Slashdot Mirror


GPL Violations On Windows Go Unnoticed?

Scott_F writes "I recently reviewed several commercial, closed-source slideshow authoring packages for Windows and came across an alarming trend. Several of the packages I installed included GPL and LGPL software without any mention of the GPL, much less source code. For example, DVD Photo Slideshow (www.dvd-photo-slideshow.com) included mkisofs, cdrdao, dvdauthor, spumux, id3lib, lame, mpeg2enc, and mplex (all of which are GPL or LGPL). The company tried to hide this by wrapping them all in DLLs. There are other violations in other packages as well. Based on my testing of other software, it seems that use of GPL software in commercial Windows applications is on the rise. My question is how much are GPL violations in the Windows world being pursued? Does the FSF or EFF follow up on these if the platform is not GPL? How aware is the community of this trend?" This new method of detecting GPL violations could help here.

28 of 445 comments (clear)

  1. Well.. by WhatAmIDoingHere · · Score: 5, Insightful

    Did you try to contact the company? If not, that would be the first step.

    --
    Not a Twitter sockpuppet... but I wish I was.
    1. Re:Well.. by Anonymous Coward · · Score: 5, Insightful

      Yes, GPL software does not need to be accompanied by the source, but it does need to be accompanied by an offer to give you the source. The original article suggests that there was no such offer.

    2. Re:Well.. by Knuckles · · Score: 2, Insightful

      I would think notifying the copyright holder about the violation is the most appropriate thing to do.

      Right on. Using code that is available under GPL does not even always mean that there is a violation. It's possible that the copyright hold allowed them to use it under a different license. (Given the number of packages that are included in this DVD authoring application, this seems unlikely, though.)

      --
      "When I first heard Daydream Nation it quite frankly scared the living shit out of me." -- Matthew Stearns
    3. Re:Well.. by gumbi+west · · Score: 1, Insightful
      uh, except that I thought that the gpl license requires that when you make derivative works, it also must have a gpl license associated with it when it's distributed.

      That said, Apple gets around this somehow with a lot of its software, probably by compartmentalizing successfully.

  2. Question to your Question: by JeremyGNJ · · Score: 3, Insightful

    Here's the question to your question about whether violations are followed up on or being investigated:

    Who's going to follow up on it and why?
    Who's going to pay for the lawyers to do so?
    Is there *any* money to be made? Even enough to pay for those lawyers?
    Are you just penalizing the "spirit" of the GPL by making it a legal battle rather than letting the code proliferate?

  3. On its software by fotbr · · Score: 3, Insightful

    They won't pursue shit unless they own the copyright being violated, which is as it should be.

    Your code, your responsibility to look after it, not some third party organization's responsibility. (yes, I know submitter isn't complaining about HIS code being used)

    1. Re:On its software by PhilHibbs · · Score: 2, Insightful

      OP wrote:
      The FSF investigates and pursues GPL violations on its software on all platforms.
      Its software - software owned by the FSF, such as the GNU project. The article is incorrectly tagged 'gnu' but this is not a GNU issue. Just because someone used the GPL for their software, doesn't make it part of the GNU project or owned by the FSF and the FSF have no obligation to do anything about this. (dsclaimer: I havent checked to see whether any of the software listed actually is part of the GNU project but it doesn't look like it at first glance)

  4. Re:Misleading summary by ivan256 · · Score: 2, Insightful

    I don't think the summary is misleading at all. The implication is that free software writers are less likely to notice when their code is used in violation of the license when the violation occurs in a Windows application instead of in an application written for an OS such an author is more likely to use him/herself.

  5. Re:Misleading Title by Random+BedHead+Ed · · Score: 2, Insightful

    Hey, I don't know if anyone else has mentioned this but the title actually says "on" Windows, rather than "in" it. Just in case no one else replies to tell you. :)

  6. Re:fsf is a fair weather friend by Aram+Fingal · · Score: 2, Insightful

    The point of the GPL is to keep the project, which you wrote code for, going in a publicly available form. The main complaint of TFA is that these people using GPL code aren't making their snapshot of code (with any modifications they made) available to the public. Without the GPL, public domain code for a project can be taken, modified and close-sourced. If some people start using the closed source version, then you have development forks which can't be synced and your version of the project can suffer as a result. Then, when the company maintaining the closed source version looses interest and lets the project languish, people aren't making use of your work anymore.

