RMS Explains GPLv3 Draft 3
H4x0r Jim Duggan writes "A transcript is now online of a talk Richard Stallman gave in Brussels earlier this week about the discussion draft 3 of GPLv3. Among other things, he explained how it will address the Novell-MS deal, from Novell's point of view and from Microsoft's, and he explained how the tivoisation clause was narrowed to make it more acceptable in the hope that it will be used by more people. After the talk he also gave an interview, and yesterday, draft 2 of LGPLv3 was released."
My biggest question is whether GPL3 will be compatible with the many existing "GPL-esque" free licenses [1], which are currently GPL-incompatible, because they contain patent-nullification clauses?
There is a lot of software out there being developed under licenses which aren't compatible with the GPL, because the GPL doesn't allow patent nullification clauses -- this is dangerous, because the purpose of these clauses is to keep someone from slipping code into a major project that they have a patent for, and then torpedoing the whole thing later on when it's crept into wider use. I don't know if this issue just wasn't foreseen when GPL2 was written up, but I can't think of a more pressing issue at the moment.
Yeah, "Tivo-ization" and web services may keep some software out of the hands of the public, but they're not nearly as downright dangerous as submarine patents are.
[1] Examples: IBM Public License 1.0, Common Public License 1.0, Apache License v2, or any of the other licenses where the FSF cheerfully comments "We don't think those patent termination cases are inherently a bad idea, but nonetheless they are incompatible with the GNU GPL."
"Ladies and gentlemen, my killbot features Lotus Notes and a machine gun. It is the finest available."
With the wonderful growth of open source software and many using the GPL (v2) what is so wrong with it they need to make a new version. For the past couple months that I've been following everything has been pretty much bad concerning V3.
This actually has a few more conditions because we were trying to avoid covering certain other things, for instance, consider a patent parasite, one of those companies that has only one business which is to go around threatening people with patent law suits and making them pay. When this happens, the businesses that are attacked often have no choice but to pay them off. We don't want to put them in a position of being GPL violators as a result. So we put in a condition: "this paragraph applies only if the patent holder makes a business of distributing software". Patent parasites don't. As a result, the victim of the patent parasites is not put in violation by this paragraph. I'm a little nervous about "this paragraph applies only if the patent holder makes a business of distributing software", does that mean all the parasite has to do is put up a site that says "download a copy of ls for only $10" and they're a distributor? Ok, that's a bit extreme but a lot of patent parasites are dying software companies who would likely be considered distributors. As well it's possible for this clause to be exploited. What's to stop the next SCO from selling all their patents to a patent parasite who in return gives them a license? They've sidestepped the clause entirely and the parasite can threaten to sue whoever they want (except Novell & customers).
Really if one company is attacked for patent infringement on a piece of GPL'd software than every user is vulnerable and it's only a matter of time before the parasite makes the rounds through all the companies. I think the old form was better since it didn't allow a distributor to back down and pay them off, perhaps giving the community to gather and fight back. Of course the old version also allows an unscrupulous competitor to give their patents to a shell company with the understanding that the shell company will put the competition out of business...
Damn, patents suck.
I stole this Sig
Even with a seemingly simple set of conditions (i.e., the license terms), someone will figure out a nuance or caveat that will challenge the conventional interpretation, and gum up the works for everyone else. Regulations (or licenses) are principally legal matters, and as such, precedents and case studies are key to understanding the bounds of their tenets.
Here's what we use in the nuclear industry to clear the air - as much as can be achieved, anyway. An industry group, like the Electric Power Research Institute or Nuclear Energy Institute, develops a guidance document that defines key terms, and most importantly, illustrates and amplifies the tenets of the regulation. These illustrations include case studies and examples that challenge the rule well beyond the obvious application. Ultimately, such a document may get accepted or endorsed by the Nuclear Regulatory Commission as a Regulatory Guide or other guidance document.
The parallels here are that:
- As technology and understanding of the license (or regulation) evolves, there will eventually be new gray areas discovered. This is true in both fields;
Where the situational similarity fails is that there is no overarching authority to endorse (or deny) the final version of the GPL. So the best that could be accomplished really would be to have a rigorous FAQ or guidance document as possible - one that anticipates the future as best as its preparers can.Science never settles, never rests.
If the software is not free, you can't know what the device is doing.
I hate to be the devil's advocate on this argument, because I really like free software (though I can't bring myself to whole-kool-aid on the morality argument)...
The software being open-source doesn't give me the ability to know what the device is doing any more than the law being published and accessible gives me the ability to be my own lawyer. It merely allows lawyers (or independent software developers) to exist. Hundreds of thousands of lines of code go into modern working software, and a bit of trust on the part of the average end-consumer is strictly necessary regardless of the visibility nature. The average end-consumer simply doesn't have the time to learn enough computer science to eye-verify every line of code in every piece of software they run.
I trust open-source because many eyes have seen it, and my experience has been that those eyes are not in heads that are actively engaged in the business of doing evil. I trust much closed-source from big companies because the situations where actively lying to the customer is long-term profitable are more rare than many think they are. It's true that only one of these avenues has even the potential for exploitation, but if we always kept to the safe paths we'd miss out on half the fun, eh?
It's not a morality question. It's a risk-reward question.
Take care,
Mark
There is a solution...