NEWSLETTERS
 

CIO.com updates, insights and advice on technology, management and your career.

 CIO BlackBerry News and Tips
 CIO Research and Analysis
 CIO Microsoft
 CIO Insider
 
 
 
SUBSCRIBE TO CIO
 
Are you involved in setting the direction for your company's IT budget or strategy?

Apply today for a FREE subscription to CIO Magazine!

 


Fri, Sep 29, 2006 19:45 EDT

GPL3: The Gloves Come Off

Blog: The Open Source

Current Rating: 5 Comments: 2

A couple of weeks ago there was a major showdown in the free and open source world over GPL3. At one end of the dusty street: Linux kernel developers, led by Linus Torvalds. At the other end of the dusty street: the Free Software Foundation, led by Richard Stallman.

The two gangs faced each other, staring at one another with narrowed eyes, hands hovering above their text editors. "There's a new license in town, " sneered Stallman. "and it's going to clean things up, so that everyone can be free." "We've lived just fine with GPL2, and we're going to keep it that way," snapped  Torvalds in reply.

The townspeople nervously watched, breath indrawn, waiting to see what would happen next...

Actually, what happened wasn't quite so dramatic, although it did provide both serious discussion and some laughs as well. A group of Linux kernel developers published a short paper outlining their concerns regarding GPL3 as it stands today.

A long train of comments, rejoinders, remarks followed in the kernel mailing list (the link above is actually the first posting in that train of remarks). The FSF then issued a "clarification" about one of the issues raised in the paper relating to patents. I have a personal rule: when an organization starts issuing "clarifications," it's obfuscating and I start looking for what they're covering up. Witness the multiple "clarifications" emanating from HP about "Directorgate."

At the end of the week, a couple of things were clear: first, a number of very influential individuals -- Linux kernel developers -- aren't happy with GPL3 as it stands; and second, the FSF isn't really concerned with anyone's happiness relating to the license -- their motivation is spreading freedom as they define it, and if people don't like it, tough. (You can see my earlier thoughts about Stallman's motivation regarding GPL3 here). 

The issues raised in the paper are pretty much the same ones that have been present since the release of the first draft of the license in January of this year: DRM, patents, and the conditions in the license compatibility section of the license. Much of the discussion in the comment thread related to DRM, with participants pretty much acknowledging they didn't really like DRM as it's being used to restrict access to media content, but with many saying that they didn't feel the right place to fight that fight was by imposing licensing conditions. This DRM condition is often referred to as the "Tivoization" clause, as Tivo's handling of Linux seems to really stick in Richard Stallman's craw

Here are the key things you should understand about what this paper represents and, more importantly, what the import of GPL3 is:

First, the fact that a number of kernel developers organized themselves enough to generate this paper should indicate the depth of concern about GPL3. While developers by no means fall into the stereotype of solely being interested in technical issues, it's astonishing that this group felt strongly enough to jointly create and publish this document. Organizing a group to do something like this takes a lot of work and it clearly reflects a deep unease with GPL3.

Second, there was quite a bit of discussion that the Linux kernel will remain under GPL2. Torvalds gets to make that decision, and he's made it very clear that GPL2 is his preference. As many people have pointed out, Linux as commonly thought of contains far more than the kernel, since distros usually have utilities and many, many other applications shipped in them. The question is, what license will those other things be distributed under (although it's obvious that there are many other pieces of a distro, I've never seen anyone actually list them, so it's not clear just how much code we're talking about, but it's certainly significant). However, there was some discussion that the conditions of GPL3 might cause the forking of some of those other parts of the distro into GPL2 versions and GPL3 versions, with a concomitant requirement for significantly more engineering effort (if you've ever tried to keep two code lines consistent as to features and bugfixes, you instinctively know how much work this would cause). This forking would be caused by users being unwilling to live with GPL3 conditions for the products and moving toward maintaing GPL2-based versions.

Third, referring to the DRM conditions of GPL3 as relating to "Tivoization" is to trivialize the issue at hand. It's easy to sympathise with someone wanting to tweak their Tivo to do something beyond what Tivo (the company) delivers. After all, why shouldn't they be able to do something with content they've bought? However, the fundamental issue is the ability for a hardware manufacturer to block users from manipulating the software inside the machine. While it's easy to maintain that Tivo shouldn't be able to do that, other scenarios illustrate more serious implications of this ability. For example, should a medical device company be able to preclude end users from modifying how the device works? From my viewpoint, I don't want to wonder whether a radiation-emitting machine pointed at a tumor in my head has been "improved" by the radiation tech running it. While that's an extreme example, it illustrates what precluding DRM could cause. In any case, no manufacturer subject to liability laws would ever deliver software-embedding products that were licensed under conditions by which they could not guarantee the operation of the device. I've spoken to many pro-GPL3 people about this, and they've assured me that no user organization would ever allow this kind of tweaking to occur -- they'd impose conditions precluding anyone from modifying the product. That doesn't matter; no manufacturer would live with this situation, and I wouldn't accept it either. Characterizing this issue as "Tivoization" is a willful attempt to trivialize this critical topic.

Fourth, practical concerns like these concern the FSF not at all. Their focus is on enforcing freedom as they define it, and they reject any reservation about the impact of GPL3 as irrelevant. Consequently, waiting for the FSF to "come around" on GPL3 and its conditions is pointless. Stallman and his colleagues know exactly what they want and are determined to bring it to fruition. 

Fifth, speaking of comments and how the FSF responds to them, the thread of discussion engendered by the publication of the document also contained some sharpish language by Torvalds about the comment process surrounding GPL3. He pointed out that it seems to be designed to enable the FSF to maintain it has entertained feedback on the license, while allowing them to ultimately ignore it and publish the license as they see fit. In fact, the comment process has been scandalously opaque. It's impossible for anyone to see all the comments that have been submitted, the various committees organized by the FSF to represent important end user constituencies have not communicated with one another, and it's impossible (as far as I can tell) to actually find out who is on these committees (no rosters have ever been published, although Committee D has chosen to make its membership known and offer access to their discussions on IRC; however, the point is they've had to do this and chosen to do so, but the body that organized the comment process, the FSF, made no effort to share information about the committees). Any standards body that operated in this manner would quite rightly be jeered into oblivion. How does the FSF get a pass on this?

Sixth, one can expect the final version of GPL3 to resemble the two drafts that have been published to date, albeit with more clarity about the conditions. There is a strong likelihood that most organizations, once the license has been published and its implications recognized, will set a policy precluding the use of GPL3-licensed products in their software infrastructures. While the reactions of end users doesn't bother the FSF at all, it will cause quite a bit of confusion in terms of open source usage. It is quite likely that there will be code forks of important products to ensure they continue to be available under GPL2; this is regrettable and will certainly cause more work that otherwise could be directed toward more positive outcomes. However, I believe that open source adoption has advanced to the point that this will not derail the open source movement; most organizations will set their policy and continue working with GPL2 (and other licensed) open source software. The publication of GPL3 will cause more organizations to more carefully monitor their use of open source and motivate most to implement open source usage policies.

Finally, this week's events reflect a coming of age of open source software. Just as all revolutions begin with a flush of wide-eyed enthusiasm accompanied by belief in pure comradeship and then begin to grapple with the practicalities of quotidian existence, the split between open source pragmatists and free software idealists indicate that open source is, if not moving into adulthood, at least moving beyond gawky adolescence.

 


You do not have flash or javascript support.
Average (1 vote)
5
 
 
Mon, Oct 9, 2006 22:39 EDT
Anonymous user
Posted by: Alex Fletcher
Rating:

While it is true that GPL v3 introduces some very complex and interesting implications, as well as posing some potential pitfalls. A piece of good news is that the companies I keep in touch with on a regular basis, which are open source enterprise GPL v2 shops, have all made it clear that they are committed to ensuring their open source user communities understand what v3 means within the context of their product(s) and services.

Hopefully the majority of vendors/project leaders across the board will remain committed to keeping these brewing issues as clean as possible by doing the same.

 
Fri, Oct 13, 2006 2:25 EDT
Anonymous user
Posted by: Anonymous
Rating:

It's strange enough this entire fight - especially considering the role FSF have had in the past to restrain free licenses.
Real free licenses are like the ones issueed by UC Berkeley or MIT.
It's bad, from the begining, to think that a license of about 11 pages (like the one in GNU GPL v2) is really good. It might be for lawyers that actully drafted and drew up the license, but not for end users.
And this entire firght for nothing Mr. Stallman is involved in it is really anoying. I would really think again and again before using GPL and especially GPL v3. A better world would be, for example, with licenses like LGPL.

Post new comment

* Subject:
* Username:
* E-mail:
The content of this field is kept private and will not be shown publicly.
Homepage:
* Body:
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <img> <blockquote> <strike> <p> <br>
  • Lines and paragraphs break automatically.
More information about formatting options

* Denotes required field.

About this Blog

News, views and updates from the fast-growing world of enterprise open source software.

Start a Conversation
Click to post

Got something to say? We want to hear it! Click the Post button to get started. GO»

EXPERT ADVICE
See our roster of experts.

Advice & Opinion from more than 113 of IT's most insightful thinkers.

