Slashdot Mirror


Mambo Users Threatened

An anonymous reader writes "Newsforge has an article about a recent dispute over code in Mambo (a Free CMS). A Mr. Connolly has sent threatening emails to Mambo users over this, a move John Weathersby of OSSI was quoted as saying 'That's ... not prudent.' The dispute is over some trivial code that checks whether a story is a lead story and if so displays it across multiple columns, as it's a modification of GPL code the Mambo team maintain it must remain GPL but Mr. Connolly claims otherwise."

27 of 254 comments (clear)

  1. Inaccurate summary by Anonymous Coward · · Score: 3, Informative

    The Newsforge report says that Mr. Connolly never redistributed the disputed code... therefore the disputed code is _not_ under the GPL. Under the GPL, you can do what you like with the code; you only have to GPL your modifications if you re-distribute.

    1. Re:Inaccurate summary by Max+Threshold · · Score: 1, Informative
      If the code in question was derived from a GPL project, it doesn't matter if he distributes it or not; it's GPL, period. That doesn't mean he has to distribute it, though. From the various sources, it looks like what happened is he contracted somebody to make a modification to a GPL project, with the agreement not to distribute it. The modification was then "leaked" to Mambo. So this isn't a copyright issue or a licensing issue. It's a breach-of-contract issue, and it's entirely between Connolly and his developer.

      If the developer is found to have breached the contract, what does that mean for Mambo's use of the code? IANAL, but I think they have no legal responsibility to Connolly and can continue to use the code.

    2. Re:Inaccurate summary by Anonymous Coward · · Score: 1, Informative
      If the code in question was derived from a GPL project, it doesn't matter if he distributes it or not; it's GPL, period.

      From the GPL itself:
      b) You must cause any work that you distribute or publish, that in
      whole or in part contains or is derived from the Program or any
      part thereof, to be licensed as a whole at no charge to all third
      parties under the terms of this License.
    3. Re:Inaccurate summary by pikine · · Score: 2, Informative

      Actually, according to the developer in the question of breach of contract, there was no contract or copyright agreement signed, and the code contributed to Connolly was itself based on another GPL code (a merely 9 lines of code). So it seems that Connolly paid someone over the course of 8 months just to get 9 lines of code already written by someone else.

      --
      I once had a signature.
    4. Re:Inaccurate summary by dustman · · Score: 3, Informative
      Here comes some pedantry:

      If the code in question was derived from a GPL project, it doesn't matter if he distributes it or not; it's GPL, period.

      No, it's not. It's derived from a GPL work.

      GPL section 2b states:
      You must cause any work that you distribute or publish, that in
      whole or in part contains or is derived from the Program or any
      part thereof, to be licensed as a whole at no charge to all third
      parties under the terms of this License.


      So, if you create a derivative work and you distribute or publish it, you must do so at no charge under the terms of the GPL.

      This doesn't mean your derivative work is GPL'ed, at least "not yet", not until you publish or distribute.

      This is the biggest problem that the GPLv3 is going to try to fix, if it ever gets written. The problem is that people can write "web apps" (or any remote app) like this, that don't require a binary or source to be distributed to end users... So, people can make modifications, host their own versions, and not be in violation of the terms of the GPL, although they are usually in violation of the spirit of the GPL.

      On the flip side, one of the FSF's goals is to allow private modifications of works (internal to a company is the common example) without requiring those modifications to be distributed, so they can't just say "any derivative work is GPL'ed, even if you never show it to anybody else". (It's probably not possible to get away with this under copyright law anyway, although with the latest batch of garbage laws that have been passed, I'm sure someone could try).

      Striking a middle ground between these two goals is difficult.

    5. Re:Inaccurate summary by enrico_suave · · Score: 4, Informative

      actually apparently he *did* redistribute it... at least according to the guy who did the contract work

      "I should mention that Connolly has distributed copies of Mambo under the GPL on his homepage (http://www.literatigroup.com/furthermore/, now removed, screenshot available) " -- Emir Sakic

      *shrug* I think Sakic summed it up nicely...

