Australian Telco Telstra Complies With GPL
An anonymous reader writes "Late last year, Australia's biggest telco Telstra was sharply criticised for using GPL'd code in several of its new products — but not publicly distributing changes it made to the code when doing so. However, it looks as though the company has now come clean, publishing a source code CD of the files changed in its development effort and acknowledging the GPL and Lesser GPL. It's good to see companies responding to the open source community this way and engaging — makes a change from the past!"
And it's Telstra of all companies deciding to do the right thing. I find that amazing.
How is this anything but an eventual response to an internal snafu which could've resulted in (much more expensive) litigious actions?
The GPL violations, and the resulting denial of compliance (for years, wasn't it?) was nothing but bad press. In contrast, had they admitted to the snafu right off the bat and addressed it promptly (a couple months? 6 on the outside?) it'd have been another thing entirely - the press would've been positive. GNU 'compliance' types just want the (free to the violators) adherence to the GPL - they don't care about the money or licensing aspect of it.
In my mind, this almost says less than doing nothing about it at all - "oh, we've got another release, let's include those license files and source code this time".
(What do you want to bet the code is significantly aged and with numerous vulnerabilities known for a long time?)
~/ssh slashdot.org ssh: connect to host slashdot.org port 22: too many beers
Yes lets give Telstra a pat on the back for finally complying with the GPL while this should have been expected from day one. The GPL is yet another licence agreement but not a restrictive one, if you don't like it, don't use it.
there really needs to be a way to automatically report adver-spam without mod points.
They're only distributing the files they changed? Then that's not complying with the GPL. The GPL very clearly requires "complete corresponding machine-readable source code". Basically, if you get a product with binaries of GPL licensed code, then you must be able to recreate those binaries from just the files that the vendor made available. Just pointing to someone else's distribution of the source is not allowed (there's only one exception: you got the code in binary form yourself and redistribute it non-commercially).
As long as it's treated as a privilege that is revoked for a period of time / indefinitely for anyone who attempts to abuse the system.
GPL: You need to comply only if you get caught! (And even in this case, you can wait for a year or two)
Yeah, lets encourage this behavior further...
May Peace Prevail On Earth
...eating your GPL
GPL: You need to comply only if you get caught!
On the other hand, are US Copyrights relevant and legally binding in Australia? Probably they are by virtue of treaties and such.
Seriously, not a troll, but what's the beef? We're lucky to see the CD at all...
Rather than raking Telstra over the coals for complying (albeit late) , maybe the more constructive thing would be to use it as an illustration to other companies as to how harmless it was to Telstra to comply - it did not hurt them competitively at all.
By giving Telstra POSITIVE FEEDBACK for complying, perhaps it will ENCOURAGE others to comply as well?
Of course you all can SHIT ALL OVER THEM and see how that works, as well...
If you want news from today, you have to come back tomorrow.
I'd have to agree with the above comments. Telstra doesn't deserve any credit for compliance alone. It's expected. Many people seem far too willing to forgive/forget within a short period of time. They delivered what was expected of them after an extended period of inaction. That is all.
"Telstra profits off software piracy for half a year without repercussions"
Im a local copyright holder and am following this (There are still things that need to be done)
The impression i have is that Telstra just didnt realise what they where getting into, but since then they have made a genuine effort to fix the problem.
I give Telstra credit for accepting their mistake and trying to fix it, which is lot more than happens in other cases. They certainly could have made it more difficult.
Device manufacturers are the biggest problems, they never talk to developers, they already have our stuff... But if we get a distributor like Telstra on our side they have to respond to them because there are ongoing sales at stake.
Exactly this situation arose in the Feist case. Rural Telephone Service compiled a list of its subscribers, Feist incorporated it into their book, and RTS sued. And lost. You can't copyright facts (thank God---imagine a world in which you could). There has to be some creative element, no matter how much ``sweat of the brow'' was expended. An alphabetic list of phone subscribers contains no creativity.
I refuse to believe corporations are people until Texas executes one. -- desert rain on http://www.dailykos.com/user/
i'm not sure why they have chosen to distribute via snail mail but it going to cost them a lot more to do so than just posting a download link. i'm a bit curious so i requested a CD which will make it an international delivery.
with enough requests, i think they may switch to electronic distribution means.
Anons need not reply. Questions end with a question mark.
Have they made any interesting modifications that might benefit other users?
What upstream changes are likely to come of this? Will we see support for new chipsets as a result of this code release? New Drivers? New interfaces?
I am totally agree with your post. Thanks for the great and interesting post. http://www.bipolardisorderliving.com/
Autumn Behind ?
GPL pertains to "Free Software Community" NOT "Open Source Community". I was hoping nerds would know the difference.
It would nice to see Cisco comply too and give back also sometime. Not just with Linksys and small business line, but the Enterprise class wireless gear (Access points, Wireless Controllers (WLC), etc.) are all littered up with GPL stuff. WLC AireOS is pretty much just Linux kernel, busybox and Cisco proprietary stuff bundlered and renamed. Crypto stuff contains GPL (not LGPL!) libraries like bnlib etc.
If the DRM contract requires you to protect the code by obscuring all of it, then it is incompatible with the licence contract that has been made with the owners of the GPL code that is in the machine.
You make it sound like there is no alternative other than to break the DRM contract. In fact, there are two alternatives: don't use code that is under a GPL licence; or don't make contracts that you cannot fulfil.
Making a contract does not invalidate all the licence agreements you have entered into; if you are going to make a product, you have obligations to all stakeholders, including those people who put effort into the GPL code that you are using.
The commercial application is a C library and frontend code written on a proprietary runtime and is obfuscated. So there are no violations in the deliverable to my knowledge. My original point is that the customer may be violating but we have done our part, Mr Hairyfeet seems to have used that as a springboard into a rant about how evil we are. Or something.
As for DRM there are two main things in the app, though one isn't really DRM. The DRM really applies to the streaming content. i.e. stream contains content encrypted with DVB-CSA and packets that the crypto vendor uses to extract the decryption keys. Nothing to do with GPL code there. The DRM allows a guy in one house to access a subscription movie and prevent the freeloader in the house next door getting it for nothing. Just standard stuff seen in 100 other pay tv boxes.
The other place where DRM might be thought of happening although it's just a public / private key pair is the bootloader. When a firmware update happens, the bootloader uses signatures to validate the image before flashing. OEM produces a firmware update and signs it. Firmware is pushed to the boxes which then reboot to the bootloader which validates & flashes the app partition with the new image. That stops hacked / corrupt / broken firmware from being installed maliciously, deliberately or by accident. I mention malicious because on a cable network some hacker could brick all other boxes remotely if if we didn't pay attention to that threat.
My understanding of GPLv3 is that if it were used in the bootloader it might require that the key used for signing must be offered to individuals to construct their own firmware. I speculated that if that came an issue the bootloader would just use something like BSD or some other OS instead to circumvent it. It's not clear to me that the DRM clauses would affect what was in the app partition at all. And if they did then the vendors of SoCs, boards would just use a fork of the last GPLv2 sources and most of the embedding world would follow because they get their sources from the SoC vendor.