This is the book which shows the roots of Unix: Lion's Commentary on UNIX 6th Ed. with source code

    1. Re:Start with Lion's Unix Source Code commentary by MAXOMENOS · · Score: 5, Interesting
      I found this sentence rather interesting:

      In 1998, the SCO company agreed to the publication of this book and everyone can now obtain it legally, for $29.95 (www.peer-to-peer.com).

    2. Re:Start with Lion's Unix Source Code commentary by znu · · Score: 4, Insightful

      That's true, but SCO isn't just claiming its copyrights were violated. SCO is claiming its *trade secrets* were stolen. If you want to claim that something is a trade secret, you have to make some reasonable effort to actually keep it secret.

      --
      This space unintentionally left unblank.
    3. Re:Start with Lion's Unix Source Code commentary by Pharmboy · · Score: 5, Insightful

      IANAL, but here is my spin. To address your statement, yes but no. It is too old to be considered in this case (looking for 7 or newer) HOWEVER while it would not allow you to cut and paste the code and use as you want, it would nullify any 'trade secrets' claim. Because it was published, you would be allowed to create your own, independent, implimentation of anything in the book. It would no longer be 'secret', even if it is covered by copyright.

      Linus owns Linux. You can't cut and paste the code and release under a different license, but you can impliment a new kernel from what you learn from Linux, and release it however you want because there is no trade secrets that can be claimed. As you state, you can't just change a few routines and let it slide, but if you get the 'idea' for virtual memory, and figure out a different way to do it, then you are free to copyright it or license it anyway you want, assuming your code is 100% gpl free.

      --
      Tequila: It's not just for breakfast anymore!
  3. I know a few by Hayzeus · · Score: 4, Funny

    In 1973, UNIX had a secret affair with MULTIX. The resulting child was put up for adoption, and the whole thing was hushed up.

    1. Re:I know a few by powerlinekid · · Score: 4, Funny

      Was in Xenix? I always knew that it had to be the bastard child of someone ;).

      --

      can't sleep slashdot will eat me
  4. Er... by Anonymous Coward · · Score: 4, Insightful

    So let's get this... ESR wants to know where the NDA wasn't enforced. So he's looking for someone who's copied code from the Unix source tree into something else and got away with it. Isn't that what's called admitting your culpabilty? And when SCO serves papers on ESR for that information which he has garnered? Oh, you too can have your day in court. Woohoo.

    1. Re:Er... by Gunfighter · · Score: 4, Interesting

      Actually, I'm sure his lawyer-type wife (as well as any other lawyer or person versed in trade secret law) can tell you why he's doing it. You see, there's this little precedent set in regards to trade secrets. If they've failed to enforce their NDA before, then they might not be able to make a claim against someone else who didn't uphold it.

      I learned this when I left an employer and they realized I had worked there for ohhhhhh... about 3 years without signing their non-compete (duh!). The only thing they could sick a lawyer on me for was to protect their precious "trade secrets".

      Their trade secrets were the following:

      1) Their "best practices" methods of engineering, installing, and maintaining networks. Luckily, TCP/IP networking is pretty much common knowledge. The "best practices" are easily attainable from the Cisco and Microsoft websites (I helped them compile their best practices from those two websites). No way they could be considered a trade secret. This is analogous to the SCO fraudulent case as follows: They claim that the Linux OS couldn't have advanced without the inside knowledge attainable only from the UNIX source code. Unfortunately for SCO, if the "Enterprise kernel features HOWTO" is out there somewhere, SCO is screwed on this point.

      2) Their special configuration and wiring of a modem to be used for a special out-of-band management device. Unfortunately, they had released the information to one of our suppliers. The supplier, in turn, posted it on their website. Doh! In the trade secret world, if one person can take a bit of information public, you can't make another person _not_ take it public. For example, BSD code is public, so they can't attack IBM for releasing a version of the same code. They tried to and LOST the case against BSD years ago. No enforcement against BSD == no enforcement against IBM.

      3) Their last "trade secret" was supposedly their customer list. This one stumped me at first, because I (obviously) had knowledge about their customers. I knew who they were, their administrator/root passwords, their contact information, etc. etc. I even had a job offer or two from them. To use this information to my financial advantage _must_ be considered inappropriate use of a trade secret, right? WRONG! Their customer list is printed right on the back of one of their marketing brochures ("Look who we've done work for!"). Company name in hand, the phone book/Internet provided me with all of the contact information I wanted. As far as the customers' network layouts and passwords, those are proprietary information of the customers, not my former employers. Granted, it was a partial customer list and quite old. That didn't matter to me. The information I needed to get started was there. That was two and a half years ago. I've been stealing business from them ever since (not hard since they no longer provide the services I offered to their customers). This is much like SCO's earlier release of an old version of the UNIX source code. That earlier release could be enough to fry their case. Even though they are accusing IBM of raping their more recent versions, if the code in question is anywhere _near_ present in the old version, SCO is screwed.