      To summarize it:
      1) The code delivered to Brian Connolly is not the same as the code implemented in Mambo.
      2) The code delivered to Brian Connolly was derived from GPL, Copyright Miro International Pty.
      3) Brian Connolly distributed copies of Mambo that had the so-called 'infringing' functionality under the GPL.
      4) There are no copyright assignments with my signature on.
      5) Brian Connolly has no trademarks or patents on anything resembling the disputed functionality.

      --
      Build Your Own PVR/HTPC news, reviews, &
    6. Re:Inaccurate summary by Anonymous Coward · · Score: 2, Informative
      If the code in question was derived from a GPL project, it doesn't matter if he distributes it or not; it's GPL, period.

      Completely wrong. The GPL is a license, not a contract, so it doesn't have any power to force code to be anything. It merely states how someone can get more rights than copyright law provides if they follow certain restrictions. Thus, if someone modifies some GPL code, their work is still their own.

      If someone else distributes this combined work without the permission of the copyright holder of the modifications, the result is a copyright violation of both the GPLed work (which can't be distributed in a form that contains non-GPLed code) and the modifications. (The code does NOT magically become GPLed just by touching GPLed code -- that is a Microsoft "viral" FUD idea.) The way to resolve such an occurance is to either release the modifications under the GPL or to remove them from any distributed work.

      Now, if the copyright holder distributes the code with a LICENSE file that indicates that the code is under the GPL, then you can argue that they have taken steps to license their code under the GPL. That doesn't sound like the case here, however.

    7. Re:Inaccurate summary by arkanes · · Score: 2, Informative
      If it was *not* a work for hire (which means that the copyright rests with the person paying for the work, rather than the developer), the Connolly is totally out of luck. Going from the developer to him is "distribution", and the GPL applies. Internal distribution at a company is only internal because it's the company holding the copyright, with developers performing works for hire.

      If it _was_ a work for hire, then the contrbibution back to Mambo may be copyright infringment (developer says it's a re-implementation, not the same code), and that'd be a civil case between Connolly and the developer. If Connolly wins that case then Mambo will need to remove the code, but I doubt they (or users) would be liable for damages.

    8. Re:Inaccurate summary by arkanes · · Score: 4, Informative
      Clarification: The developer in question made many more modifications that this specific one, but this one is the one that got put back into Mambo and is pissing him off.

      From what I can tell from the articles, I don't see where this guy has anywhere to stand. Assuming that the developer is telling the whole truth, then he's got nothing - it's the developers copyright, not his. Even assuming that Connolly is telling the whole truth, I find it hard to believe that he's going to be able to any real damages. The code in question is small and the people distributing it are doing so in good faith. Trade secrets obviously won't apply to a frigging "leading story" block. Connolly also claims that he hasn't actually confirmed that the code in Mambo is similiar to the code in his product - why would anyone listen to legal threats when he hasn't even performed this minimal due dilligence?

    9. Re:Inaccurate summary by Platinum+Dragon · · Score: 3, Informative

      Not entirely accurate. According to the guy who wrote the code, he just wrote a different implementation of the idea, and gave that to Mambo.

      Then this cases hinges on whether Sakic's contract with Connolly includes some kind of non-compete clause. If not, then Connolly can whine and complain all he wants, but it still won't give him a legal leg to stand on. If it does, then Sakic may have violated that part of his contract by providing the reimplementation to Mambo, and he is in legal jeopardy.

      It sounds like the code in question is legally clean since it was derived from GPL-covered source, and that other potential customers know to put a non-compete into Sakic's contracts in the future--if he ever gets such contracts again.

      --

      Someday, you're going to die. Get over it.
    10. Re:Inaccurate summary by nightterror · · Score: 2, Informative
      --
      Photons have mass!!?? I didn't even know they were Catholic...
    11. Re:Inaccurate summary by dustman · · Score: 2, Informative

      Perhaps I was unclear:

      I don't consider it against the spirit of the GPL to keep your changes private. Like I said in my original post, this is actually one of the goals the FSF is trying for.