    So, if all you want to do is make a chunk of code available for use, however people want to use it, then the BSD license or just public domain, are good choices. In other words, I agree with your comment, in this case. On the other hand, if you want to design a project to fill a specific need and want that project to survive in the public space, then the GPL is the way to go.

  7. Re:Misleading summary by gray+peter · · Score: 2, Insightful

    First of all, you forgot the Mac, which as someone else pointed out probably has just as many 3rd party apps using GPL code.

    Second of all, there are PLENTY of firms writing proprietary code for linux, most of it VERY expensive. Besides the obvious (Oracle, BEA, IBM) there are a huge number of high end scientific analysis, manufacturing and financial companies doing so.

    --
    May no camel spit in your yogurt soup.
  8. Re:Misleading summary by Mark+J+Tilford · · Score: 3, Insightful

    Part of the GPL says that they must "give any other recipients of the Program a copy of this License along with the Program." (section 1 at http://www.gnu.org/licenses/old-licenses/gpl-2.0.h tml ). If the program did "included GPL and LGPL software without any mention of the GPL", it's a violation as far as any GPL software is concerned. I looked over the LGPL briefly, but didn't see any problems. ( http://www.gnu.org/licenses/lgpl.html if anybody else wants to look.)

    --
    -----------
    100% pure freak
  9. Re:Misleading summary by mr_mischief · · Score: 3, Insightful
    Several others have pointed these things out:
    1. They must include a copy of the license.
    2. They must provide a written offer with the package to provide the source on request.
    3. They cannot strip attributions in what they provide
    I don't know that they've done the last one, but it makes sense along with the other violations
  10. Re:fsf is a fair weather friend by kebes · · Score: 4, Insightful

    I have a hard time with the concept of creating something, keeping a copyright in force, and then signing the copyright away for no benefit to myself
    No benefit to yourself? If you're putting code under the GPL, it's usually because you believe in the principles of the GPL (keeping code open source, encouraging freedom, etc.). In such a case, the benefit of signing copyright over to the FSF is that they will take care of enforcement on your behalf.

    If I'm not going to hold my own copyright, why not just specifically disavow copyright and let it enrich everybody via the public domain?
    If you want your code to be public domain, then you would release it to the public domain in the first place (or use a BSD license). Using the GPL is not a substitute for public domain: it is a license which guarantees certain things, namely it guarantees that the code will remain open and shareable ("free"). If you don't care about code remaining open and shareable, then don't license it under GPL. If you do care about it being open and shareable, then license it under GPL. If you further don't want to deal with the hassles of protecting said license, sign over the copyright to the FSF, who have much experience in such matters.

    This is the root of my problem with GNU in general: why show everybody how you achieved and developed a certain technological capability, without letting people actually use that method? ... I think it's just a bit petty to show the code but not authorize its use.
    You are basically saying that you prefer BSD to GPL. That's fine. (So, go ahead and license your code that way.) However, understand that the purpose of the GPL is to encourage all code to be "free," where free means: open source, shareable, and guaranteed to remain so.

    You appear not to care about the "guaranteed to remain so" part. That's fine. But understand that many among us find closing the source of code that was freely distributed to be rather unfriendly... and we're using copyright law as a tool to help guarantee that the code remains free. This guarantee helps encourage more people to create and to release (because many people would not release their code if they knew that others would commercialize/extend it without giving back). That is, copyright law is achieving, in this case, its stated goal: to encourage the production and dissemination of content.

    That, in my mind, is the brilliance of the GPL: it co-opts copyright law, uses it in an unconventional way, and thereby achieves the fundamental purpose of copyright law: to give an incentive for creation and free distribution of creative works.
  11. Re:Are you sure these are violations? YES! by scharkalvin · · Score: 2, Insightful

    Even if you distribute binaries in their pristine forms you STILL need to make the source code available, and (probably) include the license agreement with the code. Also (IANAL) I thought that under the GPL any code that was linked in with GPL'ed code also had to be GPL'ed. DLL's would qualify (unless the code was LGPL). Also if the DLL's were created by linking GPL'ed code with other code, then the resulting DLL
    's are GPL'ed and the source of the added code MUST be made available. (Where is RMS on this?)