      Personally, I think SCO's case is going to fall... hard. If they had a real case, they would have shown the code long ago. Not just shown the code, but PROVED that they had it first and not the other way around. After all, Linux had many enterprise features before SCO's various *NIX flavors. Perhaps we should be sueing them for violation of the GPL?

      -- S

      --
      -- Stu

      /. ID under 2,000. I feel old now.
  5. No.... by mindstrm · · Score: 4, Insightful

    The point is, it's been basically otu in the open for decades already... so yes, you can't take it and make a product with it... copyright prevents it.
    But the source code to various versions of unix has been widely available to anyone who wanted it, and none of the previous copyright holders of it even really cared.

    SCO cannot claim trade secret violations for somethign that has been common knowledge for well over 10 years.

    Yes, 2 wrongs don't make a right, and merely taking something and publishing it doesn't make trade secret invalid.. but if I publish your trade secret stuff, and it gets re published for a full DECADE, you can't come in 10 years later and claim your "secrets" have been leaked.. it's not a secret anymore.

  6. Re:This is kind of silly by bstadil · · Score: 4, Interesting
    No it is not. ESR wants to make that very argument convicingly in court. You have to show the judge that it is so, not just tell him.

    It the difference between showing a signed petition with thousands of signatures, vs citing a poll that X% of the constituents is for or against somethng.

    To run for office you need signed patitions not just a few pollsters saying you are popular.

    --
    Help fight continental drift.
  7. Re:This is kind of silly by Fefe · · Score: 4, Funny

    HE WROTE the OSI position paper, you dimwit!

  8. It seems we are of a technical nature by Oriumpor · · Score: 4, Interesting

    If the claim is that the system needs to be stricken of all SCO *owned* code. Isn't the first argument: What code do you really own, what happened in the AT&T Case (open the court files) show us what needs to be changed BEFORE a lawsuit ever took place.

    The technical community is VERY good at solving these sorts of problems. Even if we are talking 6-18 months time to rewrite all the sources they are claiming are in violation. That's much shorter than this court case with IBM is going to be.

    Besides, even if they are not *really* in violation. And there are claims for both sides, if they were re-written, SCO loses their lawyer money, and we can go back to ragging on M$-Wintel-DMCA and the US court system.

  9. dangerous by g4dget · · Score: 4, Insightful

    The only case in which access to source code would be of interest would be if SCO or its predecessors made the code available themselves, without requiring an NDA. That could be accidental (putting it up for FTP on a public site) or deliberate (publication in a book, sending it to a university research group).

    In all other cases, access to it would probably be in breach of either NDAs or computer crime laws. For example, if you had access to SCO source code through your employer, you are covered through their NDA. If you made your own copy of it, you and your employer might be in a lot of trouble. If SCO or someone else accidentally left open an NFS mount with the source tree (as has happened in the past), you'd probably be guilty of computer hacking if you tried to access it. So, be careful of what you admit to.

    Overall, I think people should just ignore SCO and go about their business until SCO comes forward with concrete claims. There is no need to spin our wheels or waste any amount of time on this right now. After SCO makes concrete claims, any reasonable judge should give the open source community ample time to respond, and SCO's secretiveness and unwillingness to let people fix whatever they are complaining about probably only hurts their case.

  10. Not even a half-baked idea by SuperBanana · · Score: 5, Insightful

    There are three problems here.

    "under circumstances where either no non-disclosure agreement was required or whatever non-disclosure agreement you had was not enforced."

    Problem #1: Just because it wasn't enforced at one time, doesn't mean the NDA is null and void- in fact, many/most NDAs specifically say "lack of enforcement does not nullify this agreement".

    I'm looking for ways to prove that Unix trade secrets have been legally nullified

    Problem #2: Disproving "trade secret" status is pointless(not to mention, unlikely to happen). It's still copyright SOMEONE ELSE, and YOU CAN'T USE IT unless they let you!