      But, consider this: Say some nice app like Mozilla were written under the GPL. (Mozilla isn't GPL-only, but use your imagination). I could take the app, make some changes, and then never actually distribute the app, but host a server online where people could use the app via X11 or VNC.

      In the future, software vendors are probably going to give subscription apps a try. If everyone has wireless 100Mbps net access available anywhere, that is more than enough bandwidth to run a remote desktop. Instead of buying a new version of MS Office every year, MS will instead charge a subscription (they are already doing subscription pricing), but you will never even have a binary on your local machine that is running.

      If binaries are never being distributed, the GPL (which relies on copyright law) does not apply. So, you might create a nice app, but if someone can just host it on some online server, and charge people $10 / month to "use" it.

      That is how the spirit of the GPL can be violated.

      A real life example:
      The first popular internet chess service is still up and running, it's called freechess.org, or FICS (Free Internet Chess Server). FICS's codebase was originally GPL'ed.

      Another service started up, I don't know which one, which used the FICS code, and charged people a monthly amount to play. The FICS people were upset that these rivals took their code, were charging people, and were not submitting their changes back.

      But, this was allowed under the terms of the GPL. I hope you'll agree that it's in violation of the spirit of the GPL.

      Now, the FICS code is closed, which is a real shame.

  2. For those who have no idea what this is about by io333 · · Score: 3, Informative

    CMS is "content management system." It is a program to make something like a "newspaper" type web page -- what you might see when you go to NYTimes.com.

    It took me a long time to figure that out, so I think I should get some upmodding here. Oh BTW, I have mod points myself right now, so if you are *bad*, I'm commin' after you ;)

    1. Re:For those who have no idea what this is about by Anonymous Coward · · Score: 5, Informative

      If you are jumping up and down about how long it took you to figure it out and upmodding and threatening mod points, atleast provide a clicky http://en.wikipedia.org/wiki/Content_management_sy stem

      And of course I post as AC to avoid karma whoring.

  3. Seems to be /.'ed now... by (H)elix1 · · Score: 4, Informative

    WARNING Issued to Users of Popular Software Application
    Wednesday, September 15, 2004

    CHICAGO, September 15, 2004 -- The following is an Open Letter from Furthermore, Inc. to the Open Source and Technology Community Regarding the Misappropriation of Intellectual Property:

    If you are presently using the software application "Mambo OS" in any release post October 3, 2003, you and your organization are potentially exposed to CIVIL LITIGATION and possibly CRIMINAL PROSECUTION.

    Our company, Furthermore, Inc., owns the code that enables the appearance and management of the "Lead Story Block" in Mambo. This code was taken without our permission by a lead member of the Mambo Development Team and put into Mambo's core program. Our copyright was then attributed to Miro International. Here we are reiterating our ownership of the Intellectual Property and issue a formal WARNING that we are preparing to file legal action against users of this application.

    Do know that we've tried to resolve this cooperatively. However, the leadership of the Mambo Project is intractable in their misunderstanding in fact and law. They wrongly contend that since the code was put into the "General Public License" pool, it too must be GPL. Also, they wrongly contend that as our trade secrets have been variously modified, they are immune.

    Bottom line: As express permission was never granted, their transfer of copyright ownership without express written authority is null and void. Also, the right to use any/all derivative works also was/is not granted as defined by law. Lastly, using a trade secret to gain unfair advantage is by definition against the law.

    Anticipating that problems like these would be greatly amplified by the Internet, the US Congress recently and significantly strengthened the power of the law. As a result, the consequences of an infringement have never been more stringent. In addition to the punitive monetary damages that are being awarded in related civil suits, the law now makes these types of activities a federal crime.

    In 1997, Congress passed the No Electronic Theft Act; and in 1996, it passed the Economic Espionage Act.

    The NET Act makes copyright infringement a crime. It's a misdemeanor if it is done for commercial advantage or private financial gain, or by making or distributing one or more copies of copyrighted works that have a total retail value in excess of $1,000 within a 180-day period. It's a felony if it involves a minimum of ten copies of copyrighted works with a retail value of more than $2,500 within a period of six months. To date, NET Act related cases primarily involve pirates accused of illegally copying and distributing copyrighted computer software over the Internet. Sentencing under the NET include substantial fines and imprisonment of 3 to 10 years.

