Linux.com

Feature: Legal

What to do if you're involved in code-dispute litigation

By Jem Matzan and Chris Preimesberger on October 04, 2004 (8:00:00 AM)

Share    Print    Comments   

What do we in the free software community do when faced with allegations of code theft? On the other hand, what do you as a businessman or developer do if you suspect free software developers have stolen your proprietary code? These two questions are coming up more often nowadays, both as genuine issues and as weapons used by failing proprietary software firms. We asked several industry experts for their opinions on these issues.

Follow the leader: The FSF sets good examples

When the Free Software Foundation experiences issues like these, it handles them in a quiet, professional manner; rarely does it have to go to court, Ravicher said.

"There is no one-size-fits-all solution to dealing with third parties who may be infringing your copyrights," Ravicher said. "For many people, the Free Software Foundation's procedures for handling GPL compliance matters can be a shining example of both successful resolution of such issues and successful promulgation of free software adoption."

To learn more about what FSF does, one can read articles by Eben Moglen, general counsel of FSF, regarding enforcement of the GPL (Part I and Part II), or attend an FSF seminar offered from time to time that gives an in depth discussion of FSF's GPL Compliance procedures. The process involves registering copyrights, approaching potential infringers in a respectful and discrete manner, and being reasonable and respectful in negotiating compliance, he said.

Balance and integrity: Making money ethically

The most-avoided question we asked our panel of experts was: "How do we balance open source software development with the desire to profit from software?"

Weathersby said, "That is what we're all trying to figure out. Open source software is only part of the total equation. The other part of the equation is your ability to combine, manage and service the program or solution you offer. From a business perspective, open source also demands a competitive economic landscape. Since we're all building with the same pile of blocks, you and I have access to the same basic resources. Your value add is how you put it together, manage it, and especially how you treat your customers."

Miro International paid a lot of money to redesign and recode the Mambo open-source CMS project, and then the company recoded it further to use as a commercial product. The commercial product shares no code with the open source project, a distinction which is necessary to maintain compliance with the licensing that both software packages are under.

"The only benefits Miro gets [by its support of Mambo] are by its association with the Mambo open source project," Lamont said. "Typically this is in the footer of many of the templates and in the header of the Mambo system files. There is usually no confusion about our commercial edition of Mambo CMS and the free Mambo OS, as we carry stories about the differences on both www.miro.com.au and www.mamboserver.com; however, some people opt to have their clients use our commercial version to take advantage of the commercial support we offer. This is the other benefit by association."

Ravicher had some advice on staying out of trouble with the GNU GPL. "In order to not violate the GPL, one either needs to not create a (proprietary and distributed) derivative work of GPL'd software (because doing so without permission of the copyright owner constitutes copyright infringement), or only create independent and separate works (because that is permissible under copyright law without the permission of the copyright holder in the original work). The line between derivative and independent is not clear. For a discussion of that issue, see my article on the subject."

Some people question what constitutes "redistribution" of GPLed software. Certainly you can make whatever proprietary modifications you want to, but you are not allowed to redistribute free software under a different license.

So what is redistribution, in the legal sense? "Redistribution of a copyrighted work is distribution of the work by one to whom it was distributed. Distribution of a work is any transfer (whether for fee or not, or for commercial or non-commercial purposes) of the work from one person to another, with the understanding that corporations are considered persons," Ravicher said.

If you have GPL code and are using it privately, do you have any recourse if someone else creates a derivative work from it and distributes it?

Open Source Initiative attorney Larry Rosen, author of the new book "Open Source Licensing: Software Freedom and Intellectual Property Law," said he "could not imagine any court issuing a judgment against any user of software released under the GPL, as long as the user abides by the rules of the license.

"By definition, all software released under the GPL means that one can assume the work may be copied, distributed, or otherwise modified by any other user," Rosen said. "The creator can't 'GPL' something and then turn around and say, 'I really didn't intend this to be used any other way.' That makes no sense."

Rosen pointed out the five main principles for designating an open source release under the GPL:

  • The software may have unlimited usage.
  • The user may copy and distribute copies -- as many as desired.
  • The user may create derivative works on top of the source code.
  • The source code itself can be reused for derivative work.
  • The user has the right to combine the open source code with other (proprietary) software to create other derivative works.

