FSF Settles Suit Against Cisco
Saint Aardvark writes "The Free Software Foundation has announced that they've settled their lawsuit with Cisco (reported earlier here). In the announcement, they say that Cisco has agreed to appoint a Free Software Director for Linksys, who will report periodically to the FSF; to notify Linksys customers of their rights; and to make a monetary donation to the FSF. An accompanying blog entry explains further: 'Whenever we talk about the work we do to handle violations, we say over and over again that getting compliance with the licenses is always our top priority. The reason this is so important is not only because it provides a goal for us to reach, but also because it gives us a clear guide to choosing our tactics. This is the first time we've had to go to court over a license violation.'"
Backsliding to the old cooperative solutions, eh FSF? I suppose they'll never change.
Lacking <sarcasm> tags,
WOW! cisco has finally lost something, it's about god damn time.
The article only says that, "Cisco will also make a monetary contribution to the FSF.", but does not list an actual dollar amount.
I am sure you hired an experienced intellectual property attorney to properly calculate the monetary damage by Cisco. Like a former **AA lawyer who has not been hired by the Obama administration yet.
I am sure they could get the calculate the "true cost" of the damages to the nearest million.
I only look human.
My mother is a halfling and my dad is an ogre, so that makes me an Ogreling
The sad thing is that so many people think GNu is about freedom...
Don't blame me, I didn't vote for either of them!
This is one of the two big bogeymen that I, as a developer, fear. Licenses like this and patents. If you develop anything on Linux do you have to give out your source code? Link to this maybe, link to that maybe; after enough maybes you can be sure that you have gone one library too far. There is a place for opensource and there is a place for proprietary; and I love them both. Show these licenses (GPL, MIT, Apache, LGPL) to a lawyer and they will just say "stay the hell away from those". The result is that many companies are pushed back into the warm embrace of Microsoft because at least you know where you stand with code compiled with VCPP and any other libraries you bought. It might cost more in the short term but if it means you get to keep the key IP asset of your company safe then it becomes worth it. You might argue that one should just read the licenses but with dozens of developers potentially including libraries that may themselves include other libraries with their own licenses you can't easily be 100% sure.
Compare this to what the BSA is advocating. Essentially any disgruntled employee can put unlicensed commercial software on a computer and then report the violation to the BSA for a reward. Sure companies can put millions of dollars of safeguards to prevent harassment from inefficient employees, but why bother. Just make it a policy to only use free software, and when the BSA comes knocking, show them the policy and the minimal cost efforts that makes all other software the responsibility of the user.
This will also help long term interpretability, as OSS has minimal incentives to obstificate the data to force users to continue to pay the ransom to access said data.
"She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
what about IOS violating BASH? N/T
Cisco releasing the source code for thousands of routers doesn't strike me as being a good thing. I mean it's one thing to develop in an open environment and being open from the start, and I agree security though obscurity is bound to fail but as someone running Linksys routers on my network, I would expect there to be some stepped process, as I don't trust Cisco was totally competent in their development. Imagine if windows source was suddenly made available to the masses, the time it would take to identify, patch, and distribute a fix vs the time it takes to just identify and exploit is a significant window of vulnerability. Security through obscurity doesn't work because it assumes no one will ever find out and people will. But dissemination of that information takes time. Discovery of defect takes time. Opening the source of a previously closed product greatly reduces that time and therefore intensifies the threat. Overall this will lead for a much stronger product but I fear what is going to happen in the first few weeks.
Oh honey look... How cute... an angry slashdotter!
I like this part:
"and to make a monetary donation to the FSF"
Geesh. Sounds like Al Sharpton going after people, and settling for money.
If closed source is secure, then please hook up windows XP to the internet without a opensource router in between.
Thanks for playing clueless scaremongerer. You fail, please insert another coin to try again.
MMO Quests are like orgasms:
You may solo them, I prefer them in a group.
What about this happening in court? Cisco, a Networking equipment giant going to court against FSF/GNU could make some people like decision making admins mad. If they switch to BOFH mode, Cisco can go chap 11 in a year. There is a guy or bunch of guys deciding to buy million dollar equipment from them and not other brand you know. They are humans and they have their own philosophies. Entire GNU thing started because a large corporation refused to give specs of a printer. Yes, a printer in a lab started all.
Never, ever switch their mode to BOFH :)
Cisco has agreed to [...] make a monetary donation to the FSF.
Um, that's not a donation.
Donations are gifts. Gifts are given freely, not as a penalty for wrongdoing or in return for dropping a cause of action.
GNU is about freedom. Let's say I wanted to punch you in the face. I have the freedom to do so, unless you have the power to stop me. But trying to stop me is taking away my freedom to swing my fist, under your definition of freedom. Under my definition of freedom, your right not to get hit in the face outweighs my freedom to swing my fist wherever I like.
The GPL and the FSF help protect developers and end users from getting punched in the face by companies like Cisco. The GPL and the FSF help protect freedom, unless you define freedom as 'I get to do whatever the hell I want and screw the rest of you.'
