Slashdot Mirror
Ask Slashdot: How Best To Deal With a GPLv2 License Infringement?
cultiv8 writes "I am a developer and released some code at one point under GPLv2. It's nothing huge — a small Drupal module that integrates a Drupal e-commerce system (i.e. Ubercart) with multiple Authorize.net accounts — but very useful for non-profits. Earlier today I discovered that a Drupal user was selling the module from their website for $49 and claiming it was their custom-made module. I'm no lawyer, but my perspective is this violates both the spirit and law of GPLv2, most specifically clause 2-b: 'You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.' Am I correct in my understanding of GPLv2? Do I have any recourse, and should I do anything about this? I don't care about money, I just don't want someone selling stuff that I released for free. How do most developers/organizations deal with licensing infringements of this type?"
posting on slashdot is like a DDOS for their site.
Post your question on the gpl-violations mailing list and we'll try to help you work through the details of any (perceived) GPL violation.
Short answer: Selling GPLed software (even software you did not personally author) is okay. However, you must correctly attribute the copyrighted work re: the upstream author(s), and you must comply with the terms of the GPL license, including providing the complete source.
coding is life
You can buy a scale Predator drone for less than $1000 and a basic AI package for it for maybe half that. A few flybys and maybe a leaflet drop should be sufficient.
Why do people release software under a license and then ask basic questions like this? Particularly, why do they need to ask Slashdot all the time?
The guy can try to sell your module all he wants, provided that a) He hasn't altered the copyright you placed on it (You did put a valid Copyright on each source file, in the GPL header, right?) and b) He makes the GPL sources available to anyone who has purchased a copy of the module and has then requested them, or anyone who has received a copy of the module and has requested them.
Basically, he can't claim its his and he can't change the license, but if anyone is dumb enough to give him cash for something they could get for free elsewhere, that's their problem. If you're still not sure, contact the FSF. Or, hell, just read their damn website!
They aren't actually selling his module.. it says:
We are providing complete support, configuration and installation for this module.
Not the same thing at all. Besides the FSF says selling GPL'd software is ok
You would have a case if they were claiming it was their module.. but I wasn't able to find even that on their site.
...the Software Freedom Law Center
They exist specifically for evaluating and defending against this sort of infringement. They're experts, and their services are generally free.
To understand recursion, you must first understand recursion.
This is probably a bit of hindsight advice, but try to understand the license you choose for your work before releasing under said license. Releasing code under GPLv2 w/o understanding how downstream "users" can legally use it doesn't help when you have to question the legality of someone charging money for the work. If they provide the source and attribution to your work, they're good to go.
If this wasn't the intended use, then consider a different license that more agrees with the ideals which the code was released under. Granted - if you reassign your code to AGPL or something of that sort, many people will either not comply or avoid the work entirely to avoid needing to disclose *their* surrounding source too.
$ man woman *
-bash:
Earlier today I discovered that a Drupal user was selling the module from their website for $49 and claiming it was their custom-made module. I'm no lawyer, but my perspective is this violates both the spirit and law of GPLv2
It is perfectly fine to sell someone else's GPLv2 module for $49; the GPLv2 specifically allows you to sell software.
There's also no GPLv2 problem with the part about "We are providing complete support, configuration and installation for this module."; the GPL doesn't restrict what extra services can be bundled with software.
Now there would be a problem if they distribute the GPLv2 software, with your copyright notices remove, or attempt to redistribute under more restrictive terms than the GPLv2.
If what they are selling is USE of a GPLv2 module through their drupal hosting service, where the software is not actually ever distributed to the end user, then well, the GPLv2's redistribution requirement that redistributions be under the GPL doesn't come to bear until they actually distribute the code.
Hi,
I need to run off in two shakes of a lamb's tail, but I took a quick look I don't see the GPLv2 (or any GPL license) mentioned anywhere in your code.
I suggest that you
1) Put a copy of the GPL (v2, v3, etc...) at the top level of your project. I usually make a file LICENSE.txt that explains that the project is using the GPL, and then put a copy of the GPL at the end of that file.
2) Put license headers on ALL of your files, so that even if they get separated there is no confusion about either the license or the author. They should look like this:
UC Authorizenet Multi
Copyright (C) 2011 Cultiv8 (put your real name here...duh!)
UC Authorizenet Multi is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 2 of the License, or
(at your option) any later version.
UC Authorizenet Multi is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License .
along with UC Authorizenet Multi. If not, see
Here's a quick link to more information: http://www.gnu.org/licenses/gpl-howto.html
coding is life
To everyone here who writes comments like, "I think the GPL says such-and-such", just read the fucking thing. Seriously, it's not a hard document to understand.
If your software were a compiled language (eg c/c++/java etc.) then if they didn't provide the original source OR didn't provide it on request by you AS A CUSTOMER (the license is granting rights to the people they distribute to - ie customer), then they violate. If they have put the php through some code obfuscator and don't provide the original source before obfuscation, then this would come under the "compiled" category i'd say. What they are doing is perfectly legal under the GPL.