  12. Re:libtorrent is BSD licensed by Anonymous Coward · · Score: 1, Insightful

    +1 for not saying 'my bad', friend!

  13. Re:Payback's a bitch! by Anonymous Coward · · Score: 2, Insightful

    You're making the wholly unreasonable assumption that those who use Free sofware are also those who pirate Microsoft's (and other proprietary) software. Did it not occur to you that Free software users might be using Free software instead of the proprietary alternatives?

    Personally I'd like to see all those who pirate Windows get caught and be forced to pay up. Then a significant portion of the market would have to think of the real cost of owning Windows (not just the cost of being locked-in, which is usually moot as far as most are concerned), we might even get a year of the Linux desktop if that happened!

  14. Re:GPL or LGPL? by Eponymous+Bastard · · Score: 2, Insightful

    You're using the mechanical argument as to how a DLL is loaded. The opposing argument is that the GPL talks about derivative works. If you create a program that has to use a certain DLL (Without a standard interface where you cold drop in a replacement from another source) then the combined program is a derivative work. The FSF goes as far as claiming that your software is a derivative work as well, even though you don't distribute a prelinked version. Notice that this doesn't apply to standard libraries like the C library, but only to specialized libraries.

    As I said, it's a gray area, and as I understand it nobody has yet tried to go against the FSF when confronted with this kind arguments, so I'm guessing the lawyers agree that there might be something to it, or that it's not worth the risk.

    It's a very rare situation though, and I last saw this a few years ago so maybe it's been decided.

  15. Clarifying copyrights by mcrbids · · Score: 1, Insightful

    The violation comes in stripping the GPL off the code....definitely illegal.

    There seems to be a double-standard at work on Slashdot. I know, different people, yadda yadda. But when discussing "piracy" the mantra seems to be "It's not piracy/illegal, it's copyright infringement!". But when discussing the GPL, those people are silent when the term "illegal" is used when discussing violations of the GPL.

    So, to clarify:

    1) Both MP3s and the GPL are protected by the same copyright laws. It's pretty tough to truly violate the GPL. You can sell GPL software, without source, for any price. You can use it however you like. But you have to provide sources upon request in the "preferential form" (EG: Soft copy, no printouts) and the license extends to derivative products. (which is the 'viral' nature of the GPL) Don't like it? Don't code with it.

    2) Boot-legging MP3s and violating the terms of the GPL are both copyright violations.

    3) Neither violation is covered by "Fair Use" laws.

    4) Both are bad. Both are also commonly done, like speeding on the highway.

    5) Under some circumstances, violating copyright can be a criminal act in the US. In all circumstances, copyright violations leave the liable to the copyright owner.

    Yes, IANAL and all that, but it needs to be said.

    --
    I have no problem with your religion until you decide it's reason to deprive others of the truth.
    1. Re:Clarifying copyrights by josephdrivein · · Score: 2, Insightful

      I think things are probably a bit more complex than what you say, but I'm not confident with the GPL.

      Don't you have to provide the GPL license itself with a GPL'ed program, even if in binary form?

      Otherwise, they may not be in violation: they distribute a compiled GPL'ed application, they may claim that until now none asked for source code - since none knew that the license was GPL, of course...
      We still have to see if they are willing to release their changes.

      Moreover, can you distribute a derivative work of GPL software in binary for without giving credit to the original authors?

  16. Re:What's the issue here? by tinkerghost · · Score: 4, Insightful

    Are you seriously saying that if I bundle mkfsiso with my app and shell out to call it, I have to release my source code too?

    No, we are saying that you have to include a copy of the GPL & an address/url where they can get the source of mkfsiso. Your code is your code, but msfsiso isn't yours so you have to follow the rules it's authors established on how it can be used.

