News for hackers. Stuff that matters.
Re:EU study recommends OpenBSD by jkyle on Monday April 27, 2015 @09:30AM (#9446097)
> Theo De Raadt always complained that many of the institutions that run and use OpenBSD don't contribute back.

Sounds like he needs a different license then.

Re:EU study recommends OpenBSD by weland on Monday April 27, 2015 @10:14AM (#9446400)
More often than not, he wasn't referring to contributions in the FSF sense (i.e. people modifying code that they don't send back to the original authors). He simply meant that many of the institutions that run and use OpenBSD, which is available entirely for free, don't give anything in return - be it in the form of code, money, documentation or promotion. Another free license solves only a small proportion of this problem.
Re:EU study recommends OpenBSD by jkyle on Monday April 27, 2015 @10:57AM (#9446679)

    Another free license solves only a small proportion of this problem.
True, but with BSD I'm not sure you can view it as a problem to begin with since the license is explicitly designed to legally absolve the user of all obligation to do just that.

If you desire monetary contributions be made, some kind of commercial license is the solution. If you desire modifications be contributed back, there are other licenses that cover that expectation. And there's nothing stopping you from creating your own license.

If you don't require or expect any contributions back or monetary contributions under any scenarios, then BSD is a great license for that.

I'm sure when confronted with a lack of contribution (monetary, labor, code modifications), most companies would reply "Well, yes. That's why we chose software with a BSD license."

Re:EU study recommends OpenBSD by Freaky on Monday April 27, 2015 @04:05PM (#9448758)
I think from the BSD point of view, contributing back is seen more of a weak social obligation than a legal one. You contribute back because it's a nice thing to do for those giving you free stuff, not because of section 6 paragraph 1 of some ten page legal document.

Asking people to consider it is the right thing to do. Switching license would defeat the entire point.

Re:EU study recommends OpenBSD by xorcist on Monday April 27, 2015 @04:30PM (#9448894)
There probably exists lots of differing experience on this, but I've found it easier to get permission to contribute paid work on a tit-for-tat basis, because it alleviates the "why should we let our competitors use our work for free" question.

I don't think that it is a coincidence that GPL led to Red Hat, a billion dollar support and services company, while BSD let to a multitude of hardware companies. The former is direct and the latter indirect profits of their respective software. The difference in worldview leads to different business ideas.

Re:EU study recommends OpenBSD by hobarrera on Wednesday April 29, 2015 @04:07PM (#9461337)
> I don't think that it is a coincidence that GPL led to Red Hat, a billion dollar support and services company, while BSD let to a multitude of hardware companies.

GPL isn't directly responsible for Red Hat. The popularity of GNU/Linux at the time (vs *BSD) of it's inception is responsible for that. Licence had nothing to do with it.

Re:EU study recommends OpenBSD by xorcist on Friday May 01, 2015 @07:50AM (#9470702)
Don't take my word for it. Take Bob Young's.
Re:EU study recommends OpenBSD by edejong on Monday April 27, 2015 @11:54AM (#9447084)
There is definitely business value in contributing to these projects.

First of all, by contributing, you show a mutual interest in the increased quality of the solution. This in turn will motivate the maintainers to better understand the business concerns of the new contributor.

By contributing, the contributor will gain insights in the workings of the solution, thus increasing the quality of the product itself. (As an analogy: by taking apart an amplifier, you increase your understanding of the way the product satisfies your needs).

Last but not least, contributing generates good-will, subsequently increasing the probability of adequate answers to support questions.

Re:EU study recommends OpenBSD by cwyers on Monday April 27, 2015 @12:47PM (#9447462)
There's also a lot of business value in freeriding when the software license explicitly allows you to do so.
Re:EU study recommends OpenBSD by edejong on Monday April 27, 2015 @01:17PM (#9447699)
Sure, the business values I mentioned are like 'extra income' over the free-riding 'income' you mention.

