Red Hat's Open Source Assurance Program 142
scubacuda writes "ZDnet and others report that Red Hat now offers the 'Open Source Assurance Program' as protection for customers if they get hit with a copyright infringement case from the SCO Group. From their website: 'A key feature of the Open Source Assurance Program is an Intellectual Property Warranty. The warranty ensures, that in the event that an infringement issue is identified in Red Hat Enterprise Linux software code, Red Hat will replace the infringing code. Red Hat's warranty assures customers that they can use Red Hat Enterprise Linux and related solutions without interruption. The warranty is available for all customers having a valid registered subscription to Red Hat Enterprise Linux or related solutions.'" Following close behind Novell and Hewlett-Packard, but it looks like Red Hat is not actually indemnifying their customers like Novell and HP, but rather is simply promising to fix any real copyright problems moving forward, which is something I think we would assume they would do in any case.
Can't indemnify (Score:5, Interesting)
Like trying to swat elephants with fly-swatters.
Re:Can't indemnify (Score:5, Insightful)
if you can't indemnify 3rd parties, who the heck can you indemnify? That's the very definition of the word, to protect another party against damage or loss...
Re:Can't indemnify (Score:2, Funny)
2nd parties, 1st parties, and 4th - nth parties. But not 3rd parties. Jeez, where'd you go to law school?
Re:Can't indemnify (Score:1, Insightful)
If I license Red Hat Enterprise Linux then Redhat and I are the first and second parties. Why should I care what they do for third parties?
Re:Can't indemnify (Score:2)
Re:Can't indemnify (Score:2, Insightful)
Re:Can't indemnify (Score:2)
"if we're caught, we won't do it again" (Score:5, Funny)
So, they are promising, in case they are slapped with a cease-and-desist order, to cease and desist. Whatever next?
Re:"if we're caught, we won't do it again" (Score:2)
Re:"if we're caught, we won't do it again" (Score:5, Interesting)
Also, it might provide some legal protection against alleged 'willful' infringment. If they can point their fingers to their Open Source Assurance Plan whenever they are brought to courts by a party claiming infringment, they have the acting in 'good faith' argument on their side, unless they won't live up to their promises (which is _very_ unlikely).
You might say this Plan is just words, but still, it has an important side-effect. Those who don't read groklaw daily, but know about SCO's fiasco, can now call RedHat whenever they receive a threatening letter. Of course, they could have called them anytime, but this document is like a message: call us if someone contacts you claiming infringment. This puts customers in touch with RedHat first, and RH can tell directly to their clients (who, as I said, don't necessarily read groklaw) what this case is about, and SCO failed to pinpoint any infringing code.
Re:"if we're caught, we won't do it again" (Score:2)
And I agree it should show good faith if things get to a court room.
The Ultimate Game of Poker (Score:3, Insightful)
Re:The Ultimate Game of Poker (Score:1)
SCO is definitely trying to get someone else to be next.
Re:The Ultimate Game of Poker (Score:1)
RH Called SCO's Bluff in More Ways Than One (Score:2)
Money? (Score:1, Informative)
Am I missing something here?
indemnity? (Score:5, Insightful)
for indemnification to be meaningful you have to assume that the pockets behind it are deep enough to be able to actually pay out and protect you when (god forbid) the time comes.
Red Hat doesn't have enough of a track record for their promise to protect me to mean too much to me.
Yeah, replacing the ostensibly offending code is nice, but it won't get me off the hook if I've already been using something that has been found to be infringing.
With all that said you have to really believe that there is a reasonable shot of SCO succeeding for any of this to be terribly meaningful to you...
Re:indemnity? (Score:3, Insightful)
Exactly, and this is why this may do as much harm as good. Think about it in the context of RH trying to show people that "yes, we're a serious software company, not a bunch of GNU/hippies".
Obviously they have to offer something to counter the FUD, if they want people to buy their products. The only question is, will it backfire, as their "something" doesn't cut it? Will it cause potential clients to go
Re:indemnity? (Score:2)
Clue #2: They're not very impressive, where they exist at all.
Re:indemnity? (Score:2)
First, RedHat contributes to various Open Source projects. Labeling all of RedHat Linux as "someone elses software" is at the least inacurrate. It may even be misleading.
