Slashdot Mirror


Linus Speaks Out On GPLv3

Slagged writes to mention the word that Linus Torvalds isn't a fan of the new GPL draft. News.com has the story, and someone purporting to be Linus is causing a ruckus in the Groklaw thread on the subject. From the News.com article: "Say I'm a hardware manufacturer. I decide I love some particular piece of open-source software, but when I sell my hardware, I want to make sure it runs only one particular version of that software, because that's what I've validated. So I make my hardware check the cryptographic signature of the binary before I run it ... The GPLv3 doesn't seem to allow that, and in fact, most of the GPLv3 changes seem to be explicitly designed exactly to not allow the above kind of use, which I don't think it has any business doing."

29 of 615 comments (clear)

  1. Linus is wrong by Anonymous Coward · · Score: 5, Insightful

    I don't think manufacturers have any business preventing me from running my own code on hardware I purchased, at that stage I may as well be using MS Windows.

    1. Re:Linus is wrong by Spazmania · · Score: 5, Insightful

      This is a twisted and difficult issue.

      On the one hand, the whole point of open source is that you can change it and then run your changed version. That shouldn't be suddenly untrue at the arbitrary border between hardware and software. Hardware that uses approved versions of open source while actively preventing my version from running violates the spirit of the thing.

      On the other hand, most of us have spent the last decade saying that its OK to use both open source and closed source software on the same machine. No one argues, for example, that you can't run GCC on top of a closed-source unix kernel even though it requires that kernel in order to run. Nor does anyone argue that the processor and other chips used by the kernel must be an open, free design.

      The real problem, I think, is that RMS (via the FSF) is trying to force it down our throats as usual. He's a strange bird in that he really gets the freedom issue at one level while it flies totally over his head at another.

      I think I'd put the DRM stuff in GPL3 as an optional component and see what happens. Let us authors decide whether we want it. If it works for us, it can be made permanant in GPLv4.

      So I'd do something like this: Software released under the GPL MAY designate (on either a file-by-file or full release basis) that it can not be used by any device which by design actively prevents its legitimate owner from adjusting the software or data. Distribution of code so designated would be fully compatible with distribution of any other interlinked GPLv3 code with the sole exception that binary forms of the portions so designated may not be distributed for use with the restricted systems.

      But then I'm a vi guy. Maybe if I'd written emacs I'd see it differently.

      --
      Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.
  2. Of Course That's the Point by BlackGriffen · · Score: 4, Insightful

    It's fine to have the hardware validate the software, I don't think anyone can rationally argue against that. What's not fine is to have the hardware refuse to run the software at all. If the user is conscious that the software is modified and therefor unsupported, then the user should have the ability to run any software he chooses.

    So, have a cryptographic check alongside a message or error light or something about running in unsupported mode, but don't completely cripple the hardware just because you want to avoid support headaches.

    1. Re:Of Course That's the Point by HairyCanary · · Score: 4, Insightful

      You are failing to see this from the point of view of the manufacturer. What you have proposed simply gives you a way to run unsupported software. Where does it actually help the manufacturer? They are still going to get the calls, error light or not. Only now, in addition to providing support, they have to explain why they will not support a particular version of the code.

    2. Re:Of Course That's the Point by AuMatar · · Score: 4, Insightful

      No, I don't. I have to look at it from the point of view of the owner. If I buy a piece of hardware I damn well have the *right* to run any software I want with it. Now, doing so may void the warranty. But as the owner of the hardware I am allowed to make that choice.

      --
      I still have more fans than freaks. WTF is wrong with you people?
    3. Re:Of Course That's the Point by timeOday · · Score: 4, Insightful
      Exactly. What if that "hardware" is a PC and that "validated software" is Windows? So much for Linux.

      I don't find this far-fetched in the slightest.

    4. Re:Of Course That's the Point by Anonymous Coward · · Score: 5, Insightful

      And the copyright owner of the software has the right to restrict the use of that software on devices which perform that hardware check. What's your point?