    The EEA makes it a crime to steal (or misappropriate) trade secrets. The Act makes even the attempt or conspiracy to steal or misappropriate trade secrets a crime. The Act includes both direct and indirect theft of a trade secret, including its alteration or destruction. Individuals and organizations convicted of violating the EEA face severe penalties. Section 1832 of the Act covers theft of a trade secret "that is related to or included in a product," including both direct and indirect theft of a trade secret, including its alteration or destruction. A person convicted of violating Section 1832 faces a fine of up to $500,000 or a prison sentence of up to 10 years, or both, while any organization that commits any offense described in Section 1832 may be fined up to $5,000,000.

    Lastly, we deeply regret that we have no choice but to seek remedy from the users of Mambo. Mambo has explicitly informed us that "the Mambo project can offer no further assistance in this matter. Mambo can not be party to any disputes between individuals or companies concerning the use of Mambo." Plainly, it's you the user they've left holding the bag.

    Sincerely,

    Brian Connolly
    President
    Furthermore, Inc.

  4. Huh. by rincebrain · · Score: 5, Informative

    I could be misunderstanding it, but Connolly seems to be saying his code, which he paid a developer to write and told he could not GPL and rerelease it, was put into the Mambo main branch, while his developer is saying it's similar code in function, not [necessarily] form, and reimplementing it for free after being paid to write a proprietary version isn't the same as submitting the code he wrote for Connolly to the Mambo source tree. I could be mistaken here, but couldn't this easily be resolved by a simple comparison of the Mambo and Futuremore source code? I mean, really.

    In addition, the Newsforge article's summary claims that Connolly's code is out in the wild, whether it should be or not. That's not been proven, in any of the data I've read. Shouldn't the dispute first resolve whether the code is actually from the Furthermore source before the issue of licensing even comes up?

    I don't know about you, but this does sound a lot like SCO...
    10 PRINT "Your open source project has our code!"
    20 PRINT "Prove it!"
    30 PRINT "We don't have to prove it, it's our code!"
    40 GOTO 20

    --
    It's only an insult if it's not true.
  5. RTFA - seems open and shut, in Mambo's favor. by Attitude+Adjuster · · Score: 5, Informative
    Seeing as people seem to be posting Connelly's claims, or random craps they've thought of withour RTFAing, I'll post this...

    While the first bit of the newsforge article almost goes out of its way to give Connelly's claims the benefit of doubt, the most interesting bit is the coder's (Sakic) reply at the very very end of the article (I know most of you didn't or can't read that far ;) ).

    To summarize it: 1) The code delivered to Brian Connolly is not the same as the code implemented in Mambo. 2) The code delivered to Brian Connolly was derived from GPL, Copyright Miro International Pty. 3) Brian Connolly distributed copies of Mambo that had the so-called 'infringing' functionality under the GPL. 4) There are no copyright assignments with my signature on. 5) Brian Connolly has no trademarks or patents on anything resembling the disputed functionality.

    Emir Sakic http://www.sakic.net

  6. The Newsforge Article runs Sakic's response by einhverfr · · Score: 2, Informative

    Sakic claims that the code implimented for Mambo was not derived from the Furthermore code, that these were independent implimentations, and that the Mambo code even had differing features.

    Secondly, IANAL, but I don't think an end user is really subject to litigation in this case. SCO vs. DCC was mostly thrown out and the court concurred that DCC was *not* required to certify that it was not either using Linux or contributing to it. Using software which has infringing code is probably not a crime to my knowledge. Distributing it is. So he could go after distributors, but this is like saying: "You unwittingly bought a counterfit copy of WIndows. We will charge you with piracy." I don't think that this would fly in court.