Secondly, all of RedHat's contributions to Open Source proge
Re:indemnity? (Score:2)
I suppose it all depends on your perspective. Sure - RedHat packages the work of others. Welcome to the world of Open Source. Heck - its not like the concept is foriegn to proprietary software either. The IT industry is full of examples of
Re:indemnity? (Score:2)
I'm not sure how US laws work in this case (or our own European ones, for that matter), but I would assume that SCO could not do a lot to companies using Linux, if these companies have obtained the software in good faith. Even a demand for a cease-and-desist order would be mitigated by a reasonable judge, and a company that obtained the infringi
Re:indemnity? (Score:2)
What hook is that? I have to admit I haven't clearly understood this part of the case. SCO's seems mostly irrational, and I don't appreciate their business plan, but their refusal to show the offending source might be understandable if it means that the offending users (such as Red Hat or Novell) could just wipe out the infringing code and be d
SCO has same thing (Score:4, Funny)
Nice gesture (Score:3, Interesting)
Re:Nice gesture (Score:2)
I'm confused by your second and third sentences...
--RJ
How will this actually work? (Score:5, Interesting)
It would appear to me that the strength of Linux is its history and stability. Take that way, and trouble's a comin'?
Bad example (Score:3, Interesting)
If you look at the examples SCO has actually brought up as "copyright infringement", things get even better. Linux's SGI malloc had already been deleted for technical reasons by the time they pointed it out, Linux's BSD packet filter was an original r
Re:How will this actually work? (Score:2)
Issues about exposure to code? (Score:5, Interesting)
Seems like a strange thing to offer. Here at work, once you get exposed to open source code, you can never go back to dealing with internal code merely due to the risks that algorithms you develop internally may accidentally be recreated in open source work.
How can RH say that they will replace your code with non-tainted code if the tainted code is the only way they've seen for approaching a problem. Seems like they need the equivalent of an optoisolator between their tainted developers and non-tainted developers. A white room approach with a description of the goal slid under the door.
Re:Issues about exposure to code? (Score:2, Interesting)
Usually it goes the other way... once you are exposed to Closed source code, you can never be employed writing the same Closed source code for another vendor. Example: BIOS clean room development.
In the open source world, ideas are traded fairly freely. It's easy not to copy someone else's code. It really is. Open source guys really don't care if you copy their ideas. They won't sue you for that. Now your closed source could leak out one day. But t
Re:Issues about exposure to code? (IANAL) (Score:1)
Do you work at SCO by any chance? (Score:3, Insightful)
Here at work, once you get exposed to open source code, you can never go back to dealing with internal code merely due to the risks that algorithms you develop internally may accidentally be recreated in open source work.
Sorry, that just seems basakwards. There is no problem with "recreating algorithms" from open source software, since it is protected by copyrights, not by patents. Some licences (e.g. BSD) will even let you copy source code as long as you give credit where credit is due.
I'd say you
Re:Do you work at SCO by any chance? (Score:1, Interesting)
Re:Do you work at SCO by any chance? (Score:2)
"Some licences (e.g. BSD) will even let you copy source code as long as you give credit where credit is due."
You need to either remove the parenthetical there or qualify it. The BSD license has not had such a restriction for years now.
Re:Do you work at SCO by any chance? (Score:2)
You need to either remove the parenthetical there or qualify it. The BSD license has not had such a restriction for years now.
My bad. How about "(e.g., BSD from my fuzzy recollection of what it said the last time I actually read it)"?
-- MarkusQ
Re:Issues about exposure to code? (Score:3, Insightful)
Where do you get programers then? I assume that you wouldn't hire me because I've worked for a different company before, and I might recreate something that the previous company did. Seriously, this boggles my mind, I've had access to source code from 2 different companies, plus a bunch of code [mostly trivial but not all] in school. I could accidentally be coping some of that code into your products.
Re:Issues about exposure to code? (Score:1)
The least they could do. (Score:4, Interesting)
This is a better solution than the others (Score:5, Interesting)
Remove the code ! I trust RedHat to replace the code quickly and effectivley, RH has made tons of contributions to linux. The others offer to absolve financial IF there is infringing code, RH says hey dont worry well replace the code so those infringments dont apply.