    5. Re:Of Course That's the Point by Pausanias · · Score: 5, Insightful
      BlackGriffen wrote:
      It's fine to have the hardware validate the software, I don't think anyone can rationally argue against that. What's not fine is to have the hardware refuse to run the software at all. If the user is conscious that the software is modified and therefor unsupported, then the user should have the ability to run any software he chooses. So, have a cryptographic check alongside a message or error light or something about running in unsupported mode, but don't completely cripple the hardware just because you want to avoid support headaches.
      What you say makes sense; however, I don't think the current language of the GPLv3 draft is clear on this point. Here is the relevant passage, emphasis mine:

      The Corresponding Source also includes any encryption or authorization keys necessary to install and/or execute modified versions from source code in the recommended or principal context of use, such that they can implement all the same functionality in the same range of circumstances. (For instance, if the work is a DVD player and can play certain DVDs, it must be possible for modified versions to play those DVDs. If the work communicates with an online service, it must be possible for modified versions to communicate with the same online service in the same way such that the service cannot distinguish.)
      It seems that the first phrase in bold allows what you describe: "implement all the same functionality" does not seem to prohibit a pop-up warning that the code is unsigned. However, the second phrase in bold says that modified versions must be indistinguishible from the original source from the point of view of an outside device. This seems to prohibit that same pop-up warning. So, it seems that Moglen & Stallman still have some clarifying work to do.
    6. Re:Of Course That's the Point by Jherek+Carnelian · · Score: 3, Insightful

      You may have the right to try, but the company that created the hardware "damn well" has the right to use technology to stop you if they want to.

      Which is EXACTLY why the GPLv3 is necessary.

      GNU all started with a Xerox printer and RMS's need to make it do things (report errors) that Xerox did not think of and did not want him to do.

    7. Re:Of Course That's the Point by The_Wilschon · · Score: 3, Insightful

      You obviously are having trouble understanding just what the GPL actually does. Think of this new clause like this: It is a promise that if you don't play the way we (meaning those who choose to use this license) like, we will take our ball and go home. You can get another ball and play without us if you like, but we will take ours and go home.

      This does have the potential to have some power, because the GNU tools are far and away the best set of basic unix tools. Most of the unices have adopted them by now. It is possible that when trusted computing comes, that this clause will simply kill off the use of the gnu tools (back to the last version using gplv2), but I doubt it. Additionally, if we ever manage to write a good killer app that lots of windows users use, and license it under gplv3, then when trusted computing comes, it might make people actually realize that it is not all sweetness and light (which will no doubt be how it is advertised.).

      Also, there is some reasoning behind this promise to take the ball and go home. Presumable foremost in FSF's collective mind is that in a real sense, the type of hardware described would restrict freedom number 1 [emphasis mine] "The freedom to study how the program works, and adapt it to your needs (freedom 1). Access to the source code is a precondition for this." [http://www.gnu.org/philosophy/free-sw.html]. Additionally, there is a security reason. If you cannot ever update to a newer version, then any security holes that exist are frozen. Once those holes are discovered, everyone who is on a platform like this becomes a sitting duck until such time as both their hardware vendor releases a new signature set and they upgrade the software. This is also a personal/professional pride reason, because everyone who thinks they understand security will blame the software for their box getting owned, which will only be half right. Such incidents could give free software an undeserved reputation for insecurity.

      --
      SIGSEGV caught, terminating

      wait... not that kind of sig.
  3. Closing OSS by saterdaies · · Score: 4, Insightful

    Part of the point of OSS is that anything that you can modify should be modifyable. From the FSF's perspective, a hardware vendor shouldn't be allowed to lock you into using their approved software. You should be able to run whatever software you'd like on the hardware that you paid for. I'm not from the heart of OSS evangalism, but by allowing a hardware vendor to lock you into a certain version of an OSS application, you've closed the source of that app. It can be modified, but not run - and, to me at least, running is the ultimate point of software.

  4. on the other hand by ptr2004 · · Score: 5, Insightful

    Say I'm a hardware consumer. I decide I love some particular piece of hardware and buy it with my hard earned money. But when I try to run one particular version of open source software customized for me, it doesnt run because the hardware complains it is not validated.

