Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Linux Business GNU is Not Unix Hardware

Embedded Device Manufacturers Ignoring GPL 779

swillden writes "Iain Barker and some other Linux Kernel Mailing List readers have discovered that several manufacturers of DVD players based on the Sigma Designs EM8500 chipset are distributing Linux, both in the devices and as binary-only firmware upgrades, but not providing source. Apparently, Sigma Designs provides its customers with a copy of the kernel as part of a chipset SDK, and those customers are making and selling devices without complying with the terms of the GPL. It's not clear if this is because Sigma didn't tell its customers about the GPL and their obligations, or if they're all ignoring it on their own. Maybe they've all bought licenses from SCO and therefore don't have to comply with the GPL? The LKML post contains a list of some of the infringers."
This discussion has been archived. No new comments can be posted.

Embedded Device Manufacturers Ignoring GPL

Comments Filter:
  • by Masque ( 20587 ) on Saturday November 29, 2003 @04:01PM (#7588922)
    If I have to pay an extra USD$25 in shipping when I replace my DVD player because it comes with the kernel source printed out, I'm going to be seriously pissed.
  • by justsomebody ( 525308 ) on Saturday November 29, 2003 @04:01PM (#7588926) Journal
    One driver for Sigma chips was made long ago. I wonder if they use that one too. Since Sigma provides shit for Linux
  • by t_allardyce ( 48447 ) on Saturday November 29, 2003 @04:02PM (#7588928) Journal
    Great now we can get some DVD code and keys, hopefully if they have integrated it enough, sweet. Kiss my ass MPAA, not so hot now are we?
  • by Jah-Wren Ryel ( 80510 ) on Saturday November 29, 2003 @04:08PM (#7588960)
    Considering that they mostly got away with stealing the xvid group's work with thier x-card, Sigma's got a history of ignoring licensing requirements on Free software. I wouldn't be surprised to learn that they had been telling their customers that it was all their own proprietary code, no linux about it.
  • by Bruce Perens ( 3872 ) * <bruce@perens.com> on Saturday November 29, 2003 @04:12PM (#7588995) Homepage Journal
    There have been a lot of cases of far-east engineering firms including GPL code in products, and selling those products to other companies that are not made aware of the licenses they have to comply with.

    Cisco got trapped this way, too. And they can turn around and sue those far-east folks, if it's worth their time.

    I am an expert witness in one such case.

    Bruce

    • There have been a lot of cases of far-east engineering firms including GPL code in products, and selling those products to other companies that are not made aware of the licenses they have to comply with.

      The really unfortunate thing is that the GPL FUDsters may find this to be great fodder. I've often heard the "you never know if one of your employees will download something off the net, add it to your proprietary codebase, and inadvertantly cause all of your IP to fall under the GPL" argument. Now this
      • by Bruce Perens ( 3872 ) * <bruce@perens.com> on Saturday November 29, 2003 @04:39PM (#7589171) Homepage Journal
        I think it would be much more dangerous if the product you purchased contained an unlicensed copy of Windows CE. MS sues for real money.

        Bruce

      • by Alsee ( 515537 ) on Saturday November 29, 2003 @10:29PM (#7590654) Homepage
        I've often heard the "you never know if one of your employees will download something off the net, add it to your proprietary codebase, and inadvertantly cause all of your IP to fall under the GPL" argument.

        That arguent is pure FUD. You cannot "inadvertantly" cause anything to fall under the GPL.

        If you incorporate someone else's code you are BETTER OFF if that code happens to be GPL. If it is not GPL then you have only one option - pay damages for infringment. If it is GPL code then you have two options, pay the exact same damages for infringment *or* release your code as GPL.

        Thus far all companies have chosen to settle out of court and release their code under the GPL becuase they like that option BETTER than paying damages for infringment.

        -
  • Define distribution (Score:5, Interesting)

    by fireteller2 ( 712795 ) * on Saturday November 29, 2003 @04:17PM (#7589024) Homepage
    [snip from GPL]

    2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:
    a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change.

    b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License.

    c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.)

    [end snip]

    So does this then mean that if I install Linux on my computer, and then sell or give my computer away I must provide extensive notification of the Linux installation? Including documentation at each place I may have edited the code, and some form of the Linux kernel source in cases were I do not have the kernel source installed?

