Slashdot Mirror


Microsoft License Goes to OSI But Not From Redmond

An anonymous reader writes "eWeek is reporting that a Microsoft Shared Source license, the Microsoft Community License, was submitted to the Open Source Initiative for official approval, but it wasn't Microsoft who submitted it. The license it appears was submitted by John Cowan, who is a programmer and blogger and who also volunteers for the Chester County InterLink, a non-profit founded in 1993 by former OSI president Eric Raymond and Jordan Seidel. Needless to say, the OSI contacted Microsoft to see if it should evaluate the license anyway, and was told to drop it."

41 of 142 comments (clear)

  1. Maybe they fear... by sacarius1 · · Score: 5, Funny

    SCO will sue them? :)

  2. And people wonder why ... by Achromatic1978 · · Score: 4, Insightful
    ... certain elements "don't take open source seriously". What was the point of this, other than a stupid prank that no-one but a few geeks will laugh at?

    What next, are "we" going to start submitting bogus press releases, and trying to hold Microsoft to them? (I know that one is a little of an extrapolation, but not a huge deal.)

    1. Re:And people wonder why ... by sumdumass · · Score: 5, Insightful

      What if this wasn't a stupid prank. What if it was just someone trying to prove to some one else that microsoft's opensource license isn't opensource.

    2. Re:And people wonder why ... by Anonymous Coward · · Score: 5, Funny

      I know that one is a little of an extrapolation

      Your use of the word extrapolation is a bit of a stretch.

    3. Re:And people wonder why ... by killjoe · · Score: 4, Interesting

      Actually it brings up an interesting point. If the license is public (kind of) then why can't anybody submit it? The OSI is supposed to judge the license itself not who wrote it or why. I am also curious to know why MS told them to drop it. Why harm would it have caused them if it was approved?

      --
      evil is as evil does
    4. Re:And people wonder why ... by mabhatter654 · · Score: 5, Insightful
      there is probably some provison that the licensor would have to guarantee that the license wouldn't change over it's life... most importantly couldn't change without notice. Things like BSD, GPL, MPL, AFSL all have standardized offical versions and either no change or methods of change defined right in the license. Example: Typical GPL is version 2 dated 1991. We all know exactly what that means. If you make any changes to that you MUST call them out and notice them from the published version. MS has no "standard" license to reuse over and over.

      Microsoft licenses aren't worth the bits on the screen.. they can be changed at will by Microsoft and "paper" versions don't count. MS refuses to version or date their licenses.. it's all a game to them. If OSI was to approve a MS license, MS would have to guarantee that it wouldn't change without notice.. and they flatly refuse to do that!

    5. Re:And people wonder why ... by Anonymous Coward · · Score: 4, Insightful

      And what if it's the exact opposite? Maybe there is "GASP" and actual independent developer that wants to license something not made by microsoft under this license and wants to be sure that it IS OpenSource!

      BSD Licensed != Berkley University Code
      MIT Licensed != MIT University code
      GPL != FSF code

    6. Re:And people wonder why ... by John+Cowan · · Score: 4, Insightful

      The practical problem with a 3rd party (like me) submitting someone else's license is that if the OSI wants changes, the 3rd party has no authority to make them. It makes sense to deal directly with the license author.

      I don't speak for the OSI, Microsoft, my employer, or anyone but me.

    7. Re:And people wonder why ... by EvanED · · Score: 2, Interesting

      Why would it have to guarantee that?

      Couldn't the OSI say "here's the text of the license as of today, this version is/is not certified open source."

      If MS then went and changed it, that version would be different from what the OSI approved, and the decision based on the old version would cease to be valid. However, the old version of the license wouldn't suddenly become invalid.

      There might be some confusion as to the naming of them, but I think that could be easily overcome. The OSI could say "The MS Shared Source License as of Aug. 22, 2006" is approved, and as long as MS didn't come along and make changes later and say it was as of Aug. 22, 2006, there should be no confusion. (I'm not sure if I would put that last thing beyond MS or not.)

    8. Re:And people wonder why ... by Richard_at_work · · Score: 3, Insightful

      Why does one body get to decide whats opensource and whats not? The OSI is not an international standards body by any measurement.

