10 ms·
I see this as a stealth attempt by the Software Conservancy to hijack the direction and tone of kernel development, dragging it more to FSF-style militancy. Li
by karma_vaccum123 10y ago
I see this as a stealth attempt by the Software Conservancy to hijack the direction and tone of kernel development, dragging it more to FSF-style militancy.
Linus is right, there is no crisis in GPL violation. There will always be violators. Any law or contract or license will be violated. Becoming more militant about enforcement will simply cause most corporate partners to disengage. Most users comply with the license. Users have access to interesting and useful source code and have never been restricted from accessing the kernel. The kernel team is on good terms with most corporate users. Going after the 5% of violators will change how the kernel team interacts with the 95% of good partners.
The only thing Linus seems to be disingenuous about is his claim of support for the GPLv2. My guess is he secretly wishes he had chosen a different, non-copyleft license.
- Karunamon 10y ago>Going after the 5% of violators will change how the kernel team interacts with the 95% of good partners. How do you figure that? The only way this could apply is if the "good partners" are violating the GPL on the sly, or with a wink and a nod (not bloodly likely) which would make them not so good anymore. The GPL has no reason to exist if its terms are not enforced.
- karma_vaccum123 10y ago....and Linus' point is that the victory will be pyrrhic, since people will simply avoid the GPL altogether. We've already seen this with the GPLv3/AGPL. Really outside of the FSF, the only adoption is in dual-licensers who use it to drive purchases of the alternatively-licensed sources.
- Karunamon 10y agoEnforcement of the license people agreed to will cause people to avoid using the license? The only way that makes sense is if people thought that the GPL was the thing to use was due to it being toothless, a notion that it's strictly better to disabuse people of.
- karma_vaccum123 10y ago> Enforcement of the license people agreed to will cause people to avoid using the license? If it means lawsuits, yes. Companies will either seek out a non-GPL solution, or they will be even more secretive about their use of linux. Either way, linux loses and 95% of linux users lose....and the violations will continue anyway.
- Karunamon 10y ago...or they could comply with the license they agreed to in the first place. You've created a catch 22 here.
- karma_vaccum123 10y agoThere is no catch 22. You simply have to figure out what the goals actually are. Linus' goal is to have a vibrant community that has access to the changes he approves in the kernel. The FSF's goal is to eradicate non-free software. Linus doesn't care about the odd scofflaw because they don't interfere with his goal. The FSF on the other hand cannot abide scofflaws because their only goal is to eliminate them.
- Karunamon 10y agoAnd yet at the end of the day, Linus chose a license that demands its users release any changes they distribute, rather than a permissive license like the BSDs. Linus probably doesn't care about the odd scofflaw because he has better things to do (like maintain a kernel) than to juggle lawsuits. This is why the SF Conservancy exists.
- st3v3r 10y agoSo unless we let companies break the law, they won't give us jobs?
- davexunit 10y ago>Really outside of the FSF, the only adoption is in dual-licensers who use it to drive purchases of the alternatively-licensed sources. Not true. There are tons of projects that use GPLv3+ or GPLv2+. There's certainly adoption.
- scotu 10y agomaybe he wishes he chose another license, but it would be very ingenuous to think the outcome would have been the same or better. Not saying that Linux wouldn't have succeed (or done better) without the GPL but you cannot say the reverse either...
- hood_syntax 10y ago> Going after the 5% of violators will change how the kernel team interacts with the 95% of good partners. Why would it? If they are not violating the terms of the license, what would change?
- karma_vaccum123 10y agoThis is one of Linus' main points in the discussion, it will change the tone and signal to partners that interactions with the kernel community will carry with it interactions with the Software Conservancy, which most companies will see as an expensive, frustrating and pointless waste of resources.
- greggyb 10y agoA dangerously close analog to the "nothing to hide"[0] argument. As mentioned in the parent article and other linked discussions, there is not certainty in litigation. The terms of the license are complex, and there can be healthy debate over what is and is not a violation. Membership in the 5% and 95% is not clear until after litigation. You do not get to decide that you are in compliance. You get to take actions which you understand to be in compliance. If someone disagrees, they can sue. Taking a stance of aggressive litigation will make everyone think twice about using software that opens them up to expensive litigation. [0] https://en.wikipedia.org/wiki/Nothing_to_hide_argument https://en.wikipedia.org/wiki/Nothing_to_hide_argument
- st3v3r 10y ago"A dangerously close analog to the "nothing to hide"[0] argument." No, it really isn't. The idea that a company that is complying would walk away because those that aren't are gone after is foolish. It's like saying a freelancer shouldn't pursue people who stiff them on payment, because other potential clients might hear about it, and choose not to hire them.
- taeric 10y agoOf course, a freelancer who has a healthy practice and good relationship with many clients can and likely will lose some clients if they take a publicly aggressive stance with other clients. And, be clear, egregious violations aren't the concern. The concern is if you see a freelancer constantly partaking of expensive or just annoying audits on good faith partners. It can drive folks away. This is why the lines are drawn at 95/5. If it were actually the other direction, things would be different.
- samfisher83 10y agoHow do you expect all these android phone makers to make android without the linux kernel?
- amyjess 10y agoI have to admit that I'd like to see a respin of Android using the NetBSD kernel.
- karma_vaccum123 10y agoThe phone makers don't care about specific the kernel used in Android. They care that they can access AOSP. AOSP could use other kernels and other licenses, it wouldn't impact Android's success or value at this point. Go look at the kernel version in Android, even Android 7.0...kernel 3.10. We might be overestimating how important linux is to Android. OEMs that produce devices end up doing non-free things writing checks to companies like Micorosft for intellectual property, so it isn't like AOSP delivers on the promise to let anyone make a phone, GPL kernel or not. If Google actually follows through with this Fuchsia project, do you think OEMs will balk because the kernel isn't GPL'd? No one will care.
- mordocai 10y agoLinus has publicly said that he is very happy with having chosen GPLv2, he just doesn't like GPLv3 and doesn't like dealing with it through lawyers. Copying my comment from reddit when this was discussed last week: > As the thread linked shows though, Linus cares about the GPL for what it gains him not what it gains the user. The spirit of the FSF and the GPL is for the user, not the dev. >He only cares about actions that lead to code getting back into the upstream kernel, whereas others(and the FSF) care primarily about people being able to view and modify the code they use and that is running on their devices. >I'd argue he likes the GPL for what it gains him but isn't really a GPL/FSF advocate. >Edit: It is important to note that this is one of the core reasons Greg/Linus and the FSF/SFC disagree I think. Karen from the SFC had an IMO excellent response in that chain that matches my thoughts if you are curious. Source: https://www.reddit.com/r/linux/comments/4zp56l/gpl_defense_issues/d6xyb7u https://www.reddit.com/r/linux/comments/4zp56l/gpl_defense_i...
- toyg 10y agoLinus would like to have his cake and eat it too. On almost every debate on licensing (binary blobs etc), he's consistently taken a "liberal" approach that would better suit a BSD/MIT license rather than the GPL. Through the years, he basically enjoyed the benefits of the "forceful mindshare" the GPL imposed on other developers, all the while pissing on everything the GPL promoted: "hey, you're forced to show us what you developed, but really I'm not going to force you wink wink". As much as I understand the world is not black & white, overall it's a very hypocritical stance.
- lamarkia 10y agoIt becomes obvious from the discussion that Linus is specifically focused on those cases that companies became Linux-friendly after long-term encouragement. He probably took part in such cases. In addition, he has in mind that companies can abuse the GPLv2 and just do code dumps. It makes sense what he has in mind but his attitude is too much drama.
- pmden 10y ago"I see this as a stealth attempt by the Software Conservancy to hijack the direction and tone of kernel development" I see it as the Software Conservancy spitting some reality into Linus' Cheerios. But then again, I've been forced to replace devices because Qualcomm/Mediatek/Obi/D-Link decided GPL compliance wasn't their cup of tea. So I'm probably biased.
- wang_li 10y agoI see it as SFC cashing sweet, sweet settlement checks.
- davexunit 10y agoDid you know that SFC's GPL enforcement guidelines say that seeking financial gain from enforcement is not a goal? This isn't a money making venture.
- ashitlerferad 10y agoIndeed: https://sfconservancy.org/copyleft-compliance/principles.html https://sfconservancy.org/copyleft-compliance/principles.htm... They don't even get their legal costs back most of the time.
- wang_li 10y agoThe bold text says financial gain should not be prioritized, but it them proceeds to rationalize why financial demands are required: "Financial penalties are a legitimate tool to achieve compliance when used judiciously. Logically, if the only penalty for violation is simply compliance with the original rules, bad actors will just wait for an enforcement action before even reading the GPL. That social model for copyleft and its enforcement is untenable and unsustainable. An enforcement system without a financial penalty favors bad actors over good ones, since the latter bear the minimal (but non-trivial) staffing cost of compliant distribution while the former avoid it. Copyright holders (or their designated agent) therefore are reasonable to request compensation for the cost of their time providing the compliance education that accompanies any constructive enforcement action. Nevertheless, pursuing damages to the full extent allowed by copyright law is usually unnecessary, and can in some cases work against the purpose of copyleft."
- amyjess 10y ago> My guess is he secretly wishes he had chosen a different, non-copyleft license. He always wanted a copyleft license because it enabled kernel development to really take off by enabling him to make use of other people's contributions, and he's always been consistent about that. I bet that what he really regrets, though, is not requiring copyright assignment for inclusion into mainline, so rogue developers can't just join up with the SFC and sue people against his wishes.
- drdaeman 10y agoThe problem is, this sends bad message to users. I (the end-user) get a device with a blob that looks like a Linux (the kernel). I don't get any freedoms (but to whine to vendor). And I get a message from the very head of kernel developers that they aren't interested in me having anything. Now, it's also true most users don't give a damn about their freedoms. And those who do are such a tiny minority they can be just ignored - unlike the valuable corporate partners.
