Slashdot Mirror
Is Sveasoft Violating the GPL?
Ron Harwood writes "First, Linksys was violating the GPL by not releasing their source for their Linux implementation on the WRT54G wireless router and WAP54G access point. When this was rectified, third party firmware started showing up. Well, now it looks like Sveasoft (one of the third party developers) has decided to restrict access to their modified source code to subscribers - that also will need to pay $49 for a CD rather than being able to download it." The thread summary at DSLReports only makes it clear that this is all very complicated.
So, are the subscribers allowed to redistribute the modified source that they purchase? If so, there's no violation (at least, not on that point). If not, then yes; they are in violation of the gpl.
I think this is right at the bleeding edge of where the GPL draws the line...
The GPL doesn't allow code modifiers to keep their code secret, but it doesn't reqire that the code be posted for free on the Internet either. They can charge a reasonable fee for the obtaining, making, and delivery of the disk and/or download service... you might be able to try to make a case that they're charging too much for such services, but the GPL doesn't say they have to provide such services at cost. This may be a bug in the GPL according to the purists, but the seem to be within the letter of the license.
However, here's the catch: The GPL requires that the people who get the software must also be given the GPL as a license option that they may apply to the copy they just got. (The redistributor can offer any other license they want too, but they have to give the striaght-up unmodified GPL as another option if they do.) Therefore, only one person needs to pay the fee, and then, they can post the code for free download.
No need to GNU/Worry. We'll be seeing this code being forked on Soureforge shortly I think.
If you read the GPL closely you will notice that it says that in exchange for adding a warranty you can charge for the product, it does not require you to make a version without a waranty availible. This is both a strength and weakness of the GPL, its what I've always hated but its why its commercially viable.
There is no way out of this cycle. The lawyers will be getting rich, the "small" guys will still not have the $$$ to protect their GPL licenses in court, and the circle will continue, albeit viciously.
Isn't that a specific model of pillow at Ikea? :)
+5:offtopic,but anti-American
I run wifibox instead of Sveasoft. Its GPL compliant and has SNMP. Hmmmm, pretty graphs.
Strange women lying in ponds distributing swords is no basis for a system of government.
3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:
Yes, you can choose to distribute using an ftp server, but how exactly does one go about recovering their distribution costs that way? By putting it on a CD and charging for snail mail at least you can break even on your distribution costs. Of course, why they don't just put the CD in the box with the router is beyond me.
How we know is more important than what we know.
Everything was fine, up until they tried to prevent peopel from redistributing code. Last I checked, you had to pay to get the binary AND the source code. Nothing in the GPL says you have to give out the source, or binary, for free. It says that if you give out a binary, you have to give out the source. So you are free to charge for your software, but the source had better be on the disk as well (or available on the web).
Where they cross the line is in trying to stop people from distributing modified version. Nope, sorry, can't do that. That's the "viral" part MS complains about. Even if your product costs money, someone is free to make their own version that does not for free, the GPL gaurentees that.
This is really the thing that commercial companies worry the most about. Source distribution, though generally not done, isn't a big threat to most of them. The threat is then that with that source people are allowed to make their own versions of the product for free.
However, as you said, if you can't deal with the GPL's rules, don't use GPL code. I have no sympathy. The redistribution part is real, real clear.
As the (amazed) owner of a Linksys WRT54G, I've been following this issue for a while, but not as closely as some other have, I'm sure. Here are my impressions.
Sveasoft is indeed walking the line of GPL compliance, but they're doing a good job at it. The firmware they produce is quickly adding features with very fast release cycles. They welcome community involvement with the firmware and accept new features and patches readily.
Because the firmware is being used by many people who don't use Linux normally, the GPL is new to most of them. Early posts in the Sveasoft forums confirm this, calling the original whistle-blowers "GPL whiners," as if people asking for GPL compliance were simply cheap. Little did they realize that Sveasoft is building on Linksys who built upon GPL software to begin with.
Why should Sveasoft get money for something which is mostly configuration and frontend polishes of what the original programmers created?
Because they do it really well. They provide the service which falls perfectly into a "profit for the service, not the product" business model. I use Linux heavily, but I'm really not interested in cross-compiling source code which could easily turn my $70 router into a brick. Yes, I can reflash it by cracking the case and setting up a tftp server -- but It's just not something I want to mess with. To me the $20 they ask for an annual subscription (including informal tech support) is worth it.
I would check out a sourceforge fork if it was created and developed, but I am skeptical that it could match the features of the Sveasoft firmware.
They've developed a good community, and I'm not too bothered that it's slightly off the beaten path of the normal Open Source development process.
That policy does not conflict with the GPL in any way, because the GPL does not require Sveasoft to provide subscriptions.
This is quoted directly from the Sveasoft Forums.
> Okay, so here is the Sveasoft business model, as I understand it:
>
> 1. Sveasoft produces GPL'ed code which runs on a GNU/Linux based
> router.
