Slashdot Mirror


What Do I Do About My Ex-Employer Stealing My Free Code?

An anonymous reader writes "I recently found out that the company I used to work for is removing all the open source licenses (GPL and MIT) from my work, distributing it as proprietary software and taking all the credit despite the fact that they contributed nothing to it. They are even renaming it something really silly. What should I do?"

29 of 545 comments (clear)

  1. Talk to Tom Hudson by gmhowell · · Score: 5, Informative

    Search out the journal of /. user TomHudson for one person's experience with this (ongoing, last I heard).

    --
    Jesus was all right but his disciples were thick and ordinary. -John Lennon
    1. Re:Talk to Tom Hudson by adycarter · · Score: 5, Informative

      http://slashdot.org/~tomhudson/journal/

      Sadly I had to resort to Google as slashdot doesnt like searching itself...

      Journal enteries related to this are all a fair bit back in his Journal.

      --
      Witty Comment Here
    2. Re:Talk to Tom Hudson by JackCroww · · Score: 3, Informative

      Prostitution in and of itself is a victimless crime. If two consenting adults decide to exchange money for sex, where is the crime? It is only when prostitution is considered a crime by society do the incentives to commit prosititution create situations where we end up with victims (pimps exploiting runaways, sex-trafficking, etc.) Legalize it and require certification (like plumbers) and suddenly the State will have a legitimate revenue stream.

      --
      "Ayn Rand is a bloody socialist compared to me." - Robert A. Heinlein
  2. Lawyer by Anonymous Coward · · Score: 5, Informative

    Get one.

    1. Re:Lawyer by rbrausse · · Score: 5, Informative

      Get one.

      if you are honestly interested in claiming your copyrights this is the best (and arguable only) way to enforce the license. when you are "only" trying to get this known in the community you could describe the issue at the mailing list of gpl violations.

    2. Re:Lawyer by beelsebob · · Score: 4, Insightful

      Or... learn what MIT licensing means... they're entirely free to distribute under whatever license they choose as long as they cite you. They're not stealing it, they're using it under the free license you provided it under.

      As for the GPL – yes, you need to get a lawyer there, that is indeed a violation. Of course – if you coded this GPL code on their time, it's their copyright anyway, and they're free to use it any way they see fit.

    3. Re:Lawyer by beelsebob · · Score: 5, Interesting

      Huh... the poster is asserting that they're distributing his GPLed code as proprietary. That certainly is a violation. But it rests on the fact that it actually is his code to GPL. If he did it while he was at the company, it's theirs. If he did it at home, and then he integrated it into their code without them having a license for it, then they have a pretty good case for saying "either you were screwing the company over or you implicitly licensed this to us".

    4. Re:Lawyer by xelah · · Score: 3, Informative

      As for the GPL – yes, you need to get a lawyer there, that is indeed a violation. Of course – if you coded this GPL code on their time, it's their copyright anyway, and they're free to use it any way they see fit.

      Probably but not necessarily; it depends on contracts and jurisdictions. In the UK copyright transfers and exclusive licences can normally only be made in writing and if your employer doesn't get their paperwork sorted out you might find yourself the owner of the code. There would almost certainly be an implied licence to your employer to allow them to use it - you can't happily allow or assists someone in using your code and then complain later you didn't want them to - but those are determined by courts and supposed to be as small as possible as to legitimise the behaviour you allowed. It may be possible to revoke that licence and tell them they can't use it from now on. If it's like that here then I imagine there will be other places in the world where it's true.

      Contracts with employers seem to vary - some claim copyright on everything you do, technically including things like hobby projects or personal correspondence (no idea how enforceable that is, though). Others specify 'in the course of your employment' or somesuch.

      Even if the copyright IS owned by his employer it doesn't mean the GPL licence doesn't exist. The employer wouldn't be breaking it, of course, but they couldn't stop others using it. Not anyone prepared to see a case through to the end, anyway (which is quite possibly nobody). Did his boss agree to licensing them? Did he himself have the power to issue licences on behalf of the company? I'm a director where I work, so any contract I sign on behalf of the company is (almost) automatically legally valid whatever anyone else in the company thinks. AIUI, where I live contracts can be valid if someone who you'd expect to have the power to enter in to them on behalf of their employer has signed them...but if that employee was exceeding his powers it's possible he could be sued by the company. I don't know how it works for licences.

      Very very much lawyer territory. Certainly, at a minimum, do a lot of research on your local laws and how they're enforced territory.

    5. Re:Lawyer by Stellian · · Score: 5, Informative

      if you are honestly interested in claiming your copyrights this is the best (and arguable only) way to enforce the license.

