How Far Should GPL Enforcement Go?
itwbennett writes "The debate over enforcement of the GPL flared up again this week when Red Hat kernel developer Matthew Garrett wrote in a blog post that Sony is looking to rewrite BusyBox to sidestep the GPL. Which is a perfectly legal undertaking. But it raises the question: 'Is there social pressure within the Linux kernel community to not undertake GPL compliance action?' writes blogger Brian Proffitt. 'This may not be nefarious: maybe people just would rather not bother with enforcing compliance. Better, they may argue, to just let the violation go and get on with developing better code.'"
I think GPL enforcement sould go just as far as everyone else. It should go as far as copyright law allows and as far as the copyright lobby goes.
C|N>K
Slashdot on piracy: "Abolish all copyrights! Copying isn't theft! Everyone is entitled to everything!"
Slashdot on the GPL: "Gee whiz, the GPL copyright license protects this code. Down with leeching violators! Protect against GPL theft!"
It seems to me as though this is less about BusyBox per se, and more about enabling companies to steal code from other GPL'd projects without having to worry about the threat of the BusyBox folks calling them out on their wrongdoing.
Forgive me if I can't think of any word other than "scum" at the moment.
I second this.
"Hi there. Nice GPL copyright-backed code you got there, that you're violating the license on. It would be a shame if you had to pay $375,000 per Copyrighted Work, aka each file in the 50,000 file package. The Choice Is Yours."
Come on guys, if they're going to abuse copyright law, abuse it back, preferably with a big gun case that sets precedent. "No, you don't get to "withdraw your case. You get to pay me X BILLION dollars! Or - your choice - you can go fix it in Congress so that copyright damages are back down to $20 per work, like it should be."
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
Is that really considered a derivative work just because they can see the source? Genuinely curious here.
It can be. That is why cloning a library under an incompatible license typically requires an expensive "clean room" engineering process. Of course, Sony holding to their well known high moral and ethical standards, would never think of playing fast and loose with this, would they? And of course we would never notice if they cut a few corners to save cost, would we?
Have you got your LWN subscription yet?
If Sony is planning to do a clean-room re-engineering of Busybox -- what's wrong with that? Isn't that essentially what Linux kernel developers have done for all kinds of devices? Again, how is that "violating licenses with impunity"?
I'm with you.
If they really wanted to be fancy about it, they could do the same thing the BIOS cloners did -- have some people write up documentation on what Busybox does, and other people write the clone. But really, the first part is easy -- just decide which commands must be implemented and which flags, and let somebody write it. For bonus points, all people involved certify that they've never looked at the source of Busybox, or perhaps never explicitly used it at all.
If they do this (and it sounds like it's their plan) ... I don't see where there's any room to enforce the GPL at all, not with regard to this Busybox clone anyways. All they could do is try to be even more picky about other packages, perhaps trying to step up enforcement of Busybox usage (not a clone, not yet) now.
While I hate rooting for the bad guy, I think Sony has the right idea. (Though I'm sort of surprised that more embedded device makers haven't gone with one of the BSDs rather than Linux simply to avoid the GPL.)
The implication is clearly that we (as a community) shouldn't discourage people from using OSS code, or they'd start rewriting it to "get around" it.
That's the entire argument for the GPL. Basically, if some simple conditions aren't met, you don't get to take advantage of all the work that's been put into it. The idea being that you'd rather they not use your code at all if they're going to be dicks about it.
Sony, for reasons I don't quite understand but are entirely up to them, seems unhappy about putting the publicly-available-and-not-competitively-relevant source code on their website. More power to them, but the tradeoff is spending a bunch of time rewriting software that already exists and works fine. More power to them.
When I license my code under the GPL, I realize that the odds of its reuse are somewhat smaller. But that's fine, since I'd rather that somebody saving time by building off my work makes their source available (to me, and everybody else). If they don't want to do that, I don't want to save them the trouble of having to write it themselves.
The more interesting story here is that Sony's got it in its head that it'll be cheaper to rewrite Busybox than continue to have links to it. Not sure how they figured it.