    Now assuming that the violation is only with the lack of a copy of the GPL & the URL, it's a 2 minute fix to add those to the liscense.txt file that nobody reads for the next run of CDs. I don't think that anyone would argue that that type of fix is an excessive request by the copyright holders in exchange for the volumes of work put into creating mkfsiso.

    This reminds me of the big argument the founder of Slackware got into, when he announced he was going to sell distributions. Yes, sell! Oh my god, the horrors of actually charging for somehthing!

    Funny doesn't seem like that at all to me. Charge for the work he put into building the distro vs require that he follow the licenses on the works he included in the distro. Two very distinct issues at hand. Seeing as I am almost certain I have seen that software & I believe it comes with a copyright notice on it declairing copyright belongs to the company selling it, I do feel this is a touch different than selling a distro with notices that the copyright belongs to the individual owners.

  17. Re:Rentacoder & others by PitaBred · · Score: 2, Insightful

    In response to atleast one of these I was just told to strip the copyright from a GPL component and hide it in the application. I hope you told them to go fuck themselves with a metal rasp?
  18. Legal vs Legitimate by NeutronCowboy · · Score: 4, Insightful

    I have no idea where you got the idea that people claim that copyright infringement is not illegal. From what I can tell (ignoring the crackpots for a second), the distinction between theft/piracy and copyright infringement is made to remove the "hang 'em high!" component of the piracy/theft argument. No one for a second is arguing that it is not illegal.

    However, another point you may have missed is the distinction between illegal and illegitimate - or, conversely, the distinction between legal and legitimate. This is for me a critical aspect of the debate whether it is worse to copy mp3s from someone else or to ignore GPL requirements when redistributing software.

    Personally, I think that copying mp3s is often a victimless crime (if I didn't have buy the mp3 at full price because I thought it was overpriced, but then download it later from a friend because he has it results in a zero loss for all involved parties), though can screw over people in particular circumstances. As a result, downloading mp3s is for me a crime on the scale of jaywalking. It might therefore be legal to sue someone for $100000 per infringement, but it doesn't seem legitimate to me. On the other hand, ignoring the GPL when distributing software is taking someone's effort to improve the world, reapproprating it and selling it as your own. Monetary gain or not, it's a shit thing to do.

    Again, I challenge you to find me posts that say downloading mp3s is not illegal. I'll show you a post arguing about pre-set levies on blank media or a crackpot. Not only that, but on the more subtle point of whether it is the same thing to download MP3s or to break the GPL license, I completely disagree with you. Breaking the GPL license is to me like stealing candy from a baby - you're a complete jack-ass if you do it. Downloading mp3s.... meh, just make sure to not get caught.

    --
    Those who can, do. Those who can't, sue.
    1. Re:Legal vs Legitimate by NeutronCowboy · · Score: 2, Insightful

      Imagine this scenario: an album currently costs $14.95. I have no interest in purchasing it at that price, and haven't. A friend of mine then says "hey, check this album out - it's great", and I download it from him. What's the end result?

      The artist still has zero of my dollars. The record company still has zero of my dollars. My friend still has the album he paid for. I have an album that I didn't pay for, and that I didn't intend to pay for. Should I have that album in my possession to begin with? No. However, who is damaged by it? As far as I can tell, the only loss could possibly be my time spent listening to an album I don't like.

      Again - potential revenue is not realized revenue. There might be a fair price at which I would buy the album. If the record company doesn't sell it that price though, it will not realize any revenue at that price point. Again - the fact that I might be willing to buy a record for a certain price does not mean that the company can count that as money in the bank, and me not buying it at the non-existing price point as a loss. Now, if the album is available for a price that I'm willing to pay for it, and I still download it - yes, the company has lost potential revenue to the scourge of downloading. Again though, I want to make crystal clear that these things are not the same - and conflating them is dishonest on the part of record companies.

      --
      Those who can, do. Those who can't, sue.
  19. My FOSS longs to be free... by Anonymous Coward · · Score: 0, Insightful

    One thing I can't understand about FOSS is this obsession over the GPL. Who cares? When you give something away for free... let it go!