    I can see how distributing firmware upgrades constitutes distributing software, and is thus firmly within the preview of the GPL. However, I'm having a harder time understanding how imbedded hardware applications constitutes a software distribution. If the hardware running the GPLd software can not under normal operation be accessed by an end user does it still constitute software distribution? The manufacturer does seem to be getting some benefit from the use of the GPLd software. However, if I use an online service that uses a modified Linux on internal hardware are they required also to provide me with their source? Where is the line? That the hardware is physically in my possession? What if I rent or lease equipment? This seems like a very slippery slope for the proliferation of GPLd software.

    I'm not proposing an opinion I'm just curious what the /. opinion is on this.
    • by Bruce Perens ( 3872 ) * <bruce@perens.com> on Saturday November 29, 2003 @04:46PM (#7589216) Homepage Journal
      Well, what happens when you sell or give away a computer with Windows? At the very least, you should give the person those pages with the holograms and activation passwords, and the licenses. Oh, but some of those licenses don't permit resale! So you have to remove the software before you sell the computer.

      In the case of a computer with Linux, if you give it away you fall under 3(c) of the GPL, and only have to pass on the source-code offers that were given you. If you sell it, you fall under 3(a) and 3(b), so you either distribute the source code with the computer or make an offer to do so valid for 3 years.

      Me, I'd wipe the disk, put on a fresh install, and give the buyer the CD set.

      Bruce

  • The GPL allows organizations that don't distribute software outside their organization to incur no obligation to distribute source. The GPL also allows people to create a usable system using GPL tools and incur no obligation to distribute source. The RPL [opensource.org] is much more viral and was designed specifically to be used in situations where dual licensing would be available(I doubt it would be wise to distribute software under the RPL unless you also have a commercial license also available at modest cost).


    I didn't write the RPL(it was written by Scott Shattuck at Technical Pursuit [technicalpursuit.com]--but I helped with some of the legal research and also helped walk the license through the OSI approval process.

  • Not quite (Score:5, Informative)

    by iamdrscience ( 541136 ) on Saturday November 29, 2003 @04:18PM (#7589031) Homepage
    The fact that they're distributing it just as a binary is not in itself a GPL violation. The GPL doesn't require that you actually include the source code, but rather that you make the source code accessible without much hassle. So who knows, maybe if you called one of these companies asking for the source code they would send you a file or a CD or something with the source code on it! In that case they would be totally in-line with the GPL.

    However, I would bet that that's not really the case and they don't make the source code available as easily as that. In that case there probably should be some complaining about it as they would be in violation of the GPL. Even if that were the case though, I doubt they would be opposed to changing their practices to make that code available, especially since (from what people have been saying) they don't seem to have modified the code very much.
    • Re:Not quite (Score:4, Insightful)

      by EJB ( 9167 ) on Saturday November 29, 2003 @04:25PM (#7589081) Homepage
      Just the fact that they didn't include the GPL license, copyright statements, and a written offer to provide the source code, makes them violate the GPL. ... It doesn't matter if they provide the source after you discovered by accident that the binaries are GPLed.

      - Erwin
  • by cacepi ( 100373 ) on Saturday November 29, 2003 @04:22PM (#7589065)
    Is in compliance, or at least appear to be. [kiss-technology.com]
    • by swillden ( 191260 ) * <shawn-ds@willden.org> on Saturday November 29, 2003 @05:52PM (#7589539) Journal

      Is in compliance, or at least appear to be.

      Maybe. That zip file contains a kernel and busybox, but it doesn't look like it contains any drivers for the EM8500 DVD Decoder, which means that if you built the source and loaded it into your KISS player, it would no longer play DVDs. It also includes a binary, "linux.bin", which appears to be the actual kernel binary, but it's not clear if that contains the EM8500 driver binaries.

      Whether or not they can exclude that driver (and potentially other parts of the software as well) without violating the GPL is hard to say. If it's a purely userspace driver, they're fine. If it's a kernel module... thing get much stickier. Linux has a history of tolerating binary-only kernel modules, but that only holds under certain assumptions, which may not be met here.

  • by DarkDust ( 239124 ) <marc@darkdust.net> on Saturday November 29, 2003 @04:35PM (#7589145) Homepage

    If someone works with Linux he has to know about the GPL, simple as that. A former employer of mine worked with the EM8400 and I wrote an application that used it. And we knew about the GPL and planned to release the sources when the product was to be released.

