Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
GNU is Not Unix Hardware Hacking Software The Courts Build

Bell, SuperMicro Sued Over GPL 273

Markus Toth writes "The Software Freedom Law Center (SFLC) has filed two more copyright infringement lawsuits on behalf of the developers of the Linux-based BusyBox utility suite. The suits allege that Bell Microproducts and SuperMicro Computer each violated redistribution stipulations of the GNU General Public License (GPL).The Bell Microproducts suit pertains to the Hammer MyShare NAS (network-attached storage) appliance, which is sold by Bell's Hammer Storage division. I was the one who alerted the busybox developers about the GPL violation after providing a script for disassembling the firmware and instructions about mounting the contained initrd. As you see in my first post at the gpl-violations.org mailing lists where I posted all mails that I sent to and received from Hammer Storage, they refused to provide me the GPL sources several times. Looks like they will have to provide them soon; I will post any updates in the nas-central blog."
This discussion has been archived. No new comments can be posted.

Bell, SuperMicro Sued Over GPL

Comments Filter:
  • by Marcion ( 876801 ) on Wednesday June 18, 2008 @02:52PM (#23843131) Homepage Journal
    I assume someone had to go and evaluate the software for inclusion in the product. Is is that hard to whack a tarball onto a server and give out the link.

    We hear so many of these large companies have problems with this. Why?
  • by Creepy Crawler ( 680178 ) on Wednesday June 18, 2008 @02:55PM (#23843165)
    For those that use this as a reason to NOT use the GPL...

    What would have happened if they instead used a copy of WinNT4.0 without paying Microsoft? Microsoft would want blood, and would extract it via the BSA.

    The creators of Busybox just want you to host the changes you've done to it. They wanted no money.

    In other words: What would $proprietary_software_manufacturer do?
  • Good work, Mr. Toth.
  • by nebenfun ( 530284 ) on Wednesday June 18, 2008 @03:03PM (#23843281)
    Laziness, ignorance of the law, confusion regarding the GPL, budget issues, etc...

    The usual suspects...
  • by quarrel ( 194077 ) on Wednesday June 18, 2008 @03:06PM (#23843327)
    Can anyone shed any light on why companies repeatedly do this with Busybox?

    I can sort of understand their motivation (if not their ethics/commercial sense!) if they've got a highly modified Lunix kernel where they've made extensive changes to the networking stack to enable their "unique" feature or similar, but why with Busybox? Surely the path of least resistance is just to make the tar ball available (or realise, you've stuffed up, and start making the offer and send any that ask the tarball to play catch-up). Are any of these guys really making proprietary improvements with amazing IP involved to Busybox? It seems an unlikely place to do it..

    Maybe they've ported it to the latest tiniest CPU, but they still get a time to market advantage their (particularly versus producing Busybox like functionality from scratch!), but even that seems unlikely to be worth fighting hard when you'll quickly realise you'll lose.

    Why go to the hassle?

    I suspect that this probably boils down to default policies and a lack of understanding of the GPL more than anything, sadly. By default most companies would have a "We don't make available ANY of our IP unnecessarily" and that hasn't yet gelled with the GPL. No one wants to stand up and make the call that compiling Busybox didn't involved much of the companies IP, and releasing the source is an obligation.. The people involved with the IP aren't the same people that make the 'legal' calls and so companies come across with these silly positions..

    --Q
  • by RingDev ( 879105 ) on Wednesday June 18, 2008 @03:08PM (#23843345) Homepage Journal
    From the download page on their site:

    myshare Source Files

    The myshare source files are made available under various open source code licenses, including the GNU General Public License (GPL). Please review the license terms included with each download for the rights, obligations and restrictions associated with the open source file.
    Installation instructions
    title / description download posted release notes

    Myshare Home v.1 GPL Source Code
            47.6 MB 06/11/08

    Myshare Home v.2 GPL Source Code
            158.1 06/11/08

    Myshare Office v.2 GPL Source Code
            220.8 MB 06/11/08
    Looks like they just got them up last week (apparently 5 months after the GPL-Violations post).

