Slashdot Mirror
FSF Files Suit Against Cisco For GPL Violations
Brett Smith writes "This morning the Free Software Foundation filed suit against Cisco for violations of the GPL and LGPL. There's a blog post with background about the case. The full complaint is available too." The short version, as excerpted by reader byolinux, is that "in the course of distributing various products under the Linksys brand Cisco has violated the licenses of many programs on which the FSF holds copyright, including GCC, binutils, and the GNU C Library. In doing so, Cisco has denied its users their right to share and modify the software."
They allow abusive entities such as the Free Software Foundation to go after Cisco. If only the software was distributed without cumbersome GLP and LGPL licensing restrictions, and was truly free like software wants to be, then Cisco wouldn't have been forced to violate the licenses.
For shame.
If only there were some way to find out. It's hard to say for sure, but based on this:
I'm thinking maybe they did.
According to the blog post linked in the summary, the FSF has been working with Cisco since 2003 to resolve the issue of GPL compliance, and has received only halfhearted attempts on their part to come into compliance. We're only seeing the FSF's side of the story here, of course, but assuming that they're telling it like it is, the FSF tried many other avenues before deciding to file the lawsuit.
How can we continue to believe in a just universe and freedom to eat crackers if we have no ale?
I've worked at Cisco, and the general attitude among many (not all) is that they don't care about GPL violations. Linux is used as it's the fastest path to get the products out.
The reason why this will be unsettling to Cisco is because some of the products have integrated key IOS files in order to retain backwards compatibility. Which means that those files now fall under the GPL. And the only way to integrate them is to use various Linux API's. That is, key files are derived works from the GPL. From the bootstrap code on up.
But, since these files are key to IOS as well, one could take the view that IOS is now under the GPL.
One could try to maintain that those files need to be dual-licensed. However, though some hold that to be valid, I don't believe such a dual license has ever been held up in court. So that might get interesting if the FSF wanted to push it. In any case, it could be a useful bargaining chip.
In any case, those files don't have the appropriate copyrights stating how they are licensed.
The amusing part here is that this has come about mostly because of Cisco's dedication to using as much H1-B/L1 labor as possible. It's been those guys who have mostly (not entirely) done this work in order to get things done quickly. And believe me, protestations about the licensing have been ignored completely when they've been raised. Hack-it-in quickly and damn the lawyers has been the attitude.
It's very amusing to see that Cisco's use of cheap labor has come back to bite them in a way that has the potential to cost them more money than if they had done things in the right fashion originally.
By the time this lawsuit has gotten though the legal system you will have forgotten why you bought the router and/or it will have died... proceed with the boycott
Cisco / Linksys set themselves up for a fall here. If they wanted code they could just rip off and use whilst largely ignoring the license, why on earth didn't they just use BSD code? These are large companies, presumably they have lawyers. But they're acting like some kid who downloads an image from Google Image Search and uses it on their webpage - "I downloaded it off the web for free so I can just use it right?"
libguestfs - tools for accessing and modifying virtual machine disk images
You guys just don't get it. The FSF protects software. Then Cisco went and muddied it all up like your sister's proprietary, tattooed boyfriend. Now every time you use GCC, it'll be thinking of Cisco.
According to the complaint: "in
the Firmware for Linksysâ(TM) models EFG120, EFG250, NAS200, SPA400, WAG300N, WAP4400N,
WIP300, WMA11B, WRT54GL, WRV200, WRV54G, and WVC54GC, and in the program Quick-
VPN."
If J.K.R wrote Windows: Puteulanus fenestra mortalis!
The FSF has filed suit against Cisco for copyright violations. Cisco distributed code owned by the FSF without permission.
Yes, Cisco could easily be distributing with permission, and hence legally, if they followed the requirements of the GPL. Instead, they chose to distribute without permission, a violation of federal copyright law.
Yes, usually it is just costs + compliance.
But this time, they seem to be pissed (from the stuff they filled with the court, the URI is in the press release):
"Prayer to Relief"
[...]
(2) That the Court order Defendant to pay Plaintiff's actual and consequential damages in-curred, in an amount to be determined at trial or, in the alternative, statutory damages as set forth in 17 U.S.C. 504(c);
(3) That the Court order Defendant to account for and disgorge to Plaintiff all profits derived by Defendant from its unlawful acts;
[...]
In other words: OUCH!
If you read the article, you'll see that they did. They've been working with Cisco for the last five years on it, but according to the FSF never became fully compliant:
As we always do in violation cases, we began a process of working with Cisco to help them understand their obligations under our licenses, and how they could come into compliance. Early on it seemed likely that we could resolve the issues without any fuss.
While we were working on that case, though, new reports came in. Other Cisco products were not in full compliance either. We started talking to the company about those as wellâ"and that's how a five-years-running game of Whack-a-Mole began. New issues were regularly discovered before we could finish addressing the old ones.
