Re: Fasttrak100 questions...

From: Jeff V. Merkey (jmerkey@vger.timpanogas.org)
Date: Sat Dec 02 2000 - 20:21:26 EST

  • Next message: Jeff V. Merkey: "Re: Fasttrak100 questions..."

    On Sat, Dec 02, 2000 at 06:46:59PM -0500, Theodore Y. Ts'o wrote:
    > Date: Sat, 2 Dec 2000 17:18:43 +0000 (GMT)
    > From: Alan Cox <alan@lxorguk.ukuu.org.uk>
    >
    > Well, it's not up to just me, given that Linus also has his copyright on
    > the code (although I doubt there's more than a few lines which are
    > originally his). There are some other people who have contributed code
    > to the serial driver in the past, although most have probably not given
    > me more than a dozen lines of code or so, which seems to be the
    > (completely untested in court) standard which the FSF uses to decide
    > whether or not they need to get formal legal papers signed.
    >
    > The legal issues are also incredibly murky,

    that's "Merkey"

    > since the customers create
    > the derived work, and issues of intent aside, you can't necessarily use
    > intent to change the legal definition of "derived work". (Be glad;
    > although it can be used to create a loophole in GPL, just meditate a
    > while on what the MPAA could do with such an "intent" argument before
    > you decide whether or not it's a good thing. Or think what Microsoft
    > could do if they could make their EULA's as infectious as the GPL with
    > the "intent" argument.) The whole dynamic linking argument is a very
    > slippery slope; where do you draw the line? Does a shell script which
    > calls a GPL program get infected? What about a propietary C program
    > which makes a system() call to invoke a GPL'ed bash? What about an RPC
    > call across the network? What about a GNOME Corba interface? Is it OK
    > if it's on separate machines, but are they considered a single program
    > if the CORBA client and server are on the same machine, since now they
    > share the same VM?

    Under the "Doctrine of Inevitable Disclosure" even looking at GPL code
    and using techniques it contains would contaminate anything someone
    works on. This doctrine put forward two concepts that have been
    used in trade secret cases to justify injunctions and non-competes
    in areas of IP pollution -- negative knowledge and inevitable
    misappropriation.

    The argument goes something like this. Negative knowledge is defined as
    knowing what techniques do not work (as opposed to what techniques
    do work). In the course of development of a piece of software,
    there are many "blind alleys" and "false starts" that are encountered
    as an individual uses trial and error to perfect whatever piece
    of software he is writing. Over time, the person learns what
    approaches are blind alleys and which work. This knowledge becomes
    imprinted into the actual thinking processes of this person.

    Source code can also contain notes and comments about what does not
    work, and what does work. Someone reading this source code would
    then incorporate these ideas and knowledge into their thinking
    processes. Companies spend lots of money paying engineers to
    develop software, and this "negative knowledge", under the
    doctrine of inevitable disclosure is legally the property
    of an employer since they paid an engineer to experiment and
    learn it. This is how companies are able to get non-compete
    court orders against employees in trade secret lawsuits -- they
    argue that noone is going to go down a development path using ideas
    or approaches they know do not work. This argument goes on
    to state that if two engineers, one who had access to a piece of
    code vs. one who did not were to start at the same time working
    on the same problem, the person who had access to the code would
    finish first because he would "inevitably use" the knowledge gained
    from access to the source code.

    Let's say for example two engineers wanted to write a new Linux-like
    replacement. One of them had access to ftp.kernel.org and the other
    did not. Which one of the engineers would finish first? Obviously
    the one with access to ftp.kernel.org would finish first and
    would not have had to use trial and error to get all the IOCTL calls
    working, etc. The engineer without source code access would take
    longer, perhaps by a factor of years, to complete the same project.

    Under this argument, it is argued that the engineer who had source
    code access "inevitably used" negative knowledge he gained from
    his study of the Linux sources. Absent the vague descriptions of
    what a "derivative work" is in the GPL, it could be argued that
    conversion of any knowledge contained in GPL code is a "derivative
    work".

    There are a lot of big software companies who believe this and
    fear application of the doctrine of inevitable disclosure relative
    to GPL code. Novell and Microsoft both do not even allow employees
    to bring GPL code into the building -- period -- for fear that someone
    will attempt to file a claim that they have "converted" GPL code
    and created derivative works that may have contaminated non-GPL
    code projects. Novell has an official standing policy barring employees
    from using GPL code. That's why all the Linux work for NetWare is
    done in the India development center, and not the US, out of fear
    of IP pollution in the Provo facility. When I officed at the Microsoft
    campus in 1999, they had similiar policies, and were even more strict
    than Novell.

    Now, in reality, these folks have employees in both companies who
    download stuff at home, and putz around with it, GPL code included,
    but that's a lot different from these companies having official policies
    allowing projects to use GPL code in their normal course of business.

    In short, under the doctrine of inevitable disclosure, a GPL copyright
    holder could succeed with a claim of conversion from someone simply
    looking at a piece of GPL code, then using whatever it contained
    to build either interface modules or a module with similiar functionality.
    It would be a hard call for a sitting judge to make, but I have seen
    actual cases where a judge does just that with the help of a special
    master.

    Personally, I think the doctrine is one of the most evil fucking things
    in existence, legal opponents call it "the doctrine of intellectual
    slavery" because it has the affect under the law to be able to convert
    simple NDA agreements into non-compete agreements, and I've seen it
    used this way. Novell has blocked all internal access to the NWFS
    ftp server TRG, BTW, because they are afraid I would attempt to
    apply the doctrine to force them to open source NetWare projects if
    they download NWFS and used it internally with eDirectory. They've
    told us so.

    This may help you understand just how complicated this whole IP stuff
    is relative to derived works. It's undefined under current case law
    and precednt relative to the GPL, but these big companies are taking
    no chances....

    :-)

    Jeff

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    Please read the FAQ at http://www.tux.org/lkml/



    This archive was generated by hypermail 2b29 : Sat Dec 02 2000 - 19:28:46 EST