Interviews: Ask Free Software Legal Giant Eben Moglen
At this summer's HOPE, Eben Moglen was one of the most incisive and entertaining speakers. But since only a small fraction of the Earth's population can fit into an aging hotel meeting room, you can watch his HOPE presentation via Archive.org on making the first law of robotics apply to cell phones. Besides being a professor at Columbia Law, former clerk in U.S. federal court as well as to Supreme Court Justice Thurgood Marshall, and a prolific writer, Moglen is founding director of the Software Freedom Law Center as well as the creator of the FreedomBox Foundation, and was for many years general counsel of the Free Software Foundation. Moglen has strong opinions, and a lot to say, about software licensing and freedom, copyright, patents, and (as you can see from the video linked above) about the privacy implications of always-on, always-on-us technology. Next week, I'll be meeting up with Moglen for a short interview. If you have a question for Eben, please post it below; I can't guarantee how many reader questions I'll have a chance to ask him, but the more, the merrier.
How do you feal about app stores? with there lock in and censorship issues?
Also do you think that it may end in court some day?
I thought I'd take a law degree. I was doing well, but I quit after a year.
To put it bluntly, the US system of law is bullshit. A lawyer's job is not to make a purposive argument, as in Europe, but to get his client off on a technicality of wording. In criminal law, the impartiality of the jury is corrupted by a non-random final selection process. Regardless, law is as far as possible from something the common man is able to understand and defend himself with - though that is surely the purpose of rule of law over rule of man.
In short, by studying the law I was giving myself an advantage which every citizen should already have.
Hasn't the law just become a lawyer's game, today?
with some laws as well as contracts you need to be a lawyer just to understand the legal part. Now will be are push to make that part easier to under stand just look at eula's where even if you read it all you still need to a be a lawyer to understand what you are singing.
It is often asserted (ie by the FSF) that exposed C/C++/Python APIs for GPL software can't be used by non GPLed code unless a specific exception has been added to the license.
However, a non GPLed binary compatible API could be done that the plugin, etc. can be compiled against. Given that it seems like the GPL could not be enforced against driver compiled against a binary compatible API. Ie Alan Coxes recent assertion that Nvidia wasn't allowed to use a certain internal feature of the kernel should be readily made technically irrelevant, since Nvidia could create a stub binary compatible equivalent to the API to compile against, and then the user can install the driver and use it with the GPLed kernel without violating the GPL.
Is there a flaw in this reasoning or do programmers have a way to readily use GPLed APIs as closed source without violating the GPL?
On a similar topic; what about when the code bypasses the API altogether, and writes code changes directly to memory? Things such as kernel hot patches come to mind, and more specifically, ksplice. A modification to the code on a GPLv2 program is made, but no linking or APIs are used. How bound by the GPL, if at all, would this program be?
If you were to stand next to Software Titan Bill Gates, would you both seem normal-sized?
systemd is Roko's Basilisk.
Why would it end up in court? What law does an app store violate? And, no, the "Apple has a monopoly on iDevices" is not a valid argument.
I am writing a video game by myself. I don't have money to pay a lawyer for a EULA. Can I copy/paste a game similar to mine's EULA, and make modifications by hand? Is it better to have a bad and hacky EULA than no EULA at all?
God spoke to me
Can I copy/paste a game similar to mine's EULA, and make modifications by hand?
Lawyers already do that. So, why not? :)
Eben — we spoke about FreedomBox at the FSFE conference in Amsterdam a couple of years back now. It sounded then, just as it does not, an interesting project. I've kept an eye on it over the last couple of years, and am pleased to see it's got to a developer release; I've ordered a plug server to be able to test it out. I'm keen to understand how you plan on turning it from a niche project for geeks into something in the mass market. I know you are working on making the GUI user-friendly, so it is suitable for consumers, but do you have any thoughts on how you would get this in the hands of those consumers?
We all remember MS's Halloween documents. However, the battle for F/OSS is going to shift from dealing with patents, to dealing with closed hardware, platform lockdowns, and anti-F/OSS EULAs.
With hardware being secured, it is likely places will be able to use GPL code without having to adhere to the license, because people won't be able to find out, and if they do, they did it running afoul of the DMCA or other treaties which would render any civil judgement moot.
Is there a way to slow down the "Tivo-ization" of computing as a whole these days, especially the encroachment of locking down the desktop with stores, Secure UEFI boot, and requirements that all ARM based machines only allow MS software to work?
