Quotes of the week

Posted Mar 18, 2016 8:33 UTC (Fri) by shane (subscriber, #3335)
In reply to: Quotes of the week by vonbrand
Parent article: Quotes of the week

Sure. I work in DNS.

First off, lets start with the easy one: BIND. Proprietary versions of BIND are used by many DNS vendors, including those who sell modified versions (like Infoblox), those who run services based on modified versions (like Dyn), and those who build other products around the code-base (like F5).

But this also applies to other BSD-licensed DNS servers, like NSD and Unbound from NLnetLabs, which are also embedded into products (like Secure64).

It's not a leap to move on to DHCP software, which has similar problems, although customized versions of things like ISC DHCP are harder to spot, since they tend to be built into devices taped together in a few weeks by a code shop and put onto some embedded device that gets a single firmware drop and then is never updated on the wild Internet. (And honestly the ISC DHCP software should probably just be nuked from orbit, but nevertheless it would be nice if fixes and improvements were pushed back into the original.) It's harder to think about the actual costs here, since few products are sold as DHCP products.

That doesn't consider the truly big players: Microsoft, Apple, Google, Samsung, and so on. I vaguely recall that Microsoft based it's IP stack off of the FreeBSD stack at one point. A quick search turns up this:

https://int80.wordpress.com/2009/02/11/microsoft-tcpip-op...

I'm sure there are tons of more examples. Feel free to post your favorite ones here. :)

In some sense I don't blame companies. If someone puts a sign up and says "free donuts, donate what you like" and you just take the books and don't leave any money... well, it's not very social but you're not doing anything wrong. But this is why I think that copyleft licenses are necessary in the long term - otherwise companies will just shit all over the commons.

Quotes of the week

Posted Mar 18, 2016 14:37 UTC (Fri) by nybble41 (subscriber, #55106) [Link]

I think the point was that none of these cases are really examples of companies making their money off of BSD-licensed code, but rather from their own modifications and additions. After all, the BSD-licensed code they started from is freely available to the world, and they could hardly expect to make much money selling what their customers already have access to.

> If someone puts a sign up and says "free donuts, donate what you like" and you just take the books and don't leave any money... well, it's not very social but you're not doing anything wrong. But this is why I think that copyleft licenses are necessary in the long term - otherwise companies will just [ruin] the commons.

First, taking the books would be theft, since it was the *donuts* that were free... ;)

But more importantly, we're talking about an infinite supply of donuts here. Whether you choose to publish your changes or keep them secret, making use of code (BSD-licensed or otherwise) does not prevent others from doing the same. One could argue that contributing back would make everyone better off, but you certainly aren't making things any *worse*. Not contributing back may not be "social", but it isn't anti-social either. If using the BSD-licensed code at least means that your customers get a better product than if you'd decided to roll your own ad-hoc version, some good has come out of the arrangement. The commons isn't enhanced, but neither is it diminished.

If the license were copyleft instead, it *might* mean that the modifications are made available to the users—or it might just mean that the product doesn't exist at all, or that it exists but uses some idiosyncratic proprietary from-scratch implementation riddled with bugs and incompatibilities, either of which would be worse for all concerned than a version based on BSD-licensed code with some proprietary modifications.