    -Rick
  • by m.ducharme ( 1082683 ) on Wednesday June 18, 2008 @03:08PM (#23843347)
    I didn't realize that the GPL allowed you to deny source code to someone on the basis of poor grammar or the use of a pseudonym. Oh wait...
  • by Creepy Crawler ( 680178 ) on Wednesday June 18, 2008 @03:11PM (#23843385)
    It's only restrictive depending if you are a coder vs end user.

    If Im an end user, I can install it anywhere, copy it anywhere, give it to my friends without worry, hack it.... The list goes on.

    Most of the restrictions only exist to ensure community efforts. After all, you got it for free, so submit your changes you sell for free.
  • by CastrTroy ( 595695 ) on Wednesday June 18, 2008 @03:11PM (#23843387)
    Yeah, but if you're going to use the cheap route and just use GPL'd code, why not just put a tarball up on your website?
  • Fear. (Score:5, Insightful)

    by khasim ( 1285 ) <brandioch.conner@gmail.com> on Wednesday June 18, 2008 @03:15PM (#23843439)
    Fear that your competition will download it and leap-frog all "your" development "efforts" by using "your" code in their device.

    I'm serious. If they UNDERSTOOD the process, they would ANNOUNCE that it was GPL'd and that anyone who wanted to could modify it or add features, etc.

    Just like LinkSys found with their wireless routers.
  • by gstoddart ( 321705 ) on Wednesday June 18, 2008 @03:15PM (#23843453) Homepage

    Because proprietary software producers would be just as bad, or likely worse, does not mean that the GPL is always the best solution, since it is still a restrictive license.

    Well, then if you don't like the license, don't use the software. Using GPL software against the terms of the license because you couldn't find any other free code to use is hardly an excuse.

    If you can find BSD or public domain code that allows you to re-use it and not have to write it, go ahead. If you can't, then either write it yourself, or quit whining that it's unfair you can't use the GPL stuff without adhering to the terms because it cramps your business model.

    A lot of companies just figure they can have the best of both worlds -- get the OSS stuff because it already does most of what they want, and then treat it as proprietary software they won't tell you anything about.

    As the GP said -- this isn't about software released under the GPL or if people should use it. This is about companies trying to get something for free.

    Cheers
  • by RingDev ( 879105 ) on Wednesday June 18, 2008 @03:28PM (#23843615) Homepage Journal
    Which goes to show: a lawsuit is far more powerful than the saber rattling of an anonymous e-mailer with bad grammar.

    Just think, with proper grammar and some respect, Markus might have been able to motivate Mr. Vang to be a bit more interested in meeting the requirements of using GPL code. This whole thing might have been resolved with out lining the pockets of more lawyers.

    -Rick
  • by Kjella ( 173770 ) on Wednesday June 18, 2008 @03:31PM (#23843663) Homepage

    I didn't realize that the GPL allowed you to deny source code to someone on the basis of poor grammar or the use of a pseudonym. Oh wait...
    Well, there are two possibilities:
    1. They know they're violating the GPL and just want him to get lost
    2. They don't know what the GPL is, that they're using GPL'd products, that they don't read the GPL right, they don't understand who he is, why it's any of his business, why he thinks he's got any right to their products source code and so on.

    In the latter case, good communication skills that presents your case in a serious, professional and understandable manner that makes them realize their error or at least begins a closer investigation of the issue may be an advantage. Besides, it looks to me like his legal skills are severely lacking:

    As you see in my first post at the gpl-violations.org mailing lists where I posted all mails that I sent to and received from Hammer Storage, they refused to provide me the GPL sources several times. Looks like they will have to provide them soon
    No, they do not. They can withdraw the product, pay any fines but they will never have to provide any source unless they want to. Personally I wish they'd take a more RIAA-ish approach, have each author sue for 150,000$ each. That should stop GPL violations really really quick.
  • by gstoddart ( 321705 ) on Wednesday June 18, 2008 @03:35PM (#23843743) Homepage

    I still see this as a reason not to use GPL, preferring instead to use BSD-style licensed software or public domain software whenever possible.

