Startup to Offer Open Source Insurance 268
ThePretender writes "From the Infoworld article, 'Open Source Risk Management LLC (OSRM), a startup company that last month hired Pamela Jones, editor of the popular Groklaw.net Web site, as director of litigation risk research, plans to soon begin offering insurance policies to companies using open source software but fear that they may be sued, according to a company spokeswoman'. What's next - Developers having to pick up 'code malpractice' insurance? Egads." Might as well get some alien abduction insurance while you're at it.
Comment removed (Score:5, Informative)
Re:Malpractice Insurance (Score:2, Interesting)
Comment removed (Score:5, Informative)
Re:Malpractice Insurance (Score:3, Insightful)
A disclaimer is no different. You are just letting people know about the degree of support you are offering to them befo
Re:Malpractice Insurance (Score:5, Insightful)
Without even going that far, the act of being sued can be devastating, even if you just fight for a year and then they back off and it never really goes to trial.
Let's say a hundred bucks or so every time your lawyer picks up the phone. Several hundred for a letter. A grand for a simple motion. A couple months of just futzin' around and the legal bills can add up in a hurry.
I know of a judge who treats every petty charge as if it were a federal case. Really comes down hard on everyone, right down to a simple parking violation. And yet if you look at his conviction records they're no different than average.
When asked what gives he said, " I make them have to get a lawyer. Now that is punishment."
It isn't usually losing a suit that hurts. It's simply being involved in one. You have to get a lawyer. And anyone can sue you over damned near anything.
KFG
Re:Malpractice Insurance (Score:3, Insightful)
You can acquire a certain facility with the law, in some cases of specific law even a superiour facility than the legal general practitioner. This will allow you, at least, to do a reasonable job of arranging settlements and plea bargains, although not generally quite as good as you could obtain with a lawyer.
If only because the lawyer has a professional acquaintence with the judge and DA. They have
Re:Malpractice Insurance (Score:2, Informative)
Are you going to trust the future of your business and life to a disclaimer?
Not to mention, laws vary depending on location about disclaimers.
Re:Malpractice Insurance (Score:5, Insightful)
ABSOLUTELY NOT! Trust me on this one. Insurance is about having a guy on your side with a team of experienced lawyers. That is what it is for. If you don't have that, they can skin you alive. Because of some bad advice I got from my insurance broker, I spent over $100,000 on attorneys fees for a case that a jury would have laughed out of court. But that's the rub: the plaintiff's lawyers make it as expensive as possible to get to court, and even there you better be good looking and well spoken or the jury might decide to split the difference. Heck, with all those big words getting thrown around, you could lose because a single juror misunderstood something trivial.
The reality is that there is no justice for a small business standing alone. Lawyers are sharks and you are penguins. Tasty, tasty, defenseless penquins. They know they can wear you down, because there is nothing you can do to stop them. You can't represent yourself, because one mistake in filing means you lose the whole case and your house, savings and life goes down the tubes.
Despite the above, I'm not really bitter. It's over and I'm glad it is over. But I really understand the need for insurance now, which is to bring your own personal shark to the party...
-Jim
Re:Malpractice Insurance (Score:4, Informative)
Re:Malpractice Insurance (Score:2, Insightful)
Re:Malpractice Insurance (Score:2, Interesting)
There was a requirement for "Errors and Omissions Insurance" for a utility company gig I worked in 1998. It was $1100.
Starting my own insurance company (Score:4, Funny)
Wouldn't you pay for that peace of mind? Think about it, won't you? Thank you.
Re:Starting my own insurance company (Score:2)
Bender: I can guarantee you anything you want.
Re:Malpractice Insurance (Score:2)
Re:Malpractice Insurance (Score:2)
Re:Malpractice Insurance (Score:3, Insightful)
The insurance cycle feeds itsel
Re: (Score:3, Insightful)
"Public Liability" and "Professional Indemnity" (Score:3, Interesting)
They are two distinct areas of insurance. Public is to protect you if a visitor (non-employee) trips over in your office and breaks a leg. Professional is for when you fsck up (as parent said - data loss, etc).
That said, when I was establishing my IT company it was astounding how many traditional insurance firms would outright refuse to insure us. They wouldn't demand overzealous premiums, but flatly refuse to insu
code-malpractice (Score:2, Informative)
What's next - Developers having to pick up 'code malpractice' insurance?
