SFLC Finds One New GPL Violation Per Day
eldavojohn writes "In July, the Software Freedom Law Center (SFLC) leveled the finger at Microsoft for a GPL violation but how often does this actually happen? Sunday, Brad M. Kuhn (tech director at the SFLC) stated in his blog that since August of 2009 he has been finding about one per day. So why is it that we have only covered a handful of these cases in the news? Brad offers sage wisdom; surprisingly, he recommends, 'Don't go public first. Back around late 1999, when I found my first GPL violation from scratch, I wanted to post it to every mailing list I could find and shame that company that failed to respect and cooperate with the software freedom community. I'm glad that I didn't do that, because I've since seen similar actions destroy the lines of communication with violators, and make resolution tougher.' Public shame is evidently not always the best answer. Ars has a few more details and notes that (in accordance with Brad's advice) lawsuits are usually a dead last resort."
hardcore closed source company is alwyas going to have violations. Also it's Microsoft.
That's why I use real free and open source licenses, non abominations like the GPL. Making your software "free" and then fighting people using it with legal pressure, eh?
I put everything in the public domain, and I sleep well at night without having nightmares that someone might have violated my license.
Oddly enough most companies even the Evil Microsoft will much rather fix the problem without having to fight it legally, and resolve the problem civilly. When you pre-poster aggressive towards your opponent they will do the same. And if you are Not for Profit organization and you opponent is a big multi-national company, you are going to be in for a big fight where if you were just to be polite and civil about it chances are you will get your objectives, they will quietly fix their problems and save face. Most of the time these GPL violations are not done deliberately but the GPL is a strict license and for a big company you will have people putting in things that they didn't even realize was wrong. Or worse say some GPL Code was cut as a segment for a help forum and was used from that. So yes they violated the code, they probably didn't mean too, if you are nice to them they will probably fix it. If you go all out and make yourself aggressive they will be aggressive too, and put you in a case even if you win you loose.
If something is so important that you feel the need to post it on the internet... It probably isn't that important.
It's not really surprising that going to court and going public are really last resort sort of things. Court is expensive, and most people considering them to be a "roll of the dice". Actually negotiating with your counterparty in a contract dispute is always cheaper and more productive.
Going public, even after going to court, also sours the atmosphere, creating emotional contention that makes an actual agreement less likely. Look at out-of-court settlements with undisclosed terms and no party admitting fault. Once you get out of the public light, you can get people to sit down and discuss and actually come to a mutual agreement since the emotions have been toned down. If you're all fury and anger, you're not really in a position to negotiate someone into a corrective action.
Ah yes, another one of these stories. Expect to see some references to M$, people defending GPL and people advocating BSD. All in all, everyone will agree that respecting open source licenses is very important. Next thread, something about RIAA, same people demanding their right to download copyrighted music.
Pathetic.
The simplest ways to avoid potential GPL violation, are:-
a) If you want to use an FSF license at all, use the LGPL version 2. Don't use any version 3 FSF license. Apart from anything else, doing so just makes them feel justified in creating bad licenses. (Which their 3 series are)
b) If you're going to use GPL code at all, make sure it's not something you intend to modify yourself.
c) Use other licenses (BSD, MIT, etc) as much as possible. In terms of non-GPL licensed code for you to use, the BSDs are free for the taking, and with the BSD license, you get to decide how much of your modifications (if any) you release. Their code quality is nearly always better than Linux anywayz.
If you're not using GPL licensed code, there is no way that you can be responsible for GPL violations. GPL advocates used to use this argument rhetorically, because they felt that this would mean that the person in question would have no choice. (the implication being that there was barely any non-GPL code, so they'd have nothing to be able to use)
Call their bluff.
I still don't understand GPL v2 or GPL v3, though i have read each of the licencing things several times.
The most i get from it is "If you distribute the Binderys, you must distribute the source code"
thats why i like MIT or BSD based licences, there short, to the point, and don't have hundreds of loopholes or hidden licencing terms that could cause some large company to rape my ass, though if they want to rape my ass, they will do it no matter what i use, MIT or GPL
O.o
Don't forget, there might not be a problem in the first place. If you are looking around, and see someone else's GPL code in a proprietary product, make sure you find the original owner and talk to them before you go around shouting at the hill tops how evil the proprietary company is.
It is entirely possible that the code was appropriately licensed by the original owner. Just because something is GPL, does not mean that it can not also be licensed for a specific user, usually for money. Think Quake.
Even if the project itself is not licensed for their use, maybe whoever wrote that part of the project re-licensed their contribution to a proprietary company.