    Again, I'd say this isn't a problem with the GPL.

    It's a problem with commercial entities trying to use the GPLd software without abiding by the rules.

    If you can find some BSD/public domain code which does what you need, fine. If you can't, that doesn't mean you should be able to just take the GPL software -- it means you should write your own.

    I don't really see a problem with companies avoiding GPL software because of the license. That doesn't reflect badly on the GPL, it reflects badly on companies who are trying to do an end-run around the license.

    Cheers
  • by cparker15 ( 779546 ) on Wednesday June 18, 2008 @03:41PM (#23843883) Homepage Journal
    In other words, you have double standards. You want to have your cake and eat it, too. You want to leech off of the community (by using its code, making money from it, and not contributing back). The only thing the GPL restricts you from doing is keeping your changes to yourself if people ask you for them.

    Don't be greedy.

    Ok, go ahead, mod me as a troll. It's the truth.
  • Re:Fear. (Score:5, Insightful)

    by LehiNephi ( 695428 ) on Wednesday June 18, 2008 @03:42PM (#23843893) Journal
    If another company uses your code to make their product better, they're still bound by the GPL. Thus, once you have their source code in hand, you're in a nice position to leapfrog their development.
  • by Waffle Iron ( 339739 ) on Wednesday June 18, 2008 @03:42PM (#23843895)

    The GPL isn't an easy to read document

    From this I presume that you have never tried to read a typical redistribution license for a commercial software library.

  • by robertjw ( 728654 ) on Wednesday June 18, 2008 @03:54PM (#23844129) Homepage

    Maybe because it creates an image where there is little to differentiate of your product from that of the next guy? Makes it kind of hard to justify ridiculous profit margins...
    Or maybe you will have to compete with your hardware. If these companies are cutting corners on their software development, they are probably cutting corners on their hardware development as well. If company Z has better hardware and can use your GPL software, you are pretty much SCREWED.
  • by Todd Knarr ( 15451 ) on Wednesday June 18, 2008 @03:58PM (#23844225) Homepage

    What's so hard to read about the GPL? It's a whole lot easier to read and comprehend than your average commercial software license. If a company's lawyers are expected to routinely understand complex contracts running close to a hundred pages of dense legalese, why should they have any trouble whatsoever with the GPL?

  • by drinkypoo ( 153816 ) <drink@hyperlogos.org> on Wednesday June 18, 2008 @04:04PM (#23844337) Homepage Journal

    The GPL isn't an easy to read document

    Reading is hard, yo! they have like, long words 'n shit!

    Seriously, the GPL is about as simple as it gets. It has to be written in legalese so it's going to be a bit obfuscated no matter what, but come on. It's actually in some of the plainest English I've seen in a legal document.

    Of course, you do have to understand some technical terms to read it, and people have deliberately fucked around with the meaning of those terms, and tried to get around the GPL in other ways, so now we have a new version. (Or do we? Is that thing out or what? Was the plan for the GPLv3 to dither until no one cared if it was changed all along?)

    That is part of the reason why a lot of companies work with BDS Licenesed code, there are less legal reprocussions from using it.

    Or, you know, BSD licensed code. Go fingers, cutwhatchyalike. Seriously though, there's no nasty legal repercussions to GPL code if you just make the whole thing GPL. It's when you start closing parts of it that you have problems. Of course a lot of companies don't want to operate that way. But the cost of saving all that time is helping others save time. You can still differentiate on the copyrighted parts of the product (case design, web interface, et cetera.)

