Slashdot Mirror


Exploitation of Open Source VoIP

n8twj writes " With John 'Maddog' Hall pointing out that Open Source VoIP will be bigger than Linux ever has been. How can we be sure that un-ethical companies will not try to steal code that is covered under the GPL and try to pass it off as their own? Recently, I have become aware that SysMaster has been redistrbuting a version of the Asterisk PBX written by Mark Spencer from Digium and many others. SysMaster claims that they wrote everything in-house, while they have surely done their own development, they are using Asterisk to power their product line without following the rules. In terms of full disclosure, my company also provides Asterisk-based solutions, however we have fully embraced Asterisk and gladly contribute back to the GPL."

32 of 156 comments (clear)

  1. Motive by oniony · · Score: 4, Insightful

    Is this a serious question or an attempt to discredit a competitor?

    --

    Powered by onion juice.

    1. Re:Motive by JPriest · · Score: 2, Insightful

      Exactly, and where is the rule that says SysMaster must state on the front page thy use Asterisk PBX? Did you buy a product from SysMaster and have them refuse to distribute modified Asterisk source to you? If no then they didn't violate shit.

      --
      Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
  2. Umm.. Proof? by Tony+Hoyle · · Score: 2, Funny

    This one company (NuFone) making an accusation about a competitor (SysMaster).

    Where's the evidence? Or did slashdot just post this without checking?

    Oh, wait... this is slashdot...

  3. its simple by Anonymous Coward · · Score: 3, Insightful

    When the company starts to gain financially at the expense of a competitor it will be sued by the competitor for breaching the GPL. The competitor will get backing in this from open source organizations.

    It is a little absurd for us to all think that open sources licenses won't get abused to some extent. But, for every quality open source based product that tries to "rip off" the developers (if that can be considered possible in open source) there will be several following the rules who will be glad to keep them in check and sue them into oblivion.

    1. Re:its simple by mpe · · Score: 3, Insightful

      When the company starts to gain financially at the expense of a competitor it will be sued by the competitor for breaching the GPL

      No the competitor has no standing to sue. Only the copyright holder can sue the infringing party.

  4. Let the Copyright Holder Handle It by Noksagt · · Score: 5, Informative

    Please follow this advice: gather what details you can & notify whoever holds the copyright on the GPLed software you believe is being abused.

  5. Is it possible... by Anonymous Coward · · Score: 5, Interesting

    Is it possible they are using Asterisk? yeah I dont see why not Asterisk is a Great Product, but like mySQL, Asterisk does offer a commercial NON-GPL license.

    It could be possible that they paid for a NON-GPL'd Version that they used as a base.

  6. lobby your government officials by Anonymous Coward · · Score: 2, Interesting

    The government needs to be keeping tabs on this, or at the very least making inquiries when complaints are launched.

    Why? Because open source licenses protect the public good.

    In fact, I suggest that FSF and others lobby the government to have open source licenses registeres with an agency. Any software released under a registered license will have that license protected by the government. The simple establishment of the rules should scare most out of eploitation.

    IALs can work out the details.

    1. Re:lobby your government officials by Otter · · Score: 5, Insightful
      In fact, I suggest that FSF and others lobby the government to have open source licenses registeres with an agency. Any software released under a registered license will have that license protected by the government. The simple establishment of the rules should scare most out of eploitation.

      Yeah, I propose calling it "copyright" and setting up a US Copyright Office to enforce it.

  7. Well, it looks by mcc · · Score: 5, Informative
    1. Re:Well, it looks by Anonymous Coward · · Score: 5, Informative

      Specifically, Marc Spencer of Digium is aware of the issue and has commented on it.

  8. don't worry by geg81 · · Score: 3, Interesting

    I don't see GPL violations becoming a big problem. First of all, the loss to the open source community from abuses of the GPL is mainly the lack of contributions. That is partially balanced out by the fact that the company in question is at least not using some proprietary solution. Second, the problem is self-limiting: if a company gets to be large enough, someone is going to notice the GPL violation and the company will likely settle the resulting legal action quickly.

    For BSD-licensed software (are there any BSD VoIP solutions?), companies are even welcome to use the software and make it proprietary. Proponents of BSD probably believe that it's better to have companies use open-source derived software even if they don't give back than to lose more companies to proprietary vendors. (Personally, I think it needs to be looked at on a case-by-case basis.)