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
You can link to as many LGPL libraries as you like, so stop with the FUD, okay? A competent lawyer would never tell you to stay away from any of the licenses you mentioned, only a fool would make a blanket statement like that without understanding the specifics of the situation.
You can easily be 100% sure of the libraries you link to. If they are LGPL, MIT, or Apache, you have no problem. Whatever they link to has to be under the same license, or they could not release.
You are purposely spreading FUD, you do not respect open source, and I suspect you are a paid shill because it looks as though you copied and pasted that post directly from a Microsoft playbook.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
There was a donation made to the FSF from Cisco as part of the settlement.
Betcha "attorney's fees" were what that was for...
Who said anything about Cisco releasing the source to their routers? Please read the article before working yourself into a tizzy over nothing.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
The GPL is a license, not a contract. Failure to comply with the GPL cannot result in having to give out source code that you wrote. On the other hand, it may result in a suit for infringement. In contrast, most commercial products are covered by contractual agreements that don't have that safety valve.
Licenses for closed-source commercial products are no better, just different. There are all kinds of restrictions on what and how you can distribute from the Microsoft Visual Studio tools. There are termination clauses in the contract. And despite all the M$ bashing, that contract is relatively liberal and lightly enforced compared to most commercial software tools, particularly those for phones and embedded devices.
I used to work for a Fortune 100 company that allowed us to use GPL code with less red tape than certain commercial products. The difference? The commercial products had an enforceable indemnification provision that could have cost millions of dollars had things gone badly.
This is a tax deductible donation to a 501(c)3 charitable foundation, agreed to as part of a out of court settlement. It was freely given, Cisco could have gone to trial instead.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
... anti-GPL trolls are sobbing silently in the dark. Boo fricken hoo!
You get a Free Software Director.
Disclaimer: Free Software Director is not 'free', nor 'software'.
John Chambers is now required to grow a neckbeard.
You could always write your own code. With great effort come great returns. Taking the easiest, fastest way gets you easier, faster and potentially lesser returns... which also means you haven't wasted as much time if your product fails, so it's always a tough call.
The GPL and the FSF help protect freedom, unless you define freedom as 'I get to do whatever the hell I want and screw the rest of you.'
That is, in fact, what freedom is. If you want genuinely free software, go public domain. Free software isn't free. It should be called restricted public software, not "free".
This is my sig.
There's no good reason to be nervous. Adovcating for obscurity through secrecy is never wise, not in the short term nor in the long term. In your scenario the vague threat you point to always existed, it was a matter of time before it was fixed and (so long as the software was non-free) never under anyone's control to fix except the proprietor (who may have become uncooperative). Software freedom doesn't become a bad idea because it becomes real late in the process. Software freedom is always better than non-freedom.
Digital Citizen
Is that freedom? Because that is essentially what companies want to do to developers who release under public licenses: pirate their code. How is the freedom to pirate any kind of freedom?
If I want to kick you in the nuts, is it taking away my freedom if you stop me? This is no different. Nobody gets to do whatever they want unless they live as a hermit. You choose to live in society, you follow the rules. Enforcing the rules that everyone agrees to live by is not reducing freedom, it is increasing it.
- None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
They shouldn't. /. still doesn't have <sarcasm> tags. I thought I had been clear enough that my comment was tongue-in-cheek, but it sure looks like three moderators didn't pick up on it either.
Lacking <sarcasm> tags,
From what I remember, Cisco was not trying to get away with anything. They were so big that different parts of the same company were violating the terms of the GPL, and could not be reigned in easily.
I think what FSF was able to do was to force Cisco to "reign them in".
This cannot be said enough, particularly amongst a crowd that discusses the latest goings-on with the corporate media lobbyists they (justifiably) hate: Unlike the major corporate media copyright holders, the FSF sues and gets license compliance which is what they're really after. You'll notice that the FSF isn't seeking to bankrupt Cisco (even while recognizing that corporations aren't people). This is a far cry from what the MPAA, RIAA, and other corporate copyright holders pursue with the public—economic domination.
And, as I've said before, violating the GPL is not like violating other licenses and here's another way in which that is the case: GPLv3 has language which makes the situation better for violators who correct their behavior. As the plain language guide to the GPL explains, under GPLv2 a violator had to beg the copyright holder to have their rights under the GPL restored because those rights vanished instantly and permanently upon license violation. Under GPLv3 section 8 violators catch a break: "if you violate the license, you'll get your rights back once you stop the violation, unless a copyright holder contacts you within 60 days. After you receive such a notice, you can have your rights fully restored if you're a first-time violator and correct the violation within 30 days.". Other free software licenses have no similarly forgiving language; it appears that under the new BSD license if one violates any of the 3 conditions listed in the license one loses permission to "[redistribute] and use [the covered program] in source and binary forms" because the violator reverts to the default state of copyright: no permission to copy, share, or modify.
