How Hardware Makers Come To Violate Free Software Licenses
H4x0r Jim Duggan writes "Veteran violation chasers Shane Coughlan and Armijn Hemel have summarized how license violations are caused in the consumer electronics market under time-to-market pressure and thin profit margins: 'This problem is compounded when one board with a problem appears in devices supplied to a number of western companies. A host of violation reports spanning a dozen European and American businesses may eventually point towards a single mistake during development at an Asian supplier.' They also discuss the helpful organizations which have sprung up and the documents and procedures now available."
like those DVD players that used mplayer but didn't release mplayer's sourcecode?
#
#\ @ ? Colonize Mars
#
Slashdot users
Get their knowledge
From many years
In junior college.
Free software licenses? You mean copyright licenses like the GPL, which the FSF website says "assures the copyright over the software?" I thought Slashdot was opposed to copyright law and that you couldn't "steal" intellectual property because it wasn't physically taken from someone else? Why is copyright bad in pro-piracy articles and good in free software articles?
Many of the chipset SDK suppliers don't tell their customers of their obligations to provide the source when requested by a customer.
So while the hardware manufacturer might be at fault, its the chipset maker who is more often the failure.
Cisco/Linksys using Broadcom chipsets. Did Broadcom tell them about using Linux & their obligation under the GPL to release the code.
Humax with their PVR - now they're less reliant on the chipset as the Cisco situation so are more at fault for not releasing the code when asked.
Woohoo.. I love doing stuff that is bad for me, it's the best kind of stuff.
Why is copyright bad in pro-piracy articles and good in free software articles?
Uhhh.. because its being used for different purposes? Why are automatic weapons a good thing in armed resistance to tyranny but a bad thing in shopping mall shootings? Are you so seriously retarded that you can't tell the difference between a goal and the tools used to achieve that goal?
How we know is more important than what we know.
This is precisely what can happen when a western company outsources "engineering" work to countries with little or no respect of copyright or intellectual property. Of course the company providing the "engineering" work will poach as much as they can from the open source community without compensating the community (by publishing their contributions/patches or through donations) or even acknowledging that they utilized it. This also applies to non- open source tech as well. Many of these "companies" will basically steal what they can to get the job done at the lowest cost so that they can win the business of a major western company.
I'm not saying the ideas of copyright and intellectual property as they are defined today are necessarily right, but I do acknowledge that they exist in some form.
"Uhhh.. because its being used for different purposes? Why are automatic weapons a good thing in armed resistance to tyranny but a bad thing in shopping mall shootings? Are you so seriously retarded that you can't tell the difference between a goal and the tools used to achieve that goal?"
Not as retarded as believing that the same solution (copyright abolishment) will work for both the good and bad usage.
In other words, you are saying "The Ends Justify The Means".
Killing people is good if they are bad people, and bad if they are good people.
Lying is good if it's for a good cause, and bad if it's for a bad cause.
The problem with "The Ends Justify The Means" are twofold. Firstly, other people might start using the methods that you employ against your cause. That's less of an issue here, although I would be surprised if the proprietary software industry didn't unite after a while as it becomes clearer that the objective of the RMS movement is to destroy and make proprietary software unviable, because it's unable to link into an existing ecosystem that cannot be replicated without extreme hurdle costs.
Secondly, it can be perceived as hypocritical - for example, if someone who has argued strongly for raising taxes also dodges them with the justification "If I dodge taxes I am more able to work for the raising of taxes". I don't see how anyone within the OSS movement can accuse anyone else of hypocrisy for any reason, so long as they use the justification "I am against the use of this tool but I find it useful and so can use it in my fight".
Because I want there to be viable proprietary software, I don't like OSS people - but you can't have anyone like you. In my view the software industry should start lobbying individual countries to declare OSS invalid and fair game for incorporation into any product.
To protect its IP, the CE company that I work for does not allow the use of GPL or LGPL code in production software. It's a good thing that Linux system calls are excepted from the normal GPL rules, otherwise we wouldn't have seen its massive success in embedded devices.