And if the company made, or is making, $$$ selling an open-source derived product? Without distributing source? What should be done?
Build your own energy sources from scratch. http://otherpower.com/
How many people know that GPL software powers their routers? Linksys and others could call the Linux Kernel developers and everyone else whose software powers their consumer devices "baffoons" for letting them get away with it. The GPL doesn't protect you from "exploitation."
If that scenario bothers you so much then don't open source anything.
In U.S. culture at least, we have little notion of how to let the "other side" save face. Saving face, or not 100% embarrassing folks when they've obviously messed up, is critically important in many negotiations, both exactly political, and locally among friends. The old adage "it's not what you say, it's how you say it," still rings true. People aren't stupid, and most would rather not be insinuated as such. People do, however, make mistakes, either semi-intentionally, unknowingly. (Analogous to driving, right? That's why they call crashes "accidents".)
Ridiculing folks gets folks nowhere. In the long run, most would agree that having businesses around and prospering is a good thing. (Let's not get into a debate about size of businesses for now.) A healthy business affords jobs to the local community, a service to those who need it, and acts as a community partner. A dead business does no such thing. A friendly reminder is often more than enough to get someone to clean up there act. I know it sure is for me.
...but it sure is cathartic - have a look at the blog in my sig line!
My web domain.
"Don't use any version 3 FSF license." Unless you don't like the idea that someone can patent the idea implemented in your code and then sue you for using your code...
"If you're not using GPL licensed code, there is no way that you can be responsible for GPL violations." But if you're using non-GPL licensed code you could be responsible for non-GPL violations. You can also be done for patent violations.
So the next logical step is a lawsuit ?
Microsoft cares:
http://yro.slashdot.org/article.pl?sid=09/04/09/0324247
http://consortiuminfo.org/bulletins/pdf/aug04/trends.pdf
People do care.
Software law is not natural law.
You can't judge the legality of software without looking at it's details, so painting a brush that GPL/OSS software is absolutely distributable/free is plainly ignorant. I'm sure software having violations is more the norm than the shocker. Unless you have governance and stewardship roles in the maintainance of that s/w (e.g. The Linux Kernel), GPL is meaningless.And 9 out of 10 projects never considered those roles in spirit of agile development and getting the s/w out the door asap
And that's why pointing out a fact (X software is violating GPL) means nothing unless someone enforces it. Something like the GPL is only beneficial if someone enforces it (I'm sure RMS would, actually, disagree...). Considering we have no system of enforcement, aside from just 'suing the other guy', I say GPL is more of a guideline vs. a legal mechanism.
There is no legal pressure on any company that steals GPL code.
Here is the problem.
1) GPL software is not very profitable.
2) The GPL is only enforceable in civil court.
3) Those who use GPL software aren't the people violators sell to.
4) GPL software lacks civil and legal representation.
Who would feel threatened under these conditions?
To sue, one must prove damages. Record companies use the CD MSRP * copies made formula which is very effective. $0 times anything is zero. And the 2 developers who write code in their free time aren't going to chase anyone no matter how blatant the violation.
So I say GPL needs a damages clause:
"If I do not comply, I agree to pay all associated legal fees and 1 million dollars in damages per copy of proprietary software that I sell which includes any code from this software."
Copyright infringement can be criminal.
Oh, and where are all these EULA licenses sued in?
That's right: civil court.
It isn't free to you because you didn't write it.
Parasite.
One a day? They must not be looking very hard
And remember, EULAs are not enforceable. Slashdot screams this EVERY time APPLE or MS has one. It cuts both ways, Slashdot.
And I can't fuck you up the ass. I'd call that a restriction.
So called "Free country"? Pah! Maxist state, that's what it is, telling me what I can do with an ass I grab hold of and my dick...
No, that doesn't make sense. You're still assuming the same sense of entitlement found in people who protest that they should be able to use GPL'd code without cost.
If someone uses GPL'd code, s/he there is a price to pay. It may be seen as a lot, or a little, but with your benefit comes an obligation. You are not forced to choose that obligation; you can always choose not to use the GPL'd code. But there is equally no responsibility for the creator to let you use the code free of obligation.
Similarly, you get to use libavcodec. Someone decided that it would be licensed under LGPL, which seems to work for you. It looks like other optional files in libavcodec are GPL'd, and apparently you wish they are LGPL or other more permissive license. But there is no responsibility for the creator to let you use those GPL'd optional files.