    9. Re:And people wonder why ... by Russ+Nelson · · Score: 5, Informative

      That's exactly what it was. John wanted to know if we would approve the licenses, because as far as he could see, they are approvable. Looks like it to me too, yet .... we'd prefer to have the steward submit the license hence my request that he withdraw them.

      --
      Don't piss off The Angry Economist
    10. Re:And people wonder why ... by Secrity · · Score: 3, Interesting

      Organizations don't have to be an international standards body in order for people to respect their standards. There are many organizations, such as the ARRL and EIA/RETMA, that work this way, and some eventually gain status as an international standards body. Many engineering associations, such as the IEEE and SAE; and equipment manufacturers associations, such as ECMA, have gained international standards body recognition. If enough of the right people respect OSI standards, the OSI could also become an international standards body.

    11. Re:And people wonder why ... by John+Cowan · · Score: 2, Informative

      Well, of course I don't agree that it was a prank. I was quite serious.

      I also don't agree that the license "doesn't even start to come close to being OSI compliant." OSI-approved licenses are a subset of OSI-compliant ones.

  3. Re:Why MS would drop it by Anonymous Coward · · Score: 2, Interesting

    I wish there was more in thye explaination of microsoft saying drop it.

    It would be interesting if they ever intended shared source to be anything other then an opensource riddin publicity show.

  4. I wish they had evaluated it. by shaitand · · Score: 4, Insightful

    Undoubtedly the reason it was submitted is so that the license will be officially recognized as not achieving OSI compliance. I don't think they should have asked Microsoft at all.

    1. Re:I wish they had evaluated it. by gdamore · · Score: 5, Informative

      Have you looked at the license. I confess I had not before I read this,but then I check it out at http://www.microsoft.com/resources/sharedsource/li censingbasics/communitylicense.mspx

      The license itself is short and sweet, and easy to understand. Or at least so I deem, but of course IANAL.

      I have no idea what software Microsoft has licensed under this license, but a casual read of it looks like the license should be certifiable by OSI. As far as I can tell, the only potentially confusing issue is the patent retaliation clause.

      In most other respects, it looks like a simpler version of the GPL, including being viral. I can't imagine why MS wouldn't want it blessed by OSI. Probably they just don't want to be recognized for giving source away even when they do so. Heck, they might be worried that it would scare off investors who consider Microsoft's IP portfolio as a reason for buy MS shares. :-)

      Now, it probably is a Good Thing that it isn't blessed, because the last thing we want is another viral license that also happens to be incompatible with GPL. (The patent retaliation makes it GPL-incompatible.) Life is hard enough figuring out Open Source license as it is.

    2. Re:I wish they had evaluated it. by SeaFox · · Score: 4, Insightful
      In most other respects, it looks like a simpler version of the GPL, including being viral. I can't imagine why MS wouldn't want it blessed by OSI.

      Microsoft seeking OSI certification would be admitting that Open-Source is a viable alternative way of writing software. It would be placing a certain amount of respect and recognition to other open source licences if they seeked an equal certification for their own.

      That and, as someone pointed out earlier, they don't want their license being offical stamped non-compliant, makes it a lot harder to argue that they do release software as "Open-Source" for the PR department.
    3. Re:I wish they had evaluated it. by mabhatter654 · · Score: 5, Interesting
      problems I see.

      #1...MS requires the license to USE the software. Most of the others only require the license to reproduce or modify + distribute software. They demand something, however small, just to USE the software as it's given to you. It's an EULA, not a license. Notice they think you don't have the right to even PREPARE deritive works without permission.

      Section 3 part A looks simpler than GPL, but combine with part C looks like BSD... except Microsoft always keeps it's mits in your work and all the work that follows. Where as BSD and GPL the orginal author's say ends as long as your new copy follows the rules. And again, they following users would appear to be required to accept Microsoft's EULA as well. GPL binds no progam license to any company in this manner.

      And of course, Microsoft has a more restrictive patent clause than even GPL 3. Where as GPL 3 says you must ensure you have patent rights, and grant rights to downstream users, it doesn't try to take away from you for suing somebody. I know there was talk, but it's not in the license. Microsoft removes your license if you think you need to sue them.. or even counter/cross sue in defense of them sueing you! So if this was to become widespread, anybody that MS sued would loose all rights to the 'community' software when they tried to defend themselves.

      I do notice 1 glaring ommisson for a microsoft license... They didn't leave themselves the right to revise/extend/revoke the license at will they usually include in every other license they write. I guess they're not all bad.

    4. Re:I wish they had evaluated it. by Tim+C · · Score: 2, Funny

      t's an EULA, not a license.

      I know what you mean, but you do realise what that L stands for, right?

    5. Re:I wish they had evaluated it. by julesh · · Score: 2, Interesting

      #1...MS requires the license to USE the software. Most of the others only require the license to reproduce or modify + distribute software. They demand something, however small, just to USE the software as it's given to you. It's an EULA, not a license. Notice they think you don't have the right to even PREPARE deritive works without permission.

      These are, in fact, necessary. The GPL is an interesting license for claiming that you don't have to accept it to use the software, but it's worth noting that outside of the US, using computer software is often an act which is protected by copyright law (because a transient copy is created in RAM), so you do need a license for it. Therefore, those of us using GPL software in non-US countries have to accept the GPL in order to use. The MS license is no different in this regard, but it is explicit about it, whereas the phrasing of the GPL is actually misleading in non-US countries, and could result in people using GPL software without a license to do so (e.g. because they refuse to accept the GPL terms but don't realise that where it says you don't need to accept them doesn't apply to them). MS's lawyers are probably more internationally-minded than the FSF's are.

      You also need a license to prepare a derivitive work. Creating derivitive works is an act protected by copyright in many countries. It's good that the license grants this right.

      The rest of your analysis does make it sound like a poor license, but these things you mentioned in the first paragraph really are useful to those of us who aren't in the US.

    6. Re:I wish they had evaluated it. by John+Cowan · · Score: 2, Informative

      "Undoubtedly"? *I* doubt it. In fact, it isn't true.

      I would never abuse the OSI process by submitting a license for consideration unless I thought that license met the Open Source definition. Life is too short for such machinations.

    7. Re:I wish they had evaluated it. by tehcyder · · Score: 2, Funny
      (i)t's an EULA, not a license.
      I know what you mean, but you do realise what that L stands for, right?
      It's Lesbian isn't it?
      --
      To have a right to do a thing is not at all the same as to be right in doing it
  5. A quick rundown-- by Lord+Aurora · · Score: 2, Interesting
    From TFA, quote from an official of OSI followed by a quote from the guy who submitted MS's stuff:
    "I think that the general principle should be that authors have preference over third parties when it comes to submitting licenses," he said.

    "Microsoft has said neither that it will nor that it won't submit its two licenses.

    "They've said that they're not submitting them at this time. Perhaps they have revisions to make? If so, then approving draft licenses would be a serious wrongo. If you insist, we can take it to the next board meeting, but I'm reasonably confident that the board's decision will be to defer approval," Nelson said in the e-mail string.

    Cowan then responded that "I defer to your vast expertise."

    Translated as:
    "Hey, look Cowan, we need to actually work this out legally."

    "Oh shit."

    Honestly, what was the guy thinking?

    --
    The heavens do not fall for such a trifle.
    1. Re:A quick rundown-- by John+Cowan · · Score: 3, Informative

      What I was thinking was that the license is a decent license no matter who wrote it, and worth approving *because* of who wrote it. Nelson pointed out a potential issue, and I withdrew my recommendation, but not the judgments it's based on -- I stand by those.

  6. Microsoft's possible fear by jkrise · · Score: 4, Funny

    Upon audit, the license was found to contain non-final wordings.

    --
    If you keep throwing chairs, one day you'll break windows....
  7. Why MS don't want OSI's Blessings by EqualSlash · · Score: 3, Funny

    Apparently, the MS word spell-checker doesn't recognise 'OSI'.

    1. Re:Why MS don't want OSI's Blessings by NotQuiteReal · · Score: 2, Informative
      You are right - OSI is not recognised... suggested "correct" spellings are:

      Obi
      Osier
      Soy
      Soil
      Oasis

      --
      This issue is a bit more complicated than you think.
  8. Re:Pfft.... by mabhatter654 · · Score: 2, Insightful
    OSI is working to clear up the mess of "free" licenses out there to make interoperation of various modules allowable without relicensing every time you ship a project. Even the FSF is willing to work with them to allow things like AFSL, MPL, etc to coexist with GPL or LGPL as approperiate and just agree they are good enough without splitting hares over fine print. What they are doing will make Open source really viable and help smooth the edges for commercial developers. But they have to honor the orginal licenses when they make recommendations how they interact, that's the law.

    Free Software advocates may seem out of touch, but it's NOW when times are good that you have to stay on the path. The whole "free software" movement rides the thin line between academic/hobby project and real, live commercial copyright. If they make the license too loose, they set bad precedent. If they don't actively define their position when they see a "violation" then they may miss something and again,set bad precedent. If they don't keep an active copyright push, then they risk a judge throwing all GPL code into "pubic domain". Especially because they aren't a "real" company, but a "club" it makes it easier for others to say FSF meant the code to be "public" and they let it lose.

    Also, when times are good, they have to be careful of imposter licenses. Ones that look "free" enough, but have gottchas that let an orginating company swoop in, or a downstream company lock-up the code later on. Things like Sun's OpenOffice.org fall in that catagory. Again, it's important to not let the "free software" brand if you will be diluted so that it doesn't become a free for all.

  9. Oh, that's easy. by jd · · Score: 2, Insightful
    It would be hard for Microsoft to claim that they were taking Open Source seriously if they had their "open" license officially skewered by a license review board.


    Since Microsoft aren't required to use any specific license for any specific product, and since a product can be "open source" and under multiple licenses that include non-open ones (eg: the Windows version of the Qt toolkit, for the longest time) and "non-free" ones (virtually all other dual-licensing cases), the argument that Microsoft would be limited in some way obviously doesn't apply.


    Furthermore, since if the license HAD been deemed acceptable by the OSI, Microsoft could have claimed a massive PR coup over competitors who claim it is hostile to opening up code in any kind of meaningful way (as per EU lawsuit), it follows that Microsoft either did not want to claim such openness (which would make no sense, given how busy they are in claiming that they are perfectly open enough) OR they feared a bad PR reaction in the event of a rejection OR the license is deliberately intended NOT to be OSI-compliant but is intended to confer that impression to those corporations, countries, continents, etc, that have demanded greater openness in the software industry.


    Those Slashdotters living in Europe whose European MPs are sympathetic to Open Source (or hostile to Microsoft - works in either case) may wish to notify their EuroMPs of Microsoft's request that the OSI not look closely at their terms and conditions. At worst, the EuroMP won't do anything, so it can't hurt. At best, it may be very useful ammunition the EU can use against Microsoft in Microsoft's tedious appeals - it's going to be harder for Microsoft to claim compliance with the EU court ruling on providing technical information for analysis if they won't even provide the license for the technical information to be analysed and prohibit the analysis even when the license is provided anyway.


    (Hey, the EU does a lot of crappy things, makes strange drug-induced choices, and is rife with power-plays and nefarious dealings. The least we can do is exploit all that so that one of the few sensible rulings is actually upheld.)

    --
    It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
    1. Re:Oh, that's easy. by EvanED · · Score: 2, Interesting

      You didn't answer the poster's question. You answered why MS wouldn't want it submitted, and how EU people might go about applying pressure to get it submitted. You didn't, however, talk AT ALL about why the OSI needs MS's go-ahead to review it, why it can't review licenses at the request of people other than the author of the license, or why the OSI can't even just spontaneously review licenses even without someone's request.

  10. damage to OSI's credibility by m874t232 · · Score: 2, Insightful

    Microsoft has claimed that their various licenses are pretty open, and it makes sense to put that to the test. The OSI is the natural organization to do that. There is a good chance that there are hidden traps in their licenses and potential users need to know about that. And, of course, it is just the case where a company has deliberately hidden something in their licenses that they would object to having their license reviewed by OSI.