So does this mean that WE finally have THEM by the balls?
It would be nice for the OS community to serve back what it's been receiving. I'm thinking
of the patent trolls, copyright oppression, DCMA takedown notices and the like.
---- It won't be as bad as you fear or as good as you hope, but it will take twice as long as you plan.
The reason why they "violate" is because they just do not care.
It has nothing to do with deadlines or politics or competition or margins.
The code they are using is seen as "some free stuff I downloaded which happens to work - cool for me".
The point of a company is to make money, not to further ethical causes. If it doesn't SEEM like a massive no-no I don't think it would enter the head of even one person in this supply chain to question it. And by the time anyone does, its already 3 generations of products later and they are wondering why someone is bothered with a product that is nearly ending its life cycle.
I mean, if asked, they would probably ask if there is any tangible heavy institution that is likely to find out, or even to care if they did.
Ultimately, you need to also ask if it really matters at all. How often do you think this provided source code is really going to be useful to a mass audience? As you say: the products in question have a very short life span, and the changes must be small to be able to be completed in time.
FreeBSD benefits enormously from user contributions (both commercial and hobbiest), yet has no requirement to make changes public.
Oh it MUST matter you say - it's the PRINCIPLE.
Well it's YOUR principle.
The title should be rephrase:
"How Hardware Makers Come to Comply With Free Software Licenses" These are the extremely rare cases, and in truth any company that is spending time worrying about little things like this has probably so lost focus it won't be around for long.
I worked at a company where I saw the GPL license removed and replaced with an internal copyright. It was an embedded system using a GPL UI toolkit.
I think the problem started with developer ignorance on copyright and licensing, then moved to self-preservation. The same cycle then went up through the management. To hide the error from the highest management, another UI toolkit was written which they said they were doing for better features and performance - it turned out to be worse and in the mean time the project changed license to LGPL.
If manufacturers think they are going to be bitten by OSS licenses, what will happen is that they will do one of two things:
1: A wholesale move to BSD licensed software with no restrictions on redistribution. This isn't good, but not bad.
2: Punt the whole idea of OSS to the curb and go with closed sources solutions. Closed source is attractive to a lot of companies in the respect that they pay the licensing fee, ship the products, and not worry that some program was mis-licensed somewhere in the chain. The license fee also idemnifies them from any patent issues that might come up from upstream in the chain. Windows CE at the low end is only $3.00 a device. There are companies that were so concerned about the GPL v3 that they ditched Linux wholesale and went with closed source solutions for fear that they would have to give all corporate trade secrets to anyone that asked.
mistake?
...that those companies usually did not intend to break the license in a bad way. After all there's next to no cost in doing it the right way.
So please contact them in a friendly way, and remind them that the rules to get this software for free, is that you have to continue letting others getting it for free. In case of the GPL, even if you modified it. If they don't want that, which is also OK, they have to use another, possibly commercial, product. Or perhaps BSD (which, when you look at Windows, works also well).
But remind them, that the reason they can actually get it free, is that others gave their code away for free. If everybody would do it like them, and not give away the code, then nobody, including themselves, could get any free software anymore.
Only if they then ignore you, and deliberately continue to do it, sue the hell outta them with no mercy whatsoever.
Sun Tzu already recommended this strategy in the 6th century BC, in his book "The Art Of War".
Any sufficiently advanced intelligence is indistinguishable from stupidity.
For years Harald Welte has been the only serious chaser I know of. These two have been keeping their work a secret, I guess. More power to them if they're actually tracking down GPL violators, whoever they are. This task is thankless and unappreciated. Most authors can't be bothered.
the idea that Islam is a peaceful religion came from?
http://www.dallasnews.com/sharedcontent/dws/dn/latestnews/stories/092409dnmetbombarrest.1b177db8b.html
Yet another camel jockey hell-bent on mass-murdering unsuspecting civilians. Do you towel heads really think that the American public is going to sit by helplessly if you succeed in another attack while our government tries to sooth us with false notions of diversity and harmony? No one who isn't a Muslim buys that shit. No one. Keep at it, fuckers, and just see what happens to you. The lot of you should be thrown into internment camps pending deportation to the 3rd-world shit-hole from whence you came.