I think it's a matter of expectation. Just as someone new to FLOSS might have the overoptimistic expectation that Free software means s/he can freeload, you might look at libAVcodec and decide, "Hey, it got good reviews on all the web sites and has all the features I want" and not realize that those optional features are GPL. But that's reality, and you (or others distributing your work) will have to decide between the cost and benefit of the GPL.
404555974007725459910684486621289147856453481154 in hex is "You sank my Battleship?"
[GPG key in journal]
I put everything in the public domain, and I sleep well at night without having nightmares that someone might have violated my license.
Then here's a nightmare for you:
- A serious bug is discovered in your wonderful PD product. (Maybe some subtle security hole that the malware gangs find and exploit.)
- Somebody makes a fix AND COPYRIGHTS THE FIXED VERSION.
- You can't import the fix to YOUR version without violating the copyright.
- None of your users can fix the bug either. They have to migrate to the other guy's version - maybe for big bucks, drop the functionality, or go with some other product. They're screwed.
- Your left with no users of your stuff (except the ones that are using it as the other guy's version) and no way to expand and improve it (except to go to work for the other guy).
THIS is what GPL is designed to head off: Screwing the users and locking the original authors out of their own product's future. Under the current copyright law, public domain is BROKEN for any evolving software product.
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
That's a EULA. ... And remember, EULAs are not enforceable.
Sorry, wrong.
It's not an End User License Agreement. It's a license to copy and distribute a copyrighted work.
Very different animal.
And it's not take-it-or-leave-it, either. If the work has an identifiable set of authors you can attempt to negotiate a non-GPL alternate license with them. (This will usually involve giving them some money and terms that don't screw up their FOSS-licensed product.) Some projects have such licenses as a standard offering.
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
open source project have violations [...] calling a library that isn't GNU compatible.
I take it by "GNU compatible" you mean GPL compatible?
Or were you suggesting that calling a library which can't be used on the GNU OS (with, of course, the wonderful microkernel Hurd) will bring forth the wrath of the Holy Warrior Stallman who will then be forced to swing with his katana[1][2]? ;-)
[1] http://xkcd.com/225/
[2] http://blag.xkcd.com/2007/04/19/life-imitates-xkcd-part-ii-richard-stallman/
As much as I like the latter interpretation, I'm thinking you meant the first. Yes? :)
1) GPL software is not very profitable.
Tell that to the companies that are making millions and millions. Didn't IBM invest a billion in Linux a few years back, and then claim that they'd more than recouped their investment in fairly short order?
2) The GPL is only enforceable in civil court.
The GPL is a defense against charges of copyright violation. You don't enforce it, you ignore it and sue for copyright violation. It's up the the defendant to proffer the GPL in their own defense if they can (and if they can, then they weren't violating it, so why'd you sue them?) Yes, it's usually done in civil court, because copyright violation is not usually a criminal matter (though it can be), but so what? The only real difference is that the burden of proof becomes "preponderance of the evidence" rather than "beyond reasonable doubt", which is to your advantage, and the violators aren't likely to be looking at jail time, which doesn't seem unreasonable. So, what's your point here?
3) Those who use GPL software aren't the people violators sell to.
A) how do you know that? and B) how is that relevant to anything? Anything at all?
4) GPL software lacks civil and legal representation.
This sentence doesn't even make any sense. Software doesn't have lawyers; people (and companies) do. Some people don't have much money to spend on lawyers; others, especially big companies like Red Hat and Novell and IBM do. Individuals are going to find it fairly hard to fight big companies that are trying to rip them off, but that has nothing to do with the GPL, and everything to do with the inequities of our legal system(s). But there's a lot of money behind GPL software these days. A whole lot! It ain't 1992 any more. Free/Libre/Open Source is big business these days!
To sue, one must prove damages.
And it's not hard to prove. The German and US courts have already accepted that the quid-pro-quo element of the GPL is a viable means of exchange; damages don't have to be monetary. If you live in another country than those two, you might have to prove that it's true in your jurisdiction, but the reasoning is pretty clear, and I'd be stunned if any judge anywhere ruled elsewise. Anyway, the goal is usually compliance, not restitution.
GPL violations... Ever heard of a company called APPLE?
How can anybody sue a closed source software company for GPL violation?
I'd like to buy homeland for our 10 million people. http://twitter.com/mahadiga
I say we just call this "Strike 1" of the three strikes rules, and move forward with revoking Microsoft's Internet Connection.
For what I'm really saying, see: Word manipulation, hypocrisy, and the so-called Anti-Counterfeiting Trade Agreement (ACTA)
Digital Copyright Canada forum