|
|
Subscribe / Log in / New account

Weakened license protection

Weakened license protection

Posted Mar 21, 2025 22:39 UTC (Fri) by ndiddy (subscriber, #167868)
In reply to: Weakened license protection by tchernobog
Parent article: Oxidizing Ubuntu: adopting Rust utilities by default

> I kinda doubt a company will take these utils, close source them, and resell them without redistributing sources. It would bring only marginal benefit.

There was a podcast interview here: https://youtu.be/5qTyyMyU2hQ?t=1270 with the lead uutils maintainer where he brought up that some car manufacturers had already started using uutils in their products instead of the GNU core utils because it means they don't have to comply with the GPL. From a corporate standpoint, when you have one set of tools where you have to comply with the GPL, and then a drop-in replacement for them where you don't, of course you'll use the tools that don't require GPL compliance.


to post comments

Weakened license protection

Posted Mar 22, 2025 9:18 UTC (Sat) by Wol (subscriber, #4433) [Link]

> > I kinda doubt a company will take these utils, close source them, and resell them without redistributing sources. It would bring only marginal benefit.

What it DOES bring them is a big reduction in pain. If I can ship a product, based on a publicly available tree, without all the hassle of tracking, responding to requests, etc etc, then that's a big attraction.

And regardless of whether you're an engineer, a programmer, an analyst, people at the sharp end like to collaborate. It's bean counters who all too often don't see the benefit of collaboration, but they do see the cost of getting sued.

What we need is a GPL-lite, that contains all the downstream protections, and rather than saying "you have to share the source" replaces it with "you must develop in public, and tell your customers where to find it". Basically, it has to be publicly readable, 3rd-party hosted, and advertised to upstream and downstream alike.

At the end of the day, engineers want to share, but they don't want all the GPL Administrative Hassle that comes with the GPL. All bean counters can see is the cost. The GPL is making the wrong person pay! There's a good chance I will push my changes upstream because I can see the benefit. If I don't, upstream may (or may not) mine my respository because they see a benefit. And any customer who wants the source may have a bit of grief working out exactly which source they've got, but they have got it (and if I can't tell them, that may well be a cost to me). (Programming in Excel it's costing me dear at the moment!)

Cheers.
Wol

Weakened license protection

Posted Mar 23, 2025 1:48 UTC (Sun) by himi (subscriber, #340) [Link] (1 responses)

That doesn't make much sense, though - the GPL in this case applies specifically to the coreutils code and derivatives, not to any higher level aggregation. Unless the car manufacturers are modifying the code, the only requirement for GPL compliance is documenting that they got it from upstream; given the MIT license requires copyright attribution to persist, the practical difference is zero - a little bit of text listing copyright attributions and pointing at the upstream source, or a little bit of text that only lists copyright attributions.

Unless they're actually modifying the code, of course. Which . . . well, for coreutils? I'd have to assume that's just going to be compilation support for whatever platform they're using, in which case it'd make far more sense to submit patches upstream than to maintain their own fork in-house, and the same logic would apply whether they're using GNU coreutils or uutils.

It sounds like either the companies in question don't actually understand the way the GPL works (which shouldn't be an issue if they have competent lawyers), or they're pulling an Apple and avoiding any GPLed code on ideological grounds.

Weakened license protection

Posted Mar 23, 2025 7:09 UTC (Sun) by Wol (subscriber, #4433) [Link]

> Unless the car manufacturers are modifying the code, the only requirement for GPL compliance is documenting that they got it from upstream;

"6. Conveying Non-Source Forms.

You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways:

a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange."

Have you read the GPL? Have you understood it? I haven't quoted the entirety of section 6, but if you are a business there is a hell of a lot more than just "documenting you got it from upstream". You - CORPORATELY - are on the hook for making sure your customer can get the source. And that is expensive administrative hassle companies would much rather avoid.

There are "sort of" getouts, 6c, and 6e, but they're not aimed at corporates, and they still come with grief companies don't want. I've only just noticed 6e, but unless the company controls that location, they're probably not complying with it, and if they do control it it's more hassle that again they don't want.

Cheers,
Wol


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds