PROJET AUTOBLOG


Free Software Foundation Recent blog posts

source: Free Software Foundation Recent blog posts

⇐ retour index

Free Software Directory meeting recap for June 2nd, 2017

jeudi 8 juin 2017 à 17:15

Every week free software activists from around the world come together in #fsf on irc.freenode.org to help improve the Free Software Directory. This recaps the work we accomplished at the Friday, June 2nd, 2017 meeting.

For this meeting we looked at security software. As usual we worked through the entries, updating and improving them as needed. Unfortunately, one entry had to be retired since the code couldn't be found, even in archives. Balancing this winnowing though was the addition of some new programs to the Directory.

During the meeting we looked at some ways to improve the categories of the security software in Directory. Participants looked at others security taxonomies for inspiration. These breakdowns were then presented and refined. The final proposal was submitted for group discussion at the end.

We talked some of ways to improve forensic analysis of file systems, including changes to the data recorded by the file system. The meeting also provided some guidance to an individual on hardware selection along with suggesting they look for detailed information on h-node.org.

If you would like to help update the directory, meet with us every Friday in #fsf on irc.freenode.org from 12 p.m. to 3 p.m. EDT (16:00 to 19:00 UTC).

Motion to dismiss denied in recent GNU GPL case

jeudi 1 juin 2017 à 21:37

A case in the United States involving the GNU GPL made headlines recently with a denial of a motion to dismiss. The case, Artifex Software, Inc. v. Hancom, Inc., involves a piece of software licensed under the GPL version 3 or later, called Ghostscript. It is a project from Artifex for handling PostScript, PDFs, and printers (GNU Ghostscript is a separate version of the project, and is not involved or implicated in the case).

Artifex runs a business of selling exceptions to its GPL-licensed software. They offer the software for no cost under the terms of the GPL but then also let others pay to avoid the conditions of the license. If someone doesn't pay for the exception, however, then they may only use the work in accordance with the terms of the GPL.

That is apparently where the problem arose in this case. Artifex’s complaint alleges that Hancom incorporated Ghostscript into its own proprietary software without following the terms of the GNU GPL or paying for an exception. In its suit, Artifex claimed two counts based on Hancom's inclusion of Ghostscript: (1) a violation of copyright; and (2) a breach of contract based on the GPL. Hancom filed a motion to dismiss the case. A motion to dismiss under U.S. law is a motion at the start of the case arguing that the facts the plaintiff presented do not support the counts alleged. The court denied the motion, finding that Artifex could move forward with both the copyright and contract counts.

A few characteristics of the U.S. legal system need to be understood to place this ruling in the proper context. First, a motion to dismiss does not determine the truth of the facts. In other words, a judge making a ruling on a motion to dismiss determines whether the law would provide the complaining party with the relief it requests if all facts alleged in the complaint were true. If the law says that the plaintiff has no case (even if all facts were true) then the case can be dismissed without the need to introduce or weigh evidence. Otherwise, the case proceeds to trial to determine the truth of the complainant's allegations. Secondly, rulings at this initial lower court have limited precedential value. Other courts presented with a similar question don't have to follow the decision here, though they will likely read and consider whether they agree with the reasoning of this judge if confronted with a similar case. This judge could also be deemed wrong if the case is appealed and reviewed by a higher court. For now, the opinion presents us with an interesting situation: a GPL enforcement lawsuit is proceeding under both a contract and copyright theory. This case is one to watch as it moves forward.

With that context in place, the opinion does present a fascinating question in terms of breach of contract. While a violation of a free license giving rise to a copyright violation is now old hat, whether violation of a license like the GPL could be treated as a breach of contract has been long a topic of discussion among licensing geeks. Long ago, those who opposed the GNU GPL claimed that it was not enforceable where a violator had not agreed to its terms. Since you couldn't breach a contract you hadn't agreed to, the terms of the license lacked any way to force compliance. But the GPL is a license. The only thing that gave you permission to distribute the work was the GPL, and without that permission, you cannot distribute the work without violating the copyright on the work.

In this case, the judge found that Artifex had adequately stated facts that support its breach of contract claim. Hancom attacked the contract claim on two fronts, first that Artifex had not properly demonstrated that there was agreement to the GPL, and secondly that Artifex properly plead any harm that resulted from the alleged breach. On the first front, the judge found that "[t]he GNU GPL … provides that the Ghostscript user agrees to its terms if the user does not obtain a commercial license." (We disagree with the judge's terminology here -- the GPL is a commercial license; there is no problem charging money for providing someone a copy of GPL-covered software as long as they are also provided with full rights under the GPL including access to the source code.) Artifex also claims that Hancom publicly stated that its use of Ghostscript was licensed under the GNU GPL. This was enough to claim the existence of a contract.

