The GPLv2 Goes To Court
Jason Baker writes Despite its importance, the GPLv2 has been the subject of very few court decisions, and virtually all of the most important terms of the GPLv2 have not been interpreted by courts. This lack of court decisions is about to change due to the five interrelated cases arising from a dispute between Versata Software, Inc. and Ameriprise Financial, Inc.. These cases are dealing with four important terms in the GPLv2: 1) What are the remedies for breach of the terms of the GPLv2? 2) What is a "distribution" under the GPLv2 that triggers the obligations under the GPLv2? 3) Does the GPLv2 include a patent license? 4) What type of integration between proprietary code and GPLv2 licensed code will result in creating a "derivative work" and subject such proprietary code to the terms of the GPLv2?
This would have been the perfect story to get covered there....
...he may be the originator of the license, but he'll probably not come across well when talking. Think of Cumberbatch's portrayal of Sherlock Holmes in The Reichnbach Fall as an example. Does more harm than good.
Do not look into laser with remaining eye.
...4) What type of integration between proprietary code and GPLv2 licensed code will result in creating a "derivative work" and subject such proprietary code to the terms of the GPLv2?
It upsets me that this question will be answered by those who [probably] know nothing about software and code. Why won't they ask those who created this GPL? Wouldn't they surely know better?
Versata is essentially a "vulture" company that buys software companies that are down to life-support levels to extract the last bits of value (continuing support contracts, etc.). If you ever see them knocking on your door, find another job ASAP because your company (and your job) is a gonner. Interestingly, one thing that companies do as part of the due diligence when acquiring other companies is determine if there is any open source in the products in order to identify potential liabilities. Btw, companies looking for a buyout often go through a phase to clear out potential open source infringements, so that's a sign if it wasn't clearly spelt out..
I'm guessing that in this case Infosys, a contractor for Ameriprise, probably got paid to develop some software and made it in the form of a library to be used in other contracts. Having outsourced to India before, I was pretty sure that was going on (that and liberal use of open source). After all, rapid development doesn't happen magically.
I wonder if it is possible to create a communication language that has the reproducibility and stability of a programming language. There is hardly even any point in writing out legal rights or documents when everytime it is read it can be interpreted differently. It seems that the law has taken the stance that, since reinterpreting it every time is a hassle and inconsistent, we will just use the interpretation of whoever read it first. But since we have no accurate way of storing legal ideas, how do you interpret the interpretation accurately?
Troll is not a replacement for I disagree.
No, no, no. What they should have done is submitted it to Slashdot and read the posts to find out what the GPL means and what they should do.
From the Article:
"3. Does the GPLv2 include a patent license?"
No. And THAT is why we have the GPLv3, to head off patent problems (among other things)
I take it you've never seen people arguing about what exactly the C standard means about how "volatile" should behave, or whether the defined memory model is sufficient to reason formally about visibility of variables given specific types of assembly operations, or what optimizations a compiler can legally make (as opposed to what optimizations it would actually make *sense* for it to make).
Even a reasonably-well-defined language like C can still end up in the weeds once you start looking at edge cases...
...which has only laws important for ... USA. software patents are not legal in most parts of the world. so, why should I careas world citizen?
Yes it is possible.
An ad-hoc attempt would be the 'legalese" that legal documents are written in today (they use conventions and abstraction layers built on top of English and borrowing from latin to make the language more precise and less ambiguous). A created language designed for the purpose would also be possible and would likely be more practical in some respects.
However, much like a malicious compiler can make it so your safe code compiles into unsafe executables, a compromised legal system can take any written law/contract and interperet it to mean something other than what was written. There's also the potential for bugs in any nontrivially complex implementation where the document you produces doesn't say what you wanted it to say.
The "FreeBSD / Simplified BSD License" short and sweet:
Copyright (c) ,
All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
1. Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
--
Filter error: Don't use so many caps. It's like YELLING.
Come on Slashdot, get a clue.
Filter error: Don't use so many caps. It's like YELLING.
software patents are not legal in most parts of the world. so, why should I careas world citizen?
Because if the U.S. legislature and courts make software engineering impractical, your country will end up with a lot of skilled U.S. citizens applying for work visas.
'world citizen' presumably means somewhere subject to nuclear and other hard and soft power of the US government.
And the reason is the same as ever: upstream and downstream don't mix. If someone does not want to grant you some rights under the GPLv2, you don't get to sue as downstream. Only upstream gets to sue, and the result of that is that midstream is stripped of the right to distribute downstream at all.
"GPL cases" are never really about the GPL, they are just about the limits of copyright law. And that's exactly because the GPL does not try to impose any additional restrictions over those of copyright law, but merely conditionally relinquishes some of those restrictions.
So all you can sue over is copyright law.
If you were going to ask a "someone" how they meant to define "derived work", you would ask Congress, not the author(s) of one out of a million contracts which happen to make use of that term.
You're right that it's upsetting that (mostly) people who don't really work with copyright would end up answering it, but that's the nature of law, or at least until you start electing[/appointing/etc] authors. (Cynic: or until those people start funding election campaigns.)