I am in consulting and guess what, insurance to protect me in case of a damage causing programming error starts at over $2,000 a year! And for good reason, imagine you write something that rounds up instead of down in the hundredths place for some output from a data generatng monte carlo. It could go unnoticed for months, and then tens of millions of records in a database could need to be checked and recalculated. That would be HU
Re:code-malpractice (Score:2, Informative)
You also know that simulations are not real life, and there WILL be differences.
Checking tens of millions of records is not much more expensive than checking 1 record. The expense is writing and verifying the query.
If you're using monte carlo, you already know that there is no such thing as true randomness in deterministic systems, and computers are dete
Re:code-malpractice (Score:2)
That was "hundredths place." As in "0.03 is equivalent to three hundredths." That's the second decimal place.
Re:code-malpractice (Score:3, Funny)
Re:code-malpractice (Score:2)
I imagine this kind of insurance will force higher
and then they take your red stapler away (Score:3, Funny)
Not former. Current. (Score:2, Informative)
and fp, I think?
PJ is still editor (Score:2)
That alien abduction insurance (Score:5, Funny)
Re:That alien abduction insurance (Score:3, Funny)
Re:That alien abduction insurance (Score:2)
"former editor"? (Score:2, Informative)
Re:"former editor"? (Score:5, Informative)
as of Tue Mar 16 12:41:33 MST 2004 she hasn't made any announcement to the contrary...
Better links (less misinformation) (Score:2, Informative)
http://www.osriskmanagement.com/about.shtml [osriskmanagement.com] is pretty clear that Pamela Jones is staying with groklaw.
http://linuxpr.com/releases/6631.html [linuxpr.com] is as well.
http://techupdate.zdnet.com/techupdate/stories/mai n/open_source_insurance.html [zdnet.com] doesn't mention PJ but is informative.
P.S. Apparently the SCO fee of $699 would buy $23,300 of OSRM coverage...which will include defending from attacks by SCO.
Eye Strain Insurance (Score:5, Funny)
'code malpractice' insurance (Score:3, Informative)
It's called Errors and Omissions insurance.
Re:'code malpractice' insurance (Score:2)
We've done work for IBM and other large institutions and all of our contracts with our clients carry indemnification and insurance and other liability clauses. It's just the normal course of business.
Job Security? (Score:2, Interesting)
Re:Job Security? (Score:2)
That seems to be overly generous.
alien abduction insurance? (Score:5, Funny)
How about software life insurance? (Score:4, Funny)
Pushing out small fish? (Score:3, Insightful)
The main problem is, when you have such 'standard protection' for malpractice, consumers want to see that you're insured.
It's a good idea (Score:4, Insightful)
Look at the broader picture. All that stuff out there on sourceforge. Someone in some cubicle at some business decides some obscure project is useful, and starts using it.
But, that project is illegal. It's stolen code, violating patents and copyrights.
It's that kind of a bullshit legal snare that could send a young business into chapter 11.
If MS or Apple or Adobe stole code for their products, they'd be on the hook for using that stolen code for profit.
If the code was open source though, who do you go after? The people profiting from it - the end user.
Makes absolute sense. In fact, it was the lack of this sort of protection that has kept the company I work for away from OSS. Perhaps I could sway them now.
Re:It's a good idea (Score:5, Interesting)
> there on sourceforge. Someone in some cubicle at
> some business decides some obscure project is
> useful, and starts using it.
What bearing does that have on buying Free Software from a respectable company such as Red Hat or IBM?
> If the code was open source though, who do you
> go after?
Whoever made and distributed the unauthorized copies.
> The people profiting from it - the end user.
The end user is not liable unless he can be proven to have known about the copyright infringement in advance. Copyright regulates copying, not use.
> Makes absolute sense. In fact, it was the lack
> of this sort of protection that has kept the
> company I work for away from OSS.
Silly. The risk is exactly the same for closed-source.
Re:It's a good idea (Score:3, Insightful)
How do you draw the line? (Score:5, Interesting)
Here's a hypothetical scenario:
- You buy a jar of mayonnaise made by Kraft
- Kraft gets sued by SCOMayo (whatever) for infringing on one of their patents on how to make mayonnaise that stays fresh for up to 12 months and loses
- SCOMayo now sues everyone who ever bought and stored the patent-infringing mayonnaise from Kraft and demands additional $6.99 for every jar of mayonnaise purchased?
IANAL, so I don't understand how this works. Can SCOMayo sue individual people and sandwhich shops, fast foods and restaurants for patent infringement? If so, maybe they should start selling indemnification insurance at the supermakets as well for an extra $0.99 per item ($0.88 at Wal-Mart)?
On a more technical side, would this mean that because I own 3 nVidia video cards I may get sued by ATI and I need insurance just in case? Where and how is this line drawn, if there is one?
Re:It's a good idea (Score:2, Insightful)
Re:It's a good idea (Score:2)
Seems this is nowhere near the same thing. I proposed insuring people against the cost of fixing a bug in open software. This, OTOH, is simply litigation risk management. Feh. Well, still a fairly good idea, I suppose. It just doesn't strike me as being terribly constructive.
Re:It's a good idea (Score:2)
Using what legal principle? What did the "user" do wrong? You can surely go after people who copied and redistributed the code without permission, people who entered into a contract with you and violated it, but how can you "go after" anybody else?
Is your ATI or nVidia video card insured in this way? You know, just in case they go after each other and start suing each others' customers? How about your soun
Former Editor? (Score:3, Informative)
Re:Former Editor? (Score:3, Redundant)
And Microsoft Insurance .... (Score:2, Funny)
Excellent news for open source (Score:4, Insightful)
Up to now, the alternatives were:
by buying this insurance, the risk averse company hedges their risk, while still presumably getting a better deal on their software. It's open source capitalism at its finest.
Re:Excellent news for open source (Score:3, Insightful)
Jeez.... (Score:2)
Man, I can't wait until Software Engineering actually becomes a more professional practice. Imagine what would happen if all engineering degreed people in the world said things like "shit happens" when something went wrong. While we all know shit really DOES happen, there is no place other than software design where that answer seems like a normal thing. Every other discipline does everything they
Re:Excellent news for open source (Score:3, Insightful)
If the answer to these questions matters at all to your company, you either put access to the source in your contract with the vendor, develop it yourself, or use an existing open source project.
Excellent news for open source x 2 (Score:2)
The downside is that they have every incentive to blow up the risk of using open source software.
The upside is they also have every incentive to fight anyone like SCO that's suing people.
She's not a former editor! (Score:5, Informative)
Check your facts.
Re:She's not a former editor yet! (Score:2, Insightful)
How much mileage has the SCO story got left anyway? A good time to get out
Re:She's not a former editor yet! (Score:2)
Re:She's not a former editor yet! (Score:2)
Re:She's not a former editor yet! (Score:5, Informative)
Nothing new (Score:5, Funny)
Re: (Score:2)
What about closed source companies? (Score:4, Interesting)
This sounds like a company that's gone parasitic on FUD.
Re:What about closed source companies? (Score:2, Interesting)
Nothing sells better. Just watch TV ads for a while, or walk down the isles of a supermarket, particularly the drug/personal care isles.
It's all sold by sex and fear, and fear of not getting sex. The heartbreak of psoriasis. The social outcasting of dandruff. The horror of your whites not being white enough.
What will the neighbors think?
Most people live by FUD while pursuing their lives of quiet desperation, and most companies at least parasitical
It's not paranoia... (Score:3, Insightful)
You have SCO, planning to sue everyone on the face of the Earth until they can collect a "license fee" on every *NIX system, including Linux and BSD. You have patents being granted on new inventions like "use the Internet to sell things". And you have vendors of proprietary software becoming increasingly nervous about the competition from free software; they might decide to play the lawsuit card.
It's not unthinkable that a company would sue end-users directly to "make an example" out of them; SCO already did just that, to AutoZone and DaimlerChrysler.
There are legal threats out there. Insurance against them isn't silly.
steveha
There's always someone looking for free money... (Score:2)
These are trying to get free money using some bullshit protections.
Pardon me if I feel you don't need neither SCOs licence nor this OSS insurance.
Kjella
Legal extortion (Score:2)
Re: (Score:2)
Why Price Might be High/Low (Score:3, Interesting)
I'd be interested in what price this insurance sells for.
On the one hand, I would expect it to be cheap inasmuch as many of the legal attacks so far appear to be without merit.
OTOH, with only a small number of underwriters willing to write policies, they could charge interested customers what the market will bear with few suppliers.
And, in some cases, customers may feel that they're getting so much value from their open source software deployments that they'd be willing to pay more than some might expect.
Will they indemnify us against SCO? (Score:5, Interesting)
If we could buy insurance against the near-zero chance that SCO could be successful, we might be able to get these projects going in the direction that makes technical sense, and stop worrying about (insert rant about McBride and company here).
Re:Will they indemnify us against SCO? (Score:2)
Actually it's a copyright violation and the slashdot editors would do well to delete them as soon as they are posted.
Re:Will they indemnify us against SCO? (Score:3, Insightful)
Re:Will they indemnify us against SCO? (Score:2)
Re:Will they indemnify us against SCO? (Score:3, Funny)
"No indemnication for you! NEXT!!!"