  9. And... by Noksagt · · Score: 4, Interesting

    If the copyright holder doesn't know what to do, direct them to this story for now.

    Someone should really setup a site which helps handle GPL violations by directing copyright holders to the right legal people & offers advice for how to handle violations. A database or wiki could also be setup to record alleged GPL violations & how they were resolved. IIRC, the mplayer project keeps some information on GPL violations on their website. Many were resolved & their site records this.

    I'd be happy to help with such a project with my time and content.

  10. Re:ah the /. crowd by mcc · · Score: 4, Insightful

    So it looks to me like "the /. crowd" has a general lack of moral outrage over people sharing copyrighted material for free without the person being shared with buying a license, but does have moral outrage over people taking copyrighted material, repackaging it, presenting it as their own work, and selling it to others for a profit in violation of license.

    So... congratulations! You have demonstrated that the slashdot community has two different consensus viewpoints on two different issues.

    Something analogous to gpl violations in the music world would be not file-sharing, but bootlegging-- people who bulk-fabricate copies of commercial CDs and then sell them-- a practice which I've yet to see anyone on slashdot defend.

  11. I agree but... by Noksagt · · Score: 2, Insightful

    it takes no time at all to contact the copyright holder in most cases. It is also better if they fight their own battles, especially in court. It would benefit both the copyright holder and you if you team up to handle the violation. You can share legal expenses, public relations duties, etc.

  12. just curious by Goosey · · Score: 3, Interesting

    Maybe I am just ignorant in the issue, but I am curious.. What advantage is gained by companies using OS software and not contributing back?

    I am not saying that everyone that uses OS software should be working on contributions. It certainly doesn't hurt the OS community.. But you seem to have a tone that there is some benefit from companies using OS software without giving back.

    Unless I am missing something, that leaves the software right where it started.. And while it doesn't hurt it, it doesn't seem to help it either.

    --
    --- "End Of Line" - MCP
    1. Re:just curious by TheRaven64 · · Score: 3, Insightful
      There are three possibilities when using Open Source software (for the rest of this comment, assume I'm talking about BSD/MIT licensed code, where all three are permitted).
      1. Just use it. Don't make any changes. This is very cheap and easy to do, but offers little capability for a company to differentiate its product from the competitors.
      2. Use it, modify it, keep the modifications secret. This makes it very easy to differentiate your product. The disadvantage is that you are forced to maintain a fork. Any security fixes, new features etc. from the main trunk must be merged into your branch at your expense. Since you are not contributing your changes, it is possible (and quite likely) that at some point changes will be introduced that break some of your modifications. You will need to work out these problems in your own branch, which may be difficult (read: expensive).
      3. Use it, modify it, give the modifications back. This is relatively cheap, since you do not need to maintain your own fork. On the other hand, it makes it harder for you to differentiate your product. By timing your code releases with your product launches, however, it is possible that you can keep a head start on competitors.
      Sometimes, case 3 is not possible. Apple, for example, release all of their changes to GCC (as required by license) but do not always have them accepted back into the main trunk. Examples of this include support for Objective-C++ which has been present in the Apple tree for a while, but not in the GNU tree. Recent changes in the Apple tree have allowed the changes to be imported, so GCC 4.0 should support Objective-C++.

      In general, option 3 is best if you are using an open source project that is not your core business - Apple lose no commercial advantage by allowing other people access to their compiler, and maintaining a complete fork of GCC would be far more expensive.

      Option 2 may be better if it is your core business, since you can maintain a commercial advantage by not releasing code (or by releasing it late, when you have a new feature that distinguishes your code from the others).

      --
      I am TheRaven on Soylent News
  13. Thanks for your contribution... by mgkimsal2 · · Score: 4, Funny

    In terms of full disclosure, my company also provides Asterisk-based solutions, however we have fully embraced Asterisk and gladly contribute back to the GPL.

    but I think the GPL is pretty full and doesn't need any more contributions at this time.

  14. Re:ah the /. crowd by benjamindees · · Score: 3, Insightful

    The GPL promotes fair pricing and technological progress.

    P2P piracy promotes fair pricing and technological progress.

    Slashdot has a lot of cheap nerds.

    --
    "I assumed blithely that there were no elves out there in the darkness"
  15. not all of them ... by TheLibero · · Score: 4, Informative

    i work for a networking bluechip, and here they have been working in a project to clean their code (or code coming from OEM's) from any GPL-kind of code; and if that's not possible they will be marking the code clearly for public as an open source code. the legal department have been pushing this so hard!