I'm asking a Legal Giant about the laws not you!
Your also asking a question with a flawed premise.
Why did you think it is a good idea to keep the technical definitions within the gpl vague?
... only a small fraction of the Earth's population can fit into an aging hotel meeting room, ...
If only they had chosen a newer hotel... Of course, having the entire Earth's population all in one place also has its problems.
It must have been something you assimilated. . . .
The GPL FAQ states
Linking (a library released under the GPL) statically or dynamically with other modules is making a combined work based on (the GPL'd library). Thus, the terms and conditions of the GNU General Public License cover the whole combination.
If the link is dynamic, the person making the link (the end user) is not distributing the combined work, nor is the distributor of the client program if he does not also distribute the library. By what legal theory does distribution of the client program by itself infringe the GPL'd library's copyright?
Dear Mr Moglen, I am developing proprietary software which will eventually become an "appliance" of sorts, and will need a kernel to run on. However, this software will also require proprietary NIC drivers, extensions to the kernel's TCP/IP stack, and overall, will add many functions which need to run in kernel-space and be accessible by user-space programs. The Linux kernel's somewhat recent move toward "GPL-only symbols" presents a problem for people like myself, who are suddenly no longer sure Linux is an appropriate kernel that can serve their needs in the future. It also muddies the waters such that a company can no longer be ensured that code which can load as a module is free from becoming encumbered by the GPL. I may be required to choose a different kernel than Linux for my "appliance" because of this uncertainty. I will certainly need to plan for supporting more than one underlying kernel, for example, the ability to run atop (and load into) both Linux and FreeBSD. Can one expect their product to be labeled a "derived work" if it functions entirely as a loadable module and does not make use of GPL-only symbols? The answer from some in the Linux community is still yes. Does this change if the work is also compatible with a different kernel, and thus is a marketable product offering the user a choice of kernels, or perhaps, simply defending the business from becoming "locked in" to a kernel with a foggy future for proprietary software? Should all makers of "appliances" who need loadable modules to interface with proprietary hardware now see the Linux kernel as a dead-end platform? We may find ourselves having to contribute code to FreeBSD to bring some of its VM capabilities up-to-speed with Linux, which would benefit the free software community. However, we are not sure we can open-source and GPL-license the in-kernel code we need to make our proprietary hardware and "appliance" work -- it's part of the secret sauce. This is why Linux is an uncertain option.
Is copyright infringement theft?
I'm interested in both a moral/ethical answer and in a legal answer (bonus points for an answer in "international law" since I'm not American).
let the courts be the judge of that
/.s Mental Midgets asking questions to a Legal Giant? Very picturesque.
I'm failing to see the problem with App Stores versus regular stores. The problem isn't with stores but the walled garden created by locking down devices and forcing people into that store.
Have you asked Armchair lawyer and genius Alan Cox for his scholarly advise recently?
Even Eben/Moglen, or as I have recently taken to calling him, Eben plus Moglen needs scholarly advise.
Walled gardens are perfectly acceptable and legal. That Slashtards dislike them does not make them illegal. You think the EU wouldn't gave done something by now?
I've recently been championing an interpretation of Network Neutrality which assumes that all ISP customers (of all service tiers) have the right to host and run servers from their connections (presuming IPv6 environment, ignoring IPv4 address scarcity case). I apparently even got Dave Schroeder, someone who publicly identifies themselves in slashdot comments as a Navy Information Warfare Officer to give high praise[1] to a draft of my manifesto[2], which, with his help (getting an email address) has led it to the inbox of one Mr. Vint Cerf who is now reading it and investigating further (unless someone impersonated him via insecure email). Anyway, I think from my manifesto it is clear that I likely share some visions with the FreedomBox project, which I suspect is just as effectively dependent on a 'Right To Serve' landscape/net-ground-rules as I am rallying for.
[1]
http://news.slashdot.org/comments.pl?sid=3156485&cid=41516877
http://news.slashdot.org/comments.pl?sid=3156485&cid=41530745
[2]
http://cloudsession.com/dawg/downloads/misc/kag-draft-2k121007.pdf
http://cloudsession.com/dawg/downloads/misc/kag-draft-2k121007.txt
http://cloudsession.com/dawg/downloads/misc/kag-draft-2k121001.pdf
I'm asking a Legal Giant about the laws not you !
Why are you here?
