Slashdot Mirror


Busybox Developer Responds To Andersen-SFLC Lawsuits

Bruce Perens writes "I'm the creator of the Busybox program. I have released a statement on the past and current Busybox lawsuits, which do not represent my interest."

43 of 316 comments (clear)

  1. Proposition by eldavojohn · · Score: 5, Interesting

    The version 0.60.3 of Busybox upon which Mr. Andersen claims copyright registration in the lawsuits is to a great extent my own work and that of other developers. I am not party to the registration. It is not at all clear that Mr. Andersen holds a majority interest in that work.

    Perhaps it is high time you looked into the allegations that "every line of code you wrote for Busybox is gone?" It is still GPLed, afterall. Wouldn't your old code diffed against the new code reveal the truth in that statement and set things straight in whose interest the SFLC should be representing?

    If you can point me to a version/tag/branch/code repository where you assert your dominance in authorship, I would be more than happy to spend an hour when I get home tonight generating some stats against the current code (assuming that code hasn't been drastically moved around/repackaged/renamed). Even so, it would fairly trivial to script an expensive file-by-file comparison and return a set of the most likely matches based on percentage similarities to establish what work of yours may remain. Might even be a better tool out there than what I know of.

    --
    My work here is dung.
    1. Re:Proposition by Bruce+Perens · · Score: 5, Informative

      I my contribution is not gone from the rather old version of Busybox which was subject to the copyright registration and is mentioned in the lawsuit. If necessary, yes, a diff can be produced. I also have a compilation copyright of various sorts, which can't be represented with a diff. And there is also the matter of non-literal copying, which probably exists despite Landley's claim, and can't be represented with a diff.

    2. Re:Proposition by Bruce+Perens · · Score: 5, Informative

      I didn't mention a tag, sorry. This would probably be a version pulled from an old Debian release. There were subsequent developers to me, for example Dave Cinege and the Linux Router Project, before the source-code control system currently in use for Busybox was established.

    3. Re:Proposition by LWATCDR · · Score: 3, Interesting

      I wonder if you could answer a question for me?
      If the source for the GPL software is unmodified and freely available from other sources why should the vendor have to duplicate it's availability?
      No it doesn't cost an arm and a leg to throw up a tarball of busybox to be nice and legal but what benefit does it have to the community?
      Including the GPL it's self I see as vital but the making yet another copy of the source available seems iffy at best.
      Just wondering about your thoughts on this. I have contributed some FOSS code to a few projects and I feel that feel that feeding code improvments back into the project is much more important than making another copy of already available source available.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    4. Re:Proposition by Bruce+Perens · · Score: 4, Insightful

      The vendor has to comply with all of the license terms. Including providing the license statement, etc. We don't want to give them another decision to make by making them check if they've made any changes, and then do so again every time they distribute a new version, we just want them to provide the source as that ends up being easiest.

      If they have made no modification, we will be able to see that from the source that they provide. But they often make modifications, if only to fix a bug, to port the software, or to add a feature. If they have any sense they don't link their big proprietary feature into the Busybox executable. But even if they did, they could remove it as part of coming into compliance.

    5. Re:Proposition by Bruce+Perens · · Score: 4, Insightful

      Joe the burger-flipper buys a car with Linux embedded in the dashboard computer. He then sells it to Jim. Jim asks Joe for source-code. Joe doesn't know what source-code is.

      So, there are some cases where it doesn't make sense to ask the "distributor". The manufacturer would know what to do, and the manufacturer has created the derivative work involved. In general, the manufacturer would take care of this obligation for Joe.

    6. Re:Proposition by Bruce+Perens · · Score: 4, Interesting

      Yes. Surely the producer of an embedded product has no excuse to fail to deliver the source code. And if it's Best Buy with a house product, it's their obligation.