Stanford University law professor and Creative Commons chairman Lawrence Lessig, asked what steps a person should take if he or she thinks proprietary code is being used in a free software program or project, replied: "It's very easy to know -- just look. The other way is not easy to know -- impossible for a free software project to know whether its code has been stolen."

What someone should not do when they suspect code misuse is "accuse," Lessig wrote in an email to NewsForge. "Ask first," he said. Lessig also said that "the FSF has begun a process of code authentication. It needs to be generalized."

Final advice and summary

So to sum it all up:

  • Provide contact information for your project's leadership or designated liaison for code theft of copyright infringement issues.
  • Maintain proper documentation for all contributors and their contributions.
  • Assign copyright ownership immediately, preferably all to one person or entity.
  • If you suspect code theft or copyright infringement, stay calm and be mature and professional. Have respect for the other party. Do not publish public statements or threats.
  • Assume nothing until the code is examined and compared.
  • Try to work out the dispute in a reasonable manner.
  • If the other party refuses to negotiate, or if legal matters arise, it's time to get a lawyer.
  • Don't try to create proprietary derivative works of free software projects and expect to maintain the sole copyright.

If you follow all of this advice, you will have a greater chance of avoiding public arguments and legal battles.

There are some good online resources available. Creative Commons, a two-year-old nonprofit whose board of directors is chaired by Lessig, has as its goal "to build a layer of reasonable, flexible copyright in the face of increasingly restrictive default rules." Its Web site offers online versions of the GNU GPL, the GNU LGPL, and an application for the Founder's Copyright.

The U.S. Copyright Office has its own Web site with information on copyrighting computer applications. If you want to copyright your own code with the U.S. Copyright Office, you'll need to fill out Form TX and pay a $30 non-refundable filing fee.

One of the most valuable things we learned came from Weathersby. "We, as a community, need to establish a model and venue in which to address these issues," he said. "This entity would serve as an arbitration board, with legal, technological, and mediation experts with binding arbitration powers." Who will step forward to assume this responsibility?

Jem Matzan is the author of three books, a freelance journalist and the editor-in-chief of The Jem Report. Chris Preimesberger is editorial director of IT Manager's Journal and an editor/writer for NewsForge.

 

Share    Print    Comments   

Comments

on What to do if you're involved in code-dispute litigation

Note: Comments are owned by the poster. We are not responsible for their content.

Y I would ....

Posted by: Anonymous Coward on October 05, 2004 12:33 AM
Y I would contact NewsForge immeadiately. They are the best legal team! No case goes unsolved!.

STFU

#

LOL, they did solve the Mambo case...

Posted by: Anonymous Coward on October 05, 2004 05:08 AM
so your point is at least that valid. I don't know of any other cases they may have solved but the score at least is 1-0 for NewsForge with the Mambo victory.

And I have to say, good job NewsForge, and please, don't STFU!

#

Newsforge did NOT resolve a thing

Posted by: Anonymous Coward on October 05, 2004 05:30 AM
http://www.eweek.com/article2/0,1759,1663637,00.a<nobr>s<wbr></nobr> p

And for those who thing it's safe to swim... go on in. It's the OS way to thin the herd.

#

Archives are invaluable

Posted by: msobkow on October 05, 2004 12:39 AM


Archives of an entire product/project history can be invaluable in the case of infringement claims. The main reason I use so many gigs of HDD is the storage of all that archived information, but that still pales compared to the boxes of floppies and CD's that contain historical backups.


Those archives verify not only that I create my own code, but they provide a checkpoint for verifying possible cases of infringement. What it can't do is help identify a case of infringement, particularly when dealing with third parties who don't expose their code.


IP theft and industrial espionage are real risks, and sometimes the best you can do is look at different company's positions in the market and hope to spot potential infringement cases. The problem then becomes proving it, which would typically require involving law enforcement.


The issue becomes particularly thorny if the potential thief has far more dollars for lawsuits and investigation than the original developer. Even with all his fame, can you imagine Linus trying to sue someone like IBM, HP, Sun, or Microsoft for IP theft? Without the millions to potentially waste on a lawsuit (as SCO has done), what could he do even if he knew code had been stolen? What if it were only a pattern in marketing that indicated the accused was using something similar or virtually identical?


Before any one blurts "patent", note that $20K or so required just to apply for a patent, and the number of infringement cases which run through the courts every year. The deck is emphatically stacked against the individual developer, even though most new technology came out of a garage or home office, much as the original Apple computers did.

#

What do you do about [L]GPL violators of your code

Posted by: Anonymous Coward on October 05, 2004 12:49 AM
I have a substantial quantity of Open Source code
(some GPL, some LGPL) that I amintain and publish
for the environmental modeling community. What
should I do about the *persistent* problem of
license violations, involving the following:


      * Stripping out the the license from

          re-distributed code;


      * Stripping out attributions from

          re-distributed code; and


      * Modifying and re-distributing the result

          without specification of what mods were

          made,and by whom.

In particular, is it appropriate for me to pursue
charges of academic misconduct against the
perpetrators? (The academic meteorology community
is notoriously bad for this kind of plagiarism
issue...)

#

Re:What do you do about [L]GPL violators of your c

Posted by: Anonymous Coward on October 06, 2004 03:58 PM
You really ought to do something about this. If most of the perpetrators are at one particular institution, you probably want to write to the Institute's head and cc it to the Institute's lawyers. Point out that wilful copyright theft is both a criminal offence, and academic fraud.

And then, as far as you can WITHOUT identifying any perpetrators, point out that it is rife amongst their employees. Ask them (I really mean "order them"<nobr> <wbr></nobr>:-) to read the riot act to their employees, and give an undertaking (that is, you give the Institution a guarantee) that you will not take any further steps providing they abide by the licence - which allows for free use provided they don't plagiarise the software!

If it's a few individuals in an institution, I would have thought a polite letter (preferably from a lawyer) pointing out that they are committing a criminal and fraudulent offence would be enough. Point out that if such behaviour continues you have little option but to report them to their Principal for fraud, and to the authorities for copyright theft. Again, give them a guarantee that if they stick by the licence in future then you will drop the matter.

Cheers,
Wol

#

Says Who?

Posted by: Anonymous Coward on October 05, 2004 12:52 AM
"Miro International paid a lot of money to redesign and recode the Mambo open-source CMS project, and then the company recoded it further to use as a commercial product. The commercial product shares no code with the open source project, a distinction which is necessary to maintain compliance with the licensing that both software packages are under."

#

Re:Says Who?

Posted by: Anonymous Coward on October 05, 2004 12:59 AM
Brian (Connolly), please take your psychotic obsessions elsewhere and leave honest businesses alone.

#

It's like having a stalker in your midst... n/t

Posted by: Anonymous Coward on October 05, 2004 05:12 AM
n/t

#

Re:Says Who?

Posted by: Anonymous Coward on October 07, 2004 10:26 AM
Mambo, the commercial Miro product, existed long before the initial Mambo Open Source existed. As I recall, MOS at its birth was the child of the free version previously offered by Miro. Please correct me if I'm wrong.

#

In Other Words

Posted by: Anonymous Coward on October 05, 2004 12:57 AM
""Developing a policy, obtaining copyright assignment, and introducing terms and conditions are all steps in the right direction to ensuring that the code contributed is the author's own work and is free from encumbrances," Lamont said. "Miro has introduced copyright assignment in Mambo to ensure that the code does not infringe anyone's rights and is an entire singular copyright work."

Or in the words of one of Mambo's leading developers, "There have been many cases where [Mambo] developers seem to have breached the GPL, for instance, and the community has lashed out without forethought."

#

Re:In Other Words

Posted by: Anonymous Coward on October 05, 2004 12:46 PM
Don't lie and mis-quote people Brian. I know who you are quoting, and I know he asked you to stop making it seem like he is part of the Mambo development team. Also, you turned the meaning of the quote around by adding "[Mambo]" in there. He was not talking about the Mambo developers.

#

Re:In Other Words

Posted by: Anonymous Coward on October 06, 2004 07:54 AM
So the [Mambo] community lashes out at developers, in general. Indeed, however out of context and twisted, that is a different meaning altogether. Okay.

#

Re:In Other Words

Posted by: Anonymous Coward on October 06, 2004 12:11 PM
>So the [Mambo] community lashes out at developers, in general. Indeed, however out of context and twisted, that is a different meaning altogether. Okay.