(Now this makes me wonder how to book the use of open source software in management accounting)

Re:EU study recommends OpenBSD by kyllo on Monday April 27, 2015 @01:01PM (#9447576)
It's also free on-the-job training for your in-house developers, and it probably also helps your company when you're recruiting developers--you can look for potential employees among the other contributors to the same OSS project your company uses.
Re:EU study recommends OpenBSD by weland on Monday April 27, 2015 @11:07AM (#9446747)
There are things in this world that are not a business.
Re:EU study recommends OpenBSD by sobkas on Monday April 27, 2015 @11:36AM (#9446949)
But also this things don't have money to spend on software they can use for free. Or time to contribute in any other way.
Re:EU study recommends OpenBSD by the_af on Monday April 27, 2015 @12:19PM (#9447236)
Yes, but forget monetary/labor contributions. I think jkyle has a point: the BSD license is a "no strings attached" license, and so it can be chosen by people who presumably don't even want to promote the software, advertise the fact they are using it or campaign for more software like it. If Theo De Raadt finds this disappointing, maybe he should choose a different license?
Re:EU study recommends OpenBSD by yellowapple on Monday April 27, 2015 @12:55PM (#9447526)
The problem is that de Raadt and crew have a much bigger priority: that OpenBSD's code proliferate and prevent any duplication of effort in creating secure programs. They've explicitly stated in the past that they consider proprietary use of their code to be a good thing (albeit it would be better if they'd push some money back to the OpenBSD crowd) because it prevents those companies from having to create yet another in-house-developed (and probably half-assed) security implementation.
Re:EU study recommends OpenBSD by jkyle on Tuesday April 28, 2015 @04:16PM (#9454878)

    The problem is that de Raadt and crew have a much bigger priority: that OpenBSD's code proliferate and prevent any duplication of effort in creating secure programs.
I think that's an excellent reason to use a BSD license. If you want to facilitate wide industry adoption that has zero resistance from legal departments, BSD is an obvious choice.
Re:EU study recommends OpenBSD by the_af on Monday April 27, 2015 @02:33PM (#9448251)
That's a perfectly reasonable priority! It's just that it possibly comes along with some disappointment, caused by people who don't contribute anything back (money, code, documentation or simply promoting the software).
Re:EU study recommends OpenBSD by yellowapple on Monday April 27, 2015 @02:44PM (#9448328)
Indeed. I'm personally glad it's the priority; knowing full well that non-free software ain't going away any time soon (alas), I'd much rather that non-free software be using well-designed and thoroughly-audited OpenBSD-derived code than using some hacked-up monstrosity in its place.
Re:EU study recommends OpenBSD by zkhalique on Monday April 27, 2015 @04:50PM (#9448984)
Actually what he said was:

GPL fans said the great problem we would face is that companies would take our BSD code, modify it, and not give back. Nope—the great problem we face is that people would wrap the GPL around our code, and lock us out in the same way that these supposed companies would lock us out. Just like the Linux community, we have many companies giving us code back, all the time. But once the code is GPL'd, we cannot get it back.

Re:EU study recommends OpenBSD by pyre on Monday April 27, 2015 @12:38PM (#9447396)
As we've seen with GPL'd code, many companies are happy to skirt the license restrictions if they feel that they can get away with it. How much money and effort would then need to be expended to enforcement of said new license for OpenBSD? How many companies would do a cost/benefit analysis of the likelihood of OpenBSD lawyers suing them, and even then ignore the license if they thought that it would be less expensive to risk a lawsuit?

"Change the license" isn't a silver bullet. Companies aren't machines that are fed licenses that they then obey like punch cards into an old IBM machine.

Re:EU study recommends OpenBSD by joshuapants on Monday April 27, 2015 @09:42AM (#9446180)
I don't think that would make them likely to contribute back, they'd just use something else. He'd rather have selfish people using good software than choosing to use something inferior.
Re:EU study recommends OpenBSD by jkyle on Monday April 27, 2015 @09:59AM (#9446299)
Maybe, maybe not. They'd all do the same sort of cost/benefit assessment and if they deemed the benefit to outweigh the cost of contributing back they would do it.

There'd be some who would change their options and some that would become contributors. Hard to say how it would pan out.

But, when you select a license like BSD (which I've done myself) you shouldn't complain when users don't contribute back.

You selected a license that formally declares your intent and expectations; the user has formally agreed to them.