    7. Re:Proposition by LWATCDR · · Score: 3, Interesting

      Well of course if some chowder head links play_DRM_video.o into busybox they should get slapped.
      And yes you must play by the rules so that is a given. I just hate the idea 500 copies of the source for some out of date version of some code I wrote five years ago floating around the web. Of course if I stop working on it then having lots of copies of it floating around can be a good thing. I guess I can see the pluses and minuses. I can also see how some developer could make an honest mistake and not post there copy. If I buy a SBC with Linux on it and use it for my product I might think that they tar ball the vendor of the SBC has his site covers me. I would be wrong but it would be an honest mistake. Going back and making sure that every piece of code that is on an SBC is available while not a nightmare could be a bit of a task.
      You can also get bad advice when you start doing that kind of development. When I was talking to my vendor about freeing up some space on the flash image he suggested that I static link my code! This code was not something I wanted to release as GPL. When I asked the vendor actually said, "who will ever know". I didn't take that option.
      As with most things in life it is easy to make an honest mistake or get bad advice when dealing with GPL code.
      On another project we thought that must including the DIFF of our patch and saying what GPL code we where using was good enough. We latter decided to just put the tarball on the CD along with the GPL just to be safe.

      --
      See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
    8. Re:Proposition by cyphercell · · Score: 4, Interesting

      I'm sorry but this reads like bias and little else. I think what Bruce is getting at is that these lawsuits generate FUD amongst his clients. It's not about destroying the FSF or whatever you're going on about, it's about protecting the marketability of software Mr. Perens authored and now supports.

      You know from the outside it may very well look like MS says people get sued for using FOSS, advocates scream to no end about FUD, and then the FOSS developers come out and start suing people.

      --
      Under the influence of Post-Cyberpunk Gonzo Journalism
    9. Re:Proposition by dch24 · · Score: 3, Insightful

      Joe can include the source in his single car sale by including the CD he got when he bought it - FLOSS dashboards inc included the source on the CD, right?

      Right, I know that a lot of GPL software on CDs doesn't include the source on the CD. However, let's go one step further. I know Joe probably lost the CD - it happens often enough. Now what do we do?

      Well, if Joe gets sued, he can contact FLOSS dashboards inc and get the source from them, and thus fulfill his legal obligation.

      GM sells a bunch of FLOSS dashboards. They can wait until they get sued, then try to find FLOSS dashboards. But considering the risk, they'll probably just distribute the source up front, because they're smart, right?

      Which brings us back to what Bruce is trying to accomplish: he's not out suing people. He's -- in fact -- making things easier for people who want to comply with the GPL.

    10. Re:Proposition by fatboy · · Score: 3, Informative

      If the source for the GPL software is unmodified and freely available from other sources why should the vendor have to duplicate it's availability?

      To comply with the terms of the license, under which the vendor received the code. Otherwise, the vendor has absolutely no rights to distribute the software.

      --
      --fatboy
  2. Worst summary ever. by WiiVault · · Score: 5, Interesting

    Sorry "editors" but many of us have no clue what this article is about based on the two sentence summary about a guy and company I have never heard of. Perhaps a little more explanation would help?

    1. Re:Worst summary ever. by Bruce+Perens · · Score: 4, Informative

      When you make an embedded linux system, like in a network access point, Busybox is the user-mode component, and the other main component is the Linux kernel. Busybox provides a command-line environment that looks like the one provided in a Linux distribution, but is smaller. SFLC is involved in prosecuting Busybox violations because nobody with a significant copyright in the Linux kernel has asked them to prosecute GPL violations with regard to Linux.

    2. Re:Worst summary ever. by MasterPatricko · · Score: 5, Informative

      For those too lame to Google the words they don't understand in TFA.

      Bruce Perens is a prominent open-source programmer and advocate. He co-founded the OSI with Eric S. Raymond and wrote the first Open Source Definition that became the first DFSG.

      BusyBox is a collection of userland tools to go with the Linux kernel, similar to the GNU utilities except optimised for use in embedded systems. They are the base of most complex embedded software on devices worldwide.

      Because BusyBox is so widely used but not well-known, companies generally through ignorance fail to comply with GPL guidelines stating that they must provide the source to any binaries they ship on their devices.

      The SFLC is the Software Freedom Law Centre and they represent free software interests in legal matters. In this case they are suing various embedded device manufacturers who sell BusyBox-based devices and are continuing to violate the GPL by not providing the source even when warned.

      Bruce Perens was the original writer of BusyBox many many years ago. However the SFLC has not included him in this lawsuit. He is no longer involved in BusyBox and the current authors say that every line that Bruce contributed to BusyBox has now been replaced by newer code; but he argues that because some of the code in the offending devices is actually based off older BusyBox code, he should actually be represented in the lawsuit.