During this entire time, Cisco has never been in full compliance with our licenses. At first glance, the situation might look good. It's not difficult to find "source code" on the Linksys site. But you only have to dig a little deeper to find the problems. Those source code downloads are often incomplete or out-of-date. Cisco also provides written offers for source, but we regularly hear about requests going unfulfilled.
Despite our best efforts, Cisco seems unwilling to take the steps that are necessary to come into compliance and stay in compliance. We asked them to notify customers about previous violations and inform them about how they can now obtain complete source code; they have refused to do this, along with the other reasonable demands we have made to consider this case settled. The FSF has put in too many hours helping the company fix the numerous mistakes it's made over the years. Cisco needs to take responsibility for its own license compliance.
No no no.
Cisco has violated copyright law by distributing GPLed FSF code under terms other than specified in the only available license. The ownership and licensing of IOS code is not affected by this in any way. This is the past.
Now for the future. If Cisco wants to keep distributing IOS code mixed with FSF code, there is only one way of doing it. That is to release the code under the GPL, because the FSF doesn't offer any other licenses. Only the IOS code which is mixed with FSF code needs to be released under the GPL. This has no effect on any other IOS code (older or in other products or whatever).
Since the user doesn't get the code.
Or when are MS going to release the BSD code in Windows, including all enhancements?
So they can't change the BSD code in Windows, can they.
The user doesn't have to be a developer either. They can PAY a developer to do it. They are still the user. And, since the BSD allows the new developer to give the binary closed, the developer the user has paid can take the freedom to get someone else to do more work from the user who paid for it.
Don't be an idiot.
This is not exactly "put some code on the web for download."
If you mean that Linksys/Cisco could have avoided this at any time in the past five years by releasing the code, you are probably right. The FSF is easy to get along with. It is anybody's guess what they need to offer the FSF now to make it go away.
This is why free licenses such as BSD should be adopted for any commercial project.
Cisco didn't "adopt" the GPL; quite the opposite, they're trying to avoid it. However, they put *themselves* in a position where they'll either be forced to or be guilty of breaking the license terms.
Avoid viral licenses such as *GPL.
Who should? The people who wrote the original code? Maybe they don't want companies like Cisco using it if it means closing the code off and not returning anything. That's their choice.
Cisco? They knew- or should have known- the implications of the GPL and had- as you imply- the choice of using BSD-licensed software instead.
Perhaps there wasn't a BSD-licensed version of what they were looking for? If so, tough shit! No-one's under any obligation to provide them with that for free. Cisco could of course pay someone to write it (and release it under the BSD license if they so wish). Or they're free to use the GPLed code and adhere to the terms it was released under.
But they thought they could get away with using the no-cost GPL code without honouring the obligations. They knew what they were doing.
"Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
Don't buy a linksys, but do buy one of the ones with similar hardware.
When I bought my Asus WL-500g Premium it shipped with the complete modified linux source in a folder on the CD that contained the usual windows-crapware you seem to get with every product these days (you know, the outdated copy of acrobat reader, some documentation wrapped in a shiny executable and such).
I did install OpenWRT on it, and I'm very happy with the result. I'm also happy with Asus for actually shipping the source, but I never did write them a line and told them. Maybe I should.
c++;
yeah - probably true.
Part of this was a chain reaction. Linksys was a low end router company and they adopted Linux to save money on development. As such, they had no need to cripple their routers to not compete against their high end brand, since they didn't have one. Unfortunately for Cisco, who bought them, they do have a high end brand, and releasing the source for their low end brand that people have tuned to outperform their high end routers (with overclocking and mods) is not really in their best interest (illegal, yes, in best interest, no).
Personally, I think they were gambling as long as possible that the FSF wouldn't file a suit.
Yes, it could be a misunderstanding. Especially when FSF has spent five years communicating with Cisco trying to resolve the issue peacefully. If there's a misunderstanding, the people at Cisco need to get some working brains...
The reason why this will be unsettling to Cisco is because some of the products have integrated key IOS files in order to retain backwards compatibility. Which means that those files now fall under the GPL.
This is false. Releasing GPL code can never automatically force other code to be licensed under the GPL. What it does mean is that someone was distributing code without a license, and may be liable for copyright infringement damages. If they *had* licensed their other code under the GPL, they wouldn't have been liable.
In general, a number of GPL-using authors tend to be okay with someone who has infringed doing a subsequent GPL-based release as a way to clear the air (and often then forgive previous damage caused by earlier infringements), but (a) they need not forgive the damages in such a case, (b) the infringer need never do a GPL-based release of their own code, instead simply paying damages.
*sigh* Cueing the millionth identical replay of the exact same longwinded "BSD is freer because...." "No, GPL is freer because...." discussion subthread, in which the contributors get to restate the established position using the same old arguments to make the same old points, and neither side changes the other's mind.
:)
Nothing wrong with that, but we don't need to hear it over and over and over again. Can't we just find an old subthread on the subject and link to that instead?
"Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
The really weird thing is that the WRT54G, with Linux, cost $50 years ago. The new WRT54G, with less hardware, cost -- guess what -- $50 today! Or, alternatively, the WRT54GL costs more than $50. Isn't hardware supposed to get cheaper and better over time, rather than worse or more expensive?