Having worked with Thurgood Marshall and teaching at an Ivy League Law School you witness and can contribute to many causes I'm sure you find more than worthy of your attention. I'm sure people in many areas would love the benefit of your skills, knowledge, etc. Yet your long-term dedication to software freedom (not sure if that term encompasses everything you work on, but I hope it suffices) seems focused. I bet many of us are curious where your motivation and focus comes from, especially those looking to find areas and causes to contribute to. I'm sure your inner-geek plays a big role, loving what we do like all of us do.
My main question: How do you describe the importance of software freedom, both to Slashdot readers and to those who would never read Slashdot, in the context of so many other causes out there?
Personally, I contribute to software freedom partly because the geeky aspects appeal to me, but also because I consider it one of the most important issues of our time. I've never tried to justify how important I consider it to others, but I bet people would challenge me if I did. I suspect you've found ways to express these things. I think most non-geeks consider software licenses unimportant, whereas I think of them on the forefront of protecting the First Amendment in the U.S. and values of freedom of expression worldwide.
A related question: What other areas or causes do you consider comparably important, if any?
Mod parent up, seems like an important question. The internet is turning into oligarchy instead of its former peer to peer nature. These choke points make censorship and surveillance easier. How long before email can only be sent from gmail to gmail?
I'm very unconvinced that "Joe_Dragon" is not a legal giant, prophet, or Eben Moglen answering questions early.
Mod parent up, seems like an important question. The internet is turning into oligarchy instead of its former peer to peer nature. These choke points make censorship and surveillance easier. How long before email can only be sent from gmail to gmail?
At the risk of losing my excellent slashdot karma for the first time in my life, I'll shamelessly continue my network flooding to get this issue into the public debate. Especially since I remembered after posting the question last night that I had already brought the issue to the attention of join@freedomboxfoundationorwhatever.org over a month ago. Unless my words are being censored by Navy Information Warfare Officers, I'm still boggled by how off the radar this topic is. Part of me hopes Mr. Cerf answers me by the one week(and a bit) deadline I gave him/Google. But given no response yet, I'm now leaning towards the theory that Google's lawyers have taken over (which given my aggressive language throughout, is understandable. Though I would hope Mr. Cerf, if anyone on the planet, could rise above the lawyer level. In several ways, I've already sacrificed any personal legal case I have, and put myself on the mercy of the system, and hopefully the validity or not of my logical and moral arguments).
The ZFS filesystem is a robust, modern filesystem originially developed on Sun Solaris that contains many advanced features and is being used (among other things) on the largest computer in the world, LLNL Sequoia, which is running Linux.
ZFS is licensed under the Sun CDDL, which is an OSS-approved license. As ZFS was originally developed for Solaris, it is not a derived work of Linux or other GPL software. There is little hope of getting the ZFS copyright owner (Oracle) to relicense it under GPL. Since open source software is intended to increase users' freedom instead of restrict it, there is still a broader community of users would like to make ZFS on Linux available to the masses as part of easily-used Linux distributions.
It seems relatively clear that combining ZFS and Linux source code and compiling it on your own is permissible under the GPL if one does not redistribute the combined work, but there is uncertainty about whether it is legally safe to distribute ZFS and the Linux kernel together in either source or binary form.
Unlike issues with binary kernel modules that have proprietary licenses and/or are closed source, in this case the ZFS code is open source and has none of the objections that traditionally surround binary kernel modules, and it is in fact the GPL license that prevents distributing two open source components together if they do not both use the GPL license.
Under some interpretation of the GPL, ZFS is an independent work and can function on its own without the Linux kernel (there is a userspace component that can be used to run regression tests on the code independent of any kernel), but the Linux-compiled ZFS kernel module itself is not useful to users without the kernel.
Would you consider distributing ZFS binary Linux kernel modules (together or separately from the kernel) a violation of the GPL? Would the binary ZFS kernel module be considered "not based" on the Linux kernel per the GPLv2 section 2, the last paragraph that allows "mere aggregation" of another work packaged independently on the same media or download site? Would it be permissible if the ZFS code were distributed as a source package together with the binary kernel and compiled on the end-user system at installation time? Failing that, would the FSF be willing to make a special exemption to the GPL to allow ZFS to be bundled with Linux?
Moglen gave a brilliant 20 minutes interview at the Re:pulica 2012 in Berlin: https://www.youtube.com/watch?v=HJCczbSF-B8