Slashdot Mirror


Asus Corrects Eee PC Source Code Issue

ozmanjusri writes "Asus has corrected the availability of source code for its Eee PC, and reaffirmed its commitment to meeting the requirements of open source licenses, including the GPL. They also announced the upcoming release of a new SDK to assist the Open Source community development on the Eee PC."

39 of 157 comments (clear)

  1. What's With the Name? by Apple+Acolyte · · Score: 4, Interesting

    EEE? Triple E PC? What's with the name (i.e. what does it signify)?

    --
    Part of the hardcore faithful who believed in Apple long before it was cool again to do so
    1. Re:What's With the Name? by norminator · · Score: 4, Informative

      I believe it's from "Easy to Learn, Easy to Work, Easy to Play".

      It may also be three different 'E' words, though, but I forgot what those are, if that is the case... Initially, I think it was part of the marketing to explain what the EEE stood for, but maybe that's fallen by the wayside now.

    2. Re:What's With the Name? by Entropius · · Score: 2, Interesting

      Asus has a history of making good stuff (I'm typing on an Asus laptop at the moment) but with occasionally wacky names and marketing phrases.

    3. Re:What's With the Name? by 0xygen · · Score: 2, Funny

      Seconded, I just got an Asus P5KC motherboard, and on the box and boot screen it says "Rock Solid. Heart touching"!

  2. Better late than never by RandoX · · Score: 5, Funny

    "The code released by Asus brings the company into compliance with its obligations under the GPL and should satisfy most of the critics."

    And those critics that aren't satisfied by that will all be regulars here at /.

  3. ASUS: Brilliant Marketing Strategy by multipartmixed · · Score: 5, Insightful

    1. Release geek-oriented product nobody's ever heard of
    2. Make it very obvious it's based on GNU/Linux
    3. "Accidentally" screw up the GPL code release
    4. Wait for Slashdot Story
    5. Fix GPL code release
    6. Trigger Slashdot follow-up story
    5. Free advertising sells lots of product
    6. Profit!

    --

    Do daemons dream of electric sleep()?
    1. Re:ASUS: Brilliant Marketing Strategy by slyn · · Score: 5, Funny

      123456....56

      wjat?

    2. Re:ASUS: Brilliant Marketing Strategy by Dancindan84 · · Score: 2, Funny

      1. Release geek-oriented product nobody's ever heard of
      2. Make it very obvious it's based on GNU/Linux
      3. "Accidentally" screw up the GPL code release
      4. Wait for Slashdot Story
      5. Fix GPL code release
      6. Trigger Slashdot follow-up story
      5. Free advertising sells lots of product
      3. ????
      6. Profit! Fixed
      --
      "Always forgive your enemies; nothing annoys them so much." - Oscar Wilde
    3. Re:ASUS: Brilliant Marketing Strategy by slyn · · Score: 2, Funny

      The J is silent.

    4. Re:ASUS: Brilliant Marketing Strategy by SagSaw · · Score: 4, Insightful

      1. Release geek-oriented product nobody's ever heard of

      I don't think that geeks are Asus' target market on this one. From what I've seen, their goal was to produce an sub-laptop with the best possible ratio of out-of-the-box capabilities to cost. What resulted is, IMHO, somewhere between the capabilities of a smart-phone (minus the cell phone, of course) and a note-book. I think they expect to be able to sell this to populations that might not otherwise be able to afford a computer (think OLPC, but less philanthropic), or who might not currently have their own computer (think of schools outfitting every classroom with a set, for example, or parents buying one for their school-aged child).

      2. Make it very obvious it's based on GNU/Linux

      I think this was mainly for cost reasons. The OS itself is free (not counting anything Asus might have paid Xandros for development work), and massive amounts of software are freely available. I suspect that license costs, hardware requirements, and cost/headache-factor of distributing a similar suite of applications for Windows would have driven up the price.

      3. "Accidentally" screw up the GPL code release
      4. Wait for Slashdot Story
      5. Fix GPL code release
      6. Trigger Slashdot follow-up story
      5. Free advertising sells lots of product
      6. Profit!


      Or, more likely IMHO,

      4. Fail to release the code on time to some combination of overwhelming bureaucracy, over-optimistic marketing deadlines, and overworked engineers.
      5. Release the code shortly after consumers point out your omission.
      6. Good will!

      --
      Come test your mettle in the world of Alter Aeon!
  4. Impatient, Are We? by Tenshigure · · Score: 5, Insightful

    The EeePC has only been available publicly for a few weeks now. It was purely speculation that they were willingly holding back the code for asus_acpi and the other crap, and now they've corrected that mistake. Those 'critics' need to calm down sometimes, not every large corporation out there is trying to destroy the 'sanctity of GPL' at every opportunity.

    1. Re:Impatient, Are We? by orclevegam · · Score: 2, Insightful

      The fact they had to make a different "cleaned up" version just confirms my suspicions as to why they didn't release it to begin with; the actual source code has programming hacks and embarrassing comments in it, like some previous examples of closed-source code that has been forced in to public view by the courts.

      [citation needed]

      Seriously though, what are you basing this off of? I read TFA and I can't find any reference in that, or in the articles it links to that say ASUS released "cleaned up" versions of the code. Even the guy who originally discovered this and blogged about it, says he thinks it wasn't ASUS being malicious, just negligent and forgetting to publish the code.

      --
      Curiosity was framed, Ignorance killed the cat.
    2. Re:Impatient, Are We? by civilizedINTENSITY · · Score: 2, Informative
      I haven't bought one either. I'm what you might call one of those "any third party" people that they have an obligation to under the GPL:

      3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:
      a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,
      b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange;
      c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.)
      From the FAQ

      What does this "written offer valid for any third party" mean? Does that mean everyone in the world can get the source to any GPL'ed program no matter what?
      If you choose to provide source through a written offer, then anybody who requests the source from you is entitled to receive it.
      If you commercially distribute binaries not accompanied with source code, the GPL says you must provide a written offer to distribute the source code later. When users non-commercially redistribute the binaries they received from you, they must pass along a copy of this written offer. This means that people who did not get the binaries directly from you can still receive copies of the source code, along with the written offer.
      The reason we require the offer to be valid for any third party is so that people who receive the binaries indirectly in that way can order the source code from you.
    3. Re:Impatient, Are We? by Obfuscant · · Score: 2, Insightful
      If we are to stop this kind of thing happening in future we need to make companies as scared of violating the copyright of FOSS as they are of violating the copyright of proprietary software.

      That certainly would stop it from happening in the future. It would also drive companies right into the arms of Microsoft.

      Which is easier for a corporate computer manufacturer PHB?

      1. Pay a licensing fee once to one company for all the software on a a system, and distribute nothing extra.
      2. Pay someone to develop code for specific hardware bits that needs to be version controlled so nobody ever gets sent the wrong code for their version of the hardware, and keep CDs on hand just in case someone asks for the software. Meanwhile, stay on top of all the copyright issues in all the jurisdictions where the product is sold and modify the distribution accordingly. (mp3 and gif, anyone?)
      Option 1 is a lot simpler. If your target audience has no idea what Linux is, or even how to pronounce it, you can count on zero sales based on OS. You get Microsoft to discount the licenses because these are starter systems and every system sold today is a Microsoft user for the rest of his life. Your costs are about the same either way, and if you wind up a target for a copyright lawsuit over some tiny bit of code that you left in the distribution, the latter could cost a lot more.
    4. Re:Impatient, Are We? by cbiffle · · Score: 4, Informative

      Hi. I'm the software engineer who initially brought all this to the community's attention. I assume I'm the scare-quoted critic you're referring to.

      I am not a GPL zealot (in point of fact I'm a BSD guy), and I have never used the term "sanctity of the GPL," except possibly in jest.