Digital Citizen
From teh OP:
And thus is revealed what the lawsuit was really about. And who says FOSS isn't profitable?
I'm not sure how that is relevant. Cisco multiply infringed on FSF's copyrights for software intended to grant everyone software freedom. This turned a would-be partner into an adversary in court. No matter how big the Cisco corporation is or what they were trying to do, they should not be allowed to deny their users software freedom. So I don't understand how we can know what Cisco was trying to do nor do I see how it matters.
Digital Citizen
So perhaps Cisco settled because their lawyers were made aware of the FSF's warnings of litigation, chose to stonewall the FSF, received a copy of the FSF's complaint, saw that the FSF was serious and examined the GPL licenses, examined what their programmers had been doing, figured that they could not win in court, and concluded it wasn't worth fighting? Eben Moglen, longtime GPL defender, says this is how it often goes down (""Why would you want to pay serious money," we have asked, "for software that infringes our license and will bog you down in complex legal problems, when you can have the real thing for free?" Customers have never failed to see the pertinence of the question." he said in 'Enforcing the GNU GPL' and similar discussion at his talks). Getting compliance out of multiple large organizations who could easily pay for lengthy million dollar lawsuits sounds to me like an affirmation of the validity of the GPL.
Digital Citizen
I wouldn't be so quick to hand out these kudos; the non-compliance can return. This, I suspect, is why Cisco needs a Free Software Director who regularly reports back to the FSF. As the FSF's Compliance Engineer Brett Smith pointed out in 2008, "Despite our best efforts, Cisco seems unwilling to take the steps that are necessary to come into compliance and stay in compliance." (emphasis mine). Smith wrote that 5 years after the FSF learned that Cisco was not complying with the GPL and the FSF had been getting nowhere with its attempt to silently get Cisco to comply—what Smith called "a five-years-running game of Whack-a-Mole". Cisco and the FSF recently arrived at their agreement. It will take years to convince the public that Cisco is compliant and will remain compliant with those that treat Cisco so nicely as to share their work in whole with Cisco. "The end" you refer to is nowhere near here. Good will to correct wrongdoing on this scale takes time to sow.
Digital Citizen
This news inspired me to join the Free Software Foundation today.
I guess you just gotta /know/ what libraries your linking to. It's really nowhere near as complex as actually understanding how to program the libraries.
Life's full of hassles - the law ain't going to change that.
Like all pain, suffering is a signal that something isn't right
Just helped a friend shop for routers at his small business. Criteria: only routers where open source linux firmware can be flashed.
Without this, there is literally no working QoS in the consumer price range. And many other problems are common to the crap stock firmwares, from both Linksys and their competition (D-Link, Netgear, etc). This is even the case for routers with "QoS" advertised prominently on their packaging.
With DD-WRT, the difference was immediate and obvious. QoS works, and a bunch of VOIP phones suddenly become rock solid, where before they were unusable. And then there are the extras, from vastly advanced UIs to realtime bandwidth graphs to SIP trunking to you name it.
I have no idea why these router companies don't all work with the community, but I am not so surprised more of them are starting to get it. Sad that the FSF had to resort to a lawsuit to get Cisco's attention, to get their compliance act together. But everyone wins in the end.
Tired of Political Trolls? Opt Out!
It's not more free. The user is not allowed to sell the software or take ownership of it. That's not free at all. It's, a public ownership, but its not more freedom. Freedom implies ownership, and if there is no ownership, there is no freedom.
I'm not saying the GPL is somehow wrong. It isn't. It's good at what it does. But it's about community and openness, not freedom. Freedom is the right to own, the right to have secrets. The right to do whatever you want.
And the irony is that, the GPL really only solves a problem that really can't exist anymore. The whole motivation behind the GPL was that RMS was ticked off because someone grabbed and sold emacs and there wasn't a damned thing he could do about it because it was in the public domain. The threat, held up, is that, if you don't enforce openness, in the GPL, and prohibit commercialization, then, that would undermine the ability of users to get the free software. But, even in the case of emacs, it didn't. In fact, the free emacs is the one that has survived, and all the companies that tried to commercialize it and close it off don't exist any more. Same thing with C++, Unix in particular. Where's SCO at? Gone. Where's Sun Solaris at? Dying. Where's AIX at?
You could make the argument that the GPL isn't even necessary.
I think the reason for this is actually engineering. Let's say I wanted to take Linux and sell it and close it off, and could do it. Well, first off, I'd have to add a lot of extra value to Linux to be able do that. Otherwise, nobody would pay for something that they could get for free. Chances are, if you have to add that much value, now you are probably going to have rework original code to do it. So at best then, the free thing becomes a scaffold and you have to eat the costs of developing all of it. SO there's a whole catch 22. If you commercialize free software, you don't get the sales because you didn't do anything with it. If you rewrite everything to add a bunch of new features to get the sales, you aren't really getting the benefit of the free software.
This is my sig.