>
> 2. Sveasoft distributes pre-releases of their software on a
> subscription
> basis and provides priority support to the subscribers.
>
> 3. The pre-releases are offered under the GPL and subscribers are
> entitled
> to distribute them publicly if desired.
>
> 4. If a subscriber *does* redistribute the pre-release code
> publicly,
> before it becomes a production release, they are considered to
> have
> "forked" the code and do not receive future pre-releases under
> the
> subscription program.
>
> 5. Once a pre-release works its way through the testing program
> and
> becomes a production release, it is made available under the
> GPL for
> public download, both "free-as-in-speech" and "free-as-in-
> beer".
>
> James, please step in here if I've missed anything, or if I haven't
> accurately characterized some piece of the above.
>
> I look forward to getting the FSF compliance lab's feedback on
> Sveasoft's
> business model. Thanks for your help!
> Hi Rob,
>
> I would just underscore that whenever we distribute binaries they are
> *always* accompanied by the source code.
>
> Subscribers are free to do whatever they like with the pre-releases
> with the proviso that if they distribute it publicly we are not
> responsible for support and they need to develop the code further
> themselves from that point forward.
I see no problems with this model. If the software is licensed under the GPL, and you distribute the source code with the binaries (as opposed to making an offer for source code), you are under no obligation to supply future releases to anyone.
Please be clear that the subscription is for the support and distribution and not for a license.
Peter Brown
GPL Compliance Manager
I'm sure I'm not the only one pissed at them. First, non-subscribers are not allowed to download the newest version of their firmware for the Linksys WRT54G wireless router. You must pay $20 for the prviledge or use the release that is about six months out of date. Fine, I understand that they have bills to pay too, just as long as they don't slip on the release schedule for the free version (blatant GPL violation non-withstanding).
Now, here's the part which burns me. As of last Sunday, access to the Sveasoft website has been discontinued for those not paying their $20 yearly fee. Before that, you could download the free version of their firmware from them or check out their forum for troubleshooting etc. No more. Non-subscribers can't even browse - instead we are told that "Sorry, but only users granted special access can read topics in this forum." Sveasoft says that we should try linksysinfo.org instead, yet the amount of information there is sorely lacking. Furthermore, the admin there would make George Orwell proud - any hearsay about Sveasoft will get your IP banned and your message promptly thrown into the void. Straight from the horse's mouth:
"It is not a "I hate Sveasoft for closing his site" debate. Anyone thinking and debating that issue will be have a Temporary ban, as I have better things to do than listen to people whinged about why sveasoft closed and the GPL Issues."
Sveasoft themselves tolerate no dissent either, a poster at linksysinfo.org reported that after reporting a bug in the firmware, they banned him for "an attempt to create a flame and is against our posting guidelines. Should you wish to create further problems I will contact the authorities in Germany and report that you are criminally trespassing in our computer systems. It is up to you. Go ahead - make my day." Yikes! Not very nice people, are they?
I could go on and on, like how Sveasoft masquerades as an average user in his forums and on linksysinfo.org helpfully suggesting we contribute $20 for their wonderful firmware (that's right, I'm talking about YOU Wolf!), but the fact is that this is totally against the spirit of Open Source and that it is a shame that such a promising project has been ruined by greed.
I'm not affiliated with Sveasoft, although I'm running their firmware on two access points of mine. I've browsed their forums, and while I'm not a subscriber I've considered it. Much of this discussion appears to be misleading of the actual facts as I see them.
Sveasoft modified the GPL'd Linksys firmware adding a lot of features, capabilities and bug fixes. Originally, the firmware and source code were freely available on the Sveasoft ftp site. There were usually two versions: a work-in-progress and a latest-stable-release. The work-in-progress was exactly that - new features that may or may not be working, old features that might be broken, and miscellaneous instabilities or anomalies. The source code for the work-in-progress was not always available, but then people were told not to use the work-in-progress unless they had a specific reason to do so. People were told to download the stable release unless they were willing to help test the unstable version or put up with it's limitations.
Tech support was handled on the forums. This worked pretty well for knowledgable people, but became increasingly difficult when people would download the work-in-progress and then have things that wouldn't work. A few months ago, several individuals started complaining about GPL responsibilities and demanded the source-code to the work-in-progress be posted. This despite the fact the work-in-progress wasn't an actual release, but a testing copy.
Sveasoft became disillusioned by the amount of vitriol and demands from these annoying individuals and decided to switch to a subscription basis for the prerelease versions. The source code and binaries for release versions would still be available for download, but the bleeding edge would only be available to people who paid the $20/year subscription or worked out an arrangement with Sveasoft. They said they'd be more than happy to waive the fee if you were contributing something to the effort. That could be help with coding, writing documentation, online support, testing features, or many other ways to assist their efforts. Propose something to them.