    The only thing I can see wrong is if someone just repackages your work and charges people for it. But if someone wants to borrow lines of your supposedly "open" source code, all of a sudden the GPL wants to make criminals of them.

    The GPL really just appears as nothing more than a complex scheme to have the FOSS community dictate to businesses how they can do stuff. No wonder everyone views the GPL as hostile to businesses and commercial usage- the FOSSies want to run the company without actually having any stake in the success or failure of the company. If you want to make a company's decisions for them, buy some stock or get a job there.

    My FOSS longs to be free!!!

  20. I've been curious by jessecurry · · Score: 2, Insightful

    I've often been curious about how copyright would really work in regards to the GPL if the source code is sent to a country where copyright laws don't apply, or where anyone with a right to use something could relicense it.
    Once the source code gets to this country "John" says, this source code is now licensed to "Mike in the US".
    Now "John" e-mails the source code(under a new license) back to "Mike"
    Is there still a problem if "Mike" decides to make a derivative work closed source?

    --
    Those who know, do not speak. Those who speak, do not know. ~Lao Tzu
  21. Derivative Works by einhverfr · · Score: 2, Insightful

    I have been arguing this on another thread. IANAL, however.

    I don't think that linking creates a derivative work (at least in terms of dynamic linking or static linking using a linker). Certainly Gates v. Bando (yes, a software case; no, not Billy) would suggest that some sort of copying of abstract expressive elements (not necessary code) would qualify. Now, doing "static linking" by compiling two source files into one object file might qualify but that might also depend on the circumstance.

    Of course the Gates test is not universally applied in the US and might be different internationally. However in the US, only original, expressive elements are protected. Aspects which are purely functional are not. Thus an algorythm is not protected even though its implementation might be. Furthermore, a list of facts (as in a header file) might not be protected, though the selection and ordering might be. What is interesting in Gates however is that it presupposes that one must show some copying of code which is protectable into the new application.

    My argument is based on the following elements:
    1) Substitutability. Can a library be substituted with another one (hypothetically or actually) without affecting the program? The hypothetical element is required to prevent questions like "if I also create a library with the same API or a portion of it does this interfere with another works' copyrights?" The substitutability portion is also required because Excel doesn't suddenly become derivative of my ODBC driver just because I write another one.

    2) Filtering out non-expressive elements. Maps of entry points of a compiled executable are not expressive because they are merely interfaces. Or at least they are no more expressive then XML DtD"s for web services and the like.

    3) How tightly coupled is the library? Static linking using a linker would seem to create a collected work rather than a derivative work (i.e. a larger work containing two inependent pieces, rather than a work derived from both). Using the GCC to merge source files prior to compiling might or might not.

    4) Can preparation for linking create a derivative work by mere inclusion of a header file? Yes. However nothing prevents the author from creating a header file derived only from the list of facts.

    5) Can things you do in the program create derivative works? Yes. Copyright extends beyond code to things like storylines of games, graphical design elements, and the like. If the library changes these, it might be a derivative work...

    6) Can number 5 be done without linking? Yes. I have no reason to think that Corba (like GTK uses) would render something safe just because it is more loosely tied.

    Assuming I am right in US law (and IANAL), then linking would be relatively irrelevant itself. What would matter would be what happens both before and after linking. Hence it could be indicative but neither sufficient nor necessary. THis means however that since derivation is usually shown circumstantially it might be seen as some sort of evidence.

    Perhaps this is what the FSF is saying in the linking question. But again, IANAL.

    --

    LedgerSMB: Open source Accounting/ERP
  22. Re:fsf is a fair weather friend by Kjella · · Score: 2, Insightful

    Two words: Dual license.

    By signing away the copyright, you've signed away the ability to relicense your code. In short, many are of the opinion that if you'd like to contribute your changes back under the GPL that's fine. If you want to close source and make money off our code, mine and yours, then I want money off my part too. To put it in real world terms. If you asked me for help moving a piece of furniture I'd certainly do so. If I learned you were hired and paid to move said furniture, I'd want to get paid too. It's that simple, it's what you don't get with BSD and what you do get with the GPL.

    --
    Live today, because you never know what tomorrow brings