5

Beware The CopyLEFT Trolls (Techdirt)

 2 years ago
source link: https://lwn.net/Articles/879263/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 20, 2021 21:40 UTC (Mon) by martin.langhoff (subscriber, #61417) [Link]

The remedy is to provide a release with attributions/credits in the documentation.

Good thing to do to be tidy, but hardly something I'd pay trolls money over.

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 20, 2021 22:55 UTC (Mon) by NYKevin (subscriber, #129325) [Link]

I'm not sure that's sufficient, depending on how the software is packaged. Take the MIT license for example:

> Permission is hereby granted, [snip], subject to the following conditions:
>
> The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

If you distribute copies of the software which do not actually include any documentation (e.g. because you have a separate foo-doc package, and the user can choose to install that independently of foo), then you are not complying with the literal wording of this requirement ("...included in ALL copies or substantial portions of the Software"). This is why Android* (and many similar products) has a screen buried deep in its Settings app which will actually display all of these licenses directly on the device; they are permanently bundled with the software itself, and not a separate component that you can "forget" to provide.

* Disclaimer: I work for Google, but I don't have anything to do with Android.

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 21, 2021 5:41 UTC (Tue) by rsidd (subscriber, #2582) [Link]

As the article says, old versions of CC licences revoked permission if you violated the terms. New versions instead give you time to fix things when alerted. But a lot of stuff is out there under the old versions of the licences, and the trolls are having the permissions revoked and shaking them down for money.

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 21, 2021 10:24 UTC (Tue) by fw (subscriber, #26023) [Link]

Another remedy is to ship corresponding source code even if you don't have to, in theory. In practice, it seems to be the only way.

For example, a lot of Javascript libraries are licensed under MIT/HPND variants, and their upstreams offer pre-minified downloads which do not comply with the license notification requirements. It's unclear what that means for the notification requirement. Figuring this out on a case-by-case basis and extracting all required notifications from source code is a hopeless task. Hence my recommendation to simply ship the source code.

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 20, 2021 23:27 UTC (Mon) by developer122 (subscriber, #152928) [Link]

I'm reminded of a little kerfuffle that happened with the project to implement coreutills in rust. The comments of the offending party have since been deleted on the relevant github issue, but it went a little like this:

The project itself is MIT licenced, for a bunch of reasons believed by the project contributors. Without fail, a github issue was filed to the effect of "is not GPL licenced," asserting that all software should be licenced under the GPL. Flash forward and someone decided to fork the entire project and relicence it under the GPLv3.

However, as noted in the issue by one of the original contributors, they were actually in violation of the MIT licence (of the original repo) for not providing attribution. Furthermore, it was noted that this fork contributed nothing new (there were no changes to the code) so it was still 100% covered by MIT as well (dual-licenced?), and that the fork would legally never be capable of contributing anything upstream.

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 21, 2021 5:46 UTC (Tue) by rsidd (subscriber, #2582) [Link]

I don't know whether the "virality" of GPL has ever been tested in court. If you have a GPL program and you include a small MIT-licensed piece from elsewhere, yes, you can GPL the whole thing as long as the MIT part is attributed. But can you just add 10 lines to an MIT-licensed codebase and GPL the whole thing? That would not look like a derived work of a GPL'd work, so arguably should not be GPL'd. A decent person wouldn't do that: if contributing to an MIT-licensed project, you would use the same licence. But would it even be legal? I doubt it.

And of course you can't just stick a new licence on without doing anything else. You can't fork FreeBSD and put it under the GPL. It is all protected by copyright, and the GPL licence covers your original work and derived works, not something that is entirely somebody else's work.

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 21, 2021 9:07 UTC (Tue) by anton (subscriber, #25547) [Link]

But can you just add 10 lines to an MIT-licensed codebase and GPL the whole thing?

Why not? I think you can even do it without adding anything. You would still have to comply with the attribution requirements of the MIT license. But of course someone who prefers the MIT lincense will get his copy from somewhere without the GPL.

Does adding 10 lines change this situation? It depends if the 10 lines are significant wrt copyright, or if adding the 10 lines results in a compilation copyright. If neither, just take the 10 lines and add them to the MIT-licensed version.

A decent person wouldn't do that: if contributing to an MIT-licensed project, you would use the same licence.

So you claim that a decent person treats the MIT license as a copyleft license. But isn't the point of permissive licenses that it allows redistribution under other licenses? Maybe the anti-copyleft people need to work out a license that allow redistribution under proprietary licenses, but not under copyleft licenses.

the GPL licence covers your original work and derived works, not something that is entirely somebody else's work.

Yes, if there are no significant (wrt copyright) contributions by you in the work, you will have a hard time enforcing license compliance in court (the case will probably be thrown out because you have no legal standing), but that does not mean that you cannot redistribute the work with the GPL slapped on.

Given the outcome of Christoph Hellwig's lawsuit against VMWare, I wonder how a typical proprietary program consisting of permissively licensed components would fare if similarly tested. Maybe the company can claim compilation copyright over the collection of permissively licensed code that they distribute with a little glue.

Beware The CopyLEFT Trolls (Techdirt)

Posted Dec 21, 2021 9:56 UTC (Tue) by Wol (subscriber, #4433) [Link]

>> But can you just add 10 lines to an MIT-licensed codebase and GPL the whole thing?

> Why not? I think you can even do it without adding anything. You would still have to comply with the attribution requirements of the MIT license. But of course someone who prefers the MIT lincense will get his copy from somewhere without the GPL.

YOU CAN'T DO EITHER!

Neither MIT, nor GPL, give you permission to change someone else's licence!

So attaching a GPL licence to a MIT project ACHIEVES NOTHING. You're basically saying "this GPL applies to nothing. Move along here ..."

What actually happens, is that if you add 10 lines of GPL code to a MIT codebase, YOUR LINES ONLY are GPL. Any recipient can just delete your 10 lines and carry on with the MIT licence - they don't even need to go somewhere else to get a copy.

But if they keep your lines, and compile the project, then yes the BINARY is a derived work and covered by the GPL. Take the linux kernel for example. The overarching licence is GPL2-only, but large chunks of the code are GPL2+, MIT, Public Domain, and probably a host of others. The *binary* is GPL2-only, but that's because the only way you can comply with the myriad source licences, is to comply with the GPL.

Cheers,
Wol


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK