Scanner Spots Open Source Installations

Mike writes "Information security firm OpenLogic has begun letting users download 'Discovery,' an application that scans Windows, Linux, and Solaris machines and attempts to identify open source software. The Discovery application claims to identify more than 5,000 versions of the top 900 open source packages. The scanning engine is able to detect open source installations whether they were installed explicitly or bundled with other software products. Kim Weins, vice president of marketing, says 'We developed it in response to customers not knowing what open source programs they were using.' I can't help but think that this a move to slyly demonize FOSS by scaring businesses into thinking they don't know what's on their PCs."

Comments

Doh

[nokilli]

You know, given the Vista experience, we're getting to the point where you know there's open source software afoot if the scanner simply runs without crashing something.

--
Censored by Technorati

Re:Doh

[jshriverWVU]

3) home basic edition. Considering that the bulk of sales are home basic edition, that is why it leaves an overall bad taste in the consumers mouth. How many computers can you buy from BB, Target, Walmart, Circuit City that has Vista Ultra Super Server edition loaded vs Home edition. As the name alone implies it's used for the home user and that is the biggest buyer.

So if it sucks, then the bulk of Vista users are going to think it sucks.

Free download but a form to fill prior download

[Lord Satri]

I'm probably not alone curious and wanting to download this free app to (re)discover which OSS is installed on my computers... You can download it from here: http://www.openlogic.com/discovery/new_download_re gister.php?ls= and you need to give your name, email, location and some more before downloading the beast.

Re:Free download but a form to fill prior download

[$RANDOMLUSER]

Sure, and while you're there, check out their page about "indemnification".

Why Is Indemnification Important?
There are many benefits to using open source software, but in some cases there are lingering legal concerns around deploying open source in the enterprise. In order for enterprises to fully embrace a broad range of open source software, they need to be able to deploy, manage and control open source while limiting the associated legal and compliance risks. For the first time, enterprises can now access indemnification coverage for a broad range of open source products from a single vendor.

Let's try to make some money from FUD, eh?

Crickey

[also-rr]

I have 12,000 violations on my laptop. I better make out a check to the EFF before the bang the door down... what's the annual licensing fee on GPL software again?

Inventorying OSS can help OSS

[MSTCrow5429]

"I can't help but think that this a move to slyly demonize FOSS by scaring businesses into thinking they don't know what's on their PCs."

Looks to me that this is just a simple inventory tool so business has an idea of what's on their machines, and perhaps if they see that people, having appropriate account permissions on the PC, are voluntarily installing open source alternatives, say OpenOffice instead of MS Office, businesses may be more conducive to migrating to OSS, or at least openly accepting it.

Business have no clue what's on their machines. That's why you have staff workers running around as admin all the time, and picking up literally thousands of instances of spyware/adware/malware. They just can't get enough toolbars and cute fluffy pointers.

Re:Two options

[freeweed]

Why you would want to search for explicitly open source, vs. just knowing what is on a corporate PC doesn't make a lot of sense to me.

Because many companies have explicit policies forbidding open source, period.

I've seen it get so stupid as to call it "shareware", ie: unlicensed software. The lack of a vendor really freaks out a lot of PHBs, and heck, a LOT of older IT folks who still are scared by open source. Don't forget, OSS is less secure because everyone can see the source code, and it's less reliable because you don't have a multi-billion dollar vendor backing you when things go wrong. (not sure if I really need the sarcasm tag with that last sentence or if it's obvious enough)

Why not ....

[PPH]

... build a scanner that inventories ALL software and catagorized it as OSS, unknown or proprietary/licensed? Odds are its the latter two that will come back and bite corporate IT departments in the *ss if not properly licensed.

Since they quoted me..

[Kim weins]

I just want to let you know OpenLogic is a big fan of source. Our mission is to enable companies to use more open source software. Our whole business is built around that proposition, so we are definitely not trying to get companies to remove FOSS. The reality is that enterprises we work with are already using lots of FOSS -- whether they realize it or not. However, the corporate legal, compliance, IT and architecture folks want to know that they have certain policies and procedures in place around open source -- especially for software that's going outside the company or software that's going into production. By getting certification, support and indemnification from OpenLogic, it allows the corporate compliance types to feel MORE comfortable about FOSS and therefore be more willing to let developers use FOSS. The reason that we developed this free tool is that when we talked to companies, they weren't really sure what FOSS they were using. For many companies, the asset management tools that they already have in place can not necessarily detect open source software. We wanted a simple tool that would let them create that inventory. As far as registration, we have been debating that internally and have some changes planned to reduce the barriers -- so stay tuned on that front. Kim Weins