Slashdot Mirror


Linksys Still In Violation of the GPL?

A reader writes:"From a recent post to LKML: "...Clearly, the kernel source that Linksys provided cannot be used to recreate the kernel that they are shipping with their product. Therefore, they have been, and still remain in violation of the GPL." Several heavy hitters have signed this one, including Jeremy Allison and Alan Cox." There's also commentary from David Turner and Bradley Kuhn of the FSF.

30 of 603 comments (clear)

  1. GPL be damned! by Quasar1999 · · Score: 5, Interesting

    I'd be much happier if companies were forced to release good, unhindered specs/APIs... I don't care if you didn't give out your specific implementation, fine... whatever... but give me the means to create my own implementation that can function the same as theirs. Is that soo much to ask?

    --

    ---
    Programming is like sex... Make one mistake and support it the rest of your life.
    1. Re:GPL be damned! by dnoyeb · · Score: 5, Interesting

      That's not too much to ask. We can call it the "QPL." And when they are licensed under the QPL, they can follow the QPL's requirements. Until then, let them abide by their licensing (GPL) obligations.

    2. Re:GPL be damned! by djh101010 · · Score: 4, Insightful

      Is that soo much to ask?

      Not at all. If they want to not release their source code, they're perfectly free to do that...but of course, they're then perfectly welcome to not use GPL software to build from in the first place, what with that being the deal and all.

    3. Re:GPL be damned! by Peter+Eckersley · · Score: 4, Interesting
      That's not too much to ask. We can call it the "QPL." And when they are licensed under the QPL, they can follow the QPL's requirements.

      This might be possible. But it may be very difficult to define "good specs and APIs", in the same elegant way that the GPL twists copyright inside out.

      Oh, and "QPL" is already taken.

    4. Re:GPL be damned! by Horny+Smurf · · Score: 5, Funny
      Programming is like sex... make one mistake, and support it the rest of your life.

      Also, /. readers like to talk about it, but if you're posting to slashdot, you're obviously not doing it!

    5. Re:GPL be damned! by Anonym0us+Cow+Herd · · Score: 4, Insightful

      In some cases, they can't release complete specs for the hardware, because some of their proprietary stuff (or, worse, other people's) is in software.

      If you have secrets to keep, then do not statically link your precious secrets into the kernel. The kernel specifically allows binary-only loadable kernel modules. If Linksys had gone this route, then the community could compile new kernels and still use the secret loadable kernel modules -- without source.

      Even better idea: if you have secrets to keep, not only don't statically link to the kernel, but don't even use open source. Please. That way I'll have more motivation to buy your competitors product.

      --
      The price of freedom is eternal litigation.
  2. Let's be thankful by overbyj · · Score: 5, Funny

    that they aren't charging us $699 to use their stuff!

    --
    No trees were harmed in the composition of this; however, numerous electrons were inconvenienced.
  3. Samba abused too? by Davak · · Score: 4, Interesting

    The article references that Samba has also been abused in this matter. Has this been resolved?

    Davak

  4. Re:oops. by wasabii · · Score: 5, Interesting

    They are shipping software: loaded on the hardware.

  5. Re:Why should they? by BorgDrone · · Score: 5, Informative

    If you use GPL, you are supposed to reveal ALL the code you have even if it parts of it was designed completely independently?

    You have to release all sourcecode that is part of a derived work of the GPL software.

    Since a modified kernel is a derived work of the original GPL-ed kernel they have to release the source to their modified kernel.

  6. Something I've always wondered by nusuth · · Score: 5, Interesting

    If someone released source code under GPL, do they also need to make sure that others can compile it? These guys use "we can't compile it" argument just to prove that the source code is incomplete but suppose that linksys ported linux to INTERCAL++ and released full source code but did not provide the compiler they made in-house. Would that still violate GPL?

    --

    Gentlemen, you can't fight in here, this is the War Room!

    1. Re:Something I've always wondered by michael_cain · · Score: 5, Informative
      I know of no way other than being able to compile and run the resulting binary to verify that the source code provided is indeed the correct, working source code. Your point about the custom compiler may be valid -- that is, I'll give you my source code changes, but they are specific to a particular compiler you do not have. Given full source code, you can presumably port it to whatever compiler you do have. However, there would certainly be lines across which said custom compiler could not step (IMO) and have the whole thing remain GPL-compliant.

      For example, one of the Bell Labs' UNIX gods (I forget which) demonstrated how a C compiler could (a) insert backdoor binary code into applications it was compiling and (b) recognize when it was compiling itself and insert the backdoor-inserting code. Thus none of the source files, for either the compiler or the application, showed that there was a backdoor. They were making the point that the system is not secure if you're initially dependent on some chunk of binary code (or at least you have to analyze that binary, which is much more difficult).