    --
    "Evil thrives when good men do nothing"
  16. Community based web collaboration by seanellis · · Score: 3, Interesting

    ...to uncover those in breach of the GPL.

    GrokCheat, anyone?

  17. Re:Umm.. Proof? by tyler_larson · · Score: 4, Informative
    Where's the evidence? Or did slashdot just post this without checking?

    The evidence is gleaned from viewing the "strings" output of a SysMaster executable. You find such gems as

    Asterisk CVS-05/30/03-20:39:27, Copyright (C) 1999-2001 Linux Support Services, Inc.
    Written by Mark Spencer <markster@linux-support.net>

    Of course, this evidence was compiled by NuFone (a contributer to Asterisk), so you can choose to disbelieve it if you want. But if you want to verify its veracity on your own and post your results, I'm sure that would be OK.

    --
    "With sufficient thrust, pigs fly just fine. However, this is not necessarily a good idea...."
    RFC 1925
  18. Mob action not needed, return to normal trolling by Anonymous Coward · · Score: 3, Insightful

    Since Digium also sells non-GPL'd copies of the work in question, they have a strong economic incentive to force these guys to either pay up for their non-GPL license or go GPL.

    Put out your torches, save them for another day.

  19. And for the lazy among you: by cbr2702 · · Score: 4, Informative
    There seems to be some confusion here so I would like to make a few brief comments and will likely not add much to this thread other than these few things:

    1) Digium *does* license Asterisk (as we distribute it, no additional features) outside of GPL and we *do* have commercial licensees already.

    2) Digium appreciates the community keeping a watchful eye on other products in the marketplace which may be in violation of Asterisk's licensing terms. Please feel free to contact us directly if you have any concerns or questions.

    3) I do not wish to comment specifically about Sysmaster's relationship with Digium at this time other than to say we are in contact with them.

    Thank you again for all of your support in the community.

    Mark

    --


    This post written under Gentoo-linux with an SCO IP license.
  20. Re:What a load of old cobblers! by mcc · · Score: 3, Informative

    Your point (1) is faulty. Linux may be Asterisk's primary platform but since it's open source you are just as free to go ahead and run it on, say, BSD or Solaris or Mac OS X. Meanwhile ports to more esoteric platforms are certainly an option, and it's already possible to run it on Windows if you have compatibility layer software. Linux will probably be the most likely platform to benefit from Asterisk being popular, but Asterisk definitely has potential outside of Linux.

  21. Easy solution by Anonymous Coward · · Score: 5, Insightful

    How can we be sure that un-ethical companies will not try to steal code that is covered under the GPL

    Easy - just keep backups. That way, if somebody steals your code, you still have it.

    Oh... wait. Did you mean copyright infringement and not theft? When the RIAA and MPAA start talking about those nasty thieves, people are quick to point out that copyright infringement is not theft.

    Double-standards stink. When somebody infringes upon the GPL, it's not theft, so don't exaggerate your grievance or accuse the other party of crimes they didn't commit. It just makes you look like a whiny liar and doesn't help your case.

  22. USCO --does not enforce--. by SuperBanana · · Score: 3, Insightful

    It is astounding given how much attention copyright gets here on slashdot that people still Don't Get It.

    Yeah, I propose calling it "copyright" and setting up a US Copyright Office to enforce it.

    The USCO does not enforce copyright. It registers copyrights.

    There are no US Copyright Office boogeymen in black who run around arresting people either. If I steal your work, it is entirely your responsibility, in civil court (not criminal) to sue me and recover damages.

    Further, copyrighting your code with the GPL license DOES NOT entitle you to expect the Free Software Foundation to go around suing people for you. They'll politely give you some suggestions on who to talk to and maybe a little basic advice, but that's it.

    So many people don't get it- they whine about their code being stolen, but then don't do anything about it. As a result, corporations are fearless in violating the GPL license as has been proven again and again. The GPL license, as a result, is quickly becoming irrelevant.

    When SCO claims Linus and others stole code, Linus and others need to sue them for liable(or slander, I forget). When Linksys fails to follow the GPL and steals code, the people who wrote the code need to immediately send them a cease and desist, and if they fail to comply, sue them to FORCE them to cease.

    In this case, the Asterix developers need to pay a lawyer to file suit against the offending company, seek evidence by court order (if they are using GPL code, it'll be very easy to prove once you're in the door with a court search order), and if they find evidence, hammer them into the ground.