Re:EU study recommends OpenBSD by clarry on Monday April 27, 2015 @12:07PM (#9447164)
Actually one's expectation can very well be that people be nice to you even if you're not using legalese to require that of them.
Re:EU study recommends OpenBSD by s73v3r on Monday April 27, 2015 @01:04PM (#9447599)
I wonder how much of an actual analysis is done in these cases, and how much it's just a boss saying that he doesn't want people "wasting their time" working on something that isn't directly related to their stuff.
Re:EU study recommends OpenBSD by zanny on Monday April 27, 2015 @11:33AM (#9446935)
Somehow Google, Samsung, and Intel are sticking the Linux kernel in everything despite it being GPL'd and them having to release their modifications. Might have something to do with how reengineering the Linux kernel would cost on the order of billions of dollars in engineer time.
Re:EU study recommends OpenBSD by mschuster91 on Monday April 27, 2015 @07:20PM (#9449730)
Just look at how many Android vendors actually honor the GPL. Even the major vendors tend to mess up their source code dumps, and lots of the Chinese (hi Mediatek) vendors don't even react on emails.

Google should require in the vendor license terms for the Android brand and the Play Store that the sources be released on Github.

Re:EU study recommends OpenBSD by tbrownaw on Monday April 27, 2015 @09:44AM (#9446193)
I don't think any of the free/open licenses require users to contribute to the parent project. I don't think any even require that people distributing modified versions, send those modifications back upstream.
Re:EU study recommends OpenBSD by SixSigma on Monday April 27, 2015 @09:54AM (#9446256)
In fact there was a shitstorm when some licences had "all modifications must be sent upstream" clauses e.g. Plan9's original license had that clause. And then the "tick this box if you don't make nuclear weapons" clause was lambasted in Theo's colourful style [1]. There was a time when OpenBSD were considering moving to the plan9 tool chain - which is now available under both GPL and MIT licensing.

That sad part was, most everyone in the plan9 community agreed with him but had their hands tied by Alacatel/Lucent legal and US law.

[1] https://groups.google.com/forum/?_escaped_fragment_=topic/co...

Re:EU study recommends OpenBSD by Someone1234 on Monday April 27, 2015 @09:56AM (#9446270)
The GPL kinda-sorta does. I guess it depends on your definition of "contribute back." People that derive from GPL source have to release those changes to the public, which could just be a zip archive on their web-site rather than a git pull request.

I guess what I mean is, the company can try to be as unhelpful as possible (e.g. strip comments, place all code into a giant .cpp file, etc) but it does technically have to publish source code regardless.

Re:EU study recommends OpenBSD by cwyers on Monday April 27, 2015 @10:05AM (#9446340)
The GPL requires you to distribute source code in addition to binaries. If you don't distribute binaries (i.e. if you're running the code on your server farm only), then you don't have to distribute anything.
Re:EU study recommends OpenBSD by nitramafve on Monday April 27, 2015 @10:24AM (#9446457)
That is why some choose to license their work under AGPL.
Re:EU study recommends OpenBSD by istvan__ on Monday April 27, 2015 @11:33AM (#9446933)
If you work for a bigger organization these licenses are banned for a good reason. There are some companies who are a little bit too relaxed with this ban (like VMWare) and you can see the results. I know for fact that some of the big guys take licensing very seriously and there are licenses that are approved for use while others are banned. The want to make sure there is no surprise down the road.
Re:EU study recommends OpenBSD by psykovsky on Monday April 27, 2015 @11:22AM (#9446862)
And that's why some stay away from AGPL licensed projects.
Re:EU study recommends OpenBSD by cwyers on Monday April 27, 2015 @12:33PM (#9447353)
That still only goes so far, though. If you're building a product on top of a database that's licensed with the AGPL, like Mongo, you have to distribute those changes.* If you build your Intranet site on Mongo, though, you don't need to distribute those changes in a way that gets back to upstream.

* I think. And I don't know if this has withstood the sort of court scrutiny the GPL has.

Re:EU study recommends OpenBSD by yellowapple on Monday April 27, 2015 @01:32PM (#9447824)
For the intranet site, I think you'd still need to make the source code available to users, who could then make the source publicly available.

IANAL, though, so I don't know if corporate policy forbidding this would be legal under the terms of the AGPL.