    IANAL, but Connelley's legal analysis seems to be as strange as SCO's. The Newsforge article seems to indicate that he has not even done code comparison! As a professional, if I suspect that something is wrong, this is the *first* thing I would do rather than the last. Indeed he could be opening himself up to serious lawsuits (tortuous interference). In general, though IANAL, I would think that a lawyer would suggest investigative work before public announcements. This tells me he probably hasn't talked to one....

    --

    LedgerSMB: Open source Accounting/ERP
  7. Re:Thanks /. by Anonymous Coward · · Score: 1, Informative

    You can download Mambo (CVS Version) at another of the core developers websites - Phil Taylor

    http://www.phil-taylor.com/

    Phil was also personally attacked by Connerly - and even his faith as a Christian was strongly attacked in emails from Brian.

    Also read Brians comments at

    http://www.mamboportal.com/content/view/1562/

  8. Wrong by fforw · · Score: 4, Informative
    If the code in question was derived from a GPL project, it doesn't matter if he distributes it or not; it's GPL, period.
    According to the Frequently Asked Questions about the GNU GPL there is no need to give away the source for derived GPLed code which is only used privately (by yourself or within an organization)
    --
    while (!asleep()) sheep++
    1. Re:Wrong by Anonymous Coward · · Score: 1, Informative

      "According to the Frequently Asked Questions about the GNU GPL there is no need to give away the source for derived GPLed code which is only used privately (by yourself or within an organization)"

      Sometimes this can be seen as a problem when using the GPL for your projects. If you have (for example) a web-application and use GPL to license it, then anyone can take your code, use it, and not release their changes.

      Naturally this concerns people who use the GPL because it allows them to always get updated versions of their own code. On the network, the code might never be "distributed", and the changes might never be released back to the community.

      At the moment, it seems that the only solution for new projects is to use the Affero General Public License, and hope that the next version of GPL will deal with 'hosted programs'. The Affero license says something along the lines of "if the original app had an option to download the equivalent source-code, then you must not remove this facility in modified versions"

      But as for the GPL, you might not be getting all the protection you thought if it's a web-app.

  9. Re:Sounds like a slashdotting... by davron05 · · Score: 2, Informative

    You mean the google cache or the coral cache?

  10. Comment from a Mambo Developer by broeker · · Score: 5, Informative

    Brian Connolly will distort this story every way til Tuesday, but there is only one set of facts that matter in this case:

    1. Brian Connolly paid a Mambo Open Source developer to modify 9 trivial lines of an existing GPL component.

    2. One month later, the developer added a similar technique to the Mambo core.

    3. Brian Connolly's actual code NEVER appeared in the core Mambo software in any way shape or form.

    4. Therefore, any of Connolly's claims are based solely on protecting his big "trade secret", or the very "idea" of displaying a leading story following by two columns of headlines.

    5. Any programmer knows how trivial this is, and that this layout technique has been in use since the advent of HTML tables. It is not a "trade secret" that has any protection under any law.

    Please contact Brian Connolly and ask him to produce the offending code. He will not be able to because it simply does not exist.

    - A Mambo User and Developer

    p.s. Furthermore also claims it never distributed the software. This is not only false (we have screenshots of his old download section) but irrelevent given the facts above.

  11. 9 lines of code?! by Anonymous Coward · · Score: 4, Informative

    Emir Sakic, the developer of code in dispute:

    "I modified an existing Mambo frontpage component and hardcoded nine lines of code that would display the leading story."

    "A month later (October 3, 2003) I developed similar functionality and contributed it to Mambo core. I did not use the same code as the nine lines delivered to Connolly. I implemented a different, dynamic solution with selectable frontpage settings."

    "Mr Connolly still claims that Mambo contains the code developed for him when in fact it does not. If you would take a look, you would see that the code in Connolly's site differs from the code in any version of Mambo.
    "

  12. Re:I think he might be right by Fnkmaster · · Score: 2, Informative
    Actually, if you read it, the developer claims there was no copyright assignment or explicit contract in place. Without that, the contractee really only has the right to use the code developed - the money changing hands is generally considered acceptance of a contract for the time involved and services rendered, but that doesn't involve a transfer of copyright unless there is a document signed by both parties or comparable evidence of contractual agreement to such a term.


