3 ms·

It wouldn’t surprise me if most companies steal GPL code. When code is closed source, how can anyone know?

yuvalr1 2y ago
There are some indirect ways. Suspecting users can try the software to see if it has the exact same functionality or bugs as the copied GPL library. This is of course not a definite proof, but some amount of rare enough coincidences can be considered as a very strong sign for copying. Legal measures can be taken on account of these evidences. And of course there is always the option of a whistleblower.
NikkiA 2y ago
Usually 'strings' on the binary shows up tell-tale signs. Granted that means the 'smart' infringers are likely to slip through the sieve, but at that point they'll have to essentially be re-writing the code anyway, and lose most of the benefit that they'd get stealing the GPL code (they'd have to hand-roll any bug or security fixes back into their stolen-but-obscured GPL code)
- dbtablesorrows 2y ago
  Not if they can use an obfuscator?
lizknope 2y ago
https://en.wikipedia.org/wiki/GNU_General_Public_License#Legal_status https://en.wikipedia.org/wiki/GNU_General_Public_License#Leg... There are cases here where companies used GPL code without releasing their changes. How do licenses of a source code check if the people using their code is complying with the license it uses? https://www.reddit.com/r/embedded/comments/18gie6l/how_do_licenses_of_a_source_code_check_if_the/ https://www.reddit.com/r/embedded/comments/18gie6l/how_do_li... The fastest way is often to just run the "Strings" program on the software. Often it will dump out a bunch of strings that match those in the Open Source project: Error Messages, Logging messages, etc. Sometimes if they're really sloppy it'll spit out the name of the GPL program/library directly and a version number. I often add magic arrays to my code. So.. if I find them in a binary blob... Have there been any lawsuits involving breach of open source licences? https://opensource.stackexchange.com/questions/11452/have-there-been-any-lawsuits-involving-breach-of-open-source-licences https://opensource.stackexchange.com/questions/11452/have-th...
random3 2y ago
Pretty much any (non-entry level) engineer at a decent software company knows what licenses to avoid. There are strict policies against the use of viral licenses along with training and automation to detect it, etc. Also I don't think it's that easy to conceal and not sure any serious company would risk the liability.
throwaway48476 2y ago
The people who find it more convenient to steal GPL software are not the same group willing to do the work of obfuscsting that fact.

There are some indirect ways. Suspecting users can try the software to see if it has the exact same functionality or bugs as the copied GPL library. This is of course not a definite proof, but some amount of rare enough coincidences can be considered as a very strong sign for copying. Legal measures can be taken on account of these evidences. And of course there is always the option of a whistleblower.

NikkiA 2y ago

Usually 'strings' on the binary shows up tell-tale signs. Granted that means the 'smart' infringers are likely to slip through the sieve, but at that point they'll have to essentially be re-writing the code anyway, and lose most of the benefit that they'd get stealing the GPL code (they'd have to hand-roll any bug or security fixes back into their stolen-but-obscured GPL code)

dbtablesorrows 2y ago
Not if they can use an obfuscator?

lizknope 2y ago

https://en.wikipedia.org/wiki/GNU_General_Public_License#Legal_status https://en.wikipedia.org/wiki/GNU_General_Public_License#Leg... There are cases here where companies used GPL code without releasing their changes. How do licenses of a source code check if the people using their code is complying with the license it uses? https://www.reddit.com/r/embedded/comments/18gie6l/how_do_licenses_of_a_source_code_check_if_the/ https://www.reddit.com/r/embedded/comments/18gie6l/how_do_li... The fastest way is often to just run the "Strings" program on the software. Often it will dump out a bunch of strings that match those in the Open Source project: Error Messages, Logging messages, etc. Sometimes if they're really sloppy it'll spit out the name of the GPL program/library directly and a version number. I often add magic arrays to my code. So.. if I find them in a binary blob... Have there been any lawsuits involving breach of open source licences? https://opensource.stackexchange.com/questions/11452/have-there-been-any-lawsuits-involving-breach-of-open-source-licences https://opensource.stackexchange.com/questions/11452/have-th...

random3 2y ago

Pretty much any (non-entry level) engineer at a decent software company knows what licenses to avoid. There are strict policies against the use of viral licenses along with training and automation to detect it, etc. Also I don't think it's that easy to conceal and not sure any serious company would risk the liability.

throwaway48476 2y ago

The people who find it more convenient to steal GPL software are not the same group willing to do the work of obfuscsting that fact.