Wall Street Software Scandal: When Does Open Source Become Proprietary Code
On Wall Street, when does open-source code suddenly become firm-owned?
On the surface, it seems like an open and shut case: Financial juggernaut Goldman Sachs accuses its former programming whiz Sergey Aleynikov with trying to steal its super-fast, high-volume trading code. This type of "high-frequency trading code" will, in fact, bring in billions for Wall Street companies, like Goldman Sachs. It's specialized and important.
Print
The Russian Aleynikov had fled Goldman to join a startup trading company (Teza Technologies) in June and allegedly sent financial trading code to a server based in Germany before he departed Wall Street for Chicago, noted various news reports and court documents. And upon hearing Goldman's allegations, the FBI swooped in and arrested Aleynikov a day before the Fourth of July. (For more on IT staffers gone bad, see When Rogue IT Staffers Attack: 8 Organizations That Got Burned.)
Case closed, right? Rogue Russian programming genius trying to take down Wall Street computing systems stopped by Goldman Sachs and FBI! News at 10!
Not exactly.
Many, many troubling questions have been raised since the arrest. (Aleynikov is currently out on bail and awaits his day in court.)
Among the myriad concerns over Goldman's airtight allegations of theft and the possibility of a "substantial" financial loss to Goldman, are these: Aleynikov's salary jumped from $400,000 at GS to $1.2 million at his new gig at Teza Technologies (seems stupid to do anything to mess that up); while in FBI custody, Aleynikov let agents search his house and waived his rights to self-incrimination, reportedly speaking to FBI agents for four hours (something to hide? hmmmm); and just how much damage could Aleynikov actually do, reportedly transferring less than 32 MB of Goldman proprietary code?
Aleynikov and his public defender maintain that Aleynikov had "inadvertently downloaded a portion of Goldman's proprietary code while trying to take files of open source software," as reported in a New York Times article. Aleynikov claims that he has not given the code to his new employers or used it there, and as the Times reports, "the criminal complaint offers no evidence that he has."
What's cloudy now is why the open-source code he was supposedly and ultimately interested in—the same open-source code that could be found for free elsewhere—was jumbled together with the Goldman code sent to the German servers.
That, of course, is the crux of the matter: A colossal and accidental mistake, or the makings of a sinister plot in an ultracompetitive industry? (For more on when IT staffers at Morgan Stanley and Wal-Mart went rogue, see How to Monitor Workers' Use of IT Without Becoming Big Brother.)
But what's more intriguing to me is this: At what point in the software development process does open-source code become proprietary software of the company from which a programmer is drawing a paycheck? Perhaps that will be spelled out by Goldman as the case unfolds.
In a Times op-ed piece, Michael Osinski, a former computer programmer who infamously helped write the "software bomb" that blew up Wall Street last year, writes that programmers are working on coding pet projects—some large scale—all the time.
Like a would-be novelist piecing together chapters in the Great American Novel, it seems, coders are constantly working through complex processes of building new applications in bite-sized chunks. As Osinski writes, "A piece of software is often one cog in a vast enterprise, relatively useless in and of itself."
Previous Post: Enterprise App Stores: iTunes Imitation Is Flattering and FoolishNext Post: Larry Ellison's $1-a-Year Salary: Just Plain Stupid
What is Tech Briefcase?
TechBriefcase is a new, free service where IT Professionals can Search, Store and Share IT white papers and content like this. Learn more
Bookmark content
Speed up your research efforts with content across the web.
Search and Store
Find the white papers you need. Create folders for any topic.
View Anywhere
Open your briefcase on your iPhone, tablet or desktop. Share with colleagues.
Most Discussed Posts
Cloud computing has emerged as one of the most significant game changers to hit the technology landscape in the past 20 years. With this massive expansion of the cloud, the perception of the IT organization is shifting from a utility player to a change agent. This eBook breaks down five ways progressive organizations are using cloud-based IT Management solutions to help drive innovation and become more strategic, including: adding visibility and analytics, speeding up time-to-value, lowering costs, improving prioritization, and providing a blueprint for future cloud deployments.
Read the white paper to see how IBM helped Citigroup deliver new services and enhancements to their 200 million customers faster.
There are 3 ways to modernize legacy applications: rewrite completely, acquire packaged solutions or migrate existing code. This paper explains why it's best to migrate and how IBM® Rational® software can help.
Accommodating specific lines of business can result in a hybrid ecosystem of applications and servers. The resulting complexity of this architecture makes for an environment that is costly to maintain and difficult to change when addressing new challenges.
This whitepaper will help you to define a mobile device passcode policy. Security managers must attempt to reconcile two opposing goals. They must: 1) create a passcode policy that is strong enough to protect the device if it is lost or stolen, while: 2) not annoying users with needless length or complexity.
This whitepaper, authored by The Radicati Group, looks at the key reasons organizations should consider moving to a cloud-based archiving solution. Email archiving solutions enable organizations to store, monitor, and collect electronic data exchanged by their users to comply with internal policies and regulations.
ATERNITY will showcase a 30-minute demo on how Fortune 500 companies are leveraging its award-winning FPI Platform to deliver a user-centric approach to Proactive IT Management.
For businesses to move forward and tap into the ever-expanding universe of Internet users and network-enabled devices, it's critical to learn how to make the transition to IPv6. Learn the critical steps your organization must take to make a seamless transition-and keep your business world connected.
Learn how IT teams can protect against spear phishing tactics. Harry Sverdlove, chief technology officer of Bit9 offers a frank discussion about spear phishing - the most common technique used in today's advanced attacks.
Learn how to build a solid business case for your migration to Red Hat Enterprise Linux so you can run leaner, innovate faster, be more flexible and own the New Now.
Social media isn't about you; it's about everything around you. As you consider how your customers want to communicate with you, social media is something that can't be ignored. But what should your strategy be? Is social media "just another channel?" What kind of a plan makes sense for your contact center and for your customers? Join our experts as they share their insight and research results.
Hardware tokens were a popular method of strong authentication in past years but the cumbersome provisioning and distribution tasks, high support requirements and replacement costs have limited their growth. The additional log-in steps that hardware tokens require and the resulting user frustrations have limited adoption and make them impractical for larger scale partner and customer applications.
Sponsored Links