What are you talking about? Here is the complete quote, and for a little context, it had nothing to do with the Connolly dispute, but a disagreement between one of the Mambo developers, and a community member:

<A HREF="http://www.mambers.com/showpost.php?p=47446&postcount=20" title="mambers.com">Post in question.</a mambers.com>

"Unless, of course, they do something that irks the community. There have been many cases where developers seem to have breached the GPL, for instance, and the community have lashed out without forethought.

For the most post Mambo has a very supportive and positive community, sometimes misunderstandings can lead to rifts that lead to possibly talented developers or dedicated users leaving the community.

No community is perfect, this community could definitely use more unity."

That is one opinion of one person, who happend to come into the community at a time when several misunderstandings had cropped up regarding the terms of the GPL, and who had made it a personal goal of his to keep that topic in the forefront of conversation in the community to promote understanding of the terms of the license. He was not commenting on the specifics of the Connolly case, and it has really nothing to do with it.

Connolly has repeatedly lied and written half-truths in this matter. And, he never even claimed to have examined the code in question himself, or had the code examined by a knowledgeable party. He is just guessing that his code is being used, and he is wrong.

And he was wrong to issue press release after press release on the matter.

End of story.

#

Re:In Other Words

Posted by: Anonymous Coward on October 06, 2004 06:04 PM
Regarding code being used, Mambo has already agree to that. In their official statement, Mambo said, "The code in question is a derived work of existing GPL code and therefore must remain GPL." The claim is copyright.

Despite your weak counter, Futhermore's legal claims against the Mambo community are still as good.

#

Re:In Other Words

Posted by: Anonymous Coward on October 06, 2004 09:57 PM
>>Regarding code being used, Mambo has already agree to that. In their official statement, Mambo said, "The code in question is a derived work of existing GPL code and therefore must remain GPL." The claim is copyright.

Despite your weak counter, Futhermore's legal claims against the Mambo community are still as good.>>

In correct. That quote refers to the code Furthermore claims to own. Mambo has maintained this entire time that that code used in Mambo is not the same code that Furthermore claims to own.

If the legal claims are so good, where is the legal action? And, what is with all the press releases?

#

sco

Posted by: Anonymous Coward on October 05, 2004 11:21 AM
I'm sorry but I couldn'teven finish reading it. Go to Groklaw to know what SCO's case is all about, please, before it gets out of hand. It's out, "it's about a contract" between IBM and AT&T. Which SCO wants to preserve from their perspective.

#

Been there done that

Posted by: Hyperbunny on October 05, 2004 03:45 PM

I've been writing software, both open source and proprietary, for over 20 years however, it's only in the last four years that I've been obliged to call in the legal brigade on a regular (all too regular) basis.


I live and work in South Africa. I think the best way to sum up the situation on litigation here is: "Avoid it at all costs!" The costs of legal representation is prohibitive and courts rarely (if ever) consider consequential losses resulting from pre-emptive or tactical litigation. I can only surmise that Dan Ravicher hasn't been to SA if he believes that: "...many lawyers are willing to consider representation of free software clients either pro-bono or on contingency...". The attorneys and advocates I have been dealing with over the past few years wouldn't represent their grandmothers on a pro-bono basis and, with the costs being generally awarded on the 'party and party' scale (about 40 - 50% of the real cost) it's a brave man who takes on a case here against a big opponent (such as the evil MS)


Another problem in smaller countries such as ours is that there are few attorneys who have the appropriate experience to deal with IP and copyright issues. Also, many of our statutory enactments on such matters are untried and legal opinion largely derives from US & UK precedents rather than local precedent which means that a case can go either way when it is heard.


Anyway, the upshot of all this is after having paid through the ringpiece for the past few years for advice that is (at best) dubious I've finally bitten the bullet and enrolled for an LLB. In my recent experience it is impossible to develop software without a paralegal background if only to preclude spending six months in court/chambers!

#

Another good source of advice

Posted by: Anonymous Coward on October 06, 2004 12:54 AM
The attorneys consulted for this article, <A HREF="http://www.pubpat.org/Board.htm" title="pubpat.org">Dan Ravicher</a pubpat.org> and <A HREF="http://rosenlaw.com/rosen.htm" title="rosenlaw.com">Larry Rosen</a rosenlaw.com>, are among the top legal experts on Open Source Licensing issues.