    1. Re:on the other hand by ClosedSource · · Score: 4, Insightful

      Then either you live with it or you vote with your feet and not buy hardware from that company again.

    2. Re:on the other hand by Rich0 · · Score: 3, Insightful

      What will happen if the FSF gets its way is that manufactures will simply not use OSS code at all. Not only will the user not be able to modify the code, there will also be no open code to look at. The FSF will lose and users will be back where they were before there ever was a GPL.

      How is this a loss for the FSF? Manufacturers might not use GPL software, but this will come at a cost that will need to be passed onto consumers. Other manufacturers might continue to use GPL software with the added strings, and they might have a lower cost basis, and therefore a marketplace advantage.

      All those manufacturers use GPL software right now because it works well and it is free-as-in-beer. Those two incentives will still remain, and having your product 80% done before you start on it with no licensing costs is an advantage that will not lightly be dismissed.

      If you don't like DRM then don't buy or use devices that implement it.

      Well, until there are no devices that do not implement it. In fact, the new GPL will help raise the costs of DRM hardware (due to the need to potentially license another OS and/or deal with a less mature product than GPL software) - which will help slow its adoption and make those devices that don't implement it a little more accessible.

      In any case - there is nothing to fight over. If you don't like the new GPL don't use it - just don't expect much help from those who do use it or the ability to leverage their software.

  5. Re:Emphasis on "purporting to be" by timster · · Score: 3, Insightful

    I'm going to go out on a limb here and say that anyone who reads what Linus posts to linux-kernel will agree that the style of writing and thought in these Groklaw posts is his. So either it is indeed Linus or a very good replica.

    --
    I have seen the future, and it is inconvenient.
  6. Re:not surprising by linvir · · Score: 4, Insightful
    http://en.wikiquote.org/wiki/Linus_Torvalds
    "Making Linux GPL'd was definitely the best thing I ever did."


    http://hotwired.goo.ne.jp/matrix/9709/5_linus.html

    I'm generally a very pragmatic person: that which works, works. When it comes to software, I _much_ prefer free software, because I have very seldom seen a program that has worked well enough for my needs, and having sources available can be a life-saver.

    So in that sense I am an avid promoter of free software, and GPL'd stuff in particular (because once it's GPL'd I _know_ it's going to stay free, so I don't have to worry about future releases).


    In other words, Linus likes the GPL for the actual reasons that it is a good license, not out of any kind of narrow-minded 'software ideology'.
  7. GPL v3 will fail by cryfreedomlove · · Score: 4, Insightful

    It will get issued but it won't get widely adopted. RMS has become impatient in this quest for social revolution and now he's decided to wield a bigger club. I don't think many others, who write and widely distribute highly useful software, will pick it up and join him.

  8. Re:You're so wrong it's painful. by Eric+Smith · · Score: 3, Insightful
    It's perfectly reasonable for the GPLv3 to not allow DRM and similar suggestions. Software authors can choose the GPLv3 if they like it. If software authors don't like it, they can use a different license; possibly GPLv2. No software authors are forced to use GPLv3.

    Similarly, no hardware vendors are forced to use GPLv3 software. If they don't like it, they can find software with a different license, possibly GPLv2. The key thing is that the hardware vendors are not allowed to violate the license terms chosen by the software author.

    For Linux it is completely irrelevant. Despite any opinions Linus might have on the matter, it is effectively impossible to get all of the owners of the copyright of any non-trivial amount of the Linux code to agree to a license change, so Linux will use GPLv2 for most of its code for the forseeable future.

  9. here's a good example by cygnus · · Score: 4, Insightful

    imagine a world where there's an open source electronic voting software package that everybody used... wouldn't you want the voting machine to be able to reject software that wasn't say verified by a voting auditing board and signed?

    the same thing could be true of open source ATM software. would you want your ATM to whine like HAL having his memory yanked when malware was loaded onto it, or would you want it to refuse to run?

    --
    Just raise the taxes on crack.
  10. Re:Hooray for Linus! by Prof.Phreak · · Score: 4, Insightful

    When you get past the misinformation, errors and outright lies, trusted computing is not as bad as people think it is.