I like this solution much better being a RedHat customer.
Re:This is a better solution than the others (Score:1)
Think about it for a second. If SCO wins, then the companies distributing Linux are legally obligated to change the offending code. Duh.
Red Hat to customers: we'll do what the law requires to help you out!
Re:This is a better solution than the others (Score:1)
No, they're not. In such a (purely hypothetical and unlikely) case, they'd be obligated only to cease distributing the offending code. They could all sit around and wait for someone else to create a replacement.
Re:This is a better solution than the others (Score:2, Interesting)
All good and well, but... (Score:4, Insightful)
It seems to me that SCO's pathetic case is shifting away from copyright and into ideas. If a ruling comes down saying that, for example, nobody but SCO can use the methods involved in a critical feature of RHE, what happens then?
Then we all move to Elbonia? (Score:2)
Re:All good and well, but... (Score:2)
Only patents protect ideas. SCO has made no patent claims, because they have no relevant patents. Therefore no court will rule as you suggest.
Re:All good and well, but... (Score:1)
A judge cannot do this based on copyrights and trade secrets, you need to have a patent, which SCO does not have.
Management (Score:3, Insightful)
Managers and lawyers don't care about the facts unless those facts are in writing.
Of course they'd fix it going forward, but it gives manadrones and legal eagles a warm, fuzzy feeling to see documents that actually say that.
Don't worry too much about how it will work (Score:3, Insightful)
Not indemnifying... (Score:2)
A business manuever (Score:4, Insightful)
To echo some earlier posters, yes it is legally useless, but my guess is that they feel they can offer it since they'll know they'll never need to follow through. As in ... "Sure, if God ever showed up on earth to judge you, I'd take the blame for your sins.".
Re:A business manuever (Score:1)
is this possible? (Score:5, Interesting)
How can this be possible? If there is a case where Red Hat software contains infringing code, and Red Hat cannot come to an agreement with the code's owner on continuing use, Red Hat is prepared to replace the infringing code immediately? I presume use without interruption means support without interruption.
If Red Hat has a complete code base in wings so that any arbitrary bits of code found to be infringing can be replaced, and Red Hat is more sure of its legal standing on the replacement code (since it is meant to be used in event an existing infringement is found), why not just release that code?
Yes? (Score:3, Interesting)
In the case you mention the court will normally allow a period to remove the infringing code, so as not to impose unneccerary hardship on innocent victims.
In addition the Copyright owner has a duty to mitigate damages, in case they want to be awarded Damages by the court. The latter by the way the latter is why SCO will never get anything from the Linux community in case hell free
Re:Yes? (Score:2)
Yep, they have instead done everything to maximize damages, but this will backfire in court.
IANAL
Re:is this possible? (Score:2)
Replace the code? (Score:3, Interesting)
What use is that? When the SCO case really holds up, the issue is not to replace the code but to pay them their royalties. Those payments is what should be guaranteed, not the replacement of the code. Such a replacement will be just as free as the original code.
Re:Replace the code? (Score:1, Informative)
Why would a 3rd party have to pay? If there were an infriging code in Linux kernel this would just mean that:
Open Source Assurance Program (Score:3, Funny)
The Question to ask is this... (Score:1, Offtopic)
Re:The Question to ask is this... (Score:2)
Red Hat Transmits the Community Offer ... (Score:5, Insightful)
The Linux Community has already offered to rip out the infringing code and replace it once it is identified. Red Hat has understood that the community is going to live to its word and has formalized this into an offer of "Intellectual Property Warrant." This formal offer on behalf of the community may be more acceptable to the business folks rather than the diffuse commitments of the Linux Community. I think that's all there is to it.
Re:Red Hat Transmits the Community Offer ... (Score:1)
The distributors or the ones that claimed copyright on SCO code are the ones that should be getting sued or charged licensing fees, not the end users. If you buy a book which has part of it illegally copied from another
SCO's flawed strategy (Score:4, Insightful)
The problem SCO is facing is this: they want to sell Linux "licenses" because their intellectual property is supposedly in there. And let's be clear -- it's not patent, trade secret, or trademark IP but copyright IP. But as soon as they say "we own this", the code can get yanked within days or weeks and re-written. So the licenses are worthless, which is why they're being so coy about pointing to the code (aside from silly claims on the ABI headers)
Of couse, they're suing IBM, alleging contract violations for letting their Super Special (and mysteriously Secret) stuff into Linux and claiming AIX, etc is a derivative of UNIX system V. And maybe there is a thin legal thread that might encumber AIX.