  PARTNERS       WEBCASTS    
 

Windows 7 Webcast Series

There's a lot of buzz about Windows 7 out there. Each month in our webcast series, listen to analysts and customers discuss how Windows 7 and the Windows Optimized Desktop is impacting large companies around the world. Learn how they evaluated Windows 7, including the cost of deployment, deployment strategies, and tangible benefits.

Sponsored by Microsoft  Listen to on-demand Recordings »

 

Service Level Management Best Practices Life Cycle Overview - Improve Service Levels

Best practices for Service Level Management (SLM) is a process for consistently meeting customer requirements and delivering on IT's promises. See the steps required to ensure high-quality SLM.

Sponsored by Compuware  Read this White Paper »

 

Keeping Your Members Safe from Online Scams and Predators

In order to keep fraudsters out, romance sites must deploy effective solutions that look at information independent of what is supplied by users. A device fingerprinting solution such as iovation ReputationManager™ provides unique insight into the computers being used to create multiple accounts and exposes hidden device-account relationships that identity-based fraud solutions often miss.

Sponsored by iovation  Read this White Paper »

Resource Alerts

Get instant email notifications by topic when white papers, webcasts, and case studies are added to our library.

Resource Alerts

Get instant email notification when white papers, webcasts, and case studies are added to our library. Don't just be up-to-date—be up to the minute with our new Resource Alerts.

Defend Against Blended Threats: What You Need to Know

Blended Web and email threats are becoming increasingly complex and represent a huge...  View Now »

 

Prescriptive Actions to Reduce Risk

In this Webcast, learn best practices for effective systems management in a heterogeneous environment and keep client systems cost under control.   View Now »

 

Webcast- Vantage 11: Redefining Application Performance Management

Compuware's latest release, Vantage 11, is a major advance in end-to-end application performance management--bringing together proactive issue identification, quantification of business impact and problem resolution into a single solution. Tune in to learn how Vantage 11's top-down approach helps you make better decisions and dramatically lower operations costs.  View Now »

Resource Alerts

Get instant email notification when white papers, webcasts, and case studies are added to our library. Don't just be up-to-date—be up to the minute with our new Resource Alerts.

 
NEWSLETTER

Sign-up for the Blogs & Discussion Newsletter

 
FEATURED SPONSORS
 
 
 
SPONSORED LINKS
 

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

See how AT&T can help protect your network.

Streamline IT Costs. Boost Performance with WAN Optimization.

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

The rules of infrastructure management just changed.

A Clear View Toward Virtualization

Interactive Q&A helps you discover key ways to maximize IT assets.

Ready to virtualize tier one applications? Check your virtualization maturity.

Think you can't afford a Cisco Switch? Cisco Catalyst Switches are now more affordable.

Five minute business analytics assessment. Immediate results.

The Case for Investing in Business Analytics Technology. Read white paper.

Upgrading to VMware vSphere with vWire

Top 10 Lessons Learned for Corporate 3G Mobile Broadband Deployments

CRM Built for IT: The Executive Guide to Selecting CRM that Meets IT Needs

Return on Information: Google Enterprise Search pays you back

ROI of Application Delivery Controllers

Making Consumer Two-Factor Authentication Simple and Cost-Effective

Mining the Cloud to Ease the Enterprise Compliance Burden

Solve Five Key IT Security Challenges with Cloud-Based Authentication

White Paper: Right-Sizing Your Power Infrastructure

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Top Five CIO Challenges

Read the RSA report: Security for Business Innovation

64-page prescriptive guide to security, compliance, and IT operations.

Increase UPS efficiency without sacrificing protection.

eZine: A Roadmap to Reducing IT Complexity

Reduce risk, gain agility. See how Progress can help your business.

Virtualization Technology as a Business Solution

eZine: A Roadmap to Reducing IT Complexity

World-class trading technology solutions from NYSE Technologies.

If You're Paying for Telecom, You're Paying Too Much. Contact Asentinel Today.

Trade-In your old printer and save up to $1,000 plus free recycling!

infoBOOM! - The Mid-Sized Company CIO's Exclusive Community

Live Webinar: Applying Business Analytics. Click here to learn more

Removing Barriers To Better Server Virtualization Efficiency

4G Revisited. The Continued Evolution of Wireless Mobility.

What's Next for Enterprise Resource Planning?

Maximizing website Return on Information with high-quality search

Gartner Magic Quadrant, Application Delivery Controllers 2009

Authentication as a Service by Forrester Research

Cloud-Based Authentication for Next-Generation Extranets

Cut Costs & Green Your IT Operations with PC Power Management

White Paper: 4 Customer Service Myths