Woo Hoo! (Score:2, Funny)
Re:Woo Hoo! (Score:2)
Programmers' malpractice? (Score:5, Informative)
Malpractice == good! (Score:2)
That's good. It'll help in the fight of outsourcing. You get what you pay for... remember that
I've got some good news! (Score:2, Funny)
Re: Alien Abduction Insurance (Score:2, Funny)
When he told me this, I told him that he should stop paying child support, until testing proves the kids aren't alien spawn. We all got a good laugh out of it.
Good alternative to SCO license (Score:4, Interesting)
Bad incentive structure (Score:5, Insightful)
I mean, now an unscrupulous open source developer could intentionally insert some blatantly stolen code, claiming it's their own; some in-cahoots business with a copyright on the code can take everyone to court; the insurance will have to pay out big time, and the company slips a million to the asshole developer under the table.
The Open Source movement gets a bunch of bad PR, the code needs an emergency re-write, some scoundrels make a killing, and the insurance company rethinks its business model.
I know insurance investigators can go about investigating and trying to stop this from happening, but it seems like a very hard thing to prove, as along as the payment to the programmer is channeled very secretly.
Re:Bad incentive structure (Score:2)
Unfortunately, I suspect the actual costs to end users Daimler-Chrysler and Autozone are non-zero.
I wish it were true, though.
Microsoft Insurance (Score:2)
How about vendor bankruptcy insurance? (Score:3, Interesting)
It's a very real issue. Misery is being dependent on software from a failed vendor.
Look at SCO's stock chart. [yahoo.com] The stock has dropped from 19 to 8.75 in the last three months, and it's dropping almost every day now. [yahoo.com]
SCO Thinks... (Score:2, Insightful)
SCO believes that its $699 per processor Intellectual Property License for Linux, however, is a better idea. "Ours is certainly the most reasonable way to go and certainly the safest way to go," he said.
Kinda using the words 'reasonable' and 'safest' loosely huh?
---How would you know they could pay? (Score:5, Interesting)
How would you figure out how much money would be necessary to back these policies? If you believe that the risk is zero, and they don't need money, then the business becomes a confidence scheme. If you believe that the risk isn't zero, you need something to back it up.
On top of that, if you insure people against auto accidents, or serious diesease, you can assume that everyone won't get hit at the same time. But if it turned out that running linux exposed you to liability, then all of the policy holders would have to be paid off at once. In other words, there's no way the premiums would be able to cover it.
I'm not an actuary or an insurance expert, so maybe I don't understand what's going on. But it doesn't smell right to me.
Re:How would you know they could pay? (Score:2)
That's what people like these [archives.tcm.ie] are for... you get them to assume the risk in return for annual premiums...
Open Source Insurance - about time (Score:2)
Warning: BLATANT PLUG (Score:5, Interesting)
While it is not insurance, and does not provide any kind of indemnification, it is a damn good management tool. Its goal is to allow companies to make use of open source code in such a way that full compliance is facilitated, and to avoid any uh-oh moments that happen after code is commerically released.
I worked on the development of the license interpretation module. It involved reading (and re-reading) 50+ licenses and parsing their terms such that compatibility determinations and compliance requirements could be generated for every possible combination of license, code, distribution, concatenation, link, modularization, etc. of a software product. It was exhausting (and sometimes tedious) work, and it certainly made it easy to tell which licenses were written by lawyers, which by coders, and which were written with input from both. It gave me new understanding of why unenlightened legal departments sometimes shy away from open source. Nonetheless, the reality is these licenses exist, are in use today, and are all valid until some court says otherwise. Licensors (i.e. coders in the community) have every right to expect their terms to be adhered to.
Being a geek myself, and a law student, it was pretty gratifying to see that a company wanted to build a product that helped managers to understand and not fear the open source phenomenon. Further, I think the product will really help firms stay fully compliant when they decide to use open source code. And that, in the end, is all our community can ask for.
cleetus
Well HPs launching OS in China (Score:2)
Why spend, or more likely rip off, an OS and productivity suite when you can get a legit one for free.
The PC got in because "Nobody even got fired for buying IBM" and then they gave away the hardware specs. (As opposed to the Amiga, TRS-80, Atari, Apple II et alia.)
Then M$ got in because "Nobody ever got fired for saving a buck." (The attack of the clones.)