      Assuming you actually own that copyright. 99% of the work contracts out there have a clause where you are ceding all intellectual property to the employer. It's so standard that you should always ask for permission from your employer before writing and releasing open source software - you might not have the right to do so, even if the software is not related to the business of your employer and even if developed in your spare time; the language in my contract is unambiguous about that.

      Assuming that in this case the permission to write and release open source software was implicit, it still does not mean the company has lost it's control of it's intellectual property - they can always dual-license it under a proprietary license. They can't "take back" the already released GPL software, and they can't grab any contribution of 3rd parties to that lineage, but they can chose to develop the original codebase in an entirely closed source fashion - it's theirs.

      So spending 10 minutes to read your contract might save a butt-load of lawyer fees.

    6. Re:Lawyer by TheGratefulNet · · Score: 5, Interesting

      this. 100% this.

      most employment contracts let the company OWN YOUR ASS, even outside of work hours and using your own equipment, even doing work not related to the core business of the company.

      I had to turn away job offers (in this economy!) due to their 'we own your ass' language.

      during the last year or so, I have been working on my own opensource (both hardware and software; its arduino-based) project. I was also interviewing at various networking companies (my background is network management) and while my DIY audio projects have *nothing* at all to do with netmgt, all the contracts the companies would have me sign allow them to own or take over my projects if there is overlap in employment time and my project time!

      believe it. I was somewhat sharp about noticing this (I have no background in legal matters but the contract terms seemed fishy to me) and when I mentioned this to the recruiter I was going thru, he agreed and we tried FOR A MONTH to negotiate some contracts that would allow me to work on my DIY audio hw/sw/fw stuff and not have them own it. we tried being a w2 fulltime employee; and we got a 5 page contract. most items were not acceptable to us. we tried being a direct contractor, that had more pages to it! we tried my working for the recruiter and having him be the actual contractor to the employer. neither side could agree on the other's proposed contract terms.

      this went on for a month and finally I was advised to just walk away.

      and I did. I still have not found work in quite a long time but at least I do have ownership of my (now shipping) hardware and firmware. I released it, its ftp-able, its copyrighted with headers and my name on it, and at least there wasnt' employer 'time overlap' on any part - ANY - of this project.

      but you better believe that any contract that an employer attempts me to sign will TRY to take that project away from me if I even mention I'm working on it.

      I have been harping a lot, lately, about software guys needing to unionize, like the turn of the century america. if we DID have a large software workers union, we'd at least have someone on our side to bargain for fair contracts.

      right now, you and I have zero 'pull' when it comes to crossing out line items or making revisions on contracts for employment. companies both large and small try to steal your work.

      be careful, guys! these days, you are smart to have a laywer look over your employment contract. not that you can alter it, but you can either accept it or walk away. sometimes walking away is the best move (sad to say).

      --

      --
      "It is now safe to switch off your computer."
    7. Re:Lawyer by Matheus · · Score: 5, Informative

      A company I worked for a while back was purchased shortly after I started working there. The original company had required no NDA/Non-Compete/etc but when the new management came in they distributed new paperwork for all of us to sign (whole company from HR to IT).

      I read over this paperwork and it did exactly as you describe. It gave the company complete ownership over anything we did at work or at home, during work hours or during free time. I told our management that I would be unable to sign such a document and my fellow developers and IT agreed.

      As it is, IANAL, but the company allowed me to enter into negotiations with the chief legal of the purchasing company. We hammered out a new version of the document that preserved our rights outside of the workplace and off hours. It was this revised version that roughly 30% of our company signed (Basically everyone tech related) and is a somewhat proud moment for yours truly. It is worthy of note: Neither company was inherently a technology company. The business cases actively pursued in no way coincided with any interests we had outside of work. When the negotiation process began I noticed the fairly internet form letter nature of the document and allowed that maybe they didn't intend to be so overly broad in their charge of ownership. I was told quite directly by their legal that the intent was clear and intentional.

      Long story short: It is possible to negotiate with a company to preserve your ownership of your own personal pursuits but you must be proactive and generally have leverage (In my case I was holding up a merger with an entire IT/dev department. Your average shmo only has the desire of the company to have them work there). Also expect that the/any company will do whatever they can to own everything you are and do so presume you are screwed and read any documentation you are asked to sign with that intent in mind.

    8. Re:Lawyer by s73v3r · · Score: 3, Insightful

      I'm going to go out on a limb and say your position was the minority of positions. I'm also going to bet that you were not doing it in a down economy, when people have been out of work for 2 years or more.