      In this GPL example, if the custom compiler inserted binary code needed to build a working program, and no other compiler working strictly from the source could produce a working program, there's pretty clearly a violation.

  7. Re:Do you really want them to stop? by Xner · · Score: 4, Interesting
    If they had used "an academically based OS" such as *-BSD, they would be on very solid ground legally. The BSD license explicitly allows this use of the licensed software, although it disclaims liability (using that big block of caps we all love so much).

    The GPL license however has been concocted to prove a point, politically. It does not say "here, do with it as you please". It says "I'll show you mine if you show me yours". Quid pro quo. Linksys has taken the quid, now they need to give us the quo.

    --
    Pathman, Free (as in GPL) 3D Pac Man
  8. "Linksco"? by Lodragandraoidh · · Score: 5, Informative

    The merging of Linksys and Cisco was seen by some to be a good thing.

    However it appears that culture of 'security through obscurity', as seen in Cisco router firmware apps has found its way into the Linksys product line, to the detriment of the GPL contract.

    What Cisco is doing is wrong - plain and simple. If Cisco chooses to use copyrighted material under the GPL, they need to live up to their responsibilities under that license. I urge Cisco/Linksys to fix the problem before things get out of hand. You can't participate in the free/opensource software community half way.

    --

    Lodragan Draoidh
    The more you explain it, the more I don't understand it. - Mark Twain
  9. Re:Do you really want them to stop? by bogie · · Score: 5, Insightful

    "Isn't it enough of a victory for the profession that they have used an academically based operating system rather than a commercial one?"

    Umm, No. It isn't a victory at all. Anytime a corporation attempts to co-opt the hard work of others and not abide by the GPL which has gotten GNU/Linux where it is today, its a loss for us all.

    "They could conceivably switch to Windows"

    Fine with me. They can feel free to pay Microsoft royalties on every unit shipped as well.

    I don't mean to sound mean, but you must be new to the opensource movement.

    --
    If you wanna get rich, you know that payback is a bitch
  10. Could no one port it? by siskbc · · Score: 5, Insightful
    What's the big deal anyway? The thing uses proprietary hardware, so in order to reproduce it, you'd also have to have the masks to make the chips anyways. So they stand to lose nothing by not publishing the source.

    I expect someone clever enough could rip out the interesting bits, or port the whole damned thing to another card if interested enough. The philosophy, I believe, is that the community should be able to decide whether it's worth it.

    Or, look at it this way - if no one could conceivably do anything with their source, then they have nothing to RISK by releasing it, huh?

    --

    -Looking for a job as a materials chemist or multivariat

  11. The price of freedom... by EvilTwinSkippy · · Score: 4, Insightful
    The price of freedom is eternal vigilance.

    It may look to the outside like knitpicking. But rights have to defended or they lack all meaning. And we seldom get to pick and choose our adversaries, or the time of battle.

    --
    "Learning is not compulsory... neither is survival."
    --Dr.W.Edwards Deming
  12. Re:What's the big deal, anyway? by frenetic3 · · Score: 4, Insightful

    well, the whole rationale and underlying spirit of the gpl is that the whole community should benefit from their modifications/improvements since they benefited from the preexisting gpl'ed code, and then we should be able to turn around and integrate our own improvements and do whatever we want with the new source. (hence 'open' source)

    and secondly, the thing is probably flashable by software, so you could theoretically add new features to the firmware by taking their source, modifying it, compiling it, and flashing it to the device.

    -fren

    --
    "Where are we going, and why am I in this handbasket?"
  13. Couldn't have happened at a worse time by Snowspinner · · Score: 5, Insightful

    Really, this couldn't be a worse time to go after Linksys. With the SCO case looming over everything, GPL software already looks like a risky investment to people. Now the GPL folks are going to go after Linksys?

    Great. So now the perspective of someone who doesn't know the details of either case (Which probably makes up a large share of bosses who would have to sign off on any adoptions of GPL software) will look at GPL software, and see that using it gets you sued from the outside and the inside.

    This is going to be bad.

  14. Re:oops. by Jonah+Hex · · Score: 5, Informative
    I believe your thinking of this Slashback story with a response from the Linksys PR rep.
    Calm down that jerking knee, then apply ice. In response a post which raised the question of whether Linksys was in violation of the GPL by not distributing, nor offering links to, the source code for the software controlling their 802.11g base stations. A representative from Linksys-PR sent in this note about the "missing" source code:

    Linksys is a strong proponent of both Linux and the Open Source movement. The code within our routers is using User Space code without linking dynamically or statically to any GPL (GNU GENERAL PUBLIC LICENSE) code. Any code which does not have a static or dynamic link to anything covered by the General Public License is not GPL'ed, and can be considered closed source.

