News for hackers. Stuff that matters.
Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by rectang on Thursday April 07, 2022 @10:25PM (#30952674)
I think we have to accept that people will reuse and modify the texts of various open source licenses in all sorts of ways which cause downstream confusion.

What the FOSS community needs to ensure is that users can always differentiate between a FOSS license and a modified version which has subtle but profound changes. Our best defenses there would seem to be trademarks and social pressure. "That's not actually the AGPL, and calling it the AGPL causes confusion in the marketplace."

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by api on Thursday April 07, 2022 @10:52PM (#30952828)
All of these headaches stem from the OSI's refusal to address the problems posed by SaaS to the open source model. Their thinking is stuck in the 1980s and 1990s.

SaaS is effectively a loophole. You can use 100% open source software to create something that is actually far more proprietary and that offers less user freedom than old school closed source applications. Yes the user can theoretically get the code but it's painful to operate and meanwhile the SaaS application has all the user's data.

Open source is rapidly becoming free labor for closed SaaS and a tool to accelerate the lock-down of user data in the cloud rather than a tool to expand user freedom.

People are trying to roll their own licenses to deal with these problems since the OSI is providing no leadership.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by dragonwriter on Friday April 08, 2022 @05:33AM (#30955040)
> All of these headaches stem from the OSI's refusal to address the problems posed by SaaS to the open source model. Their thinking is stuck in the 1980s and 1990s

There are no such problems. The “problem“ supposedly raised by SaaS is, in fact, an issue widely recognized as inherent to FOSS licensing before the OSI existed.

> Open source is rapidly becoming free labor for closed SaaS

“Free Software commercially redounds to the benefit of whatever for has the most resources to build and sell non-licensing services around it“ is not a new thing with SaaS. It's been recognized widely since the early 1990s.

What's new is people feeling entitled to a viable business mod for VC-funded startups that can free ride on FOSS-centered goodwill, without actually being FOSS.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by api on Friday April 08, 2022 @09:10AM (#30956377)
You realize that you're choosing a future here where nobody owns their data nor has the ability to actually run software on that data themselves... unless they have a lot of free time and the skills of a developer and IT professional, right?

People are letting the idea of open source as originally conceived eclipse the goal of providing freedom to the user.

It's a pretty common thing. When an idea doesn't turn out exactly as people wanted, it's very common for people to double down on the idea to the point of even turning against the original goals of the idea. This is what open source is doing. The license is more important than what the license was intended to achieve: freedom for the end user.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by jamestanderson on Thursday April 07, 2022 @11:13PM (#30952959)
Wasn't the AGPL created to address exactly this loophole?
Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by didibus on Friday April 08, 2022 @01:16AM (#30953558)
Isn't this a case of Neo4j trying to prevent a SaaS from making money selling a managed Neo4j offering?

It seems the OSI is siding against Neo4j and with the SaaS by saying Neo4j had no rights to remove the right to sell the software from the SaaS company who decided to remove the added clause preventing them from selling Neo4j.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by kuschku on Friday April 08, 2022 @05:46AM (#30955115)
The goal of the AGPL is that anyone can run a SaaS based on someone else’s code, as long as their own modifications are open as well.

Just like the GPL ensures that while Microsoft could take Linux and sell it, they’ll have to make their changes open again.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by Conan_Kudo on Thursday April 07, 2022 @11:32PM (#30953062)
Yes, yes it was.
Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by kmeisthax on Friday April 08, 2022 @01:24AM (#30953603)
If you're talking about projects where people are following the letter and spirit of the license, and publishing their code, but it's a pain to use... that's not really something you can control with a copyright license. The correct answer in that case is to not use that code and treat projects that rely on it as technical debt.

If you mean that the SaaS provider has a private fork of someone else's code, and won't publish that fork... well, AGPL already exists for that. But here's the thing: in order for any license to close this loophole, you need to create a licensing term that obligates the user to publish private forks. These terms will inevitably either restrict the user's freedom to run the program, or the user's freedom to modify the program. I don't see why we should be calling restrictions on either freedom[0] to be Free Software or Open Source.