      I haven't seen anyone suggest that they were willfully withholding sources; in my original analysis I said that I suspected it was a mistake on their part. It's possible you read a sensationalized second-hand source (like iTwire), but all I noted was that they had shipped modified GPL binaries without source. As you say, the eee's been available for weeks now, which is weeks longer than the GPL permits you to distribute binaries without source.

      Had you read the initial analysis or the followups where I tested and verified ASUS's source releases, you would know this.

      Honestly, seems like anything can make 5/Insightful these days.

  5. Re:They're going to release the SAME code, right? by wizardforce · · Score: 2, Insightful

    you didn't actually read the article did you? no where does it say anything implying that the source code was "cleaned up" in this case to avoid complying with the GPL. Secondly, had they done so as you point out the binaries would not be the same, surely someone would have noticed.

    --
    Sigs are too short to say anything truly profound so read the above post instead.
  6. As a company that "Sells" Open source... by houstonbofh · · Score: 5, Interesting

    I work for a company that provides Open Source solutions. We are actively involved in several FOSS projects, and support the concept any way we can. That said, with the rapid advances of the base projects, and our changes to those projects, it is very easy to let publishing the source slip down the priority list. I have forgotten several times, and this has been on projects I develop for! (I fix it as soon as I realize...) I would bet many omissions can be attributed to overwork, and not malice.

    1. Re:As a company that "Sells" Open source... by kfort · · Score: 2, Informative
      According to section 3b of the GPL v2:

      b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

      The part about a written offer might be a minor quibble, but you should be in the clear as long as you provide the source when someone asks for it. So you don't necessarily have to publish the source at the same time you release the binary if it is an oversight. As long as you include the license with the software and make it clear it is covered by the GPL, you should be legal by the letter of the license.

  7. That Extra Mile by tundra_man · · Score: 4, Interesting
    I have noted in the last few days the release of the various bits of source code and am happy to see Asus ensure that they are in compliance. Now I would love for them to go the extra mile and release the code changes to MadWifi to support the wireless. I know this is released under a BSD style license and they are not obligated but one of the biggest weaknesses of the Eee right now for me is the inability of their wpa_supplicant to offer enterprise encryption support. Something that is hard to change without the MadWifi source or switching to use NDISWrapper. The Eee is the best gadget but I want my wireless @ work.

    NOTE: I have asked Asus about enterprise encryption support and they have said it may be coming. I have also asked about the madwifi source but received no definitive answer yet.

    1. Re:That Extra Mile by swillden · · Score: 2, Insightful

      Kernel modules have definitely been a contentious issue vis-a-vis the GPL

      Yes, but I don't think I've ever seen someone try to argue that a kernel module linked directly to and distributed with the kernel isn't a derived work. The questionable cases have been, for example, the NVidia and ATI drivers. The argument in those cases is that the binary-only component is not a derived work of the Linux kernel, doesn't dynamically link directly to the kernel, doesn't use any Linux headers to be built and may even be usable without the kernel. The source-distributed shim that connects the binary-only component to the kernel is clearly a derived work, and those shims are GPL'd.

      Even that case, however, hasn't survived a test in court. None of the Linux copyright holders have pressed the issue. If one of them did, it's not clear what would happen.

      Although MadWifi is dual license, in this case linking to the kernel provides the GPL infection to force the decision.

      I agree, thought I wouldn't use the word "infection", because it's not accurate. It's not that being linked to the kernel forces the madwifi code to be distributed under the GPL's terms, it's that unless the madwifi code is distributed that way, the Linux kernel code can't be distributed. If anything, the "infection" goes the other direction. The presence of the madwifi code distributed without source "infects" the rest of the kernel it's connected to and cause the GPL to be inapplicable to it in this case. Without the GPL's permission, of course, Asus has no legal right to distribute the kernel code, even though they can distribute the madwifi code without source or an offer of source (in compliance with the BSD license).