      This little disagreement looks like he's just wanting a share of any monetary damages awarded - or at least his name in the news. Bruce certainly doesn't have any grounds to stop the lawsuit anyway, and he approves of protecting the GPL.

      --
      I'd tell a UDP joke, but you may not get it. I'd tell a TCP joke, but I'd have to keep repeating it until you got it.
    3. Re:Worst summary ever. by Bruce+Perens · · Score: 5, Informative

      I am not sure that these suits even ask for damages other than for the time spent on prosecuting the infringement. But one of the issues is that since I am not party to the suits, I can't see that.

      I also don't agree that my copyright interest has been removed from the program. Although one of the developers once said so, I don't think he knew what he was talking about.

  3. Re:Hey by chill · · Score: 3, Funny

    No pitching your own crappy stuff here, ok?

    On Slashdot?! You must be new here.

    --
    Learning HOW to think is more important than learning WHAT to think.
  4. Does it matter? by jonbryce · · Score: 4, Insightful

    If Messrs Andersen and Landley own copyrights to any part of the Busybox program, they can sue for infringement of the copyright on their bit of the code, even if the majority of it was written by you.

    In any case, I believe it contains a Linux kernel, or at least parts of it, written by Linus Torvalds and his friends, and presumably at least parts of the gnu tools that Busybox provides stripped down versions of. This of course is perfectly permissible, and the whole point of the GPL and other free and open source software licences is to allow and encourage this sort of thing to happen. All these developers have a copyright interest in the Busybox program, and could sue if they wanted to.

  5. Re:Waitaminute: by Bruce+Perens · · Score: 5, Informative

    The current suit is brought in the name of Erik Andersen. Erik worked for an embedded Linux company, now defunct, for a few years and was paid to maintain Busybox during that time. During that time the company's name appeared in copyright statements, and mine mostly disappeared.

  6. Re:Raises an interesting issue by Bruce+Perens · · Score: 4, Insightful

    In the U.S. any of the copyright holders can sue independently. Elsewhere, that might not be true. And they each have the right to decide to look for damages, or not. Mostly, Free Software developers forgive past infringement in exchange for current compliance and do not ask for damages. However, if a company is a long-term non-responder, they will look for compensation for their time.

  7. Re:Waitaminute: by Bruce+Perens · · Score: 4, Informative

    Yes, there's that. He also worked on the program after he was no longer employed by that company. I am not disputing that he has significant copyright interest in the program as it exists today.

  8. Re:Does it really matter? by Andy+Dodd · · Score: 3, Interesting

    I think the issue is whether false claims have been made about Person A in the process of Person B suing Company C. Bruce's statement kind of implies that.

    Also, Bruce's statement implies that SFLC is using rather overzealous "sue without negotiation beforehand" techniques that are damaging to the business of some of the other Busybox developers, including himself. Whether he has a legal leg to stand on is unknown, either way it's kind of a "dick move" on the part of those involved in the lawsuit.

    It's just like the patent system - there are companies that are typically very reasonable in terms of patent license negotiations and consider a lawsuit to be an absolute last resort (I knew someone who worked for Lucent's IP licensing organization - lawsuits were an asbolute last resort for them.), while other companies prefer to patent troll and immediately open up with a lawsuit.

    --
    retrorocket.o not found, launch anyway?
  9. it doesn't matter by jipn4 · · Score: 5, Informative

    Anybody who has contributed to a piece of GPL software has standing to bring lawsuits against people who violate the GPL. Who has contributed the "majority" of the code is immaterial. I'm sorry this is inconvenient for Bruce Perens, but it can't reasonably work any different.

    1. Re:it doesn't matter by Diesel+Dave · · Score: 4, Informative

      Anyone who has contributed to a piece of GPL software, reserves their copyright, and does not violate the GPL license has rights to defend their own copyright in the work. The issue you may be missing is this is not clearly the situation with Anderson for several reasons.

  10. Re:Does it really matter? by schon · · Score: 4, Informative

    I don't think Bruce wants to stop the lawsuit, he justs wants to get a piece of the pie.

    Doesn't sound like that to me.