I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
Self defense by doing exactly what you criticize is moronic. It's the we need nukes because they have them mentality.
What's wrong with that mentality? MAD works and is, in fact, the only thing that does.
They'll use the Linux kernel because the Linux kernel community doesn't bother with GPL enforcement.
The big difference is that their custom code that they would want to keep private would most likely be linked into Busybox and not the Linux kernel. This means that they might be quite happy to give out the source code to a mostly unmodified Linux (thus complying with GPL) while still keeping all their secrets by not having to disclose their modifications to busybox.
Making claims that writing their own replacement for busybox means that they will violate the GPL in other ways is the same kind of FUD as when Sony says that jailbreaking a device means you are a pirate, or when Microsoft says that GPL is a cancer. It would be the same as if Microsoft tried to claim that people using Wine did so to pirate Windows software.
The more childish response to anybody complaining about using GPL software in a commercial environment is "if you don't like it, write your own software". Well, that is exactly what Sony want to do. What amazes me is how long it took for anyone to do this. By making a non-GPL version, companies have a choice when creating new products. Now all they need is for someone to develop an alternative to Linux and release it under the BSD license. Now if only we could think of a name for such a project...
If Sony is really trying to "rewrite Busybox" -- which makes it sound like they're going to look at the Busybox code and write a new version that does the same thing in a different way -- then surely that's a derivative work of Busybox and it's a copyright violation.
No. Being "inspired" by other code is not copyright violation. Clean room implementations are about making your intentions clear and removing doubt.
Two programmers may well write similar code because they share similar views or education and copyright violations can be hard to decide upon in court. If you're writing a replacement for something else it becomes particularly important to remove doubt and avoid unnecessary litigation.
I was thought the GPL was supposed to prevent businesses from exploiting the hard work of volunteers trying to make open software. If a business wants to reimplement a whole piece of software from scratch, I see no reason why we should stop them. Nor the reverse. If the community wants to reimplement software so that there is a open version out there, I don't think businesses should be allowed to interfere. Now, if a business wants to take the GPL'ed software, reimplement part of it and then close the whole thing, now there is an issue.
It really gets absurd in the cases where you have 100,000 lines of code that's your own but including 2 lines of GPL code means you have to give away your code as it's a derivative work.
Why do people always blame the GPL for this, not copyright law? Is it equally absurd that including any proprietary stuff that you don't have a license for means that you have to stop using that proprietary code or buy a license? Same with the GPL code: stop using it or buy a license (i.e. by giving away your code).
SJW n. One who posts facts.
Because the FSF doesn't put in exceptions for this, they're perfectly happy with this sort of status quo.
Why should they? If the two lines are so important that you can't write them yourself, then your product is a derivative work and you should pay for the license. If they're not that important then rewrite them.
They probably know how absurd it is that only 2 lines can screw up someone else's code but they'll live with it happily.
I've only ever heard this claim made in internet commentary.
SJW n. One who posts facts.
This is pretty much pure FUD.
If they "accidentally" violate a commercial license then they could be on the hook for millions of dollars. With the GPL the choice is generally to distribute the source or stop distributing. Hell, even with the recent "aggressive" enforcement, the only really onerous bit is paying $5k per time to have future FOSS projects vetted. Compared to settling a lawsuit with a commercial vendor, it's peanuts.
If they're transcribing source code then they've absolutely within the bounds of derivative work and will fall foul of copyright law.
It's less onerous that many commercial licenses. The problem comes from the lax attitude towards it. If people further down your supply chain were including commercial code or libraries without the proper license compliance then things would be worse.
> It really gets absurd in the cases where you have 100,000 lines of code that's your own but including 2 lines of GPL code means you have to give away your code as it's a derivative work.
It is really absurd when you want to take code somebody else has written with the intent to make it freely redistributable, and want to change its licence to make it not freely redistributable with the intent to be able to sue users who dare to redistribute what was once free code when you took it.
Works under the GPL are not intended to become everybody's free code library. They are specifically intended as an enrichment only for "is free, stays free" code. There is a philosophy of freedom attached to it. If you do not share this philosophy of freedom, the code is not available for you.