    I don't think this looks bad for OSS. Don't try to operate a technology-based business on top of other people's work without a basic understanding of the laws involved, just like any other business. This dude has no fundamental right to his business, he needs to take responsibility for putting proper contracts and documentation in place when he hires developers, and be very clear and explicit about handling copyright issues with his code, just like any other techology business. If he can't handle that, and he can't keep a competitive edge for his business, well, cry me a river for this moron.


    This stuff normally doesn't happen because companies "paper trail the fuck out of it" (to use the software industry term of art) when it comes to employment agreements, independent contractor agreements, and copyright assignment agreements, and for good reason.

  13. Emir is underhanded, Connolly is dense by Anthony+Boyd · · Score: 5, Informative

    There seem to be a lot of misunderstandings. I bothered to read the article, the responses (they both added comments to the Newsforge article), and some of the messages posted.

    Some people seem to think that because Mambo is GPL, the code modifications must be released under the GPL. This is only true if Connolly distributes his application. If he keeps the code "within his walls" then he can keep his code changes private. When Emir put the code out there, that violated the GPL which allows Connolly to keep the code to himself in this special case. OK? So Connolly isn't a 100% whack-job.

    But the next misunderstanding is on Connolly's part: his code is NOT in the Mambo codebase! Emir re-implemented the code, and gave it extra functionality. So the whole first misunderstanding is mostly irrelevant, because there is no copied code! And this is (I think) why Mambo keeps asking for more info and not getting it: if Connolly had to give line-by-line details of the violation, we would see that there is no line-by-line theft.

    However, there is the third misunderstanding (or assumption). And that is that many people appear to assume that Emir clean-roomed this. He didn't. From everything I've read, Emir got sneaky: he liked the feature, he wanted it in Mambo, so he took the code he already wrote for Connolly, and tweaked the shit out of it so it looked different and better. And it really is different and better, but it's built right off what he had already done for Connolly. I don't know what to think about this part -- there is no law I know of that would address this clearly. It probably exists, but I don't know of it. And so I'm left thinking that Connolly is completely out of luck and has absolutely no case at ALL, but Emir behaved terribly, and I wouldn't want such a person working on my codebase.

    1. Re:Emir is underhanded, Connolly is dense by Anthony+Boyd · · Score: 3, Informative

      zurab writes:

      So, if they wanted to acquire copyrights from a contractor company/individual that customized someone else's software for them, there probably had to be a written legal agreement with the clear intent for transfer/ownership of the copyrights on those customizations.

      But this is from the literati website:

      1. We have a written contract dated 9/2/03 with Emir Sakic (a lead developer of Mambo) that expressly contains the provision "Upon finished project all copyright rights to code written by [Sakic] will belong to literatigroup.com [Furthermore's parent company]. This contracted has been provide to Robert Castley, project manager of Mambo OS.

      I think that rebuts your point, and I stand by my comment (although I also stand by my disclaimer that if the Literati Group is lying, then all bets are off).

      zurab also writes:

      Now, if you copied the same code without permission, then you'd be likely violating copyrights; but there's no indication of that in this case - and the burden of proof is on Furthermore.

      You're right, there's no proof, but that's not a rebuttal to my point, as I wasn't asserting that there was proof. I simply formed my own opinion based upon Emir's creepy behavior, which included asking Connolly AFTER the code was already in Mambo if he would mind putting it out there. Now, why ask permission if you already have rights? That's suspicious. And when Connolly said "no thanks" to sharing the code, Emir replied:

      Hehe I was afraid you would feel like that

      That kind of reply is odd and doesn't instill faith that he's on the up & up. Is that proof? No. Could Connolly be lying about Emir's email? Yes. But Emir could be lying too. Since neither of them are sharing all the documents, it makes me distrust them both. That's all I allege.

      Regarding the Furthermore company suing or threatening end-customers, zurab writes:

      This is bullshit, and goes to demonstrate Furthermore's executives' personal vendetta rather than a search for legal resolution.

      Agreed. It gets back to the title of this thread, specifically: Connolly is dense.