They never refused to release the source code. They release the source code when they do an actual release of the firmware, when it's nice and stable and working. Sveasoft has said everybody can freely redistribute the release versions of their firmware and source code. They've never said that you cannot redistribute the pre-release versions, but that if you do, you've basically forked the code and it's your release now. You provide all support and further maintainance on it and you forfeit your subscription to future prerelease versions.
None of this I have a problem with. It's an unreleased version of the code; they shouldn't be expected to support it. If one of my beta testers leaks my code to the internet, I'm certainly not going to be sympathetic if someone downloads it and has problems with it and calls my tech support for help. Why should Sveasoft? They've done a nice service to the community and released many versions of firmware that are greatly advanced over the standard Linksys versions. It's annoying when a few obnoxious weekend-lawyers try to nickel-and-dime the literal words of the GPL rather than respect the intentions and values of the people who wrote it. Nothing Sveasoft has done persuades me that they have anything other than these values at heart and that they're being unfairly singled out for persecution. It's unfortunate that a few annoying individuals have to ruin things for the rest of us.
I wish Sveasoft the best of luck going forward, and congratulate them on what they've accomplished so far.
(Get together with another subscriber and compare source first, to see if any "tags" were placed in the source, too.
It should be much easier to remove the tags from the source code than from the binaries.)
Those who sacrifice security to condemn liberty deserve to repeat history or something. - Benjamin Santayana
Money for support and the code is free
Do not let all the flames fool you, this is my real experience with Svasoft:
Sveasoft is not charging $20 dollars for the binaries. The binaries are free.
Svaesoft is charging $20 dollars for access to the support forums. Nothing ilegal there. I paid $20 dollars and the support and I am more than happy with what I got.
There are two types of binaries:
1) Stable firmware is released for free in binary form, just as many Linux distributions are available for free. Yu can dwonload those right now from the Linksysinfo.org site. If you want the source code of the freely availabe stable releases you can buy it via a $50 dollar CD, if the $50 were really substantialy above the real cost of generating and shipping the CD, there would be a market of people who would profit from re-distributing that seme CD for less, as anyone can do that under the GPL terms. It happens all the time with all major Linux Distributions.
2) Pre-release bianaries are shared only with forum suscribers (but still free). Forum suscribers are allowed access to the source code (I am a subscriber and just to check I re-downloaded the latest Alchemy pre-release 5.1 10 minutes minutes ago). According to the GPL I can redistribute the binaries and the source code. Sveasoft support agreement says that if I decide to re-distribute myself I terminate my support contract (not my rights and obligations to re-distribute according to the GPL terms), and that Sveasoft has no obligation to support the people to which I decided to re-distribute.
Svasoft has not re-written a single iota of the GPL license. He only wrote the terms of his support agreement, and those terms do not contradict or oppose the GPL in any way, as the GPL does not dictate support terms. Sveasoft is respecting every letter of the GPL license.
All the fuss is being generated by people who misunderstand the GPL, the GPL does not mean free (as in bear) support, it means access to the source code and the freedom to modify, fork your own code and/or re-distribute. You have the freedom to buy support from anyone, or support that yourself, or to make money supporting it for others. You have the right to fork the code if you want and create your own distribution.
Sveasoft understood better than most the GPL and how to create a support model that does not depend on charity and where slackers do not get an absolutely free ride. Yet even slackers get a great deal from stable firmware.
He figured how to get the benefits of GPL code without many of the perils of the "tragedy of the commons".
Despite all the moaning and groaning we are hearing, this is actually a very good development for the GPL community. A sustainable model to support the devolopment of more GPL software.
People who are willing to spend time and money to debug bleeding edge software, have now found a way to build a community that supports itself and its key developer. The entry barrier is incredibly low, $20 dollars, but despite the low $20 barrier, that seems to have been enought to exclude all of those that make a lot of noise but no real contribution to the GPL community. They are mostly posting flames here and at DSL Reports, while the Sveasoft forums are getting more quiet and productive as the community is being self selected and more focused.
Real men and gals that want to support and develop the GPL commons, are very happy and working as hard as ever to develop great new features. Anyone with time and $20 dollars can join the effort.
Once the firmware is stable and debuged it will be contributed back to the greater commons. If for any reason Svasoft wanted to delay that, i am sure someone in the fourm, will decide to quit his/her support and contribute the code to the community ( I know I would), but I am also confident that Svasoft will do that, as he did very recently with the 4.0 firmware.
Do not let the noise fool you, the GPL is safe and getting stronger.
Hello everybody.
Sorry I join this discussion so late. I might be the one who got that debate started.
My story is not a short one which is why I posted it on a website.
A quick overview: offered binary for download, got serious threat emails from Sveasoft about it, they had my webhost cancel the account, my email provider delete my mailaccount and more: they claimed publically that I was defaming them just because I posted their emails.
Read the entire story, it's worth it.
It tells a lot about James Ewing.
TheIndividual
http://www.30mb.com/x/annejuul/