    Unfortunately our company went insolvent so it's quite easy to say that we would have released the offending sources ;-) But the point is we worked with Linux and thus knew we had to deal with the GPL. I think anyone who professionally works with Linux has to know the GPL.

    But many companies seem to ignore the GPL and just hope they won't get caught. It can be very hard to convince your managers that you are forced to republish any modified GPL'ed programs. In my experience the engineers/programmers know the GPL very well and tell their managers about it but those just don't want to hear. They are not comfortable with giving anything out to the public, even when it's about non-critical stuff or like in this case work of others with a license that forces you to release that particular code. They seem to ignore the fact that only the stuff that your employees wrote is the only thing you really have a right to and that you don't need to release that.

    On the other hand Sigma could be telling their customers more about the GPL and what their customers have to publish and what they can keep. But I don't think it's Sigma's fault when their customers don't comply with the GPL.

    • by Bruce Perens ( 3872 ) * <bruce@perens.com> on Saturday November 29, 2003 @05:41PM (#7589501) Homepage Journal
      In my experience, the most likely reason for this happening is the engineering firms desire to do everythig cheaply, and they have their managers interpret the license rather than hiring an attorney to do it. The manager says something like "this is an embedded device, so this source-code requirement must not apply". Obviously, the pay lawyers and expert witnesses much more later in exchange for what they saved by not hiring a lawyer to advise them about the license.

      Bruce

  • Hold the phone. (Score:5, Interesting)

    by FreeLinux ( 555387 ) on Saturday November 29, 2003 @04:39PM (#7589170)
    While I am sure that there are numerous manufacturers out there that are blatantly violating the GPL in their use and distribution of Linux, that may not be the case with these manufacturers.

    The GPL states that those that distribute GPLed software must provide the source to the recipients of the distributions upon request. That does NOT mean that they have to make the source available on their website. It means that people you receive the ditribution, in the form of the DVD player, must receive the source upon request. No one else is entitled to the source, only those that have received the distribution. It is even legal for them to refuse requests for the source from those who have not been distributed to, as in people who do not own the DVD players. This strict interpretation breaks down when these manufacturers make the software freely downloadable from their website in the form of firmware upgrades but, even in this case, the GPL does not require the distributor to make the source available on the website. They can still require formal requests before providiing the source.

    Now, what the LKML does not say is, if the people concerned have made a formal request or not. It states that they examined the web site but there is no requirement for the DVD manucaturer to post the source on their website.

    Like I said in the begining, they may be in violation of the GPL but there is insufficient evidence in the LKML posting to prove that. Remember that it is only a courtesy when distibutors make the sources available to all on their website. The GPL does not require them to do so at any time.
    • Re:Hold the phone. (Score:4, Informative)

      by RML ( 135014 ) on Saturday November 29, 2003 @05:09PM (#7589324)
      The GPL states that those that distribute GPLed software must provide the source to the recipients of the distributions upon request. That does NOT mean that they have to make the source available on their website. It means that people you receive the ditribution, in the form of the DVD player, must receive the source upon request.

      The thread started [lkml.org] with a request by an owner of the DVD player, to Liteon, for the source. The request was refused. If that's not a clear violation, I don't know what is.

      Also, as Bruce Perens pointed out [slashdot.org] in another comment, the GPL requires that you offer to provide the source code to anyone, not just people who own the DVD player.
  • Is it the GPL (Score:3, Informative)

    by ajs318 ( 655362 ) <sd_resp2@earthsh ... minus herbivore> on Saturday November 29, 2003 @04:45PM (#7589210)
    ..... or is it copyright law which is being violated here? Copyright law says you need permission from somebody to distribute copies of stuff. The GPL is permission to distribute copies of stuff as long as you comply with certain conditions. If somebody has been distributing binaries without making the source code available, then the permission granted by the GPL is automatically withdrawn.

    If these companies are simply distributing binaries compiled from unmodified sources available on a site such as kernel.org, then there is not much of a case, because the source is already available elsewhere. They might be able to weasel out of their obligation by claiming someone else already has fulfilled it for them. However, if the kernel source has been in any way modified, then the GPL certainly requires source code to be made available in order for permission to copy to be granted. And it could be argued that the act of configuring the kernel constitutes a modification, or at least requires for the .config file to be released.