  3. Errm... what? by Splab · · Score: 5, Insightful

    So you worked for them and where paid by them. You decided to release something as GPL (your post doesn't say if this was sanctioned by the powers that be), but considering your termination, one would think you stepped out of line?

    But, the fact is, you where working for them, earning money producing something *they* own. If they decide to revoke a license on something *they* own, they are squarely in their rights to do so.

    1. Re:Errm... what? by Ecuador · · Score: 4, Informative

      From the author's comments on his blog, he claims the GPL project was on his own time and not owned by the company, but known by his company.

      --
      Violence is the last refuge of the incompetent. Polar Scope Align for iOS
    2. Re:Errm... what? by Splab · · Score: 3, Informative

      Yes, but from the same article and comments, he refers to the project as WE where working on.

      He also writes the last two years of his employment was spent on this project - by his own statements, he at least worked some of the time on company time on this project.

  4. Just fork it by dingen · · Score: 3, Interesting

    Why don't you just fork it from the latest version when it still had the GPL/MIT license and release it in a new project? This should be even easier in your situation, because the company decided to change the name of the software, which means you can simply keep using the old name for the new project. This also doesn't confuse users, as they will probably remember and recognize the software by name.

    Once you've got the new project up and running, you can of course sue your old employer for distributing open source licensed software without the proper licence and source code.

    --
    Pretty good is actually pretty bad.
    1. Re:Just fork it by snowgirl · · Score: 5, Insightful

      Why don't you just fork it from the latest version when it still had the GPL/MIT license and release it in a new project? This should be even easier in your situation, because the company decided to change the name of the software, which means you can simply keep using the old name for the new project. This also doesn't confuse users, as they will probably remember and recognize the software by name.

      Once you've got the new project up and running, you can of course sue your old employer for distributing open source licensed software without the proper licence and source code.

      First paragraph is golden. If the code was at one time released open source, then you can totally fork it.

      Second paragraph is however wrong. If the company owns the copyright on the work then they can relicense it all they want, even if it were previously open source.

      As per someone noting below: if you want to know your legal rights and what you can do, talk to a lawyer. What you'll get here is a bunch of IANALs telling you bullshit, and IAALbInYl (I Am A Lawyer, but I'm not YOUR lawyer) telling you generic advice that possibly doesn't apply, and that you need to speak to a lawyer who represents your interests.

      --
      WARNING! This girl exceeds the MAXIMUM SAFE standards established by the FDA for BRATTINESS
  5. What was in your employment contract? by alostpacket · · Score: 3

    Standard practice when hiring any employee is to write a legal agreement stating that any work you do there is "work for hire" and they own the copyright, not you. I *think* this can even be implied just by the fact that you were an employee, Unless you took specific action before writing this code, such as giving the company a specific license, or requireing them to let you contribute it, I think you are the one in *possible* legal danger here. (I am not a lawyer etc blah blah).

    This is unfortunate but you need to get over the fact that work-for-hire does not belong to you and drop this quickly. The more you drum up publicity around this the more danger you could be in.

    Chalk it up to a learning experience, and take solace in that you know what to do next time.

    At the last company I worked with I asked my boss (a SVP level executive good enough for legal purposes) to sign a small contract with me that would allow me to bring in my own open source libraries I had built up over the years in exchange for letting me take code written on company time and contribute it back to the library or to an OSS project. I of course said this would not include anything proprietary to a client or any program as a whole, but rather utilities such as a date converter class or caching system. And that it was at my sole discretion to determine as best I could in good faith what code qualified to be contributed to open source.

    --
    PocketPermissions Android Permission Guide
  6. Not so obvious by perpenso · · Score: 5, Informative

    Obvious. Have a lawyer send them a lovely letter telling them to cease and desist. If they do neither... sue the fuckraping bitchpiss out of them. What else?

    It is not obvious. Who owns the copyright? He said he was an employee, so *IF* the code was "work product" he may only have had the right to GPL the code as an agent of the company. Since he is no longer with the company he no longer would have such authority. If the company is the copyright holder they are free to "fork" it and go proprietary. It is not clear if the code is employee work product so nothing is obvious.

  7. Contributing or stealing? by roman_mir · · Score: 4, Insightful

    FTFS:

    I was terminated from a company that I worked day and night for for about 5 years. During the last 2 years of that time, I created a simple web framework and contributed it to open source. We had always used open source, so it was high time we became a contributor! Recently I found out that they have removed all of the licenses from the files (GPL and MIT), gave it a silly name, and have the intention of marketing it as a product. What should I do? I am trying to get past the fact that I am upset that I was terminated â" that pissed me off â" but the fact that they are taking credit for my work and making it proprietary is really bothering me! What should I do?