      Well again they have not yet replied to me as of yet so let's hope they also come to this conclusion and release this code.

      Absolutely. I suspect they will, and probably without much -- if any -- fuss. That's the best outcome for everyone.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  8. They need to do more than calm down by Kupfernigk · · Score: 4, Insightful
    They need to get a grip and get a clue. Unfortunately something attracts impossibilists to Gnu/Linux. It's the same self destructive urge that stops organizations like the Green Party going anywhere - they want impossibly perfect behaviour from their supporters and proponents. There is something weird in the psychology that seems endlessly to find fault with the things it claims to support, but it is remarkably common. I'd like to think that all the original attacks on Asus were actually astroturfing Microsoft PR flaks, but unfortunately years of experience lead me to the knowledge that Linux and FOSS needs to be protected from some of its friends as well as its enemies.

    Memo to these guys: you may not like having to live in your parents' basement, but you will find that a little tolerance of other people (and suppressing the hair trigger attack reaction) goes a long way when trying to lose your virginity.

    --
    From scarped cliff or quarried stone she cries "A thousand types are gone, I care for nothing, no not one."
    1. Re:They need to do more than calm down by Hatta · · Score: 5, Insightful

      The point is, the GPL is not about extracting damages from people. It's not even about forcing people to give us their code. It's about ensuring code that is free remains free. If companies see GPL software as a legal trap where a simple mistake could leave them liable for thousand of dollars in fines, they're just going to avoid it completely. Which would kind of negate the entire purpose of sharing free software. Remember, the GPL is a means to an end, not an end in itself.

      --
      Give me Classic Slashdot or give me death!
    2. Re:They need to do more than calm down by cbiffle · · Score: 2, Insightful

      For context, here's how this looks from outside Slashdot.

      Me: "It looks like ASUS may have violated the GPL in the eee software distribution. I suspect it was a mistake. I've contacted them and publicly stated that I don't intend to sue or anything." (This is the 'hair trigger attack reaction' I guess.)
      Blog community: "Lame!"
      ASUS: "Oh, hey, you're right, here are some source tarballs."
      Me: "Thanks! Go ASUS!"
      "Kupfernigk" on Slashdot: "OMG MOUTH-FROTHING AD-HOMINEM ATTACKS"

      One of us is involved in civil dialog, the other is making angry Slashdot posts -- I'm not certain the latter is in any position to give lectures about losing one's virginity. :-)

  9. Re:They're going to release the SAME code, right? by TheLinuxSRC · · Score: 4, Insightful

    Wow. I have mod points, but there is no "-1 where the hell did that come from" option. I do not disagree with your first sentence, but the remainder of your post is completely and utterly wrong, at least in how it pertains to Asus and this discussion.

    "A company may not be even in a position to release the source code as it may be owned by a third party." Fair enough, but this article is about a company distributing a GNU/Linux system with a modified kernel module that is GPL'd. There is no third party involved and even if there were, there is no way that Asus could both legally distribute their version of GNU/Linux in binary format (installed on the device) and simultaneously *not* release the modified source code; regardless of said third party's standing on distribution of the code. This is GPL 101 type stuff. Check it out.

    "Releasing newly written code with equivalent functionality or even rewriting GPL code and keeping the product closed source is considered enough to cure a license violation." That is so wrong I don't even know where to begin. How about you come up with some citations for that asinine bit of trash? I feel dumber for having read that.

  10. Re:They're going to release the SAME code, right? by norminator · · Score: 2, Insightful

    For a product that hasn't been out that long, I would think that as long as it matches the binaries they send out from this point on would suffice. I mean, maybe someone could go after them for what was previously released, but why bother?