...the CE company I work for does use GPL code, only just GPLV2. We heavily invest in Linux too.
I also don't believe for a second that linux would have got where it is today, with multiple big-name companies supporting it and contributing to it if they had not been forced to reopen their changes.
Sure.
Thirdly, lots of people don't like the idea of contributing to a project which can then be swept up and used by commercial entities without them being made to have the courtesy to contribute back.
And some people don't care where their code is being used. PHK, who developed the MD5 password hash, now has his code running on every single Cisco box, is one of them. Same for the OpenBSD guys, who developed the Blowfish-based password hashes, as well as OpenSSH (which is in just about everything).
Do you think the TCP/IP stack would have spread as quickly as it did if it wasn't licensed under BSD? Do you think Sun, AIX, HP-UX, etc., would have pulled in the code if it was GPL?
At this point BSD is basically an also-ran. Great project, great OS I'm sure, but not on the same level as linux or supported in anything like the same way in terms of FOSS and commercial software. At least a some of this is down to the environment created by the differing licenses.
Apple ships more Unix desktops than any other vendor out there.
NetApp: FreeBSD
Juniper: FreeBSD
Isilon: FreeBSD
Force10 Networks: NetBSD
Cisco: rumoured to be FreeBSD: http://it.toolbox.com/blogs/bsd-guru/freebsd-at-cisco-21312
Just because you're not running it on your desktop (or server), doesn't mean you don't use BSD everyday behind the scenes. The projects are doing just fine.
Punt the whole idea of OSS to the curb and go with closed sources solutions.
But hang on, if they don't care about violating licences, then what happens when they do this with a closed source solution? I think a commercial company is far more likely to be aggressive at pursuing a lawsuit, than open source authors.
and not worry that some program was mis-licensed somewhere in the chain.
How does this follow? Are open source authors more likely to mis-licence? This is especially a surprising claim, when we're talking about a story where it's the open source software that's being infringed, not the other way round.
There is always a debate RE free as in beer vs free as in speech. Most people care about free beer, literally and metaphorically. This has always been a challenge for free software advocates, and probably always will be since how can most people care about a freedom that they don't understand?
Even in your metaphor of mall shootings and uprisings against the government, the motives of shooters is never fully altruistic. There is always some self interest that makes the ideals of a situation confused.
Every western company has to step carefully around the Chinese market. If you're working on a proprietary product, you NEVER license source over there. If a Chinese company decides to rip you off, you've got no recourse.
When you sell software in China, no matter what type, you can only sell a single seat license-- they will break your protection and run it on a hundred.
China's government protects its companies from fair business practices, anyway. Many of the malicious hacks that come from the Chinese government are purely economical- just stealing plans, prototypes, and source code from prominent western businesses.
So, good luck, guys. If these big powerful multinational companies can't get China to pay for what they do to our IP market, I'm not sure what you GPL folks can do. They will say anything they need to say to avoid respecting your license.
Slashdot users
Get their knowledge
From many years
In junior college.
BURMA SHAVE!
I only look human.
My mother is a halfling and my dad is an ogre, so that makes me an Ogreling
this problem are many in cellphone business... http://www.techandgizmo.com/
So, if I want to circumvent the GPL on a library, I only have to create a binary interface layer on top of the library and use that layer?
Only if the GPL code and GPL-incompatible code run in separate processes, and any communication between the two processes uses a well-documented protocol with low coupling so that others can replace the GPL-incompatible process with free software.
While you could recompile Unix stuff for MacOS, the Apple faithful would tend to scream at you like pod person for it.
So what do they call you when you recompile Mac OS X stuff for UNIX? An "iPod person"?
MacOS is successful specifically because for 20 years it was NOT unix.
Neither is GNU, which stands for "GNU's not UNIX".