    OSI's decision erodes confidence in OSI. If they want to be seen as a dependable arbiter of whether licenses comply with open source principles, they must evaluate licenses that have some importance in the market, no matter who actually submits the license for review. Asking the original author of the license for permission is not acceptable.

    1. Re:damage to OSI's credibility by Russ+Nelson · · Score: 3, Informative

      Actually, I don't remember asking Microsoft what they thought. Perhaps Bill Hilf is remembering something that didn't happen. According to TFA, he was pretty hazy about John Cowen's name.

      Anyway, we certainly would have evaluated them had John not withdrew the approval request. Approval was just not the best of all possible courses of action, which is why we asked him to withdraw.

      --
      Don't piss off The Angry Economist
  11. Re:Pfft.... by CortoMaltese · · Score: 2, Funny
    ...without splitting hares over fine print.
    The official recommendation of PETA is to split hairs, not hares. Preferrably human hairs, from your own head.

    In fact, they even had a campaign with supermodels such as Christy Turlington and Naomi Campbell posing naked, with their heads shaved, on billboards, with the slogan "I'd Rather Go Bald than Split Hares" emblazoned across their chests.

  12. Depends on your definition by Sycraft-fu · · Score: 3, Insightful

    The OSS zealot of open source is "Source code that anyone can get for free." However a more literal definition might be "Source code that is available to others than the people that wrote it." Just because someone doesn't give you their code for free, or allow you to do what you please with it doesn't mean that it isn't open. There are many open standards like that. They are open, in that anyone can get them, but you've got to pay for licensing.

    However that's not really relevant here. MS's Shared Source license isn't OSS and they don't bill it as such. It's there so that certain groups, mostly governments and research institutions but also software partners, can get a license of MS's code to look at. They aren't licensing it for resale, it's for research and testing.

    In the case of the Community License here it would mostly be for companies wishing to make extensions to MS software. If you wanted to make something that needed source access (for example Diskeeper back in the NT 3.1 days) and waned to sell that, you'd need to get this particular license.

    None of their Shared Source things are shall-issue. You contact them and talk about why you want it and what for. If they like that, they'll discuss costs.

    MS has no interest in its licenses being used by other people. They aren't in the business of writing a license for everyone, or dealing with potential fallout of that. It is for them to license their software when they wish to do so. Thus they aren't interested in the OSI picking it up. It doesn't benefit them at all to have a standard made of it.

    Nothing is stopping you from using it as a reference for writing your own license, of course.

    1. Re:Depends on your definition by MrMr · · Score: 3, Insightful

      However a more literal definition might be "Source code that is available to others than the people that wrote it." Just because someone doesn't give you their code for free, ....

      But with that definition all source is open; If I want to look at the Vista code I just buy this company called Microsoft, and all its code is available to me.

  13. Strengthening OSI's credibility by I'm+Don+Giovanni · · Score: 2, Insightful

    When the author of a license submits his license to be approved by a body such as OSI, the intent is to get that body to approve the license. Part of the process is that if the body rejects the license, the body informs the author of the reasons so that the author can, if he wishes, make adjustments to the license and resubmit it. This is an interactive process between the author and the license-approving body. At no point in the process does the license-approving body declare to the world, "WE HAVE REJECTED THIS LICENSE!!"; "WE HAVE REJECTED THIS RESUBMITTED VERSION OF THE LICENSE"; "WE HAVE REJECTED THIS RE-RESUBMITTED VERSION OF THE LICENSE"; and so on. Rather, they communicate privately with the author on the problems they have with the license and resubmissions and so-on.

    What you wanted to happen was for OSI to, on its own, evaluate an MS license, reject it, and declare, "WE HAVE REJECTED THE MICROSOFT LICENSE", without giving MS any chance to alter the license to address the problems that OSI might have with it.

    OSI has featured anti-MS rhetoric on its site. If they had decided to evaluate an MS license without MS submitting it, and publicly rejected the license, then it would have been seen as no more than an anti-MS hit-job. That they didn't do that actually strengthens their credibility, not weaken it.