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
Cisco is being REALLY REALLY stupid here and I just don't understand why.
I've done a lot of commercial software that uses LGPL and GPL code, and its not rocket science. RMS himself even says that "mere aggregation" is not a problem.
Here are the rules:
if its LGPL, link to it, but don't modify it. If you need to modify it, make the modification in the form of a generic API extension and call it from the application. Make your extensions public.
If it is GPL, make it a service and call it through a socket.
If it is a kernel module, there seems to be some wiggle room there, otherwise make a public mini-driver and a proprietary user space app.
How hard is that? Jeez, if you screw up GPL compliance, you are not paying attention.
(3) That the Court order Defendant to account for and disgorge to Plaintiff all profits derived by Defendant from its unlawful acts; [...]
So am I the only one who thinks disgorge is an awesomely awkward word. All I can see is something like "2 Routers 1 Port!"
"Slashdotters" want the software to be freely distributed, freely used, and freely modified. Corporations use copyright to prevent that, so Slashdotters are against them. The FSF uses copyright to promote that, so Slashdotters support it. That's not hypocritical at all: in all cases Slashdotters are trying to work towards the same goal. You only thought it was hypocritical because you weren't looking at the whole issue.
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
It's not about "the law," though. Laws are reflection of society, not the other way around -- you don't avoid doing something because it's against the law, you make it against the law because it was a bad thing to do in the first place. But because of this, laws don't always get it right. It used to be illegal to aid an escaping slave, for example. But does that make such an action wrong? Of course not (unless you're a KKK member)! Laws should be followed when they are just, but when they are unjust they should be broken.
By your logic, ambulance drivers should lose their driver's licenses and soldiers should be jailed for murder.
Wanna bet? Here's "what we say:"
Copyright holders of proprietary information (like the RIAA) try to prevent it from being free to modify and share without restriction, so we oppose them. "What we do" is completely consistent with "what we say" in this case.
Copyright holders of Free information (like the FSF) try to force it to be free to modify and share without restriction, so we support them. "What we do" is also completely consistent with "what we say" in this case too!
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
Get the name right. It's Gnu/Cisco.
Who would win this election: Andrew Weiner vs Andrew Weiner's weiner.
If you mean that Linksys/Cisco could have avoided this at any time in the past five years by releasing the code, you are probably right.
If you read the complaint, the FSF acknowledges that Linksys* has already released most of the code they are required to release. The big problem is that Linksys has a habit of releasing the binary versions first, then neglecting to release the source until the FSF complains and dragging their feet even then.
The bottom line is that the FSF wants Linksys to be more proactive about releasing source files (by appointing a Free Software Compliance Officer) and to pay them for past abuse.
* The complaint specifically and exclusively references Linksys products. It says nothing about IOS or any Cisco-branded products.
They allow abusive entities such as the Free Software Foundation to go after Cisco.
I know you're just trying to be funny, but what's worth noticing is that this is the FSF's first lawsuit:
[...] Peter Brown, executive director of the FSF. "In the fifteen years we've spent enforcing our licenses, we've never gone to court before. We have always managed to get the companies we have worked with to take their obligations seriously.
Isn't that interesting? I'm not sure whether Cisco decided to call the FSF's bluff or whether they have some other thinking behind their decisions; but I know that this is going to be interesting to watch.
IIRC, the GPL has been upheld in court before, so (depending on the details of Cisco's actions) the FSF is probably in a good position to win.
If FSF forces them into compliance without cisco feeling some pain or regret then i suspect they wont hesitate to repeat their deeds.
I understand FSF wants to be the good guys,they have principles and ethics, but Cisco is fighting from a different rulebook, one where the winner is the one with the most money, not the highest morals.
The only way Cisco and other similar companies will accept defeat is you beat them on their own turf, playing by their own rules. That means take their money, as much as you can get.
I know full well where the tech came from, I supported the former Aironet employees for 3 years after they were bought by Cisco =) The VxWorks stuff was more stable than IOS at least for the first year or two after IOS was ported and if our AP's at work are any indication that's still true as of a few years ago (noone is using them but they still crash once in a while).
p.s.
An interesting aside, the VxWorks software was also easier to maintain since it was written in modern C++ vs old straight C for IOS. This became very clear one day when a particular large school called and said all of their AP's were rebooting randomly at fairly short intervals. It turns out they had a HUGE flat network with 28k+ visible MAC addresses. This was more than the AP's were speced for but Cisco couldn't just let a large customer's install die, so after they figured out the cause they had to come up with a solution. For the VxWorks code they simply modified the MAC table class and recompiled, a patch was available within a few hours of the trouble starting. The IOS patch was much more difficult with tons of searching through header files and later after the first patch failed searching through the entire codebase. The small minority of new AP's which were running IOS were flashed in the field to VxWorks with an unsupported dev tool because officially the 'upgrade' to IOS was one way.
There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.