    Of course, the whole thing might start to get unbelievably messy if someone were to reverse-engineer this firmware and post a source code listing somewhere ..... even a load of IFs and GOTOs that would compile to produce the same object code probably would do ..... there'd be more than enough work for all the lawyers in the USA sorting out who had violated whose copyright!
  • by pair-a-noyd ( 594371 ) on Saturday November 29, 2003 @05:09PM (#7589326)
    If SCO is selling embedded licenses for $29 per device and the DVD manufacturers are RETAILING them for $29 at Wally World then they must be giving them away for free.

    When you consider all the middle men and middle-middle men that handle the unit from assembly line in China to the isle pallet at wally world, each handler marking up the unit 100%, or at the very least, 50%, (and figure in shipping costs too!) the cost to produce a DVD player is most likely in the less than $1 per unit range. And if they paid the SCO scam of $29 per unit, they would be losing a LOT of money real fast.

    It's in their best profit-interest to ignore the GPL and do what ever the hell they want. If they get sued they can fold shop, change name/address and be back to cranking out new players the next day.

    Welcome to the wonderful game of "global greed"

  • by chrysalis ( 50680 ) * on Saturday November 29, 2003 @05:58PM (#7589562) Homepage
    OpenAdStream (http://www.realmedia.com/) serves a lot of banners you see on the web sites.

    The core of the product is mod_oas.so, an Apache module.

    It embeds GDBM and GNU Rx that are both published under the GPL licence. It doesn't dynamically links with these libraries, it really embeds a specific version of them (the server works without the libraries installed on the system). If you are an OpenAdStream customer, just run "strings" on the module to discover the name of the source code of GDBM and an RCS ID of GNU Rx.

    However the module is commercial, closed-source software. The GPL licence is available nowhere in the product. Even GNU Rx and GDBM author's names are missing.

    I sent them multiple emails about this, none ever were answered.

  • Haven't we ... (Score:3, Insightful)

    by judicar ( 726669 ) on Saturday November 29, 2003 @06:18PM (#7589658)
    been here before [slashdot.org]
  • by acousticiris ( 656375 ) * on Saturday November 29, 2003 @06:59PM (#7589857)
    I purchased this DVD player [slcentral.com] late last summer and discovered the Linux kernel present on the upgrade BIOS disc.

    This is the response I got from them:
    ----
    From: DCTW_Service@liteonit.com
    Subject: Re: Request for GPL Code
    Dear Sir,

    Sorry at the present, we don't provide the source code.
    Thanks for your understanding.

    Best Regards!
    ----
    Of course, my understanding isn't important. The copyright owner's understanding is what matters.
    I decided to e-mail the folks at the FSF for a follow up. I assumed that was the place to go, though I admit even today, that I'm not exactly sure sometimes.
    Here was the response from them:
    ----
    From: license-violation@fsf.org Subject: [gnu.org #114549] Linux GPL Code Violation - LiteOn Phomaster LVD-2001
    For some reason, your mail never reached my inbox (indeed, the web interface to our RequestTracker seems to be having a bit of a hard time with it too). So, sorry for the late response.

    We've already seen a few violations which look to be the same product as this under different packaging. We will add LiteOn to the list of people to write to about this. Thanks for the report.

    --
    -Dave "Novalis" Turner
    GPL Compliance Engineer
    Free Software Foundation
    ----
    The whole process was really quite daunting from my perspective. It is my understanding that the Linux Kernel is not a GNU product (though much of the software in a typical linux distrubtion is). Being a linux/GPL/FSF/GNU newbie, it took me quite a bit of time to hunt down a place to submit my complaint. Does anybody know of a database of copyright owners who use the GPL, and more importantly a convenient location for notifying said individuals when a breach is found or suspected? Even the FSF site didn't have a spot that was blaringly obvious to someone who had never visited the site before for reporting GPL violations of their software.
    I will say, its nice to see some attention being payed to this with regard to my DVD player. Not to advertise for the theifs, but its a great player...the new BIOS even allows one to play ogg encoded files written to a DVD or CF card. I'm interested, obviously, in getting my hands on the code and potentially flashing the BIOS with my own handy-work...maybe see if I can get the thing to take a hard drive or wireless network adapter in its PC card slot.
  • More information ... (Score:4, Informative)

    by Pivot ( 4465 ) on Saturday November 29, 2003 @07:59PM (#7590097)
    - is available here, http://www.duke.edu/~java32/bravo/bravohacking.htm l.

How many hardware guys does it take to change a light bulb? "Well the diagnostics say it's fine buddy, so it's a software problem."

Working...