But who signed that contract on behalf of Linux? No one. Linux might have a few lines of copied code, but with no contract with SCO, there's no legal reason SCO gets to "own" Linux by calling it a derivative -- you'd need a contract for that.
So even if they're right, they're hosed. And I have my doubts about how right they are.
Peace of mind for the customer (Score:5, Insightful)
RedHat is saying to its customers "You can keep using our product without worry: We'll be right over to replace any part of your RedHat Linux solution which SCO can convince a judge they own."
RedHat has it right. They know SCO can't sue an end user for breach of contract if SCO doesn't have a contract with the end user.
Re:Peace of mind for the customer (Score:2)
Copyrights are subject to "strict liablility" [albany.edu], which means that damages can be awarded even if the infringer did not know they were infringing.
Re:Peace of mind for the customer (Score:2)
And even if the users are the infringers, then if it is shown that the code transfer went the other way, that is SCO lifted code from Linux, does that mean the FSF/Linus can sue SCO users?
Re:Peace of mind for the customer (Score:2)
If a book is found to contain copyright violations, the purchaser of the book has no liability since they are not making a copy. Since playing a music CD requires copying the data into the CD player's memory their might be a liability there.
If SCO copied code from Linux then whoever owns the copyright to
Re:Peace of mind for the customer (Score:2)
Where did you get this goofy idea from?
First of all people can't be liable for past infringements. SCO has a duty to minimize damages by publicly stating what the infringement is, showing definitive proof that they own the copyright, and by giving the infringer a reasonable time to stop the infringement.
Until SCO does all of the above nobody has anything to worry about.
Re:Peace of mind for the customer (Score:2)
Clearly disk if RAM is a fixed media then disk is a fixed media.
Re:Peace of mind for the customer (Score:2)
That's a complete misreading of the case. It has nothing to do with what is happening here. I also think that any half decent lawyer could tell the difference between copying some software and installing some software.
would get damages from the offender,not end user (Score:3, Insightful)
If someone contributed a short story to the NYT, and the NYT times printed it, a reader of the paper would certainly not owe royalties if the copyright turned out to be bogus.
Stock (Score:4, Interesting)
SCOX grade is at 369 and RHAT is at 356.
For reference, Nasdaq is 86 and S&P500 is 52
Higher the number, greater the risk.
SCOX Risk [nasdaq.com]
RHAT Risk [nasdaq.com]
So, either these analysts are smoking crack or maybe I am just a dumbass when it comes to stocks. The later is a likely possibility!
Re:Stock (Score:1)
Re:Stock (Score:1)
SCOX value over the last 5 months [barchart.com]
RHAT value over the last 5 months [barchart.com]
Re:Stock (Score:2)
Enron and Webvan were once carried man "strong buy" rating.
Re:Stock (Score:1)
Re:Stock (Score:1)
DISCLAIMER: OK I'm no finance expert
I bet RH is thinking the same thing you are after looking at the risks... which is *why* they're doing this. Sort of a "trigger point" in the "finance code" sets off a certain behavior designed for robustness.
Just thinking... 'course, I could be a dumbass too.
Re:Stock (Score:1, Insightful)
RH has always been careful about IP (Score:5, Insightful)
What else can go wrong with that statement... (Score:1)
What is actually happening (Score:2)
Doesn't make me feel as good as it should (Score:2)
The fact that code tested and running for months or years will be suddenly patched with new, rushed, quickly tested code somehow doesn't make me feel as good as this as it really should.
Umm didn't they already give? (Score:3, Interesting)
Don't Understand Why Redhat Offers This (Score:4, Interesting)
You don't see Eolas suing Microsoft users over their patent lawsuit. You don't see CD buyers being sued for buying a rap CD that has been found to have used sampled music without permission.
The "Open Source Assurance Program" is just PR.