  11. Re:They're going to release the SAME code, right? by Kjella · · Score: 4, Insightful

    They need to release the SAME source code that was used to create the binaries which they've already released and distributed, not just "cleaned-up" code, which generates different binaries. No, they don't. First of all, unless someone sues they won't need to do anything at all and even if someone did, they'd never be forced to release code but they might have to pay damages. Nor would releasing source free them from those damages. Legally it has no weight in one direction or the other. It's an olive branch, a token of good faith, a "settlement offer" - if I release this, are we cool? To which you can of course say "Not good enough" if you're legally entitled to sue. And quite frankly, unless they removed 99% of the secret source I think most would be happy with "umm we're not usre about the exact source version, but here's the complete source for our latest build with all enhancements and bug fixes we've done since". Anything else is a witchhunt in best RIAA-style.
    --
    Live today, because you never know what tomorrow brings
  12. Re:just don't bother by $RANDOMLUSER · · Score: 4, Insightful

    That's not what it was designed to be. Picture a sales force or service technicians armed with these. Calendar, Google maps, IM, Open Office and Skype in less than a Kg. This is the unit that's going to put linux in a LOT of peoples hands. And who knows? Once they get used to Linux on the road, they might want it at home and the office.

    --
    No folly is more costly than the folly of intolerant idealism. - Winston Churchill
  13. Re:They're going to release the SAME code, right? by hacker · · Score: 4, Informative

    It's because it's true. Duh.

    Not quite, see below.

    In order to come into compliance, one thing you can do is stop shipping the product. You are then in compliance again.

    And you are still in violation of the license. How do you handle the penalties for your existing violation?

    Then, you re-write the pieces that were causing the problem, and you start shipping the product again with the newly re-written pieces.

    And you still have not released the source that is mated to the version you've already shipped. Where is the source that goes with version 1.0? If you release version 2.0 with "cleaned-up" source code, you are still required to release sources for version 1.0, as well as atone for your prior violation with that version. Just because you complied at version v2.0 doesn't mean your violation with v1.0 goes away.

    Sony tried this game with their version of the POSE FLOSS project. They would release v1.0 in binary, then release 2.0 binaries, with v1.0 source code, and so on. Always keeping the source 1 release behind. They were in direct violation of the letter and spirit of the GPL license.

    Now, if you happen to be able to re-write those pieces so that you can stop/start shipping on the same day, well, that's ok too, you are still in compliance.

    You are assumed to be in compliance with the GPL for version 2.0 of your product, but you are still in violation of version 1.0 of your product. What do you do for all of the units already out in the hands of consumers?

    Each unit is now subject to US Copyright violation penalties, which vary from $20k to $200k per-unit (look it up). If you shipped 1,000 units, that's a $20M penalty at the low end of that scale.

    Read the license - it's in there.

    It sure is, and you've misinterpreted it very nicely.

  14. Re:Source code here: by morgan_greywolf · · Score: 2, Funny

    From the Slashdot meme department: Pot: Hello, Kettle!

  15. Last minute changes by Anonymous Coward · · Score: 3, Interesting

    Full Disclosure.....I haven't received my eee yet, I ordered it last Wednesday and it is due to arrive this week. I can't logon here at my client; my nick is alanbcohen

    As I understand it, Asus used a new chip to meet the cost targets and had to make some last minute code changes to get working systems out the door. No 'cleanup' of proprietary source, no trying to hide stuff. Over at the eeeuser forum, they are already reporting successful recompiles of the source and use in a different distro install on an eee. Delay due to oversight is the simplest explanation (huh, ever heard of Occam's Razor?). All you conspiracy hunters; find a new playground!

    1. Re:Last minute changes by xenocide2 · · Score: 2, Insightful

      I think it speaks more to the skills of asus to market the concept to people. Nobody accuses openMoko of failing to disclose the source, because they did so from the start! Even if you wanted to hide your engineering from the world, the source code is part of the selling point to the eee. A more skilled Asus would have it available on day one, if not before, and be proudly trumpeting it.