My personal feeling is that companies that are adopting "SaaS-loophole" copylefts are looking for the street cred of being source-available, while still being able to wield copyright in the way one would with proprietary software. Hence the Commons Clause that bans commercial endeavors on top of the already difficult-to-comply-with Affero clause. If you want to be paid, just... demand payment.[1] That's what proprietary licensing is for, and you are never going to close the "SaaS loophole" in FOSS while still remaining in the spirit and letter of FOSS.

The thing about SaaS is that it wasn't invented this decade. Even back in the 80s and 90s when FOSS was novel, you had massive IBM mainframes that could be partitioned, virtualized, and rented out exactly in the same way Amazon does today.

[0] GPL and weaker copylefts are tolerable because said licensing provisions only trip on distribution. Ordinary users do not need to worry about GPL compliance until they want to give someone else their code. This is a feature, not a bug.

[1] Are FOSS support contracts still a thing?

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by goodpoint on Friday April 08, 2022 @05:14AM (#30954917)
> in order for any license to close this loophole, you need to create a licensing term that obligates the user to publish private forks. These terms will inevitably either restrict the user's freedom to run the program

No. The end user is the one using the SaaS service, not the company providing the service. AGPL is there to give freedom all the way up to the end user. Also, there is no private fork in this scenario.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by kmeisthax on Friday April 08, 2022 @09:54AM (#30956772)
Uh, there is a private fork in this scenario. The whole point of AGPL is that you cannot legally modify the software and host it over a network to avoid having to publish your fork and comply with the GPL copyleft clause. Mere use does not trip the AGPL copyleft, because Freedom Zero is considered sacrosanct.

Furthermore, there are plenty of situations involving a network, other than SaaS, in which both the client and server could be considered end-users. For example, a WordPress site. The people who own the site and the people viewing it are two separate sets of end-users with their own freedoms to protect.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by goodpoint on Friday April 08, 2022 @11:40AM (#30958609)
No, you are still conflating running something for internal use or for external users.

Under AGPL when a service is provided to the public it is not a private fork or private execution.

That's the whole point of the AGPL.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by didibus on Friday April 08, 2022 @01:10AM (#30953533)
Seems a better solution would be a checksum on the license text no?
Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by pabs3 on Friday April 08, 2022 @02:34AM (#30953959)
The most accurate license detector is ScanCode. I think it uses some sort of rolling checksum thing for detection.

https://github.com/nexB/scancode-toolkit/

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by pombreda on Saturday April 09, 2022 @02:26AM (#30965677)
Hey, pabs3! Actually this is not using a rolling checksum for detection but rather a combo of language model, checksums, automatons, bitvectors, inverted indexes and multiple sequences alignment (e.g. a specialized diff). I put some docs there to explain the approach at ahttps://github.com/nexB/scancode-toolkit/blob/develop/src/li...
Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by pombreda on Saturday April 09, 2022 @02:31AM (#30965700)
You need a bit more than checksums for this. If anything the FSF published many different versions of the "official" GPL2 texts and this would defeat checksums. See https://github.com/pombredanne/gpl-history ... so in the general cases hashing a text does not work consistently and safely. Eventually you need a diff for a pairwise comparison, and the only difficulty is making diff fast or find ways to approximate it fast enough to avoid doing a full diff.
Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by itsabug on Thursday April 07, 2022 @10:36PM (#30952738)
In fact, modifying and updating licenses falls under what I'd consider free speech. The answer to bad license edits is not to shut them down, it's just to write better ones and convince others to use them.

I may not agree with bad license edits, but I'll defend them under the right to the free speech of the developer who is shipping the code.

Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by michaelmrose on Thursday April 07, 2022 @11:16PM (#30952976)
It's never been acceptable free speech to sell a fake Rolex watch or a fake Samsung TV and its not a violation of free speech to insist they call it something else. This is a really weird hill to die on.
Re:User beware: Modified AGPLv3 removes freedoms, adds legal... by miffy900 on Thursday April 07, 2022 @11:07PM (#30952929)
What you're talking about falls under Fair Use. Free speech protections don't provide any such right.