    I don't think you realize that "trusted computing" generally means "distrust the USER/OWNER of the computer". I think what everyone is afraid of is losing control of THEIR computer to some government/corporate organization.

    And yes, you have a point, it's not as bad as it may appear... if you're the one in control of what trust. Unfortunately, from the talk that's going around, it's likely users won't be in control (ie: hardware vendor ensures that any OS that runs on the box must be signed by some authority, etc.)---I franky cannot see how that benefits anyone but some corporation.

    And slowly but surely this technology is getting here. Music players, etc., many of them already restrict their owners. In a few years, it's not unlikely this will happen to PCs.

    --

    "If anything can go wrong, it will." - Murphy

  11. Re:You're so wrong it's painful. by evanbd · · Score: 4, Insightful
    Not so. If I write software, and release it under GPLv3, there's nothing that prevents me from also releasing it on a DRM'd platform. I lose nothing. I can dual license the software; I've always been able to.

    What is happening, is that I'm saying that if you want to use *my* software on a DRM platform, *then* you have to hand out the keys or whatever else is needed. Which, for software I write, is exactly what I want. (Of course, I have trouble imagining how it would be relevant for things I write, but that's a different matter -- I don't write media players or kernels or other obvious targets).

    As a software *author*, I lose nothing. As a user of other people's software, I lose out only if I'm trying to redistribute their copyrighted work in ways they don't want. And, in that case, too bad for me -- just like it's always been.

    This license is about giving authors more choices, not less. And personally, this is an option I like.

  12. Re:Hooray for Linus by jouvart · · Score: 3, Insightful
    Microsoft was so successful in the first place was that their OS and software gave their customers the freedom to assemble and use their own hardware.
    These are precisely the freedoms that the FSF and the GPLv3 are striving to protect. So, what's your point?
  13. Linus is off the mark by pennystinker · · Score: 4, Insightful

    The fact is that the GPL protects the "freedoms" of users by actually emancipating the software itself - through the user! A close analogy is the emancipation of slaves: former slave owners lose freedoms they once enjoyed (owning slaves). Arguably, one could view this is a situation where *some* are now less free (because they cannot own slaves anymore).

    The same is true with GPLed software: no, you are not as free as someone using MIT or BSD licensed software because you cannot go subterranean with the source code and your changes.

    For those poor hardware manufacturers who are lusting after some GPL protected software I can see several options:

    1. Forgo the GPLed software and get a closed-source alternative.
    2. Contact the owners of the software and see if you can get the software under a more "friendly" license. For the Linux kernel that would be difficult if not impossible.
    3. Embrace the GPL and move forward into a net freer world despite, like slave owners, you cannot use GPLed software in a closed system.

    Now, arguably, somebody is going to point out that by taking the stance I've just outlined then I'm contributing to pressures to move *some* manufacturers away from using FL/OSS (e.g. GPLed) software. That may be true. But I'll take some loss of gadgets and gizmos, perhaps even large systems, to maintain the freedoms that the GPL and similar licenses try to ensure.

    In the end I believe that the pressures to "go free" and to "let tinker" will eventually win out for all, including the manufacturer. Consider Id: do they get calls about user mods based on their game engines? Maybe a few, but the overwhelming positive results of user mods makes it a no-brainer: enable the mods.

    As far as entertaining the example from the original post. I wouldn't waste too much mental energy on it. And if the blurb really came from Linus, then here's a message to Linus: get over it, the example you created may be short-term significant, but, if free software eventually is successful, long-term irrelevant.

  14. Re:You are wrong by tomhudson · · Score: 4, Insightful

    Whoa, I think you missed the whole point of freedom :-)

    If they apply drm to anything I write, then *that* particular binary isn't modifiable, but so what? They still have to provide the source on demand to anyone they give the binary to. That, after modification, the source can't be compiled to run on that particular hardware isn't an issue. Why? Because when it happens enough times, people will say f*ck this and buy hardware w/o the lock-in. Nothing worse than a horde of pissed-off customers.

    The original source can still be modded and run fine on non-locked-out platforms.