    I'm not really sure what he hopes to gain unless he wants a piece of any monetary damages awarded ... ?

    How about clarification, like he says in his letter:

    Unfortunately, all of this is confusing my strategic consulting customers. Thus, I will offer them a waiver of my interest where appropriate.

    What this says to me is that he has clients who got spooked by the suit, and he's publically stating that he's not a party to it, and won't sue them... which is pretty much the opposite of "wanting a piece of the pie."

  11. Backing Bruce's Copyright by Diesel+Dave · · Score: 5, Informative

    I am the one that handed BusyBox over to Anderson after maintaining it for 2 years.

    I believe I worked with Busybox longer then Bruce did and during my time I reorganized the code, but still consider Bruce the primary root Copyright holder and license grantor. Anderson is claiming complete Copyright and that is simply an impossibility. As far as I am concerned, this claim is a GPL violation in and of itself.

    Even if every line of code Bruce or myself wrote were replaced, it was done so on his and subsequently my license terms which are the GPL. My privileges and Anderson's privileges (if any ?) to alter and redistribute Bruce's work are based on those license terms derived from Bruce's initial publication and you can not simply 'code them away' unless you start from scratch.

    1. Re:Backing Bruce's Copyright by benjamindees · · Score: 5, Insightful

      Anderson is claiming complete Copyright and that is simply an impossibility. As far as I am concerned, this claim is a GPL violation in and of itself.

      This is exactly the most disturbing issue to me here. Being able to re-write GPL code and then claim sole copyright on that new code would completely invalidate the entire concept of derivative work on which the GPL and every other software license is based.

      --
      "I assumed blithely that there were no elves out there in the darkness"
    2. Re:Backing Bruce's Copyright by c0d3g33k · · Score: 3, Interesting

      I'll have to agree with larry here. This touches an area that is nuanced, to say the least, but replacing the code needs to be an option in some cases. As an example, I worked on an OSS project several years back. For perfectly valid reasons, the current project maintainer wanted to change the license. He attempted to contact all the authors for their permission to relicense the code under the new license. If he got no response, or the original author said "no", then his only option was to replace the code with code he had written himself. This seems a perfectly valid approach to me, considering the old code is still available from the same source. I happened to miss noticing his request until it was too late (infrequently checked mail account), so was happy he could replace the code and move on.

      I suppose if one wanted to adopt a strict interpretation of "derivative", then replacing code within an existing framework might be considered in violation of the license, but people really need to think before playing this card. It makes situations like "if you show us patented code in our application, we'll replace it" much more difficult to reconcile easily, especially if the code violating the patent was part of the original application code. Then the replacement code is 'derivative' and still subject to the original claims.

      That's a mighty big can of worms you could be opening, Diesel Dave. Maybe even Pandora's box.

    3. Re:Backing Bruce's Copyright by Bruce+Perens · · Score: 3, Informative

      Your ignoring the issue of derivative works. The current Busybox is not a clean-room re-engineering. It's an unbroken progression from my original code base. Thus, it's derivative.

    4. Re:Backing Bruce's Copyright by Diesel+Dave · · Score: 4, Informative

      In bulk reply:

      1) There are two things here: Copyright and License. Bruce created a work. He holds copyright. He published that worked under a license. That license is the GPL. I had privilege to use, modify, and redistribute that work according to the license. The license requires that I respect Bruce's copyright and redistribute derivatives under that same license. I own copyright to the parts I have authored. This goes so forth and so on for each person. IMO the original author never loses copyright claim. Without question the original author remains the primary license grantor.

      2) Violating the GPL means violating the terms of the license. According to the GPL if you violate these terms, you loose your privilege the work completely .

      3) Before meaninglessly rambling actually read the GPL.

      4) Before meaninglessly rambling actually read the courts documents. Anderson claims complete copyright here.

      5) I would argue that from my knowledge Anderson did not hold the copyright for many of the code contributions he made into busybox (his employer did) and further more as Anderson is not respecting the terms of the original copyright and license term of the original author (Bruce) and authors before him (Me) he is in violation of Section 1 GPLv2, and has lost his his privileges to the software according to Section 4 GPLv2. In this case Anderson lacks standing to bring suit and he himself is open to an action.

      6) One must wonder why the SFLC is working with Anderson when they have been aware that both Bruce and myself have more senior claims to the original work without the 'issues' Anderson has. As Bruce has written we've basically been snubbed by them.

      7) I feel I speak for Bruce here in saying the most important issue for us is to have our interests be respected and to be a party to any terms of how the license is enforced. I would be content if it was ultimately left to Bruce because he is original author and respect that. I personally never made a penny from BusyBox unlike Anderson who's full time job paid him to work on BusyBox (and other work I created). When I start to read about 'undisclosed settlement amounts' and considering the full picture, it leaves a very bad taste not knowing exactly what is taking place here. I'm not allowed to know. Bruce is not allowed to know. That's not acceptable.

    5. Re:Backing Bruce's Copyright by Bruce+Perens · · Score: 3, Informative

      The situation with BSD UNIX could not recur today. The key factor was that they had not put the proper copyright notice on their code, and at that time they had to do that or they didn't have a copyright. Today the law is different and you have a copyright the moment you set pen to paper. There was also the issue that USG had been caught with dirty hands infringing upon BSD code.

  12. What's your point Bruce? by gr8_phk · · Score: 4, Interesting

    It seems from your post that:
    1) You seem upset that SFLC isn't representing *your* interests in the matter, but they are representing others.
    2) You are unhappy that someone registered a copyright without including you on it.
    3) You seem to imply that you'd be willing to waive your rights in the matter, or give your blessing to distribution without source.

    1 is not relevant
    2 would suggest you should go after the people who registered it - unless my interpretation of 3 is correct.
    3 If true, why would you say that?

    The only point I can see to your rant is to draw attention to yourself and your consulting business trying to raise doubts about a bunch of things.
    What exactly is your point here?

    1. Re:What's your point Bruce? by Bruce+Perens · · Score: 4, Informative

      I'd only give a waiver in specific cases. I would do this to 1) reassure my present and potential consulting customers and 2) offer assistance to companies that want to come into compliance, because that's what Free Software folks really want.

      I want to be properly represented as a person with a copyright interest in the program, and I want the folks who assert lawsuit on others to comply in regard to my rights as they would have others comply with theirs. I doubt that legal action will be necessary to effect this change.

    2. Re:What's your point Bruce? by Bruce+Perens · · Score: 4, Insightful

      One responds to publicity with publicity. SFLC made a point of publicizing the suit.

    3. Re:What's your point Bruce? by rtfa-troll · · Score: 4, Interesting
      Dear Bruce; some comments
      • the SFLC should be guarded since you were potentialy a party in their lawsuits where they already agreed to represent another party
      • now that you are in active conflict with their clients, it would probably be illegal for them to represent you (which is why they should be guarded before)
      • you should get your own, separate, lawyer
      • even having majority interest may not be sufficient to overcome the minority interests; anyone with any interest can claim a GPL violation on the combined work
      • the time for publicity is normally after you have filed a court case and even then it should be limited to what your lawer agrees to

      Given this I'm not sure I see your point with what you are doing now. Most of your complaints about the SFLC are unfair since they cannot represent two opposed clients at a time. I think they should have a duty of fair access, and representing those they can, however that doesn't extend to breaking the law or allowing conflicts of interest and in this case, Mr Andersen and Landley got there first. Sorry, bad luck.

      Having said that, if it's true that your copyright on BusyBox has been deleted incorrectly, then using the SFLC way on the other Busy Box developers is a perfect example of what you should do to the Busybox developers who mistreated you; but you must use a proper lawyer. Start with a clear legal letter to the busybox developers pointing out which version had your copyright deleted and shouldn't have and asking them to come into compliance with the GPL (which has a requirement for correct labelling of authorship). Please remain as reasonable as we have seen you being before and you will get your way. We'll back you up and I hereby pledge 20 Euro towards your legal fees if you produce a reasonable lawsuit and explanation of it and how it got to this stage of breakdown. I'll give more if I'm convinced this is a worthwhile use of money.

      INAL and all that...

      --
      =~ s,(.*),<sarcasm>$1</sarcasm>,g if any_point_you_wish();
  13. Re:Raises an interesting issue by Bruce+Perens · · Score: 3, Informative

    There is no monetary loss or other damage to the original developers.