If it's nice to do or not is another matter, but it doesn't violate GPL unless they do the above.. and this ONLY applies to people they distribute the product to - i.e. that person gains the rights under the GPL and if they do not follow through with them they violate the GPL as the license was distributed to them.
The idea that everyone must make the source of their GPL product available for free is not enshrined inside the GPL at all. It's simply something many do because its simply easier and more practical, less work, or it is nicer to the community that provided them with the source to begin with, but nowhere in the actual legalities of the license does it require this (3rd parties in this case means only 3rd parties you distribute the program to, not all 3rd parties in the world).
--------------- Codito, ergo sum - "I code, therefore I am" --------------------
People cry about groupthink, which is one thing; but then people like you cry slashdot doesn't follow its "groupthink" on all possible matters in the way they expected slashdot to follow it. Essentially, you're complaining slashdot is not the stawman you keep making it. The fact slashdot has people with opposing views on it is not a flaw. The fact slashdot has people on it with a more nuanced view on the matter than outright-shameless-pirate or RIAA-media-executive is not a flaw. I would say the problem is cognitive dissonance in the people who keep complaining about slashdot, not in slashdot itself.
Before you complain about my signature; I oppose the existence of copyright and am for its immediate and total abolition. I support the GPL until that happens to turn the system on itself and avoid allowing copyright holders to abuse software I write or contribute to. These positions do not conflict, but to some people, they are taken to in order to complain.
Great Intellect...
"Slashdot" (by which I mean the majority of site members, not necessarily the site operators themselves) is probably pro PirateBay because PirateBay does nothing that Google doesn't. It is a search engine, pure and simple, and identifies available torrents. You can in fact find exactly the same links on Google as PirateBay puts on its site.
Since it is not based in the USA it does not have to follow US based DMCA requirements. It was originally based in Sweden, and until recently successfully fought off legal challenges to its operation. From what I can gather, Swedish law changed or the interpretation of it did, and PirateBay was unable to be successful in its defence of its activities.
What concerns Slashdot about PirateBay is that whilst the owners of PirateBay may have made statements supporting "piracy", the actual operation of the site complied with the law at the time, and it seems that there was a determined attempt to "get" the site, and their opinions were used against the site operators. In the US this would raise freedom of speech issues.
You are probably correct in saying that "Slashdot" is anti-EULA. The GPL, however is is not a EULA. A EULA restricts your rights beyond normal copyright, whereas the GPL gives you greater rights than copyright provides, but you are expected to comply with the whole of the GPL in order to have those rights. There is nothing inconsistent in Slashdot supporting something giving you greater freedom than allowed by copyright.
Personally I am not "anti" copyright, and I don't think that "Slashdot" is either. What "Slashdot" probably would regard as a reasonable compromise is a restriction of the duration of copyright to somewhere between 15-20 years. One of the intents of copyright is to permit artists to be paid for their work, which it does, but also to ensure that ideas and thoughts get out into the public domain. In software that doesn't happen, because software is not supported for 70-90 years (the approximate duration of copyright at present) and becomes lost to public knowledge.
Donte Alistair Anderson Roberts - hi son!
Karma: Chameleon
The code was stripped of its existing GPL and redistributed under a new license. Even though the source code is available (because PHP is distributed in source form), it's no longer clear that the code is still covered by the GPL - someone purchasing this package wouldn't know that they were entitled to redistribute or modify the code. That's the crux of the violation:
Distribution fee, sale... just a matter of semantics. But yeah, you are right - RMS himself has said that he encourages people to sell GPLed software for whatever they think their customer can afford. IIRC, he used a hypothetical figure of $1B to illustrate his point. In other words, I could sell Emacs to somebody who didn't know that he could get it from gnu.org itself, for whatever I thought I could get away w/ charging him
The only thing about it is that while selling the software, they cannot restrict the future distribution of binaries w/ source to third parties. In other words, let's say this Drupal software was sold for $1000 to a customer, who decided to recoup his costs by selling it to 15 customers that he knows for $100. The guy who sold him that cannot stop him from such an act. The only thing that they can be prevented from doing is distributing the binaries w/o the source - that is what violates the letter & the spirit of the GPL.
The above statement that people are encouraged to sell GPL software is used by the FSF to try and demonstrate that they are not anti-business. While on the surface, that is true, the above example clearly proves that if the objective is to sell software, the GPL is a bad model to use, since it prevents downstream distributors from putting any distribution restrictions on their customers, thereby allowing such customers to become competitors and stealing what could be their marketshare. All that said however, there is nothing that the GPL does to discourage people from selling their software, as long as the requirement that source always accompanies binaries is adhered to. (Somewhat ironically, GPL does not require the converse - if you distribute just the source code of a program w/o compiling it, it still qualifies as free under the FSF definitions).
Actually, the best way to sell GPLed software would be like Amway/Quixtar multi-level marketing schemes ;-) Just sell it once, and help your 'down-line' sell it to others. Wonder what RMS would think of it ;-)