      --
      I Browse at +4 Flamebait

      Open Source Sysadmin

  16. Re:Free publicity by _KiTA_ · · Score: 4, Insightful

    Is it me, or is it funny how Asus gets free publicity for screwing up.

    No, they get free publicity for doing the right thing, which, unfortunately, is uncommon amongst the business world.

  17. Re:They're going to release the SAME code, right? by TheLinuxSRC · · Score: 4, Informative

    I am not sure of the point you are trying to make. None of the examples you give are GPL violations.

    1. Microsoft violated Eolas' patent. Microsoft has no obligation to release source code for IE as they own the copyright to that source code.
    2. See above.
    3. Please give me an example of SCO code that is illegally included in Linux. The SCO group never could.
    4. Trademark != copyright.
    5. The Apple Music store thing was a private contract between Apple records and Apple computer.
    6. Lindows was renamed due to a trademark violation. Refer to #4 above.

    None of your examples have anything to do with the GPL or even copyright.

  18. Left hand, right hand? by kbahey · · Score: 3, Insightful

    Some of the posters see conspiracies every where (marketing strategy, ...etc.).

    A simpler explanation is that in a large corporation, you have communication "issues" causing delays and lags. The technical folk may have finished their part of the project, but the web presence or product management folk has not gotten to publishing the source yet.

    This is the classic left hand does know what the right hand does ...

    Let us not assume bad intentions where no hard evidence exists.

  19. Re:They're going to release the SAME code, right? by Haeleth · · Score: 2, Insightful

    "Releasing newly written code with equivalent functionality or even rewriting GPL code and keeping the product closed source is considered enough to cure a license violation." That is so wrong I don't even know where to begin. How about you come up with some citations for that asinine bit of trash? I feel dumber for having read that.
    Insulting people does not make you sound more authoritative. If you can't be polite, perhaps you should refrain from posting at all.

    As it happens he is slightly incorrect, but his basic point -- that it is possible to resolve a GPL violation without releasing code -- is valid.

    The situation is that a GPL violation is like any other copyright violation. It can be resolved in two ways: either the violator can obtain a license from the copyright holder, or the violator must cease and desist the violation and pay damages. In the case of GPL violations, what typically happens is that the copyright holder says "comply with the GPL and you will have a license to use this code", so the violator complies with the GPL and everyone's happy. But it is entirely plausible that a violation could be resolved by the violator withdrawing the product or rewriting code to remove the infringing sections. The only slight flaw in the GP's statement is that this in itself would not necessarily be the end of the story, because the copyright holders could still demand monetary damages to compensate them for the violation.
  20. Re:They're going to release the SAME code, right? by AusIV · · Score: 2, Informative

    6. Lindows was renamed due to a trademark violation. Refer to #4 above.

    That's not really accurate. Microsoft brought a suit against Lindows for trademark violation. After several court decisions made it look like they might lose their claim on the Windows trademark (because it was too generic), Microsoft bought the Lindows trademark from the company that is now Linspire for $24 Million.

  21. Re:They're going to release the SAME code, right? by iamacat · · Score: 2, Insightful

    And yet courts have been known to impose no or minimal penalties for patent infringement (if accidental and quickly corrected), trademark infringement (ditto), theft (if getting essential food and medicine in a disaster zone) and assault (if the defendant had reasons to believe that the victim posed an immediate physical threat). Why are you so sure that an accidental, small in scope and promptly corrected copyright violation will not be handled in a similar manner?

  22. Where's the story here by Eskarel · · Score: 4, Informative
    The GPL requires distributors to provide source code upon request. Asus released some source code which was apparently out of date, someone requested the updated source code and Asus released it.

    They have no obligation to host the source code, nor to provide it for download, they merely have to provide it upon request, and they did. End of story.

  23. I hope not these three by someone1234 · · Score: 2, Interesting

    Embrace, Extend, Extinguish.

    These are trademarked by M$, Asus would get into serious trouble.

    --
    Patents Drive Free Software as Hurricanes Drive Construction Industry