Slashdot Mirror
Is Showmypc.com an Open Source Pretender?
shaitand writes "When looking for a remote support application that penetrates firewalls and can be initiated by my clients with a couple of clicks, I came across Showmypc.com. It was a standalone executable but looked like it would work and best of all it was open source. The only thing I didn't like was the interface, so I went to check out the Sourceforge page. I noticed a substantial problem: CVS is empty and the source on the download page is for the 2.6 version. The version of the executable is 3.53. I mailed the developers that they needed to distribute their modified SSH client and VNC source to be in compliance with the GPL license. They said they didn't modify those programs and ignored my request for the current source code. So I ask again, if this is a GPL'ed application; where is the source?"
"Where's ShowMySource.com?"
did you report them to SourceForge?
If it's original work, can't the copyright holder decide to close the source? If it doesn't contain anyone else's work that happens to be GPLd, I don't see a problem here.
Need more info...
If you want news from today, you have to come back tomorrow.
CVS http://showmypcssh.cvs.sourceforge.net/showmypcssh / is empty.
Whereas GotoMyPC is a serious business with a vested interest in keeping users' machines secure, this site has no such commitments, and as such it seems like a pretty bad idea to use it without being able to check the source code. Potential GPL violations aside, a significant reason that we need the source is to confirm that it does what they say it does. Without it, who knows what backdoors they could be offering; it's especially concerning since it's specifically designed to penetrate firewalls. Beware!
this program contains code that they don't want you to see, because they are a shell company for microsoft that is simply using the VNC platform to spy on people so they can report back to the government.
If you feel like the government is watching you, they're not. They're watching everyone! Stop BIG BROTHER!
You are if you distribute a binary version with your modifications.
They don't need to give public or cost-free access to the source. All that is required is that they give the source to their customers, for a reasonable copy and distribution fee, if they ask for it.
And as for VNC and friends, well, if they didn't change that code they don't need to give you the source either.
Trust the Computer. The Computer is your friend.
...because the GPL only requires that an offer of source code be distributed along with the application. Have you purchased a copy of their commercial offering?
Please read the following from gnu.org's FAQ:
QUOTE
If I distribute GPL'd software for a fee, am I required to also make it available to the public without a charge?
No. However, if someone pays your fee and gets a copy, the GPL gives them the freedom to release it to the public, with or without a fee. For example, someone could pay your fee, and then put her copy on a web site for the general public.
UNQUOTE
"Computers are useless. They can only give you answers."
-- Pablo Picasso
Ah, another piece of commercial, proprietary software derived from VNC.
https://www.copilot.com/press/faq/
Here's a serious question: has Fog Creek ever given anything back to the open source community?
Well, they claim their software started out as open source(read: probably derived from open source projects like vnc/ssh/etc). Their sourceforge page indicates that the code is under GPL license, which implies that the source code should be made available to individuals wanting to use it for their own use.
However,other than the front page and the sourceforge page, there is nothing else on their site indicating that the application is in anyway open source in spirit, letter, or intent.
Of course, you can always just ask them if they are indeed still Open Source, or if they were, but have since reneg'd on their license agreement to be Open Source. I forget... do you need to make your code open source/GPL if your code essentially links to libraries of GPL/Open Source projects? Or perhaps if your product is derived from Open Source application source code?
If they are making use of code from another Open Source project and are burying it in their binary-only distros, might be worthwhile to check their code for library strings and see whose projects' rights are being tread upon and ask why they haven't upheld their GPL/OS obligations.
That's, IF they are using/leveraging/linking...
Winged Power Photography
How we know is more important than what we know.
I'm *pretty* sure there's an established procedure for reporting GPL violations, and I'm *pretty* sure submitting a /. story griping about your experience with that software ain't it.
Apology to Ubuntu forum.
This is flame bait... this is not news and it's definately not the proper way to report a GPL violation. Are we really hurting for news submissions?
Regards, Ryan McAdams
How long did Fog Creek Copilot take to write?
The three programming interns wrote the beta version of Fog Creek Copilot in under two months.
[...]
How were the four interns selected for this project?
Internship postings were made to the Fog Creek software website, www.FogCreek.com as well as to CEO Joel Spolsky's blog, www.JoelonSoftware.com. Fog Creek Software also mailed applications to hundreds of students at top universities. The posts sought out those enrolled in a four year academic institution with preference to those between Junior and Senior year with top grades, a track record of success, top notch computer programming skills for the Software Development Interns, and coursework in marketing or business experience as well as programming experience for the Software Marketing Intern. 800 students from top universities applied and 4 were chosen.
From the FAQ. (emphasis added).