    Now I understand your point - that if they had to develop their own software, this would cost them extra. But any software that they developed themselves would be totally locked up, and there would be absolutely no leverage to ever convince them to go non-drm, or even a sort of "open drm", where the content might be locked, but not the app.

    GPLv2 deals fine with these issues, by putting everything where it belongs - the push and shove of the marketplace. GPLv3, on the other hand, is both premature and heavy-handed. I'm sticking with v2, not just out of "political" reasons, but because I believe the marketplace works.

    Take a look at what's happening. Microsoft, with all its monopoly power, is scared of linux, firefox, etc. The marketplace IS speaking out. Now, if someone insists on running Windows, this hasn't diminished me in any way - I haven't lost anything. If they want to run my code on a winbox instead of a linbox, how have I, or anyone else, lost out?

    Same thing if they wanted to run it on a box that only allowed signed drm binaries. The only loser is the person who actually does this, then can't take advantage of any updates I do. Their loss, not mine. And its up to them to bear the cost of dumping their locked-in solution and switch.

    The first freedom of free software is to run it on anything you want. That includes proprietary and/or closed systems. Now, personally, I think that's a dumb thing to do in most cases, since open systems have consistently better performance and higher-quality code, but that's my choice - my freedom.

    What are people complaining about? Stuff like Tivo. Really, now - they're complaining about goddamn TV shows! Come on, there are more important things than that ... and if you don't like it, you can always make your own Freevio,or pay someone else to slap one toghether for you. Tivo didn't suddenly make Freevio impossible. What it DID do was give a target to shoot for.

    Lets take a real-life example. I've got some code for an integrated back-end/front-end inventory and web site. If/when I get around to cleaning it up and gpl'ing it, if someone else takes it and mods it so that it runs on a particular piece of hardware, but that only mods "signed" by them will run on that hardware, all they've really done is limited their market to people stupid enough to buy closed hardware. Everyone else is enjoying the benefits of open code on open hardware for less. What's the problem? Its just like a lottery, a tax on stupidity, right :-)

    Just this last week had a demonstration that eventually the market rights itself no matter what, when Microsoft's profits were down by a quarter, with the long-term outlook being more of the same. Closed systems just can't compete over the long term.

    Another example. I wrote the beginning of a c2java converter, because java lacks a lot of the constructs I like. One of these days I'll finish it and put it out there for people to play with. What would be the incentive for someone to pay for a drm'd version, wehn they can have the original one, with source that they can modify and run, for free? There is none. Anyone trying to market such a setup would be doing the "web 0.0" dot-bomb thing.

    Anyway, that's my take on it at this point. Let the free market handle it. There are too many of "us", and too few of "them", for us to fail unless we just stand there bent over with our hands around our ankles and buy any and all locked-in products. And if we do that, then we really do deserve the shafting we get.

  15. The heart of the issue by PostPhil · · Score: 5, Insightful

    The FSF's stance is controversial (as exemplified by the GPL 3) because it's about freedom, which for all of human history has been hardly understood.

    Licenses like BSD/MIT have a view of freedom that is more like anarchy: the "do anything you want" style of so-called freedom (but at least give credit to who wrote the code). This stance doesn't actually create freedom because "anything you want to do" can also include taking freedom away from others. BSD people used to argue that you would still have freedom, only it's with the old code before the proprietary fork, etc. But DRM and other methods of preventing you from modifying and running software is not protected by BSD licensing. So, it is even more true today that BSD-like licensing in actuality has little to do with freedom and more to do with technological research without regard to the sustained openness that made studying that code possible.

    Freedom must be preserved and encouraged in order to exist! It is not a spontaneous choice that can be made after neglecting its preservation. Once freedom is gone, once official mechanisms are in place to restrict you, you can't simply make a choice to be free again. When I think of the FSF, I believe they understand freedom as many others have realized throughout history...

