Slashdot Mirror
Open-Source Insurance
* * Beatles-Beatles writes to tell us that several insurance agencies have formed a partnership to offer open-source compliance insurance. From the article: " The insurance will cover up to $10 million in damages, including profit losses related to noncompliance with an open-source software license. The policy could, in some cases, cover the cost of repairing code that was found to infringe on open-source licenses such as the General Public License, which is used with the Linux operating system."
So, just like other policies, how much will it cost? $100? $1 million? It's kind of point less to talk about the $10 million coverage when you don't know how much it will cost...
Is the GPL (or other open source licenses) that complicated that you just can't hire (or task) someone to review your development practices to be in accordance?
Well, it's Lloyd's of London subdivision offering this (the same people who insure body parts), so it's probably more publicity than anything.
Any person in any corporation buying this should be subjet to instant dismissal. If you are a shareholder in a company that buys this, then you should sell your shares immediately, as it is clear proof that the management is corrupt or incompetent.
The Institute of Chartered Accountants should be expected to recognise it as a symptom of malpractice, and if auditors fail to recognise it as such, then the auditors are also guilty of malpractice.
Sent from my ASR33 using ASCII
Insurance is about tranferrance of risk. You pay the insurance company to assume the risk for you.
Now that that's covered, tomorrow, we'll learn "how to tie your shoes" and "eating with a spoon."
"Now: Big company tajes insurance and starts stealing open source code, because they feel there is no legal risk anymore."
I think you need to add a line in there between Now and In The End. something like this:
Next: Someone finally sues Big company over the infringement, and Big company finds that due to some small print they aren't covered. (ie: a clause saying they can't knowingly be involved in infringing activity)
Insurance companies will try to avoid any sort of payout, even^H^H^H^Hespecially if they know they are blatently in the wrong.
(IANAL, but I was in insurance briefly)Yeah you can...
There are only a limited number of ways of solving certain problems, so if entire functions look pretty much the same, it wouldn't be too surprising (unless comments are the same too... then it's fishy)
Authors of GPL'ed software won every license trial so far AFAIK. Either this insurance company insures companies that don't need an insurance or it will pay. I don't think this insurance company is going to last very long.
On se Internetz nobody noes your German.
Insurance works on the *cough* law *cough* of averages, different shocks affect different people so a single shock can be covered by the insurance company for far less than the cost of said shock. There is not enough diversification in something like this. If there are developments against the GPL or a very popular software pack gets into strife (openoffice or such like), then their are huge liabilities that the insurance company can't meet and everyone sinks. Just how does one determine the profit losses from the time spent compliancing software etc?
What businesses REALLY need is insurance against Microsoft (and other BSA member companies) licence violations.
SERIOUSLY
Because for any reasonable-sized organisation it is very expensive to do a license audit, and almost impossible to be sure that you're completely in compliance. Many businesses have found that it's easier and cheaper to just buy a completely new set of licenses than try and figure out if the ones they already have cover everything they're running.
And because if you're not in compliance, even by just a little bit, you _will_ get hit with substantial fines which cost a LOT of money to fight that in court.
455fe10422ca29c4933f95052b792ab2
There is indeed such a thing as "accidentally" infringing on open-source code licenses. You see, while the individual developer who copies the code is usually aware of its legal incumberances, it would be quite easy for the corporation's management, board of directors, and shareholders to be unaware of the legal deathtrap the lowly developer employee is leading the company into. And lest we remember, it is the CORPORATION that would be found to have infringed the copyright, not the employee. The corporation would face responsibility for what its employee did. From this perspective, having insurance against such things might not be such a bad idea.
And by the way, I would wager to bet that a non-trivial percentage of employed developers are unfamiliar with the specifics (or fundamentals) of the GPL and other common licenses. Also, there are many scenarios in which miscommunication between employees and management could lead to unintentional use of open-source code. Who knows, maybe an employee is even deliberately trying to get the company into hot water.
Someone else here mentioned that this kind of insurance would make it easier for bigger companies to violate open-source licenses, since they'd be shielded from any legal damages. In response to that, allow me to introduce you to the phrase "Insurance fraud." Don't think for a second that these insurance companies won't be carefully pouring over company documents, correspondences, etc, to make sure the infringement was indeed "accidental" in whatever sense the word becomes defined as.
As someone else said, probably the only question is whether these companies can speculate the open-source-infringement-lawsuits world accurately enough to stay profitable. It seems to me that's easier said than done, but I do think the idea makes sense in theory at least.
True however keep in mind that there are just as many ways to infringe on closed source software licenses.
Whether a license is for open source or closed source is irrelevant to the question of legality.
Some people might argue that because open source software is easier to get then infringement is much more likely. Other people might argue that because closed source software licenses are generally much more restrictive then infringement is easier and much more likely. Either is true to a certain degree so if you're going to argue for the need for insurance you should be arguing the need for insurance for all software licenses, and not just open source.
The fact that the insurance company is only offering the insurance for open source suggests to me that, apart from it being trendy, they think that they can maximise their profits. In other words their costs in this area, as compared to closed source insurance, are lower and is evidence for lower monetary risk when using open source software.
---
I'm not worried about the use of DRM. I'm worried about the abuse.
Copyright law unlike patent law, does not penalize people who independently come up with something similar/identical.
Feel free to mod me "-1 - Angry Jerk".