... I was making some music playing hardware, and I accidentally left a testing copy of an MP3 (that I legally bought!), in the final image.
Do you think the RIAA would say, "Oops, it was just a mistake, and since you supply it to so many western companies, it's no big deal. Let's just shake hands and forget about it."
Why should GPL software authors do any differently?
I just had an epiphany; GPL software authors need a GIAA to extort the living crap out of people who abuse the GPL and then kick us back the scraps while they keep 80%! I should patent "new" idea right away!
If I contract Company X to provide me with component Y, and I go about my business, all is fine. If Company X stole Y from a third party Z, Z sues myself and X. In all likelihood, some degree of damages gets awarded (ignoring that if Z is small, we simply run out their legal budget and then sue them for a frivolous case), and X has to pay for their damages, and I have to pay. Very rarely will an injunction be issued to stop me from doing business, as the courts will assume that compensation will work. In the case of a patent, they get the injunction, and we probably pay 3 times "fair value" for it to go away, but life moves on.
In the case of GPL, there are ZERO monetary damages, combined with possible multiple owners and statutory violations. The distribution without a license means I either comply or get sued for violation, but there is likely nobody to negotiate or settle with.
In the case I outlined, Company X screwed up, an employee there took a short cut and supplied me with Y, and Y is critical to my business. Perhaps through no fault of my own, I now have a tainted product. There are no monetary damages to award, because the GPL'd product is "free." There is no single IP owner to work out a license with, because it's a convoluted mess. This means that the only remedy is an injunction that stops my business, or my complying with the license, which might be prevented by other components.
Innocent Company me gets caught in the cross hairs. While you are right that I derived benefit, because we are in the world of injunctions and not compensation, even my indemnification is worthless. If I get sued for $500,000 for non-compliance, and I'm indemnified by X, I can claim from X, but there is no solution other than stop.
That's why the GPL and similar licenses are terrifying and viral. If the component stole proprietary code, there would still be damages, but the damages would be worked out by the courts in financial terms while we all conduct business, so we can sell our widgets without concern, we just have an open ended liability. That is MUCH less scary than an injunction with no ability to resolve.
So either:
1: They take open source code, modify it, and keep their modifications closed source.
2: They license closed source code, modify it, and keep their modifications closed source.
I'm not sure why the open source movement should try to appease these hypothetical companies; no matter what, the outcome is the same: no consideration for the use of open source code.
There is one issue with most OSS projects, and that is patents. Most commercial products not just chuck you a license, but also indemnify the customer from any patent or copyright issues.
Company "A" uses an OSS version of a utility in their appliance. Some "IP" company has a dubious patent that covers something the OSS utility does. Company "A" gets sued for megabucks + injunctions not to sell their core item that makes them money. Same with any company who uses that OSS product.
Company "B" pays the licensing fee for some closed source code for an embedded utility. The patent troll sues. The provider of the utility gets hit, but the customers are protected because of the contract and the fact they did not know about such a violation. Of course, the troll can sue the licensees, but the chances of having a judge deem the case as having merit, much less going to court is a *lot* less than without the indemnification agreement.
Of course, the GPL v3 comes with its own bag of worms. Anyone who gets any part of the redistributed code gets to know every corporate trade secret that went into the device. For stuff like Tivos, who cares. However, for stuff that does some type of automated manufacturing process where the secret is the catalyst mixture, timing, and so on, this would expose a company to offshore copycats who can, in 3-6 months, offer a competing product for a lot less money due to not having labor or environmental laws in their nation.
Moral: Keep the OSS for general use, but if shipping a product with embedded features, go BSD or closed source. You won't have people outside your office demanding your trade secrets due to GPL v.3, or C&D court orders because some OSS product violated a patent, and someone has a court summons from Texas alleging it.
you lose the car when it's retrieved.
You therefore do not like this idea?
Or are you a hypocrite?
And Shane Coughlan has also been doing this for years: shane's page on fsfe.org. His work was previously discussed on Slashdot: Tasks of a Free Software Legal Department.
Please help publicise swpat.org - the software patents wiki