It stayed in because Gates screamed "Make i
A couple of reasons (Score:5, Interesting)
1) Our dear friend Darl has made threatening noises with regard to Groklaw being on the side of whoever SCO is suing this week (e.g., IBM, Red Hat, Novell, Autzone, etc.). OSRM may provide PJ and the rest of the Groklawyers with a corporate vehicle to continue doing exactly what they've been doing without fear that Darl can go after PJ (in particular but also anyone else who contributes) in some sort of malicious (big $ personal lawsuit) way. SCO has amply demonstrated that their response to anyone who opposes them is to file a lawsuit (See SLAPP).
2) You will note that the first activity of this insurance company doesn't seem to be trying to sell an insurance policy. Its to offer a class "...on how best to mitigate the risk of using open source software". Any bets that a lot of that class will be on how to file the right paper work to legally tell SCO to go find an alien who can probe them until the existing SCO litigation is cleared up including deciding if SCO really does own the copyrights to UNIX? (Maybe Darl should look into that alien abduction insurance.)
"Former"? (Score:2)
> Groklaw.net Web site...
Still editing as of half an hour ago.
Sigh (Score:2)
Smells fishy to me (Score:4, Insightful)
This sounds like a hoax to me. PJ continues to post articles to Groklaw so I don't think she's the former editor. I also haven't heard anything about this venture from there, nor has she been particularly enthusiastic for OSS indemnification in the past.
I could be wrong, but for the moment, I'll hold off taking them seriously.
Alien Abductions Incorporated (Score:3, Interesting)
Okay, I've got to mention it...
Why spend the money on alien abduction insurance when you could just invest it in an AAI Abduction Experience [alienabductions.com] and find out whether you'd actually like being abducted by aliens?
Can't beat the company motto: If they won't contact you, contact us!
OSI (Score:3, Informative)
How about the following model for open source insurance.
Get a group of a couple hundred people together - all within a couple of degrees of eachother. Blue book eachothers cars - then all pay into an investment fund a set rate each month for auto or other insurance. Not into an insurance policy with some other carrier - but an actual investment/savings fund.
Take an umbrella policy out on the whole investment for an extreme case, and pay for that policy out of the combined account. If there is an accident that requires payment over a certain percentage of the value of the fund - then you leverage the policy from some insurance carrier that you have purchased. But, if at the end of the year there are no accidents - the investment OSI can pay a dividend on the money paid in and invested.
All other insurance companies operate this way - but here is a community based insurance. The big guys are just investment companies that take otehr peoples money to invest with in leiu of paying them off if something should happen to them or the property that they are esentially using as an asset backing to the investment. In the sense that the maintaining of the well-being of the object is the incentive for the person to pay to insure its well-being. and in the case of auto insurance - this investment revenue is guarenteed by law.
You must have insurance on your vehicle regardless of whether you have been in an accident. and if, at the end of the year - you dont get into an accident - you do not get any return on your contribution to the insurance companies investment.
Eben Moglen talked about this very thing (Score:3, Interesting)
Full text here [groklaw.net]
"If you are thinking about working in the law of free software, and gosh, I hope you are, one of the things you might want to be thinking about working on is the software conservation trusts that are going to be growing up around this economy in the next five years. I'll help you make one, or you can come to work in one of mine. We're going to need to spend a lot of time doing work which is associated with trustees. We're going to be spending a lot of time making sure that things are put together and they are built well. And we are going to be doing that on behalf of a third-party insurance industry which is going to be growing up, is growing up before our very eyes now, which is learning that it really cares how the free software is assembled."
Inaccuracies @ Infoworld (Score:4, Informative)
Yeah right. From today's GL:
I've been getting inundated with email, asking if Groklaw will be shutting down, thanks to an article in InfoWorld that identified me as the "former editor of Groklaw". That is inaccurate. I am still the editor of Groklaw, and my work with OSRM is separate from it. My contract is written so as to ensure my having time to do Groklaw. I have always done paid work in addition to Groklaw, so this isn't anything new.
The article said that SCO didn't sound displeased to hear the news. Not that I wish to throw cold water on anyone's pleasure in Lindon or anything, but Groklaw isn't going anywhere.
Re:Good idea in my mind! (Score:3, Interesting)
That's somewhat of a ridiculous comparison. If you're going to compare OSS and closed source methodologies, you should not do the equivalent of comparing a teen garage band with the New York Philharmonic. A better comparison would be "enterprise" closed source, versus open source that has a lot of manpower behind it.
The open source that tends to get used the most is the stuff that has a strong userbase and active developers. The 14-year-old-written "this is l33t so I wrote it, visit my blog d00d!@!@!!" kin