    This is presently being tried in another case, Jacobsen v. Katzer. It looks as if there will be significant damages that the Open Source developer can collect. The judge seems to think so in that he granted a motion for summary judgement (after at first rejecting it).

  14. Re:Drama, drama. by Bruce+Perens · · Score: 4, Informative

    Then step right up, the solution to our problems has finally arrived!... several years ago.

    You might find Jacobsen v. Katzer educational. Jacobsen was using the Artistic License 1.0, and this did not protect him from Katzer.

  15. Re:What's your point gr8_phk? by Bruce+Perens · · Score: 4, Informative

    You don't believe I've never communicated with these folks, do you? I did. And learned very quickly that it was the wrong approach where Mr. Landley was involved.

  16. GPL != ClusterFuck by Bryan+Ischo · · Score: 3, Interesting

    BSD is fine for a company like Google who makes so much money on the platform that the code runs on (both directly, and indirectly by further cementing the Google "brand") that it matters little to them that they give the source code away.

    I can assure you that if you are an individual developer, your interests will be MUCH better served by releasing your code under GPL (NOT LGPL). If you release under BSD, you will get nothing of value back from anybody (except possibly some changes released back to you if whoever wrote them "feels like it"). If you release under GPL (NOT LGPL) you will get bug fixes and improvements because anyone who makes bug fixes or improvements, and intends to distribute them, must give them back to you. And you will also get money if your code is worthwhile enough, from companies who want to use your code to save them their own development time and money, and who will be happy to accept the code under a proprietary license from you in return for money.

    I played around and made a software library with a fairly specific purpose that I released under GPL. I didn't intend to make money off of it; it was to be part of a larger project that I haven't (yet) completed (and is currently on hold as I've lost interest, but I intend to get back to it ... eventually). I ended up making $6,000 so far from companies who wanted to use the code in their own products rather than re-developing it in-house. It's not a huge sum, but it sure is nice to get money instead of getting nothing, which is what I would have gotten if I had released under BSD.

    Is it against the "sprit" of GPL to issue a separate closed source license for the library for money? I don't think so. Only the author of the software in question has any say whatsoever over what is right and what is wrong with respect licensing that software; no one else's opinion is even remotely relevent. And GPL is a great tool if you want to give your code away for others to use but want to be rewarded if anyone finds it useful.

    The BSD license is a great license if you are a company like Google for whom the value of the platform is worth more than the value of the code used to make it. But if you are an individual developer, it's no different really than releasing to the public domain, for which you should expect to get, and will get, nothing in return for your efforts.

  17. I used Eric Anderson in 2000 to consult on Busybox by cellurl · · Score: 4, Informative

    In my mind, Eric was the inventor. I paid him in 2000 to add some uClinux / Busybox code to the Coldfire project for my Blabbermouth product at airlib.com.
    I would probe the uClinux guys, Lineo, Greg Ungerer, Phil Wilshire...

    Sometimes its the guy who "ran with it" who assumes ownership....
    After the fact, that is tough to swallow. And the Busybox name and concept is genius whoever did it.
    Merry Christmas

  18. Re:Waitaminute: by SLi · · Score: 3, Interesting

    Then isn't that enough to enforce it? Where does your copyright come into picture? He's enforcing his copyright, not yours.

  19. Re:license applied to code, but owned by coder by Bruce+Perens · · Score: 3, Informative

    In the U.S. the license is the choice of the copyright holder. There are many on Linux. And thus to change the license on Linux, you have to ask all of those copyright holders, as best as you are able to reach them, including through public notices. Then, you have to remove the work of those who object. And then you can relicense.

    This is so painful that there would have to be a very good reason. Like GPL2 becoming seriously less enforcible.

  20. Re:So write another one. by Just+Some+Guy · · Score: 3, Informative

    I'm surprised that someone hasn't written something like BusyBox starting from FreeBSD's utilities.

    They have. Go to a FreeBSD console and run ls -i /rescue. There are 133 binaries in that directory on my desktop, each being a hardlink to the same statically linked file, with behavior depending on the value of argv[0] when the program is run. The idea is to include all the programs you might need to repair a FreeBSD system in single-user without having even /usr mounted. See the man page for crunchgen(1) for more details.

    --
    Dewey, what part of this looks like authorities should be involved?