On the latter, the judge found that the business model of Artifex indicated a loss of revenue, but also noted that harm could be found even where money isn't involved. The judge, quoting a prior case, noted that there are "substantial benefits, including economic benefits, to the creation and distribution of copyrighted works under public licenses that range far beyond traditional license royalties." While not dispostive, this last note is particularly interesting for many free software developers, who generally share their work at no cost.

There is more to the ruling, regarding pre-emption and international aspects of copyright, that will likely be of interest to law geeks. But this section on treating the GPL as a contract truly makes this a case that free software activists will want to keep an eye on. We'll be following the case closely and publishing regular updates as it progresses. To stay in the loop, here's what you should do:

Friday Free Software Directory IRC meetup: June 2nd starting at 12:00 p.m. EDT/16:00 UTC

mercredi 31 mai 2017 à 21:03

Participate in supporting the Directory by adding new entries and updating existing ones. We will be on IRC in the #fsf channel on irc.freenode.org.

Tens of thousands of people visit directory.fsf.org each month to discover free software. Each entry in the Directory contains a wealth of useful information, from basic category and descriptions, to providing detailed info about version control, IRC channels, documentation, and licensing info that has been carefully checked by FSF staff and trained volunteers.

While the Directory has been and continues to be a great resource to the world over the past decade, it has the potential of being a resource of even greater value. But it needs your help!

It was June 2nd, 1998 that the CIH computer virus was discovered in Taiwan. This virus resulted in wide spread damage. An insecure system is still a problem for many. This week we are going to look at software for security. There are hundreds of programs in this category that need some attention. We hope you'll join us and add you favorite security software to the Directory, and if it's already there you can help improve the entry by expanding and updating the information.

If you are eager to help and you can't wait or are simply unable to make it onto IRC on Friday, our participation guide will provide you with all the information you need to get started on helping the Directory today! There are also weekly Directory Meeting pages that everyone is welcome to contribute to before, during, and after each meeting.

Free Software Directory meeting recap for May 26th, 2017

mercredi 31 mai 2017 à 20:55

Every week free software activists from around the world come together in #fsf on irc.freenode.org to help improve the Free Software Directory. This recaps the work we accomplished at the Friday, May 26th, 2017 meeting.

Our most recent meeting was focused on adding new entries. A new feature of the recent update to the Directory played a big role. Occasionally when sorting through unapproved pages (new pages that haven't been reviewed), we would would come across a page that was actually just a redirect. Sometimes a package will change names, or a variation in naming would cause multiple entries to end up in the Directory. Having the old page redirect to the correct one helps to keep the Directory clean and easy to navigate. But it turns out these redirects were making for a messy log of unapproved pages, as they would end up generating a new page that required approval. With the recent update, these redirected pages are now highlighted, which enabled us to get through about thirty of them during the meeting on Friday.

In the spirit of adding more to the Directory, we also launched a volunteer project for importing large amounts of entries. The project enables us to import package information from free software repositories. Long ago a friend put together scripts that we used to import thousands of entries. But thousands upon thousands more could be added if we update the import scripts.

The project has been sitting idle for a while now at https://savannah.gnu.org/p/directory, just waiting for volunteers to jump in and refine it. The scripts are in Python, so if you're a seasoned Python hacker this would be a great way to contribute.

While it will take quite a bit of work, the effort will have a truly profound effect on the Directory. If we can get the project up and running, it will greatly expand the number of entries and in the future can help to keep them up to date.

If you are interested in lending a hand, please email directory@fsf.org with the subject "Directory Import Volunteer" and tell us a bit about yourself.

If you would like to help update the directory, meet with us every Friday in #fsf on irc.freenode.org from 12 p.m. to 3 p.m. EDT (16:00 to 19:00 UTC).

Sixteen new GNU releases in the month of May

jeudi 25 mai 2017 à 22:55

(as of May 25, 2017):

For announcements of most new GNU releases, subscribe to the info-gnu mailing list: https://lists.gnu.org/mailman/listinfo/info-gnu.

To download: nearly all GNU software is available from https://ftp.gnu.org/gnu/, or preferably one of its mirrors from https://www.gnu.org/prep/ftp.html. You can use the URL https://ftpmirror.gnu.org/ to be automatically redirected to a (hopefully) nearby and up-to-date mirror.

This month, we welcome Bernhard Voelker as a new co-maintainer of GNU Findutils and John Darrington as maintainer of the new package GNU spread-sheet-widget.

A number of GNU packages, as well as the GNU operating system as a whole, are looking for maintainers and other assistance: please see https://www.gnu.org/server/takeaction.html#unmaint if you'd like to help. The general page on how to help GNU is at https://www.gnu.org/help/help.html.

If you have a working or partly working program that you'd like to offer to the GNU project as a GNU package, see https://www.gnu.org/help/evaluation.html.

As always, please feel free to write to us at maintainers@gnu.org with any GNUish questions or suggestions for future installments.