    Problem #3: It's been said time+time again, there is no proprietary code that belongs to SCO in the Linux kernel. This project, therefore, is entirely moot, at least in regards to the SCO lawsuit...and it can only, in fact, cause damage, because you're implying there IS code that belongs to SCO that "we" need to find a way to justify its presence in the kernel...when in fact no such code exists.

    By the way, why are people wasting time "helping" IBM? They don't need it, nor do they deserve it- they're "into" Linux because it makes them money, not because they wanna be friends, or they think it's "cool"...and with legal "help" like this, who needs SCO? Dispute the claims intelligently, boycott SCO, whatever- just leave the legal arguments to the lawyers, or you just might end up helping SCO...and IBM won't be the only loser if that happens.

    I can hear the SCO execs and lawyers now: "See? They DID steal our code, now they're trying to find a loophole!"

    1. Re:Not even a half-baked idea by Anonymous Coward · · Score: 4, Funny

      I may not be a lawyer

      Could be worth your time to find out whether you are or not for sure.

  11. Nice try SCO! by Flat5 · · Score: 5, Funny

    Posing as ESR to try to get people to incriminate themselves is a pretty nice trick. But we're not falling for it!

    Flat5

  12. I'd love to respond, but ... by SmoothTom · · Score: 4, Informative

    Back in the mid '80's, when I was working for U S WEST, the Amdahl machine I and a bunch of other engineers had logins on had the /src files all open (read only).

    I used my access to the source of that version of UNIX (UTS) source a lot to help me with the Xenix system I was running at home.

    Thing is, my racall of this is flakey enough that I cannot provide actual dates that the source on the "PN1" machine was open (about a one year window, after we moved from an IBM to an Amdahl mainframe, probably around 1985-86).

    I don't think that's good enough, though, to have any effect on the SCO v IBM case.

    (I wonder if the fact that U S WEST used to be a part of the Bell System - I went to U S WEST from Bell Labs, Holmdel - possibly made us feel a "part of the UNIX family" so we didn't seem to be as strict about holding the source inviolate. I dunno.)

  13. Yep, nothing to do with the lawsuit... by Jerf · · Score: 4, Insightful

    This project, therefore, is entirely moot, at least in regards to the SCO lawsuit...

    I think you understand the most literal level, but I think you're missing the logic. I think you're right, this doesn't have anything to do with the lawsuit. I think this is punitive . I think this is a side-project, to punish SCO for violating community standards, no matter what happens to the lawsuit.

    As such the rest of your concerns are irrelevant, since as you yourself say this has nothing to do with the lawsuit.

    This is a long-term project, to establish the danger of messing with the UNIX community, to make anybody else in the future who thinks they can milk money from the community, or that a lawyer-spasm is preferable to simply going out of business, think twice because they can expect the community to lash out not just in rhetoric, but with legal manuevers of their own. Textbook deterrence.

    I'm not ESR and I don't know. But that's how I read this, and I think it's a great idea. May not go anywhere but if it works it's very poetic and appropriate payback.

  14. Unix source code access by nero4wolfe · · Score: 5, Interesting

    During the times I was involved with actual Unix source code (mid 1970's to mid 1980's) for three different employers (UCLA, SDC, Tektronix) there was nothing similar to a nda. The school or company just agreed to not give source code access to non-"employees", and "employees" agreed not to give access to others who hadn't agreed to the Bell license.
    Within those terms, there was a lot of access. At the yearly conferences (which later became USENIX) there was a typically conference distribution tape. That tape was a mixture of "new" things, and modifications to the Unix kernel or Unix commands. To assure that everybody was "licensed", when you first became a member you submitted a copy of the signature page of the license.
    During that time we went from V6 Unix, PWB Unix, V7 Unix, to 2BSD (pdp11) and 4BSD (vax).
    Sharing went both ways of course. A number of changes/new cmds from other groups became part of the Official Bell release.
    That sharing was a factor in the settlement of the USL vs UCBerkeley lawsuit, that ended in the free availability of the 386bsd work.

  15. Ain't speaking for me by The+Mutant · · Score: 5, Interesting

    I was at Bell Labs for almost three years in the early 1980's, moving over to AT&T Information Systems after the court ordered breakup of AT&T in 1984 or so.

    They were pretty laid back then; I may have signed an NDA but I certainly don't recall it. I do recall the usual W4 and Insurance BS but an NDA doesn't stick out.

    And yes, I had almost full access to the source tree. IIRC, only some arcane kernel stuff wasn't available, being crafted in assembly. But given the corporate culture I have no doubt it was somehow accessable, but because it was processor / architecture specific, I never bothered looking for it. Plenty of stuff to look at and learn from at higher levels.