    We regret it took some time to respond to this posting. To assure timely responses to inquiries like this in the future, please use the following procedure which complies with the requirements of the General Public License:

    1. Please put your request in writing or in an email addressed to info@Linksys.com
    2. You have to request the code for the specific modules you want. It is not valid to issue a request for any "code you may be using."
    3. Technically, you are also supposed to provide us with a self-addressed stamped envelope, along with funds to cover the cost of providing the code to you. But Linksys will handle requests on a case-by-case basis. Thank you."

    However there's been a couple of additional stories since then about new Linksys GPL releases.

    Linksys Releases GPLed Code for WRT54G They released their code mods on their website.
    Linksys and the GPL, Again Missing code mods from the Linksys webpage.

    Obviously this is something that's going to take awhile to work out, not only with Linksys but other companies that are enjoying the riches of open source code.

    Jonah Hex
  15. Re:Do you really want them to stop? by Cid+Highwind · · Score: 4, Insightful

    Isn't it enough of a victory for the profession that they have used an academically based operating system rather than a commercial one?

    It may be nice to see a major player using Linux, but if nobody makes noise about them violating the GPL, it could have bad repercussions down the road. Not enforcing (or at least trying to enforce) the GPL now gives ammunition to anyone litigating against it in the future. Someone like SCO could argue that not going after Linksys means that the FSF know the GPL is unenforcable, and therefore invalid. Or thgey could argue that not enforcing license terms on the kernel means that the kernel copyright has no value and can therefor be violated without consequences. It's better to send nastygrams now and risk alienating Linksys than not to send them, and risk seeing SCO or MS own Linux.

    They could conceivably switch to Windows

    Good! Linksys DSL/cable modem routers are pretty insecure by default. Let them generate bad PR for Windows insteads of Linux.

    --
    0 1 - just my two bits
  16. Re:What's the big deal, anyway? by cduffy · · Score: 4, Insightful

    What's the big deal anyway? The thing uses proprietary hardware, so in order to reproduce it, you'd also have to have the masks to make the chips anyways

    Err, well, no.

    It actually uses, for instance, a set of chips manufactured by Broadcom. Anyone else building an embedded system and looking to use those chips -- or writing drivers for PC hardware based on those chips -- would have a great deal of use for these drivers.

  17. Kernel modules need not be GPL'd by RunzWithScissors · · Score: 4, Interesting

    If Linksys is implementing a bunch of extra functionality through kernel modules, they would not have to release that source because of the GPL. A module developer can cover the module under any license that they see fit.

    However, if Linksys is using an existing GPL'd module that they have tweaked, then they would be in violation of the GPL. My thinking is that they are employing the former rather than the latter.

    -Runz

  18. Re:Sick of this type of thing by FattMattP · · Score: 5, Insightful
    So they are in violation. Who the fawk is actually going to DO anything other then sign statements and generally complain. WE NEED SOMEONE TO TAKE THEM TO COURT!
    It's not wise to rush to court. The courts don't look favourably on people who do that. Instead, the LK & Samba teams are doing the right thing by trying to resolve this matter directly with Linksys. At some point if this does go to court, the fact that several attempts at resolution were made before filing suit will work in our favour.
    --
    Prevent email address forgery. Publish SPF records for y
  19. That's the point. by 3Suns · · Score: 5, Insightful

    You've just noticed the point of the GPL in the first place. Congratulations.

    People license their code under the GPL because it protects their code from being commercialized. Nobody sells GPL code, and therefore anybody who uses it, must use it per the license. The GPL provides a way to ensure that if you give your copyrighted code away, then nobody will take advantage of that trust. In short, nobody can improve on your property and use those improvements to their exclusive benefit. Any improvements must necessarily benefit everybody. period.

    And if companies don't like that idea, then they shouldn't use GPL code. tough.

    --

    -3Suns

    ~~~~
    The Revolution will be Slashdotted
  20. Re:What's the big deal, anyway? by pavon · · Score: 5, Insightful

    The big deal is that kernal developers wrote this code and they have the (copy)right to determine how it is being used. Linksys has broken the terms of the copyright licence. Just because the kernal developers have a more permissive license than proprietary software does not give people the right to do whatever they want with the sofware. Just because the copyright is not held by a large corporation, does not mean that they can get away with breaking the licence. Just because the license demands source code instead of money in exchange for the right to modify the software, does not make it any less valid. A licence is a licence and what Linksys is doing is illegal - no different than if someone were to ship with copies of Windows in their hardware without paying for licences.

    The main point is that we need to inforce the GPL and out of principle and fairness. It wouldn't be good to crack down on licence violations in cases where we have something to gain and then willingly turn a blind eye to others. We don't want to be seen playing a bait and charge game like what happened with GIF and MP3. We need to be diligent and fair in this manner, find out what source is not being released, and who is holding it back (be it Linksys themselves, or one of their partners), and see to it that they obey the terms of our licence. If we don't, then people will get the impression that we don't care if they violate our license.