Kiddo, you're at the wrong website! This is the one you wanted. Make sure your speakers are turned on and up, or you'll miss the best stuff!
Create a distributable exe via http://www.uvnc.com/addons/singleclick.html You can set it for connection ports, etc .. all you need after that is any vnc that is running in listener mode. client runs the exe that was created, connects to the listener machine and displays the remote desk. Client closes exe at teh end of the session and session is teminated and can't be reinitiated from the listener end. Goes through firewalls, routers, etc .. Total cost = 0 .. No additional login info needed .. I used to have my clients config vnc server and make connections that way, this is much easier and more secure for them.
If I fscking release my fscking work under a GPL license, what in hell gave you the idea that it's fair if you take my code, modify it, and then start selling my fscking code with your fscking code modifications without contributing your changes back to the community.
If you don't want to release your code, the remedy is simple: Don't base your fscking stinking work upon someone else's GPL'd work, start it from scratch, then, if you start it from scratch, you can keep it closed as much as you want.
(And given your attitude and dumbness I think it's a great idea if you really keep your code CLOSED)
Your ad could be here!
They removed the link to the sourceforge page.
And this is wrong how, seeing as they provide the source?
The source isn't enough for you?
Gee, thanks. Now I have lead poisoning.
The eternal struggle of good vs. evil begins within one's self.
Commercial. Proprietary. Yes, the magic words that get some people's blood to boil. You wield them well.
My question would be why you care? In case their VNC core comes from licensed software allowing a commercial derivate as a binary, there is no problem. I believe AT&T's core was GPL'ed so that would raise some questions, but it's possible that by "VNC core" they mean some VNC-compatible derivate with a compatible license. In that case, the devs of that core also specifically intended use of it like this, being more open than just for OSS devs to use. Yes, there is a "more open" than that. And those developers don't have an issue with this, and maybe just you not wanting to see a 100% free use of their code. And if it doesn't follow the license, there's a breach of license, and then that would indeed be bad.
But this is clearly an issue of whether licenses are followed, not about a company doing "good" or "bad". If they follow the license of the developers -- that is using the software like they specifically intended others to use it -- they are per definition doing good. At least unless if you disagree with how their VNC core devs chose their license.
If there's something I get annoyed about, it's not about companies properly using licenses, but people like you who try to impose a personal code of ethics on companies who only use the code the way the original devs intended it to.
Beware: In C++, your friends can see your privates!
UltraVNC and UltraVNC "single click" can do just what you want, is greatly customizable, and completely free.
To boldly use to and too two times and get it right too! They're not gonna believe their eyes when they see it there!
Don't you dare complain about doing the minimum. If you want more than that, write your own license and start to use it instead of the GPL.
Yes, all they got was:
Doesn't seem that shabby...
Using HTML in email is like putting sound effects on your phone calls. Just say <strong>no</strong>.
No..
sourceforge REQUIRES you upload the source. This is a sourceforge requirement, and is independent of the gpl.
Just create a support ticket on sourceforge and in some weeks(in my expierience) that project is either closed or the source is put in the file release system.
Comment removed based on user account deletion
I actually bought the DVD that was created to document the experience the interns had while working on that project. They all seemed very happy to be there, and honestly it was a very nice work environment, particularly compared to some places. Could have been worse, they could have signed on at one of EA's sweatshops. As an added bonus, most Universities require some sort of internship in order to receive your degree, and the sort of work experience they acquired working for Joel not only looks good on a resume, but better prepares them for a professional job as a software developer.
Curiosity was framed, Ignorance killed the cat.
'That seems awfully like you are claiming a violation of the license.'
Actually its UltraVNC and RealVNC both, and the versions they used are GPL'd. So yes, I told THE DEVELOPERS they were violating the license. I told SLASHDOT they were failing to provide source for their own so-called GPL'd application.
'I would love to know why you think open source means GPL.'
The GPL is an open source license and the one they are claiming their program is licensed under.
Bill Gates and wife isn't Microsoft and they aren't the Bill & Melinda Gates Foundation.
Apocalypse Cancelled, Sorry, No Ticket Refunds
so what you're saying is that if he wants people to do more than the minimum, why doesn't he just make the minimum 37 pieces of flair?
No, we don't. We all benefit when someone actually DOES look at the code and see that there is no hidden funny business.
Since most of the time that just doesn't happen (don't believe me, if you have commit access to a small open source project, add an "impossible" (put it behind a "if 1=2") dialog offering $50 to the first person to email a specific address with a secret word and see how long it takes for anyone to notice.
Don't make it a comment, people read those, but throw it in the middle of a huge boring subroutine.
Give a man a fish, he'll eat for a day, but teach a man to phish...