    This is in bold because people need to wake up and get a clue. YOU NEED TO START BACKING UP THE GPL WITH LAWSUITS OR IT WILL BECOME COMPLETELY IRRELEVANT AND UNENFORCEABLE.

    1. Re:USCO --does not enforce--. by Otter · · Score: 2, Interesting

      1) Yes, I am aware that the Copyright Office does not actively police copyrights. My original comment emphasized snideness over precision.

      2) In the US, at least, Linus could not possibly make a workable libel case against SCO. In a country like Britain with a lower threshold for libel, there might be some value.

      3) Lack of enforcement does not weaken copyright, and certainly does not weaken GPL licensing as a whole.

  23. Re:ah the /. crowd by mcc · · Score: 2, Insightful

    I see absolutely no connection between your post and the one you are responding to. So you're trying to compare different two different ways in which a hypothetical shoplifter claims that an item they have just stolen was their legal property before they entered the store to the difference between possessing a copy of an intellectual property without purchasing a license and selling the intellectual property as another as your own? This analogy does not seem to connect at all.

    Of course, I'm sure you'll point out that copyright violation isn't the same as physical theft

    That sounds like an excellent idea, since copyright infringement isn't the same as theft.

    fundamentally moral positions don't need mental gymnastics to justify themselves. They tend to be self-evident.

    As counterevidence to this strange statement I offer the last 7,000 years of human history, much of which concerns the side-effects of occasionally rather large divergences of opinion on what "fundamentally moral positions" should be.

    But were this statement accurate, then wouldn't it follow that if something were a fundamentally moral position, it would be self-evident rather than requiring strained analogies?

  24. Re:ah the /. crowd by Registered+Coward+v2 · · Score: 2, Interesting

    So it looks to me like "the /. crowd" has a general lack of moral outrage over people sharing copyrighted material for free without the person being shared with buying a license, but does have moral outrage over people taking copyrighted material, repackaging it, presenting it as their own work, and selling it to others for a profit in violation of license.

    So... congratulations! You have demonstrated that the slashdot community has two different consensus viewpoints on two different issues.


    Or more clearly - the /. community thinks it's ok to steal as long as it's not their work being stolen

    Something analogous to gpl violations in the music world would be not file-sharing, but bootlegging-- people who bulk-fabricate copies of commercial CDs and then sell them-- a practice which I've yet to see anyone on slashdot defend.

    So if a company simply doesn't claim ownership of the code, but merely gives it away free if you buy the hardware, it's ok since all they're doing is sharing a file in violation of a license?

    --
    I'm a consultant - I convert gibberish into cash-flow.
  25. Re:ah the /. crowd by Zip+In+The+Wire · · Score: 2, Insightful

    You are like my wife. She thinks one dollar bill is different from another, that money she earns at one place is different than money she earns at another.

    Here is absolute proof that copyright violation isn't stealing in a legal sense, it's copyright violation. If it were stealing then the value of the items ($17 for a CD for example) would be the damages instead of $150,000 per violation.

    If you give away someone else's copyrighted work for free when you don't have permission, you are hurting them just as much. The money you didn't pay them is your profit because now the money you would have spent on the item, you can spend on something else.

    When you distribute such an item to many people, there are SOME potential sales lost. I'm only saying a small percentage of those people would have paid for the item but it still hurts the copyright holder the way the world is structured nowdays.

    I happen to personally THINK that things have to change, and that free distribution must be accomodated but until it's proven that this doesn't hurt the copyright holder more than help him, you are hurting that person.

    Things need to be restructured so that the original creator cannot sell away a certain percentage of the item. Right now it's the record companies who are becoming obsolete but they own most of this material outright. People justify copyright violation by telling themselves it's only the rich record companies they are hurting. If the artists had irrevocable percentages this justification would no longer be available.

    Your idea of the world is very childish if you think that only cash has value.

    Good Luck.

  26. The simplest solution by harlows_monkeys · · Score: 2, Interesting
    How can we be sure that un-ethical companies will not try to steal code that is covered under the GPL and try to pass it off as their own?

    The simplest way is to use a BSD license and not worry about it. There are plenty of ways to make money off of GPL'ed code without violating GPL that if money is your concern, GPL isn't going to stop people anyway, so might as well just let anyone use it for whatever they want and be done with it.