  • by Anonymous Coward on Wednesday June 18, 2008 @04:07PM (#23844385)
    You are both somewhat right. MySQL has an exception in their licensing policy that allows closed-source PHP applications to use MySQL.

    However, their general policy is as follows: the MySQL client library (which you need to link to, to talk to the server) is GPL'ed, so it can only be used in a GPL'ed application. If you want to use it in a non-GPL application, you need to obtain a license from MySQL AB. MySQL supports many more languages/interfaces than just PHP, so this is a real concern.

    So although you are right in saying that you can create a closed-source application using MySQL if you are using PHP, the other guy is right in saying that in general you cannot use MySQL in a closed-source application without obtaining a license from MySQL AB.
  • Re:Fear. (Score:5, Insightful)

    by strabes ( 1075839 ) on Wednesday June 18, 2008 @04:08PM (#23844415)
    And that's exactly why open source is so powerful.
  • by mrcaseyj ( 902945 ) on Wednesday June 18, 2008 @04:11PM (#23844469)
    The GPL only restricts your freedom in a way similar to laws that prohibit slavery are restricting your freedom to take slaves. The GPL only takes away your freedom to take away the freedom of your users and the original authors of your code.
  • by Anonymous Coward on Wednesday June 18, 2008 @04:30PM (#23844757)
    What about all this guff about the appliccability of an EULA with commercial software? What about the fuzzy DRM or activation of software (XP was said to be given a crack to remove activation when people at the time complained about it, so that people would accept activation. We may find out if they do this, but what's the legal jig if they don't?).

    The only place where GPL is "fuzzy" is where it gets bundled or where it gets a derivative. And that's ENTIRELY your legal definition of laws defined to cover books and music (which are inherently Open Source) being stretched to cover binary software (which is Closed).

    Fix your laws.
  • by gnasher719 ( 869701 ) on Wednesday June 18, 2008 @04:31PM (#23844771)

    a) Putting something into GPL is the same as putting it into the public domain because there is no control over distribution and no economic damages associated with infringement. Does Bells use of GPL code actually cause economic harm to the developers, and the answer is arguably no.
    The answer is very, very arguably yes. The Busybox developers hold the complete copyrights. Therefore they are able to sell you their library under any license terms that you and they agree on. If you find the GPL terms not acceptable for you, you can write down any license terms you like and negotiate with them; it is just a matter of money. There is a good chance that you could put the complete Busybox code into say a router that you build without having to publish the source code if you pay these guys a million dollars. The money that Busybox could have charged for use of their library under a non-GPL license but which they didn't get, that is the financial damage.
  • by Ciggy ( 692030 ) on Wednesday June 18, 2008 @04:55PM (#23845169)

    It's a problem which, amongst downloadable software, is somewhat unique to the GPL. Most software which is downloaded or purchased off the shelf has a EULA which, while typically overly-verbose, makes sense...
    EULAs make sense? I have [at least] one piece of software that announces "Congratulations on BUYING this software" whilst at the same time requiring me to agree to a EULA that says "You do NOT OWN the software, but a LICENCE to use it". So which is correct: the software that says I own it, or the licence which says I don't. Doesn't make sense to me.
    ...Don't copy the software to more than one computer. Don't give people a copy of the software. Don't disassemble the software...
    Whereas the GPL says you can copy the software to more than one compouter, you can give people a copy, you can disassemble the software (though you don't need to as you can get the original source) - more than Copyright Law in itself allows.

    ...Don't expect us to cover your losses if the software fails.
    I seme to recollect that the GPL also states something like that, but let's do a quick comparison.

    If I pay £0.00 for some software and it fails causinng £xxx worth of damage how much have I lost? £xxx. However, if the software costs £299.99, how much have I lost? £(xxx+299.99) - unless the supplier refunds the FULL cost of the software (plus costs incurred in obtaining said refund).

    Still looks like GPL software is the better bet.