    Source code was available to any member of technical staff and since it was my second job out of Uni I had a ball. I even dl'ed some source to my Osborne I so I could read it at my lesiure.

    In fact I didn't realise how special it was at the time to have access to Unix source code until maybe five years later when I'd moved over to Wall Street.

    The Street was ramping up sharply on tech in those days, and Unix (think Sun, NeXt and SGI workstations) was the only game in town since PCs were still pretty underpowered.

    I remember someone asking me a question, and I told him to "grep for it". He looked at me cryptically, and then it hit me.

    No way to grep Dude - they's binary distributions.

  16. USC by One+Louder · · Score: 4, Informative

    The University of Southern California had a project in 1981-1982 to port UNIX from a VAX 780 to the Data General MV8000 (from "The Soul of a New Machine") using about 20 grad students. To my knowledge, none of the students (including me) had to sign anything to work on the project, and we certainly had access to the full source. One of the other guys was Fred Cohen, who has been widely credited with coining the term " computer virus".

  17. Re:Sun... by Stonent1 · · Score: 4, Informative

    And Solaris isn't System V Release 4?! Gee...I guess Sun have been lying to me :-p

    SunOS Release 5.7 [UNIX(R) System V Release 4.0]
    The first line line of text that appears when the kernel loads. So you're right.

  18. You missed the point really... by Kjella · · Score: 4, Interesting

    Problem #1: Just because it wasn't enforced at one time, doesn't mean the NDA is null and void

    No, it doesn't. But if you can prove that the Unix-company in charge of those NDAs actually did not protect their trade secrets, that is very nice. If they released it into the public by neglect of their own NDA, they are at fault. Now if the signer of that NDA did anything wrong (regardless of sloppy enforcement or not), that would be another matter...

    Problem #2: Disproving "trade secret" status is pointless(not to mention, unlikely to happen). It's still copyright SOMEONE ELSE, and YOU CAN'T USE IT unless they let you!

    No, but you can write your own implementation of anything copyrighted (it's not a patent), something you could not legally do with a trade secret you have knowledge of. Now if SCO is claiming that IBM went copy-paste, you would be right. But last I heard they were throwing around FUD like "stealing ideas from proprietary SCO code and incorporating into Linux". To gather all information that was, is and has been publicly available, you show that there was in fact not a trade secret and so, nothing could have been stolen.

    Problem #3: It's been said time+time again, there is no proprietary code that belongs to SCO in the Linux kernel.

    So you say. SCO says otherwise. Which is why we're going to court, isn't it? Where the hell do you get the divine knowledge to know that noone anywhere ever fell for the temptation to copy-paste a little? Oh, right you've been listening to 10,000 posts to slashdot on how that *can't* be the case. Nevermind...

    By the way, why are people wasting time "helping" IBM? (...) and with legal "help" like this, who needs SCO? Dispute the claims intelligently, boycott SCO, whatever- just leave the legal arguments to the lawyers, or you just might end up helping SCO...and IBM won't be the only loser if that happens.

    SCO has threatened to sue Everybody(tm) right down to your favorite Linux distro, and if you're a Linux user, you too. If you want to pretend IBM is the only one that could get hurt here, think again. The SCO execs and lawyers are going "Damn. They're calling our bluff. Again. Better send out a troll to slashdot to keep them from counting the cards."

    Kjella

    --
    Live today, because you never know what tomorrow brings
  19. Re:Sun... by grue23 · · Score: 5, Informative

    I was a in the platinum beta test program for Solaris at the time, and the question of it being made open source came up when I was visiting. Sun was actually interested in making all of the Solaris source available to NDA-signing clients, but found themselves unable to do so for legal reasons.

    Over the years, over 100 subcontractors, some of which no longer exist as companies, were involved in writing the code that makes up Solaris. It was impossible for Sun to get the okay from all those subcontractors to make those pieces of the source available to clients outside of Sun, and I suspect it quickly became a logistical nightmare of tracking which pieces of code were subject to which legal agreements with subcontractors, who had the IP rights of any subcontractors that were defunct, and so on.

  20. Re:Finally some action by mj01nir · · Score: 4, Informative

    If you think that ESR is "finally" getting things in gear, then you haven't seen his OSI Position Paper. The initial draft of this was released 4 days after the initial lawsuit.

    Those of you who have read it awhile back may want to look again. A fair amount has changed in the past week or so.

