Rewriting the GNU Coreutils in Rust [LWN.net]

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 0:01 UTC (Thu) by Wol (subscriber, #4433)
In reply to: Rewriting the GNU Coreutils in Rust by pizza
Parent article: Rewriting the GNU Coreutils in Rust

That's your choice, more importantly that's your right! But the trade-off that works for you doesn't work for Joe Average User.

Emphasizing the anti-tivoisation features of GPL3 will simply alienate them. And actually, most Android phones are not, I believe, tivo-ised even though the GPL2 permits it. Yes, it's a bugger to get round the tivoisation feature, but you can. By Design.

Thing is, this really is a feature, not an anti-feature, because it enhances security.

And given the environment I work/think in, much as I like the idea of copyleft, in practice the GPL does not "work as designed". It relies on the concept of "derivative work", and in a world of byte-code, with no concept of linking, there is no *practical* difference between GPL and LGPL.

Cheers,
Wol

to post comments

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 0:46 UTC (Thu) by pizza (subscriber, #46) [Link] (3 responses)

> That's your choice, more importanlly that's your right! But the trade-off that works for you doesn't work for Joe Average User.

... so you're saying that folks that don't write software don't get to chose how their software gets used?

When "Joe Average User" gets fed up with getting trampled on, stuff will start changing. As an example of this, farmers are driving the "right to repair" movement.

(Another example -- the entire "maker" community. They're largely about "empowering users" too, only it tends to get expressed in non-software manners)

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 8:09 UTC (Thu) by joib (subscriber, #8541) [Link] (2 responses)

> When "Joe Average User" gets fed up with getting trampled on, stuff will start changing.

Issues of how people go about their digital lives, and to which extent they are themselves in control of it ("digital sovereignty" if you will) are certainly increasingly important. We have $multibillion corporate empires encouraging and monetizing online bigotry and hatred, influencing democracy in a very negative way, and may even be implicated in genocides (Myanmar). The free software movement could be a powerful public voice in all this. But no, instead it's retreating into the "by and for unix geeks stuck in 1990" world, rendering itself irrelevant.

> As an example of this, farmers are driving the "right to repair" movement.

Indeed; "farmers", "right to repair movement". Where is the free software movement in all this? Sitting far away in a corner lamenting the existence of permissively licensed projects like uutils or LLVM and hoping they fail.

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 10:25 UTC (Thu) by pizza (subscriber, #46) [Link] (1 responses)

> The free software movement could be a powerful public voice in all this. But no, instead it's retreating into the "by and for unix geeks stuck in 1990" world, rendering itself irrelevant.

What, exactly, are they supposed to be doing? Again, they have a shoestring budget and are up against companies who spend more than that every month on office supplies for their PR department. And do you honestly believe governments who think nothing of shooting their own people care what some foreign geeks think?

> Indeed; "farmers", "right to repair movement". Where is the free software movement in all this? Sitting far away in a corner lamenting the existence of permissively licensed projects like uutils or LLVM and hoping they fail.

The Free Software has been there all along, with formal organizations issuing press releases and filing occasional court briefs in support of the farmers. y'know, being an advocate like they've always been, with volunteers writing software to help solve problems they personally care about. That is literally all they can do, write software and be an advocate -- because that's all the legal regime allows -- anything more (such as developing alternatives) requires breaking DRM, which even talking about is enough to expose you to ruinous fines and jail time in most (if not all) developed countries.

The the FSF (and the greater Free Software movement) is not a corporation capable of imposing top-down direction onto a massive army of employees (and another army of lobbyists to bribe politicians) but that's what it's up against.

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 14:24 UTC (Thu) by joib (subscriber, #8541) [Link]

> What, exactly, are they supposed to be doing? Again, they have a shoestring budget and are up against companies who spend more than that every month on office supplies for their PR department.

True. It's not an easy or guaranteed win. But if your compare to, say, the abolitionists or suffragettes back in the day, they didn't have any money compared to the moneyed interests they were up against either. But they won, because they had morality and ethics on their side, and were able to leverage that into mass movements that supported their causes. I hope the free software movement could do the same in helping (not saying the free software movement must do this alone!) rein in the excesses of surveillance capitalism. But a narrow focus on copyleft won't achieve that, as most people who aren't software developers won't even understand what they're talking about, much less understand why it would matter and why they should care.

Freedom for people matter. Freedom for software doesn't, per se, except as a means to an end.

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 3:19 UTC (Thu) by pabs (subscriber, #43278) [Link] (4 responses)

I'm not so sure GPL2 permits tivoisation, doesn't it require the scripts for compilation & installation?

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 3:46 UTC (Thu) by pizza (subscriber, #46) [Link] (2 responses)

The FSF believes the GPLv2 permits tivoiization, and addressing that was one of the primary goals of the GPLv3:

(See https://www.gnu.org/licenses/rms-why-gplv3.en.html starting with the 6th paragraph )

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 4:24 UTC (Thu) by pabs (subscriber, #43278) [Link] (1 responses)

Interestingly, Software Freedom Conservancy (who enforce the GPL on behalf of some Linux kernel copyright holders) believes the opposite, that the GPLv2 does require installation too, with the caveat (apparently for both GPLv3 and GPLv2) that devices containing both GPL software and proprietary software can remove or disable the proprietary software once the GPL software is modified:

https://sfconservancy.org/blog/2021/mar/25/install-gplv2/
https://sfconservancy.org/copyleft-compliance/
https://events19.linuxfoundation.org/wp-content/uploads/2...

OTOH, they (and it seems RMS) believe that both the GPLv3 and GPLv2 permit what Tivo did. Some quotes from the PDF:

Ironically, even if Linux were GPLv3, Tivo’s method of crypto-lock-down would likely comply with GPLv3.

bkuhn checked this with RMS: even he agrees this mechanism complies with GPLv3.

Rewriting the GNU Coreutils in Rust

Posted Jun 11, 2021 18:43 UTC (Fri) by IanKelling (subscriber, #89418) [Link]

So basically tivoization, like I understand and it wikipedia defines it https://en.wikipedia.org/wiki/Tivoization ( hardware restrictions or digital rights management to prevent users from running modified versions of the software), is not exactly what tivo did. So, it's etymology is based on an inaccuracy, but it is still a very useful word as it is defined now, so I will probably keep using it. Saying the whole definition out takes a lot more time.

Rewriting the GNU Coreutils in Rust

Posted Jun 10, 2021 7:03 UTC (Thu) by matthias (subscriber, #94967) [Link]

> I'm not so sure GPL2 permits tivoisation, doesn't it require the scripts for compilation & installation?

Yes, it does. But it seems that it does not require that the scripts still work on the device:

> The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable.

No word saying that the scripts still have to work on the distributed device. Maybe it is enough if the scripts work for an empty device prior to software installation. This of course does not help the end user as there is virtually no possibility to get hands on such a device.

Therefore, the GPL3 is more specific in this regard. But still, it seems perfectly ok, if any proprietary software on the device stops working in the moment you exercise your rights to install modified versions of the GPL software, which will render many devices useless.