    "You can only protect your liberties in this world by protecting the other man's freedom. You can only be free if I am free." - Clarence Darrow

    "None are so hopelessly enslaved as those who falsely believe they are free." -Goethe

    "Liberty without learning is always in peril and learning without liberty is always in vain." - John F. Kennedy

    ...while the FSF would probably characterize false freedom as this:

    "After I asked him what he meant, he replied that freedom consisted of the unimpeded right to get rich, to use his ability, no matter what the cost to others, to win advancement." - Norman Thomas

    The more we are tempted by money to deprive others of freedom, the less freedom we all have in the end, and the less it's worth living in such a society even if you're rich. Don't worry about people crying about loss of profitability, etc. History has always shown that there will always be clever people that will find some way to make money, whether people are free or in chains.

  16. Re:You are wrong by illuminatedwax · · Score: 5, Insightful

    No, it fixes a very important issue.

    You know the story of rms' printer driver: he wanted to be able to modify the printer driver so it would bloody work right or work better. He couldn't do that, so he made GNU.

    Now let's say the new rms. smr wants to fix his printer which is running embedded GPL software. Great, he thinks, I have the source code to this, so I can just fix the source and make my printer work/better.

    Oops! The printer doesn't allow you to do this. This is an awful loophole that restricts your freedom to modify the program. You can modify it, but you might as well write it on on a piece of paper for all that's worth. What the user needs to be able to do is modify the software and use it to really have that freedom. GPLv3 protects this. Linus is really being a stubborn idiot about this.

    --
    Did you ever notice that *nix doesn't even cover Linux?
  17. Re:You are wrong by Znork · · Score: 3, Insightful

    "I think you missed the whole point of freedom"

    I think you missed the whole point of whose freedom is protected in the GPL.

    "If they apply drm to anything I write"

    If they want to apply DRM to anything I write, then they can damn well write the code themselves (or join the anti-IP fight). The GPL aint a free lunch, it's a guarantee of the freedoms for the recipients of the works and derivative works.

    The application of DRM further creates a free rider problem where companies releasing under GPL risk finding themselves at a disadvantage versus those who dont; suddenly it's a one-way street.

    "this would cost them extra"

    Enough extra to make it unprofitable, or to give the open competition an advantage on price, a difference that is only going to grow in the future.

    "Let the free market handle it."

    Oh, please. The whole IP industry is nothing like a free market. The GPL restores free market competition for a small segment, but the business is full of protectionists trying to find ways to cheat even that.

  18. Re:You are wrong by TheRaven64 · · Score: 3, Insightful
    GPLv3 has exactly the same spirit as GPLv2. It seeks to protect the four freedoms that the Free Software Foundation was created to protect. It is hardly surprising that a license from the FSF would protect the ideals of the FSF.

    Linus' problem is that he never really agreed with these ideals. He originally licensed Linux as free for non-commerical use, but then released it under the GPL as a result of pressure from the community. Linus calls himself a pragmatist, which is a polite way of saying socially short-sighted. The FSF are often regarded as extremist idealists, but it is important to realise that they are actually the pragmatic ones. People like RMS created the foundation for purely pragmatic reasons; they had been burned by proprietary software, and they didn't want to be burned again. The easiest way of doing this is to ensure that there is a lot of Free Software about, and to try to create the economic conditions where Free Software is preferable to proprietary software. Linus' view is the equivalent of saying 'Why should we want to outlaw slavery? I'm not a slave.'

    --
    I am TheRaven on Soylent News
  19. Re:You are wrong by mrchaotica · · Score: 4, Insightful

    But in the end, who cares if they lock it up? As long as they give out your source code. If you don't want them to use it, then don't give it away.

    Personally I think BSD or Apache are more altruistic and realistic.

    Ah, here's the problem: you're missing the point of the GPL!

    With BSD-style licenses, people do use them for the reason you stated: because they want other people to use their code. With the GPL, this is not the case. Instead, people release their software under the GPL because they want to preserve the user's control over his own computer.

    Remember, Richard Stallman first created the GPL because his printer wasn't doing what he wanted, and the company refused to give him the source code so that he could fix it. If that happened now, with a printer that used GPL v.2 software but required a company-authorized version to run, the user would be just as screwed as if the code weren't Free Software at all. That's what the GPL is for, and that's why version 3 is needed!

    --

    "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz