Garrett: The ongoing fight against GPL enforcement

In other words, what Rob really wants is to use the BSD-no-advert-clause licence.

That seems like an irrational fear, I can't imagine the copyright owner getting an injunction against or even pursuing code that you can trivially show the provenance and licensing for. The issue is that, for an organization that is ignorantly shipping code in violation of copyright, the problem is likely not just one software on one product but probably all software on all products and instituting comprehensive license compliance is the simple and efficient option.

Would it be any different if the problem was, for example, the copying of images off of websites for product art rather than properly licensing images from iStockphoto. Just because you can download something off the Internet doesn't mean you can ignore copyright, which is a common misconception for many businesses.

> What comeback does the victim have?

Aside from the silly tactic of characterizing the company as being a victim I would say the comeback for a bogus infringement suit would be to take it to court and smack the crap out them for wasting everyones time. If the SFC tried this they would probably go out of business instantly.

Actually, yes. That's what has the smartphone market in such chaos ATM. The penalty is banning the product from being sold in whatever market where the laws were violated.

And in that regard, yes, the FLOSS world tend to be softies when it comes to license violations. I'm glad a few folks are standing up for their rights.

Meanwhile, a couple other points made well by others are worth repeating:

1) Whose copyright would /you/ choose to be found guilty of infringing, if it came to the choice, Sony's or SFC's? Sony doesn't exactly have a reputation of being soft on copyright infringement when it's there's, so why are folks trying to get them some slack for infringing that of others? (And the separate subsidiaries argument doesn't cut it either; if they wanted to be identified separately they'd not be using the same Sony brand name. Obviously they want the reputation that goes with the name, so they got it! Sony, the rootkit people! Sony, the people who sell a product with a set of services, then rip one of them away, after purchase! Sony, the folks known for making the lives of various customers a living hell, due to copyright infringement suits. THAT Sony!)

2) Never-the-less, if someone wants to create a BSD styled Busybox replacement to be free of the GPL obligations or for fun or for any other reason, as long as it's not using the same code, great! Let them do it! But, others in the community can note it and ask people with rights interest in other projects to step upto the plate, which is exactly what's happening. And if those people decide to or not, well, they're the ones with the copyright interest in the other projects, it's their decision to make.

So IOW, everything seems to be moving along pretty much as one might expect. An obstacle to the proprietary interests of some company becomes too much a thorn in the flesh for them and they move to avoid it. Normal and expected. Someone else doesn't like the way enforcement on a project they were involved in went and decides to create a new one with a licence that avoids the problem as they see it. Normal and expected. (Actually, that applies both to Landley and toybox, and the FSF and GPLv3.) This new project happens to fill the need created by that proprietary interests company looking for another alternative. What's unexpected about that? Other people in the community calling attention to all this and asking people who hadn't yet stepped up to the plate enforcement-wise with their copyright interest in other projects to do so. Well, that would be normal and expected as well.

What remains to be seen is if some of these other people /do/ decide to step up to that plate. If they weren't doing so before, perhaps they still won't, and violations will get more egregious. OTOH, perhaps it was just easier to let someone else take the heat, and now that they're not as effective any more, various other people with interests will fill the need.

Either way, it's their decision. And if they do enforce, then we'll see the cycle start again. And if they don't, well, perhaps at some point almost everything will be Tivoized and there won't be enough open products at a low enough cost to continue development, at which point the tragedy of the commons will prevail and all those proprietary companies will end up paying more for proprietary solutions. After all, they wouldn't have been using the FLOSS solutions if the FLOSS solutions weren't a good cost/benefit to them, so if they cause them to disappear thru locking everything up, they'll only have themselves to blame when their own costs go thru the roof due to FLOSS dying out because everything /is/ locked up.

But in practice, there does seem to be a dynamic balance that has seemed to tilt toward FLOSS. There's always the danger of reversals in various areas, but they haven't stopped the FLOSS train yet, and with vigilance, I don't believe they'll stop it now. IOW, I expect others to step up, now that they're needed, and continue the fight.

Duncan

Of course they do, Company A infringes on the copyright regardless of the license deal they have with Company B. The only "thing" that they have is that they can sue Company B for the damages that Company A suffered due to Bs infringement.

You're saying one cost (proprietary) is acceptable and expected, but the cost of GPL compliance is this big unexpected completely unreasonable thing.

It's the cost of compliance, if you can't comply don't use GPL code. And again, although the steps might be different this is no different than all the expense and tracking that commercial software requires. Sure you might find a company out there willing to cut you a pile of commercial source of a fixed one time fee but the contract WILL include auditing, tracking and other requirements. Maybe there is a single software vendor out there that doesn't but I'd wager that the chances of compliance with commercial being easier and less work than the GPL being near zero.

Just because companies are lazy and don't track, document and perform due diligence on their requirements for compliance with GPL does not excuse that behavior. It's incompetence on their part, even GPL software has a cost to use.

I'm sure you won't use these tarballs to create the production stuff you ship, but that stuff doesn't come out of the blue either. You must have a prototype first, which at a given time you freeze.

Your excuses sound pathetic.

If course, if you still think proprietary licenses are easier, you're welcome to avoid GPL software. It's your loss.

They don't. It's all of a big 'IP rights' soup for them (the latest Oracle vs Google complaint is a good example; we make the distinction because we want to be clean and tidy, proprietary houses stuff all in the same bag).

For the practical use case presented here (assemble bits sourced elsewhere in an hardware appliance, without checking legalities) there is *no* distinction between patents (for hardware components) and free software licenses (for software). They behave the same way. If you put unclean parts in your products you can be sued directly.

I agree with all those people who find astonishment in the apparent inability of large corporations to properly account for the origins of their code, especially given those complicated supply chains those companies have for everything else. But then large corporations also seem to only have a pretty vague idea of where their raw materials come from, especially when those materials come from places where the extraction or production of such materials is damaging to the environment and harmful to the people involved in the actual extraction or production.

I guess it's a case of "could try harder but won't".

Also, SCO had a vested interest in dragging the lawsuits out as long as possible, because they had no hope of winning but they could keep FUDding and extorting as long as the lawsuit continued. By contrast, those enforcing the GPL just want companies to come into compliance, and they don't seem to have any problem with that occurring quickly and quietly. Also, unlike SCO, the companies enforcing the GPL actually have a case, and a fairly open-and-shut one at that.