    I just might have found the reason for your termination. Were you doing things that went beyond what your employer allowed you to do? You were employed and you were so called 'contributing' code under GPL without your employer explicit permission to do this, and from the text it looks like you have so called 'contributed' the code that you wrote for your employer.

    This is like saying: I took this guys stuff and 'contributed' it for the good of the public, but I didn't ask the guy if he is OK with it and now he is forcing everybody to return the stuff I 'contributed' to him and he called the cops. I am really pissed off, what should I do?

    Yeah, I think I did find the reason for your termination.

  8. Re:SOL by JWSmythe · · Score: 4, Interesting

        I think the key part of that was the first line of his statement on his site. "I was terminated from a company that I worked day and night for for about 5 years."

        So, he says right there, that he worked for the company day in and day out. There was no segregated personal time.

        He appears to freely admit that he worked on company time. The project was made available during company time. It's also quite likely that he used company resources to develop, advertise, and distribute the project.

        The first reply on his own site, dated two days ago, gives the correct answer. Contact a lawyer. They were kind enough to guide him in a helpful direction. I'm sure his employers already discussed the matter with their attorneys.

        It basically comes down to this. If you worked on it while you were employed for a company, the project belongs to them. If you worked on it in your free time, with absolutely no company assets or backing, *AND* you have documentation to prove that, you have a chance.

        I was told by the COO at one employer that he ran into exactly that. His previous employer sued on the grounds that the project was done on company time, even though it was while he was off the clock. Those fuzzy gray areas don't matter much when it's a project that isn't going anywhere, and it's not interfering with company time or assets. The moment you sent an email from work, logged in to write some code, or even mentioned it on work time, they have grounds to say it belongs to them.

        I had one employer who was very much confused by this though. I did send an email up to the Apache group years ago, and my change was reflected in the code. I don't know if it was because of me, or someone else. It was a pretty trivial change to help in high load environments. My bosses thought that since I had written part of Apache, they owned it in some sort of way. It took me a while to get them to understand that they only "owned" my couple lines of code, and it wasn't clear if they used my code or someone else's.

        Needless to say, since you haven't heard of me or the company I worked for, suing the Apache group, I managed to get them to understand. It took a while though. They also thought we owned part of Sendmail, because I was always tweeking our configuration.

        What they did get me on was an internet mapping project that I was working on. I wasn't trying to find every branch out to every backwater nowhere, it only looked at the important nodes where traffic was funneled through. I worked on it after-hours, but I did the preliminary demonstration on their web servers. I didn't personally have web servers in 4 different states, but they did. This was before the average Joe was hosting his site for cheap, and most of us were still on dialup unless we were working out of the office. Their lawyer was kind enough to offer me a percentage of the profits. When he spelled out the terms of that, it was clear that they had absolutely no intention of paying me anything ever. Beyond that, if the project were not to be profitable, I would be responsible for my percentage of the losses, which would come out of my paycheck.

        I ran into a "technical problem" a few days later, which was never resolved. Eventually the domain (which I had paid for) expired, and later on we pruned the site as a dead hosting site. Since there were no costs incurred by the company, they couldn't take anything from me. They did try to get the "hosting fee", which I calculated out based on the usage by all the sites over a period. Those pesky sites with over 1 million hits/day really overwhelmed the little site with just 3 IP's ever looking at it. I offered to write them a check for $0.35. I was feeling generous. They weren't really very entertained.

        The moral of my story? Don't work on it during work time. Don't involve it with work at all. Work under a pseudonym, or under the name of a trusted friend. If it becomes something, cool. If not, it can die quietly without involving lawyers. :)

    --
    Serious? Seriousness is well above my pay grade.
  9. I also RTFA's comments by ericvids · · Score: 4, Insightful

    The OP also said, in response to the first guy who asked pretty much everything that has been asked here in the slashdot thread:

    Hi Llama, I have no such agreement. It was done on my own time with the company’s full support. They knew it was open source. I think now that I’m not at the company, they want to “control” it. As far as I understand it, they need to abide by the license. I think the tricky part is compelling them to abide by the license

    Assuming this is all true (that he had no agreement with the company to cede over his rights to work done on his own time), I seriously doubt that it is legal for the company to do this. It seems to me that he was pretty careful from the outset to ensure that no such agreement was in the contract -- and in that case, by default, the copyright remains with him as the original author.

    I’m going to report this to GNU project and warn them that if they don’t bring to code back in-line with the license, that I will send a letter to their customers to make them aware of the situation.

    To me, that reads an awful lot like extortion.