    Most software licenses don't cover redistribution at all, except inasmuch as they say that it is forbidden. If redistribution is allowed somehow, it's almost always a part of a negotiated license rather than a boilerplate EULA. The GPL, a boilerplate license, does. It's unusual. Its provisions are unusual.
    Yes, the GPL is unusual in that it DOES allow you to distribute the code unlike most other licences. However, if you don't like the terms of the distribution, you can always contact the original author(s) and request a different licence - negotiate for what you want; just remember that they may require some form of payment in this case. The difference is that the GPL automatically allows you [restricted] distribution rights before you even have to ask!
  • Re:Fear. (Score:5, Insightful)

    by Jah-Wren Ryel ( 80510 ) on Wednesday June 18, 2008 @05:15PM (#23845513)

    And that's exactly why open source is so powerful.
    No. That's why GPL'ed code and other share-and-share alike licensed code is so powerful.

    BSD licensed, MIT licensed, etc code does not share in that power.
  • by Anonymous Coward on Wednesday June 18, 2008 @05:15PM (#23845519)

    ...One idiot manager forgetting to put code up. One asshole GPL guy. Suddenly you have a lawsuit...
    I seem to remember noting that letters were sent requiring compliance, and failure to respond to them was the trigger for the lawsuit. These guys ain't the RIAA, BSA, etc who blast their way in demanding restitution, they're blokes who've seen their code used and when politely reminded the users of their requirements have had no response.

    Mind you, if I was ever to find any of my code turn up in something like Windows, you can bet that I would instantly fire a lawsuit against Microsoft instead of negotiation - only because of their hypocrasy: they come down hard (via the BSA) on infringers so they shouldn't expect any leniency from me.
  • by Todd Knarr ( 15451 ) on Wednesday June 18, 2008 @06:14PM (#23846415) Homepage

    Odds on the developers understand the GPL and it's obligations completely. But the packaging and distribution of the product isn't handled by the developers, it's handled by Marketing and Sales. And those guys probably don't even know the software has a license attached, they've got no clue what all went into their software, and they likely don't think they ought to consult with mere software developers about how they can market the product. And they probably didn't ask Legal for an opinion, since it's "their" software and they can (in Marketing's world) do whatever they want with it. Customer Support's likely a division of Marketing, so when the initial e-mails came in they got handled by people with that attitude.

    And then one day the package with the letter on a lawyer's letterhead with all the court paperwork arrived, and it went straight to Legal, bypassing Marketing entirely. And Legal, being sensible people, asked the obvious questions of the obvious people. Marketing may ignore the engineers, but Management tends to listen to the lawyers.

  • Re:Fear. (Score:4, Insightful)

    by bill_mcgonigle ( 4333 ) * on Wednesday June 18, 2008 @06:39PM (#23846701) Homepage Journal
    You can bet that Cisco, who bought Linksys shortly before the debacle, wasn't happy. Being able to get high-end device features on a low-end device is not part of most businesses plans. I'm sure that Linksys devices were extremely popular due to this, but one has to wonder if Cisco lost any sales to small-to-medium businesses over it.

    Isn't that why they bought Linksys? Because the low-end was becoming good enough for many customers?

    Better to buy a Cisco-Linksys box than a Netgear.
  • by raehl ( 609729 ) <raehl311@@@yahoo...com> on Wednesday June 18, 2008 @06:40PM (#23846713) Homepage
    Or, I can develop my own software, and maintain my competitive advantage over my competitor.

    Anyone who produces products has to decide what is more valuable - being able to use free software from the community, or being able to keep your software secret. If all you are going to add to the software is something that anyone else could create without much effort (i.e., software is not your key differentiator) then open source is the way to go.

    But if you're going to make a massive improvement to whatever software you might take, something that is going to cost you a lot of money to develop (and would thus cost a competitor lots of money to develop), it makes the most sense to keep it to yourself.