Re:EU study recommends OpenBSD by dublinben on Monday April 27, 2015 @05:27PM (#9449197)
>I don't know if corporate policy forbidding this would be legal under the terms of the AGPL

Section 10 of both the GPLv3 and AGPLv3 prevent the imposition of "further restrictions" on the subject of the license.

Re:EU study recommends OpenBSD by yellowapple on Monday April 27, 2015 @05:46PM (#9449301)
I'm aware. What's not clear is whether applies to the individual components of an organization (i.e. its employees) or just the organization as a whole. I want to think the answer is that intra-organizational distribution still counts as distribution (and therefore cannot be restricted), but usually it's considered acceptable to use a modified version of (A)GPL'd software internally (i.e. not used outside the organization) without it counting as "distribution", so things are kind of fuzzy without explicit terms in that regard.

Such are the side-effects of treating organizations as singular entities :)

Re:EU study recommends OpenBSD by reitanqild on Monday April 27, 2015 @01:48PM (#9447927)
As far as I know mongo think they have solved this by providing dricers under a different licence.

Again, AFAIK, this licencing (AGPL + MIT/BSD or Apache) has not been tested in court.

Re:EU study recommends OpenBSD by hobarrera on Wednesday April 29, 2015 @04:11PM (#9461368)
And that would make no change for things like OSs.

If OpenBSD was AGPL and my ISP used it on all its network hardware with some custom modification, they still wouldn't be forced to contribute back those changes.

We need to stop making licences that attempt to force people to do the right thing, and start educating people to do the write thing out of free will.

Re:EU study recommends OpenBSD by debacle on Monday April 27, 2015 @10:05AM (#9446339)
> People that derive from GPL source have to release those changes to the public

This is entirely not true. If I take a GPLed application, download it, modify it, and never distribute it, then I am under no obligation to release the source.

Re:EU study recommends OpenBSD by icebraining on Monday April 27, 2015 @10:17AM (#9446424)
People that derive from GPL source have to release those changes to the public

No, only to the people who have received binaries of those derivations.

Re:EU study recommends OpenBSD by jkyle on Monday April 27, 2015 @10:03AM (#9446326)

    I don't think any even require that people distributing modified versions, send those modifications back upstream.
Copy Left licenses require those changes be shared on request. Which is pretty close.
Re:EU study recommends OpenBSD by jdub on Monday April 27, 2015 @10:07AM (#9446361)
Copyleft licenses require changes be shared on distribution, and only to whom binaries have been distributed.
Re:EU study recommends OpenBSD by amyjess on Monday April 27, 2015 @11:23AM (#9446863)
Technically speaking, a license only has to require that changes be licensed under the same terms as the original to be deemed "copyleft".

The requirement to release source is specifically a GPLism and not part of all copyleft licenses. It's not infeasible for a copyleft license to imply "sure, it's legal for someone to create and distribute derivative works based on top of your modifications, but only if they have the technical skill to reverse-engineer it".

Re:EU study recommends OpenBSD by yellowapple on Monday April 27, 2015 @01:29PM (#9447792)
The Artistic License 2.0 (and possibly 1.0/1.1; I'm not as familiar with their license texts) specifies making changes available to the original author (without necessarily making them public) under the terms of the original license as one option for conditions by which one can use Artistically Licensed code (along with "give it a new name and don't interfere with installing the original version" and "release the source code publicly under a FOSS license", in that order).
Re:EU study recommends OpenBSD by giovannibajo1 on Monday April 27, 2015 @11:14AM (#9446796)
TBH a single organization adopting and customizing a GPL software for internal usage isn't forced to contribute back, as GPL affects redistribution not adoption.
Re:EU study recommends OpenBSD by hobarrera on Wednesday April 29, 2015 @04:04PM (#9461318)
The only licence that will fix this is one that requires payment from users, and that's never going to happen.

Things like GPL don't force users to send back contributions unless you redistribute a derivate product (which is not usually the case). Theo is talking about giving something back (an acknowledgement, or even better, money).

Re:EU study recommends OpenBSD by istvan__ on Monday April 27, 2015 @11:31AM (#9446920)
Easy like that?