No, but... (Score:2)
There are two things to consider here. One, under the GPL Red Hat has granted you rights beyond that one copy - there are also the rights to redistribution and creating derivative works. If Red Hat's licence is void, then so is yours. This means they'll replace any such code. You might not think of this as an end-user issue, but it is. If you don
I just don't get it..... (Score:3, Interesting)
I seriously do not understand... How, exactly, is it that SCO can charge a licensing fee for IP they have not proven belongs to them?
Is there NO protection for consumers?
This isn't just a case of SCO commiting liable, fraud, stock fraud, etc.... but this is also SCO blatently stealing from consumers.
This means, one day, someone like Microsoft could just barge in and say Linux code had stolen MS code in it - force companies to pay under the threat of a massive legal dispute - something 99% of the companies in this country would be defenseless against and would be forced to pay - much like what SCO is doing right now.
Where is our "Big Brother," you know - the one who will stick you in jail for 20 years for simply posessing the knowledge and the means to decrypt a satellite signal. (Ohh, how we love the DMCA.)
At what point are we going to have another postal situation, where some geek is going to go insane from being such a minority that said geek(s) will simply wreck havoc on government systems and end up a martyr.
God knows, I'm just about to the point where if an SCO rep knocks on my door - you can gurantee Mr. Smith and Mr. Wesson will give them
This is unreal. I'm half American Indian - but I've never really felt like a minority because I suppose I 'appear' white. Now I really think I'm beginning to understand what Black people complain of. Look at what is happening to the OS community, we're the minority. WE'RE the Black people of technology.
Something needs to change. We need some political action, the average person needs to be aware of what is happening with technology. Linux is without question the only real potential OS to replace MS Windows. MS knows that, SCO [Obviously] knows that, but the average person just has no clue.
Being that Linux is unquestionably on the brink of becoming the replacement desktop - you would think this should be newsworthy and of great public interest.....
*sigh*
I like this... (Score:1)
Right?
Red Hat quickly gaining ground with MS tactics. (Score:3, Interesting)
So, even though a year or so ago, I went to Office Depot and bought RH8 Pro in a box, after only a year since this professionally packaged OS graced the shelves of a major retailer, RH not only does not support it anymore (where are the cries from ./ers that gave Microsoft all the heat with the 95 / 98 support death?), but we are not included in this warranty either
Re:Red Hat quickly gaining ground with MS tactics. (Score:2)
SCO's tactics aren't really working anyway.... (Score:2)
Be that as it may, this is evidently RH calling SCO's bluff and, for all intents, giving them the finger and goatse all at once.
You gots to indemnify (Score:1)
Re:You gots to indemnify (Score:1)
What would also be interesting to see is how much of a Program (and by that term I refer to the paragraph immediately following Section 2 of the GPL) would have to be deemed "copyrighted" before RH decides to replace all the parts in the Program. (Compare two scenarios in which one versus three or four pieces of code is found to be "copyrighted".)
SCO lawyers get bored, yet another lawsuit (Score:2)
* Novell has improperly filed copyright registrations in the United
States Copyright Office for UNIX technology covered by SC
It doesn't look limited to SCO (Score:3, Insightful)
Also, what about patents? The "Assurance program" isn't limited to copyrights. If some program is found to infringe a patent, there may not be any way to reimplement the functionality without still infringing.
Re:RedHat QNX (Score:1)
Re:RedHat QNX (Score:3, Informative)
The (few) deterministic systems that I've seen have all been slower than their non-deterministic counterparts. Things have to managed very differently.
Re:RedHat QNX (Score:1)
Medical life-support equipment does very simple-minded things, and the people who write it's software can probably write very well-optimized code for the tasks that they need done, that need to be done immediately at time X.
"gui" performance is utterly irrelevant compared to making sure that everything that's scheduled to run, runs. Gui is fluff, the heart-monitor isn't.
Re:Redhat and it's Path (Score:1)
Re:WTF (Score:2)
Webster's Revised Unabridged Dictionary (1913)
Indemnify
1. To save harmless; to secure against loss or damage; to insure.
"The states must at last engage to the merchants here that they will indemnify them from all that shallfall out."
--Sir W. Temple.
2. "To make restitution or compensation for, as for that whichis lost; to make whole; to reimburse; to compensate."
--Beattie.