    --
    the no .sig .sig
  21. Wow. by mindstrm · · Score: 5, Insightful

    Where did you get that.

    Nobody is saying that you can steal... there is a difference between trade secret stuff and just "How we did that thing".

    SCO is not "locking down their IP rights". THey are trying to assert IP rights they do NOT have.

    You CANNOT claim to have a "trade secret" if everyone and his pet duck has had virtually unfettered access to it for TEN years. SCO did not have anything that EVERYONE did not already know, was taught in universities, etcetera.. that's the point.

    This has nothing to do with RMS.

    This is about asking if anyone in the past has had access, legally, to the unix source in any form where they did not have to sign NDAS, or where the NDAS were consciously overlooked by the rightsholder in the first place. Why? So they can help show that SCO is making baseless claims (which any idiot can see that they are)

  22. TIme to EXPOSE Novell - Another smoking gun by NZheretic · · Score: 5, Interesting
    In 1993, Novell bought USL. USL and Univel became the Novell UNIX Systems Group. Novell transferred the UNIX trademark to X/Open (later to become The Open Group). In 1993, Novell bought AT&T's stake in USL. In 1995, Novell sold the UnixWare business to old SCO

    BUT IN 1994 Novell who then fully owned UnixWare...From the Usenet Archives

    Novell Brewing a New 32-Bit GUI Environment (PC Week)
    From PC Week for April 25, 1994 by PC Week Staff

    Novell Inc. is developing a low-cost, 32-bit multitasking operating environment based on a "freeware" version of Unix that sources said will run Windows, DOS, NetWare, and Unix applications.

    Novell is expected to demonstrate the software -- which it is developing under tight security at an off-site warehouse -- to a few select users at next week's NetWorld+Interop trade show, said sources close to the Provo, Utah, company.

    The new system, code-named Expose, is not a derivative of Novell's own UnixWare; it is based on Linux, a full-featured Unix clone for PCs that is distributed under a free GNU Public License, sources said. Linux 1.0, which shipped in March, runs on 386- and 486-based ISA and EISA computers.

    Expose will be based on a graphical X Window System environment called Looking Glass, which Novell licensed from Visix Software Inc., of Reston, Va. It is expected to use an advanced 3-D desktop metaphor to allow users to easily navigate through it, sources said.

    Expose "is not as much an applications environment as it is a front end to many environments, [including] NetWare, Unix, and Windows applications," said a source who has been briefed on the project. Users also will be able to run Expose as a front end to the Internet, possibly through the Mosaic GUI, sources said.

    However, one source said development is in the early stages, and given Novell's track record, the project could be abandoned if it does not show strong promise.

    Another source said Novell has already demonstrated Microsoft Corp.'s Office suite of Windows applications running on Expose. The source claimed the applications were running without a Windows emulator, even though Linux does not fully support Windows applications.

    Novell's goal, sources said, is to quickly bring to market a graphical operating environment that would give PC users a lower-cost alternative to Windows. The environment would likely be priced below UnixWare's $249 price and possibly even lower than the $149.95 retail price asked for Windows.

    "Ray [Noorda] would give it away if he could," said a source knowledgeable about the project.

    The GNU license allows developers to use and modify the Linux code and sell it for any price the market will bear -- with the caveat that they must also distribute the Linux source code with their derivative products.

    Some corporate NetWare users questioned the sagacity of Novell developing yet another graphical 32-bit operating system. "I'd hate to see them spend a whole lot of research resources on one more operating system," said Jim Queen, director of enterprise networking for Enron Corp., a Houston-based energy company with a large NetWare network. "If they have a vision for this thing, they'd better share it."

    Another IS manager said he is still trying to get his company's current set of desktop operating systems to work together on a LAN. But although he doesn't want to deal with yet another contender, "I'll keep an open mind," said Lee Roth, LAN manager for Dallas-based Southwest Airlines Co. "If [Expose] gives me some new functionality, I'll consider it."

    Did Novell, who at that time owned the Unixware source, put some of the code into GPL'ed Linux to remain compatable with UNIX binaries?

    Time to dig up those old copies of Byte and PC Weekly.

  23. Re:Sun... by psyconaut · · Score: 4, Informative

    SunOS (later the WIndowed version was called Solaris 1.x) up until 4.x was BSD 4.3 system...it was NOT a "free BSD" derivative, whatever you mean.

    Solaris 2.x+ is very much System V Release 4. Sun were a member of that collective and Solaris still retains that structure.

    You might want to check your facts.

    -psy