News for hackers. Stuff that matters.
Re:Truth Social broke software rules, says copyleft group by kfprt on Friday October 22, 2021 @01:28PM (#28960036)
Is the service even public yet? The license says that users of the service are entitled to the code but if the service isn't open to users I fail to see the violation.
Re:Truth Social broke software rules, says copyleft group by Xylakant on Friday October 22, 2021 @01:31PM (#28960082)
According to the article, a beta version was available and the claim is that users that had access to the beta are entitled to the source.
Re:Truth Social broke software rules, says copyleft group by kfprt on Friday October 22, 2021 @01:34PM (#28960101)
It didn't say that the beta was public. If you run AGPL code on a home server for personal use and someone hacks in I don't think you should owe them code.
Re:Truth Social broke software rules, says copyleft group by qkqk on Friday October 22, 2021 @01:53PM (#28960336)
It did say the beta was public

"Truth Social hasn’t officially launched. But users could access a test version of the platform"

> if you run AGPL code on a home server for personal use and someone hacks in

No one hacked in [1]

"we could find no evidence that someone illegally broke into the website [...] the site was simply deployed live early as a test, and without proper configuration [...] people merely used the site legitimately to register accounts and use its features"

https://sfconservancy.org/blog/2021/oct/21/trump-groups-viol...

Re:Truth Social broke software rules, says copyleft group by humanistbot on Friday October 22, 2021 @01:36PM (#28960128)
If you deploy a "test" version of an app to a public server/domain and send an invite to a closed mailing list for users to beta test it, then that still triggers the AGPL.
Re:Truth Social broke software rules, says copyleft group by kfprt on Friday October 22, 2021 @01:38PM (#28960152)
You are absolutely correct. As far as I'm aware they never sent any invites though.

edit: Only the users of the AGPL service are owed the code, it doesn't need to be posted publicly.

Re:Truth Social broke software rules, says copyleft group by kazinator on Friday October 22, 2021 @02:17PM (#28960621)
I think if you run AGPL code on a public server and someone breaks into it, you also don't owe them the source code because unauthorized access isn't legitimate use.
Re:Truth Social broke software rules, says copyleft group by kazinator on Friday October 22, 2021 @02:15PM (#28960602)
What is the definition of a "user"? Is every visiting rando from the Internet a user? If a person has five sock-puppet accounts, is that five users or one?

If a software robot creates an account, is that a user? Do we owe the source code to the robot? Or to the author of the robot?

Are users of the service entitled to free-of-charge access to the source code? Or could you comply by stating, "for a processing fee of $17,750 USD, we will mail a thumb drive to a real person's residential address"?

Re:Truth Social broke software rules, says copyleft group by wccrawford on Friday October 22, 2021 @02:34PM (#28960831)
>Is every visiting rando from the Internet a user?

Yes.

> If a person has five sock-puppet accounts, is that five users or one?

Each of those sock-puppet accounts can request the source, so 5. No wait, it's still a single human being, so 1. Either way, it doesn't matter. They can request the source, and they should get it.

Are users of the service entitled to free-of-charge access to the source code?

No, with limits.

https://softwarefreedom.org/resources/2008/compliance-guide....

>GPLv2 permits “a charge no more than your cost of physically performing source distribution”. This fee must be reasonable.

Re:Truth Social broke software rules, says copyleft group by colejohnson66 on Friday October 22, 2021 @03:00PM (#28961182)
> Each of those sock-puppet accounts can request the source, so 5. No wait, it's still a single human being, so 1. Either way, it doesn't matter. They can request the source, and they should get it.

The answer is complicated.

If I hack into a company and steal a binary for an internal tool (that uses GPL licensed stuff), I can’t demand the source code because I was not authorized to use said binary.

If its a beta not designed to be used by the public, it’s not clear how it will go. The users weren’t authorized to use it but it was easily accessible.

See also: the horrific CFAA Act

Re:Truth Social broke software rules, says copyleft group by kazinator on Friday October 22, 2021 @03:59PM (#28961952)
OK. Now, further, suppose you're the member of some copyleft outrage group and have heard that someone broke into a company and obtained an internal tool based on GPL-ed code. You jump up and down and scream that the person be given the source code in 30 days, or you will somehow terminate their license to use that code.

Does that fit what we are looking at here?

Re:Truth Social broke software rules, says copyleft group by colejohnson66 on Friday October 22, 2021 @10:45PM (#28965225)
From my outside view as a non-lawyer: probably
Re:Truth Social broke software rules, says copyleft group by kazinator on Friday October 22, 2021 @03:35PM (#28961625)
That's interesting; so if I have a developer make $50K worth of changes to some GPLv2 program, I still can't charge more for distributing it than the cost of the distribution errand.

The way you get paid is not to do the changes until/unless you have some work contract in place beforehand. If you've already made the changes, you mustn't try to get paid for them.

I didn't even notice that all these years.

Re:Truth Social broke software rules, says copyleft group by fineIllregister on Friday October 22, 2021 @04:16PM (#28962190)
I think that's a misreading. That clause only limits additional fees charged to existing users for access to the source code.

You can make the changes and charge whatever you want for the software. When the user requests the source code, as is their right, for that you can only charge the physical costs.

The intent is to prevent expensive source code fees from being used as an end-around the source disclosure requirements. It also makes sure the distributor can cover the cosrs, but no more than that.

Re:Truth Social broke software rules, says copyleft group by kazinator on Friday October 22, 2021 @04:35PM (#28962419)
> I think that's a misreading.

Right? But since that's a legal document, possible misreadings can end up exploited somehow.

Even something like an ambiguous comma can be at the crux of a dispute

https://www.nytimes.com/2018/02/09/us/oxford-comma-maine.htm...

Re:Truth Social broke software rules, says copyleft group by GoblinSlayer on Friday October 22, 2021 @06:24PM (#28963518)
You can release your changes under a proprietary license, then relicense as GPL when you receive money. If you don't release it into general availability, you can simply revoke it.
Re:Truth Social broke software rules, says copyleft group by kazinator on Friday October 22, 2021 @03:46PM (#28961764)
> >Is every visiting rando from the Internet a user?

> Yes.

According to what legal doctrine, where, though?

The "user" is a party in the license contract, so that requires a concrete, identifiable legal entity --- or so I would naively think, IANAL and all.

Re:Truth Social broke software rules, says copyleft group by solarkraft on Friday October 22, 2021 @02:38PM (#28960860)
> Is every visiting rando from the Internet a user?

Yes.

> Or could you comply by stating, "for a processing fee of $17,750 USD, we will mail a thumb drive to a real person's residential address"?

The author doesn't have to distribute their clause for free, but I assume there's some clause about not being allowed to charge an outrageous price. More importantly, whoever pays for the initial distribution will be allowed to further distribute it for free.

See https://www.gnu.org/licenses/gpl-faq.html#CompanyGPLCostsMon...

Re:Truth Social broke software rules, says copyleft group by humanistbot on Friday October 22, 2021 @01:31PM (#28960072)
From TFA:

Truth Social hasn’t officially launched. But users could access a test version of the platform, where many of them created prank accounts that flooded the service with false company announcements and even fake Donald Trump posts. (The platform has since been replaced by a waitlist.) The SFC demands that TMTG offer all these users access to the Truth Social source code. “If they fail to do this within 30 days, their rights and permissions in the software are automatically and permanently terminated,” Kuhn says.