News for hackers. Stuff that matters.
Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by kgwxd on Monday October 11, 2021 @10:53AM (#28828975)
Can you point to where in the GPL it says that it must be explicitly offered? I don't remember ever reading anything that gave me that impression, or anyone even informally mentioning that was the case.

I ask because I'd be in violation. I've attached the GPL to a bunch of dinky little projects I haven't bother hosting a public repository for because I don't think anyone else in the 'verse really cares. In most cases I know I'm the only user, but there are a few that some other people have at least downloaded (probably bots or mistakes, but downloaded nonetheless).

Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by teddyh on Monday October 11, 2021 @11:21AM (#28829349)
You’re not in violation. If people download the binaries, and you offer the source code at the same download site, and they choose not to download the source code, that’s on them; you are off the hook.

I also did not mention (because it was not relevant to the parties being discussed) one other option: If you received the binaries from someone else, with a written offer for source code, and you are distributing the binaries non-commercially, you can simply forward a copy of the written offer of source code you received.

The section of the GPL 2 you want is section 3, and in GPL 3 it’s section 6.

Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by Liquid_Fire on Monday October 11, 2021 @11:25AM (#28829400)
This is covered in section 6 of the GPL(v3). See the text here: https://www.gnu.org/licenses/gpl-3.0.en.html

Note that there are some changes here compared to v2 of the GPL.

IANAL but my understanding/interpretation (simplified) is you have to either:

6a) Ship the binaries in a physical product with a copy of the source code accompanying

6b) Ship the binaries in a physical product along with an offer to provide the source code on request

6c) "occasionally and noncommercially" ship the binaries (not necessarily in a physical product) along with an offer to provide the source code on request

6d) Make the binaries available from somewhere (e.g. a website) which also offers the source code (e.g. GitHub would count)

6e) Ship the binaries via a P2P mechanism if you include a link to where you host the source code

Again, IANAL but if you hosted a GPLv3 binary somewhere without source code, it would technically be a violation of the GPL.

However, since you are the copyright holder in this case, you can ship it however you want - it would just prevent anyone else from then distributing it under the GPL since they wouldn't be able to comply with section 6, since they don't have the source code.

Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by eurasiantiger on Monday October 11, 2021 @02:20PM (#28831232)
But this is not about distributing GPL code in a custom binary. Rather, a GPL binary library was linked against by a custom binary, and that GPL binary was distributed alongside the ”custom” binary. Do those license terms apply here?
Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by heavyset_go on Monday October 11, 2021 @03:16PM (#28831894)
Yes, linking to a GPL library means you need to follow the terms of the GPL.
Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by eurasiantiger on Monday October 11, 2021 @03:59PM (#28832356)
Pardon the confusion, this was about LGPL, not GPL—and the former does allow linking.
Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by heavyset_go on Monday October 11, 2021 @06:06PM (#28833643)
There are terms you need to follow when you link to LGPL libraries, as well. You need to provide your compiled program in an object format such that users can link it against their own versions of the LGPL library you originally linked it against. The LGPLv3 also adds some anti-Tivoization clauses, too, that make those rights explicit.
Re:Malwarebytes' privacy VPN is Mullvad in a shady trenchcoat by scbrg on Monday October 11, 2021 @11:11AM (#28829231)
Section 6 pretty much lets you choose between:

- Bundling the source with the program (a)

- Letting people download the source from the same place as they can download the program (d)

- A written offer to hand over the source on request (b, c, e)

https://www.gnu.org/licenses/gpl-3.0.en.html