I thought I would inform NewsForge editors and readers of two other sources of great legal insight on these topics. The first is <A HREF="http://www.gtlaw.com/biographies/biography.asp?id=5523" title="gtlaw.com">Heather Meeker</a gtlaw.com>, an attorney with <A HREF="http://www.gtlaw.com/contact/offices/sv.asp" title="gtlaw.com">Greenberg Traurig in Silicon Valley</a gtlaw.com>. She is Co-Chair of the Open Source Committee of the ABA (American Bar Assoc.) Section of Science and Technology Law and advises companies on open source licensing issues. She also gives talks on open source licensing issues, including one in the Spring of 2004 at the <A HREF="http://www.osbc2004.com/" title="osbc2004.com">Open Source Business Conference</a osbc2004.com> in San Francisco.



Another leading expert in this area is <A HREF="http://townsend.com/attorneys/biodetails.asp?o=3278" title="townsend.com">Phil Albert</a townsend.com>, an attorney with <A HREF="http://townsend.com/offices/officedetails.asp?office=san+francisco" title="townsend.com">Townsend and Townsend and Crew in San Francisco</a townsend.com>. He writes <A HREF="http://linuxinsider.com/story/37078.html" title="linuxinsider.com">a weekly column</a linuxinsider.com> for <A HREF="http://www.linuxinsider.com/" title="linuxinsider.com">linuxinsider.com</a linuxinsider.com> that almost always touches on open source licensing issues.



Everybody says don't proceed through these hairy issues without a knowledgable attorney; well, here's two more in addition to those quoted in the article that could provide that competent and valuable advice.

#

Re:Another good source of advice

Posted by: Anonymous Coward on November 21, 2004 01:31 PM
Some thoughts on points in this article and the comments:

1. Mr. Ravicher is correct that having a single copyright holder makes enforcement easier. However, developers may not want to surrender their copyrights in their work.


        a. After all, it's theirs. Surrender the copyrights and it's not.


        b. If all developers surrender their copyrights to a single entity, that entity could take the entire project private (remember CDDB/Gracenote?). Even if the surrender agreement has a provision prohibiting or restricting this, I would not want to be a developer involved in litigation to enforce it. I think both the outcome and remedy are far from assured.


        c. An alternative might be an agreement that a developer who commits code to a project agrees that the project will act as the exclusive representative of all those who hold copyright on code in the project for enforcement of the license provisions of the project and the related interests of the copyright holders. The agreement could also provide that the copyright holder register that copyright with the national registration authority of the holder or the host country of the project, and that the project may on its initiative pay the registration fee and thereby place a lien on the code that the developer may not remove that code from the project without reimbursing the project.

2. Regarding Mr. Ravicher's statement:

"Generally, it isn't advisable to go off half-cocked and make public accusations without having first fully investigated the matter. Doing this can subject the accuser to severe liability on his own part."

I agree with the potential of liability in principle. However, even considering the decision in Diebold v. OPG (judgment against Diebold for false accusation of infringement, with assessment of damages), I do not have great faith in getting judgment recognizing that liability.

3. About Mr. Mutkowski's statements regarding Microsoft's detailed investigations of "outside code," there may be circumstances in which this is called for. However, considering his employer's attitude toward open-source software in general and GPLd programs in particular, I think this has to be taken with a grain of salt, in addition to a good look at the needle on the FUD-o-meter.

4. Regarding another statement by Mr. Ravicher:

"People should not assume hiring a lawyer is cost-prohibitive, as many lawyers are wiling to consider representation of free software clients either pro bono, on contingency, or at a reduced rate."

I believe Mr. Ravicher may be somewhat optimistic in this outlook, especially with respect to pro bono representation. Pro bono or contingency representation is most likely when the case for or against one party is quite clear and easily established by competent counsel. Unfortunately, IP litigation often involves matters that are anything but clear and easily established. Even reduced-rate representation can pile up large sums in protracted cases. It is worth trying to obtain counsel, but it may be a difficult search.

5. "'The point of saying this is that there isn't a bright line test for copyright infringement,' Ravicher said."

Some might say that it's like looking for a black line in the dark.

#

This story has been archived. Comments can no longer be posted.



 
Tableless layout Validate XHTML 1.0 Strict Validate CSS Powered by Xaraya