    --
    -- "I never gave these stories much credence." - HAL 9000
    1. Re:Strengthening OSI's credibility by Russ+Nelson · · Score: 2, Funny

      Rather, they communicate privately with the author on the problems they have with the license and resubmissions and so-on.

      Exactly.

      --
      Don't piss off The Angry Economist
  14. Re:Depends on your definition NOT! by kjart · · Score: 2, Interesting

    Open Source has a crystal-clear definition (visit OSI for the definition); the meaning of the term "Open Source" is nothing zealots can change.

    They may define "Open Source" (which appears to be a trademark), but not necessarily open source - I'll leave that to a good dictionary. Also, it seems possible that some people might consider the members of OSI to be zelots themselves as much as say, Steve Ballmer would be for his respective cause.

  15. FSF's opinion by DrYak · · Score: 2, Insightful

    Because OSI complied to microsoft's demand and didn't evaluate the license, we won't know their stance about it.
    On the other hand the FSF has shown what they're thinking about it.

    Although both institutions (read: ESR and RMS) are known to have divergent point of view, this hints about how much this license can be free, and what one should think before starting his own project using this kind of licensing (something for which knowing OSI, FSF and DFSG's stance can be genuinly useful, as some other /. signaled).

    I know that most /.ers think that it's best to stick to known licenses that are widely used, documented and proven (including tested in court), and most of the time the debate is only about the duality BSD vs. GPL (Should we allow the code to be forked into a proprietary branch or not), and that's maybe what most home-brewed projects do.

    But there are a lot of place (I've whitnessed some), particulary those big places that are new to the open-source concept, that don't automatically trust GPL and consider it proven (they've usually never heard of Groklaw, or the numerous cases of GPL-violation that were successfuly resolved). They don't start with a small subset of preferences (BSD/GPL), but do extensive - but, alas, sometime un-educated - researchs about everything they can encounter, they often start considering obscure licenses that the average OSS user has never heard of, often on the account of some higher hierarchy member or some beancounter that are affraid to 'lose control', and may end up using a solution that will turn up to be not as useful as expected.

    It is in such case that organisations like OSI can come handy to help choose and discern among the huge diversity of licensing scheme.

    --
    "Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
  16. Re:Depends on your definition NOT! by John+Cowan · · Score: 4, Informative

    "Open Source" is not a trademark, nor is "open source", for various technical reasons. "OSI Approved" *is* a trademark, and you can slap it on your software if you are 1) making source code available and 2) using a license on OSI's list.

    A license doesn't have to be OSI-approved in order to be an open-source license. An OSI-approved license is one that is an open-source license in the judgment of various people, not just the OSI board members.

  17. Re:Traditional Business Plan by NuclearDog · · Score: 2
    The card wasn't the problem. I've run it under Linux since then (the Auditor distro among others now ship with the driver installed by default). I know 100% that the card uses the Atheros chipset and is compatible with the ath driver under FreeBSD and whatever the equivilant is under Linux.

    "but installing drivers is trivial"


    Let's see:
    • Update kernel because the driver needs 2.6.23423413.41341343 not 2.6.23423413.41341342 or something.
    • Fix all the shit that I broke attempting to do that.
    • Re-install because I've FUBAR'd something.
    • Go back to step 1 and repeat several times.
    • Finally get the new kernel running.
    • Install about 14 different tools, half of which I couldn't find in the apt repository and had to spend multiple hours finding all over the net and installing.
    • Compile the driver.
    • Install the driver.


    With each of those steps having a hundred fracking steps involved to accomplish them, and about 40 different places to branch based on what goes wrong.

    Linux has this amazing ability to start me off simply wanting to accomplish something simple (playing a song), and ending up with me updating the kernel or something so I can update gcc so I can compile some library that needs a newer gcc that is required by some other library that is required by the music playing app. (not a real nor necessarily realistic example, just trying to make a point) Hell, by the time I give up, I've often forgotten what my original goal was.

    ND
    --
    This statement is forty-five characters long.