    Now, if availability of this code helps someone, then great - that's why the GPL is written the way it is. And at the very least there are people that would enjoy having the code. But even if no one ever used the source, we would be setting a very bad precident not to press this issue.

  21. Re:This is the scarry part. by dissy · · Score: 5, Insightful

    > Now that there are people strongly enforcing the GPL a lot of companies will be
    > afraid to use it. Good job guys at magnifying Microsoft Concerns on the GPL.

    Good.

    Let Cisco/Linksys take WinCE and use it and not pay MS a dime and ignore that licence. Then you can go pitch your same exact complaint to MS when they sue for piracy and demand money for it.

    GPL software does have a cost. Its not money, its to have the changes given back.

    If you dont pay the cost of the licence of the software, you are pirating software and voilating copyright. (Or as the less bright of slashdot call it in RIAA/MPAA articles, you are stealing.)

  22. Re:oops. by ninewands · · Score: 4, Informative
    As Linksys PR said:
    Linksys is a strong proponent of both Linux and the Open Source movement. The code within our routers is using User Space code without linking dynamically or statically to any GPL (GNU GENERAL PUBLIC LICENSE) code. Any code which does not have a static or dynamic link to anything covered by the General Public License is not GPL'ed, and can be considered closed source.

    I beg to differ with their position wrt the correctness of their analysis on how to go about withholding some of their code as 'closed source.'

    As an example of the RIGHT way to do this (whether you agree with the politics of it or not), I would submit that Nvidia withholds the source to their binary-only video drivers, but makes the glue code that adapts it to a specific kernel freely available. In addition, NOT having the source to the Nvidia drivers in no way impedes my ability to compile a kernel.

    The fact that it is not possible to configure, much less compile, the kernel tree available from Linksys's GPL software page indicates that they have withheld code which SHOULD be released under the GPL because of how tightly it is interwoven into the kernel code.

    Just my US$0.02
  23. Are we sure Linksys is in violation? by tuxlove · · Score: 5, Interesting

    I'm not sure I understand why everyone's so sure they're violating the GPL. If the missing kernel modules are entirely original, why are they required to release them under the GPL? AFAIK, you are only required to release source that contains GPL-ed code, or that is based on GPL-ed code. If you write a kernel module from scratch, it is not bound by the GPL - Linux API compatibility notwithstanding.

    Agreed we don't know if their code is original without seeing it. But if it's original they're not obliged to show it. That's the catch-22 of the GPL I've always found interesting.

  24. FSF Response: Cool Down by Royster · · Score: 4, Informative
    Found on the LKML list.


    Subject: Linksys/Cisco GPL Violations
    From: David Turner (novalis@fsf.org)
    Date: Mon Sep 29 2003 - 10:22:47 AKDT

    To Linux Developers Concerned about the Linksys/Cisco GPL Violations:

    We are in ongoing negotiating with Linksys/Cisco about this issue. Information from Andrew Miklas and others has been very helpful to us in our negotiations, and we encourage others to share with us any technical information about this or any other GPL violation.

    This isn't the first GPL violation we have dealt with; we've been actively enforcing the GPL for over ten years. Our usual practice is not to publicly announce details of ongoing violation negotiations, because we find that private negotiation yields quicker and better cooperation. By building a relationship with violators where we are helping them to come into compliance, we avoid having to fight in court, and are able to spend less resources per violation. Our number one goal in any GPL violation case is to get proper and full compliance with the license; everything
    else is secondary.

    GPL violations sometimes take time to resolve. We wish that we could force resolution quicker, but we haven't found a way to do that. We have, however, discovered a variant of Brooks's Law: adding more lawyers to a GPL violation usually makes it take longer. Lawyers are reluctant to admit to mistakes, because they fear it could be used against them. Engineers and product managers are typically interested in fixing mistakes, so we try our best to work with them first before escalating to legal teams on both sides. Such escalation has happened on this violation, so it will take additional time to resolve the matter.

    In addition, we are leading a coalition of many copyright holders in the WRT54G, as Linux is only one part of a large body of GPL'ed software in the product. We formed this coalition because, having done enforcement cases for a product with a broad range of copyright holders before, we have found that separate enforcement actions and/or law suits from individual copyright holders make attainment of compliance more difficult.

    We will continue to do everything necessary to obtain full compliance on this and any other products where violations can be confirmed. On this particular violation, we will keep the community informed when issues come up that impact the rights of everyone whose work is being distributed by Cisco or any of its subsidiaries.

    If you are a copyright holder on software in the WRT54G, or any other Cisco product, you are welcome join this coalition. Please email for details.

    Sincerely,

    David Turner, GPL Compliance Engineer, FSF
    Bradley M. Kuhn, Executive Director, FSF
    --
    I have discovered a truly marvelous sig, unfortunately the sig limit is too small to contain i