Now I get Black Duck

Now I get Black Duck

dmarti writes, "...if you hire someone to develop a
proprietary product, how do you know that the person you
hire doesn't just download some reciprocally-licensed
software and change the variable names and comments?"

Which might be legitimately extended, "If you hire someone
to develop any product whatsoever, how do you know that the
person you hire doesn't incorporate source code he [brought
from a previous job] and change the variable names and
comments?" [Substitute any illegal act.]

The risk of dishonesty is real. GPL make make it EASIER
to detect, but "how do you know?" It's a tough question,
but it's a question about people, not the GPL.

Which nevertheless provides a starting point for FUDmongers.