It's only after you have determined that something is a derived work, that you go study licenses. Until that point, licenses are irrelevant.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
This one is easy - if there's a breach then the license is void and Copyright is the effective law. Code was copied without permission, which becomes a copyright violation, and remedies are already established for that.
GPL is entirely based on the teeth of copyright - almost every OSI license is. If you hate imaginary property then you might question your use of licenses that depend on it.
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
The answers are mostly spelled out in the GPL itself.
1) Breach of terms means no license to distribute, thus breach of copyright and all the civil and statutory penalities thereof.
2) Distribution is giving/selling copies to 3rd parties, which is copyright violation absent a license.
3) No, that's why we have GPL 3.
4) Is also spelled out in the license. About the only kind of "integration" not covered is if two unrelated programs, one GPL'd and one not, happend to be included on the same disc (or other distribution medium).
If it comes down to pocket depth, companies like RedHat have a lot more money at stake then either of these bozos. If this goes on long enough, I expect some of the big GPL-based software companies like them to get involved in the appropriate side of this ...
What GPL based companies? IBM, RedHat, etc don't care about the GPL. All they care about is working software with a community behind it. What license it uses is largely irrelevant.
GPL software doesn't become "unlocked" into the public domain if the license is ruled invalid. Instead the copyright of the source code itself becomes a giant mess of individual author rights, which is useful to almost no one.
No. Its not all or nothing, rather pieces of the GPL may get struck down. For example what a court defines to be a derivative binary work may be quite different than what GPL advocates say a derivative binary work is. The rest of the GPL, in particular those portions dealing with source code contributions and redistribution, may remain intact.
I'd note that the 3 points at the end of the article aren't unique to open-source software but apply to all third-party software you use in building your software. And those points are harder to address for proprietary third-party software than for open-source, because any software component may contain other components you aren't directly aware of and without the source code it's a lot harder to scan proprietary libraries to detect those included components (and it may be impossible if the included components are themselves proprietary because the people who wrote the scanner may not even know those components exist let alone have access to their code to create the necessary detection routines). Or they may be easier to address, if your license for the proprietary libraries doesn't include a right to redistribute then the answers become very simple if rather limiting and any less-restrictive licenses for other components become irrelevant.
I can hardly wait for this to go to court - it may resemble the old story:
Wife tells her software engineer husband "On the way home, buy a carton of milk, and if they have eggs, get 6!" Later the husband arrives with 6 cartons of milk. The wife asks him, "Why the hell did you buy 6 cartons of milk?" His reply, "They had eggs."
First, it has the implied patent licence that gets created when you give someone something.
Here's the case law for the USA:
http://en.swpat.org/wiki/Impli...
Second, GPLv2 has explicit statements about giving the recipient permission to use, modify, redistribute etc. It doesn't give "copyright permission", it gives "permission", so the distributor has given permission to use, modify, etc. It would be hard for a judge to conclude that the distributor reserved the right to later claim it was illegal to use, modify, etc.
Here are the relevant sections:
http://en.swpat.org/wiki/GPLv2...
(The case law for the implicit patent licence uses the term "sell" rather than "give", because the cases in question were about a sale. Now, yes, there's the possibility that a judge could make this distinction, but my second point about the explicit wording in GPLv2 makes this very unlikely to be a problem.)
Help build the anti-software-patent wiki
Look at any of the big court decisions, and you will see that they do not favor the "little man" in any way. Eminent Domain, Citizens United, Amazon case, etc. all go in favor of BIG business. The average citizen will no longer see justice in the U.S.
Is fruit salad a derivative work of an apple? I believe that the creators of GPLv2 would say yes, but I don't think it is unreasonable to disagree. A lot hinges on the definition of 'derivative'.
Does that mean your contributed work is recalled from distribution and you get your distribution rights back? It goes both ways, and I just don't see how the GPL will be able to undo an Internet distribution.
In my view the decisions should be:
1) What are the remedies for breach of the terms of the GPLv2?
Answer: Either the offender is to cease distributing the offending software (binary or otherwise) AND the code in question is to be completely and entirely removed from the offending product, or some other solution at the discretion of the Free Software Foundation (including but not limited to the offender entirely ceasing to distribute the offending software.
2) What is a "distribution" under the GPLv2 that triggers the obligations under the GPLv2?
Answer: Any transmission of the software in binary or object code, or any other format where the availability of the software (binary or object code) passes into the control of a person other than the owner of the software.
3) Does the GPLv2 include a patent license?
Answer: No. Software is mathematics and therefore is not patentable.
4) What type of integration between proprietary code and GPLv2 licensed code will result in creating a "derivative work" and subject such proprietary code to the terms of the GPLv2?
Answer: All integration in any way other than an API call to a fully separate self-contained program should result in the integrated code being covered by the GPLv2 license.
Isn't there a separate license for covering situations where people might want to distribute GPL and non-GPL software as a part of a package?