    Put more simply, a product that is 90% open source software from the community and 10% improvement is probably best released as open software - you get 90% for the cost of 10%. But a product that would be 10% software from the community and 90% software you develop yourself, it makes more sense to also redo the 10%. Trading away 90% for 10% would just be a bad business decision.
  • by Schraegstrichpunkt ( 931443 ) on Wednesday June 18, 2008 @08:31PM (#23848087) Homepage

    As a software engineer, I understand the importance of adhering to and enforcing a software license, however these constant lawsuits are eventually going to cripple the free software movement.

    Oh really? How? The terms of the GPL are very clear, and people keep getting sued because they persist making up their own rules instead of following the actual rules. The GPL is only effective because the risk of lawsuits is real.

    Many companies are adopting OSS as a means of rolling out custom products faster. It is easier to use something that already exists rather than rebuilding it themselves.

    What invariably happens is that along the way, is that some engineer decides to make a modification to a package in order to make it fit their unique needs (usually without authorization from the legal dept). Next thing you know you have a product that is heavily dependent on some customized OSS package that was never supposed to be used in such a capacity. Now the company is forced to turn over software that they invested in and are exposed to risk of litigation because of a breakdown in the dev process.

    Oh, cry me a river! If your company can't get its act together, then it's best for everyone that your company's competitors---who actually do follow the rules---eat your lunch.

    Now I am not saying that companies should be able to rape OSS projects for free development work

    In effect, that's exactly what you are saying.

    but there has to be a balance.

    Why? Between what extremes? What would be the impact?

    I think the FSF and the Gnu people should work out some sort of process where corporate customizations can be evaluated for context and value of the original package. And maybe have a source review process where the OSS developer can review what was added without exposing trade secrets of the corporations trying to use the OSS.

    What? Who would do the evaluation? How do you judge "value"? Who is going to bear the cost of this process? Why are trade secrets being intermingled with GPL-covered code? What's would the BusyBox gain by doing this? What would society gain?

    The FSF and the GNU people have worked a lot of things out. They created the rules that leveled the playing field for all of us. Those rules are codified in the GPL. You apparently don't like the rules, and whine when they are enforced.

    I think it is insane to treat corporations as the enemy.

    Red Hat isn't the enemy. MySQL isn't the enemy. Ingres isn't the enemy. Google isn't the enemy. Microsoft is an enemy, but only because they have a history of trying to screw, well, everyone (and there's no credible reason to believe that they've stopped). The "enemies" are those who persist in acting selfishly to the detriment of all of us. If anything, I'd argue that the BusyBox developers have been too lenient: Linksys routers (to my knowledge, which is a bit out of date) still aren't shipped with copies of the GPL included.

    OSS developers should be working with Corporations not suing them.

    They are. Many work for corporations. Many are corporations.

    This is the sole reason I release all my code under BSD license. I want people to use my products

    Then the BSD license is a good match for your goals. Good for you. Not everyone values fame as highly as you do. People who release software under the GPL generally do so either to spread the freedoms that the GPL provides, or because they want to modify and re-distribute software that is already covered by the GPL. I see no reason to prejudice the latter group by letting Bell, SuperMicro, or anyone else get a free pass.

    Being a corporation has nothing to do with it.

  • by Brandybuck ( 704397 ) on Wednesday June 18, 2008 @09:42PM (#23848955) Homepage Journal
    Because it's not at all clear that you have to post the source code to Busybox! You haven't modified Busybox, you haven't made a derivative work, you haven't done anything at all to its source code. Hell, you probably haven't even SEEN the source code, since you got it from a binary. I work with a lot of embedded device manufacturers, and they do not use LFS, they use prepackaged embedded Linux systems or kits.

    It's also not at all clear that distributing hardware is also distributing the software. There is no clear point at which the software is an integral part of the hardware and when it is an end user product.

    The GPL claims it is based on copyright law, but copyright law is extremely vague on a lot of points.

Beware of Programmers who carry screwdrivers. -- Leonard Brandwein

Working...