- karma_vaccum123 10y agoThe vendor isn't obliged to make their device hackable even if they do publish the source. Some do, and that's neat, but in most cases, access to the source might, at best, only result in the next iteration of device having some change in a year's time. Your little box will continue to make you unhappy. You should just get a refund. The kernel developers aren't on the hook at all here. No one told you to buy a specific device.
- drdaeman 10y agoOh, thanks, of course you're right. Except for devices that are hackable in practice, but aren't much so because of this heartwarming attitude. It's not unusual that someone had managed to build the kernel that boots (and even works well) but doesn't know how to interface some hardware. E.g. a hardware NAT engine of a SOHO router, so FLOSS firmwares have to NAT in software. Or some sensor on a phone. The secret is in the kernel and that kernel's source's supposed to be available but it isn't.
- karma_vaccum123 10y agoThe GPLv2 has absolutely nothing to do with the EULA for a product. Your beef is with device vendors, not Linus.
- drdaeman 10y agoHere, we don't talk about the product itself, as a whole. We talk about its kernel. Sure thing, if I don't have access to the kernel, then it's all irrelevant. We only consider the cases when the device is actually hackable (despite whatever its vendor says).
- lucozade 10y ago> The only thing Linus seems to be disingenuous about is his claim of support for the GPLv2. I don't believe he's being disingenuous. What's happening is that Linus, and Greg, see the GPL as a tool, a lever if you will, to multiply the amount of code contributed to Linux and other open systems. From that engineering POV they see it as an important contributor to the success of Linux. As a consequence of that, they are in no hurry to change it as it meets their need. What they clearly don't agree with is the political motivations that drove the creation of the license in the first place. Nor do they appear to be overly concerned, on either a moral or legal level, about its violation. My guess is that, while it continues to help in their endeavour, they will continue to support it. If it were to get in the way, they would feel forced to re-think it. What I read in the thread is the view that they are concerned that a significant increase in legal actions could become a problem for them. I have some sympathy for both sides. I'd probably err on the side of Linus and Greg as my pragmatism generally outweighs my activism.
- TheOtherHobbes 10y agoSo it's now GPL-but-not-really. I.e. corporations get all the benefit of free contributions, but don't feel any need to contribute in return unless they happen to feel like doing so. And "Let's not scare the corporations" is the new "enforcement." Sweet deal for them.
- lucozade 10y ago> So it's now GPL-but-not-really. No, it's GPL. It's a perfectly reasonable, and not uncommon, strategy to use legal instruments for protective or signalling reasons but not as an offensive weapon. Patents are a similar example. They're often held defensively and for cultural signalling. When they're pursued aggressively, it's generally considered trolling. And yeah, it's a sweet deal. TBH I think that's the point - a lot of people get a sweet deal, including corporations. Where the argument seems to lie is how much should we care about free loaders if everyone's getting some candy.
- toyg 10y ago
- cyphar 10y ago> Linus is right, there is no crisis in GPL violation. There will always be violators. Any law or contract or license will be violated. Maybe proprietary software companies are happy with the current situation, but as a user who cares about my freedom, I'm very unhappy with the current situation. > Becoming more militant about enforcement will simply cause most corporate partners to disengage. Maybe people should spend less time feeling sorry for corporations and more time considering users. If you're someone who has a shitty Bluetooth light bulb running a version of GNU/Linux, the person who has given you that device has taken away your software freedom and everything that comes along with that. Having software freedom means you can completely eradicate vendor lock-in and planned obsolescence from the technology you use, as well as being able to create a community and help yourself and others as a result. Not having software freedom means that you are alone as a user of a product, at the mercy of the company that gave you that device. You see this all the time, and it worries me that it takes Matthew Garrett posting about how insecure this stuff is for people to even _consider_ that there is a serious user-facing problem here. Yes, IoT is generally not doing well, but there are legitimate uses of this stuff (people who have disabilities for example) and not caring about their software freedom is a serious social issue. > Most users comply with the license. Users have access to interesting and useful source code and have never been restricted from accessing the kernel. The GPL has no restrictions on end users. It only has restrictions for distributors, to ensure that any eventual end user of a piece of software will have software freedom and all of the benefits that come with that.
- karma_vaccum123 10y ago> If you're someone who has a shitty Bluetooth light bulb running a version of GNU/Linux, the person who has given you that device has taken away your software freedom How? You don't have a right to modify the device you purchased. You don't have a right to manufacture a clone of the device and run your patched code on it. The vendor can happily decline patches from you. So can Linus. All you will have is the right to inspect code they used and learn from it or reuse it in a lightbulb you choose to manufacture that doesn't violate some other IP the original vendor has on the original bulb. There is absolutely nothing about the GPL that grants you any particular freedom regarding the specific light bulb you purchased. If it sucks, it will continue to suck.