    How exactly is this extortion? Mere coercion is not extortion. He's not asking for money, property or services in exchange for all of this -- he just wants the source code (assuming it's rightfully his) to be licensed properly and that the company may not sell it as proprietary.

    --
    Pet peeve: Profane people propagating perfunctory pedantry.
  10. Re:Give up - inappropriate by JoelKatz · · Score: 3, Insightful

    Right, no other profession except every other profession that consists of creating copyrightable work such as musicians, sculptors, photographers, authors, actors, and so on.

  11. Re:Work produced at home is mine by murdocj · · Score: 3

    Except it doesn't sound like it's the case here. It sounds like this guy wrote code for the company, in which case it doesn't matter whether he worked at home, at the office, or at 37,000 feet, it belongs to the company, and he had no right to put any particular license on it.

  12. Re:Work produced at home is mine by murdocj · · Score: 5, Informative

    The poster says "I was terminated from a company that I worked day and night for for about 5 years. During the last 2 years of that time, I created a simple web framework and contributed it to open source. " It doesn't sound like it's derivative of GPL, it sounds like he created some code for the company and put GPL on it. In which case the code belongs to the company, and they are free to take it in-house any time they want.

  13. A few things on this (been there, done that): by Qbertino · · Score: 3, Insightful

    You are a professional? Then act like one.

    1st of all: Don't get all worked up. Nobody cares squat about your or your former employers web framework, of which there are literally thousands out there. Take the best parts of it, refactor them and contribute them to Zend, Symfony, Cake, Joomla, Drupal, Typo3 or some other big-time project that actually matters (asuming you wrote it in PHP) or something simular for the language chosen. If your Framework is worth anything, you'll be able to do that quickly and join the coreteam of some big-time FOSS webkit in no time and your credit will gain in weeks by orders of magnitude compared to working semi-free for some crappy freeloading web-outfit nobody has ever heard of for the last 5 years.

    2nd: If they paid you to write it, chances are they own it, and can do with it as they like.

    3rd: If you wrote it on their contract and in your free time and commited significant parts of goodwill into it without getting paid, chances are it's legally dual-licenced ... or some equivalent of that. That means they can do with it whatever they want and you can go on and continue publishing it however you please.

    But once again: Nobody gives a shit, so I wouldn't risk legal action from some small-business asshole I once was dealing with if they discover you and think it's sporting to go after some sorry-ass developer who has even less money and power than they. Unless, that is, you have money and time to spare and like to send a small private army of lawyers of yours their way - for fun or profit or both. In that case, be my guest, fetch a lawyer or two and sue them into next wednesday. And please keep us posted on our blog. I, in that case, for one, am going to sit back in my deckchair, grab a bag of popcorn and watch with joyfull glee and delight as some sleazy web-sweatshop gets what they deserve as they are gutted and torn to chunky kibbles by a righfully enraged FOSS deveper. :-) ...

    Yet again: Since I guess you've got neither money or extra time to spare, I'd let it be, cover my ass with legal statements on your ownage of the code from some buddies in case they want to get pissy with you in the future and then just carry on with your life. Preferably as a core member of some larger web project actually doing something usefull.

    My 2 cents.

    FYI: I too developed a FOSS product for a partner pulling in big time projects. We published it as FOSS and, since they brought in fair money, I agreed to dual-licence the code, which they didn't understand at the time. When we parted, they rebranded the product, removed my name, claimed an advancement over the old version - which didn't exsist, aside from a new logo and a flashy website - and disappeared into insignificance two years later. The codebase still is GPL 3 and I'm ready to continue with the product whenever I feel like it. I have witnesses to back my claims should anyone come after me. Which I really don't expect to happen, since I'm halfway cool and professional with my former partners. And I'd redo the codebase completely anyway if I should ever consider picking it up again.

    --
    We suffer more in our imagination than in reality. - Seneca
  14. Re:Work produced at home is mine by Interfacer · · Score: 3, Insightful

    Only if he was legally entitled to release that code.
    Because if he released it and it wasn't his to do so, the GPL license itself is null and void for that project, and standard copyright would apply to that project.

    If it was not his right to release that code, not only should he STFU, but he may well bring legal problems on himself, and burn his career in the process.

  15. Re:subject by Interfacer · · Score: 3, Funny

    You forgot raping their women and enslaving their children.
    Then the pillaging and the burning.
    And at the end, you sow the ground with salt so that nothing will ever grow there again in our lifetimes.

    That'll teach them.

  16. Re:Give up - inappropriate by fnj · · Score: 3, Informative

    You didn't read the article, did you? Author was contracted, not employed; the work in question was done on his own time. Your condemnation is out of line.