The Manager’s View of GPL Version 3: Two (and a Half) Things to Like and Two More to Look Out For

IT departments that embrace open-source software are uncertain about the new version of the GNU Public License, arguably the most common FOSS license. Learn what’s in the works, and how GPLv3 may change the way your company adopts new software.

PAGE 3

This can be a good or bad thing, depending on whether you’re a smaller firm worried about being slammed with infringement cases by patent trolls or a large company that holds a lot of software patents.

Essentially, what GPLv3 says is that if you use GPL’d software to create a new product, you can’t sue anyone who uses your product to create a new product with patent infringement. A later provision, aimed directly at the Novell-Microsoft cross-licensing deal, further restricts companies by basically saying that you can’t cut a deal to distribute GPL’d software with a patent protection from a third party for which you pay, unless that same patent protection is also granted to anyone else using the software. Here’s McCabe’s analysis:

GPL3 is designed to have much greater reach than GPL2 on the patent side. Companies with significant patent portfolios will need to evaluate the impact of GPL3 code on their patent strategies—in terms of their enforcement choices and their licensing programs. There has been some stated concern about a chilling effect on contributions from large companies because of those patent implications.

That said, to the extent companies are using and distributing GPL3 code that doesn’t relate to key patents in their portfolios, it’s probably not much of an issue. So, as complex as the patent issues are, and as much time and attention that has been paid to those provisions, they likely affect a small group of companies in the end.

Those items may make you feel more positively toward the new version. But you probably shouldn’t put away the worry beads just yet.

Potential Gotchas in GPLv3
1) Version 3 contains language designed to address what the FSF calls “Tivoization.”

A provision of the GPL requires a company using GPL software in its products to make generally available to customers the source code to all the GPL’d software, including any changes that the company made. TiVo, which uses Linux inside the box, has traditionally done this. However, TiVo also placed a clever locking mechanism in the software, such that if it is changed by the user in any way, the box will not operate.

Version 3 slams the door on this practice. It states, in brief, that if you sell a product whose software can be upgraded, you may not prohibit customers from making their own changes. This could have far-reaching consequences.

For example, many home broadband routers are based on Linux, and have firmware that can be upgraded. Under version 3, the router manufacturers would have to allow customers to make their own modifications to the firmware. In fact, they would have to provide documentation on how to do it, since the GPLv3 requires that the company offer “all the necessary installation methods, procedures, authorization keys, or other information required to install and execute modified versions of GPLv3 covered works.” For companies like TiVo, which need to lock out changes to enforce digital rights management (DRM, more on this in a second), it is pretty much a deal killer.


Loading...
Applications MarketSpace
Practical Approaches for Securing Web Applications
Enterprises understand the importance of securing web applications to protect critical corporate and customer data. What many don't understand, is how to implement a robust process for integrating security and risk management throughout the web application software development lifecycle. Learn more »
An Executive's Guide to Web Application Security
Since so many Web sites contain vulnerabilities, hackers can leverage a relatively simple exploit to gain access to a wealth of sensitive information, such as credit card data, social security numbers and health records. It's more important than ever to examine your Web application security, assess your vulnerability and take action to protect your business. Learn more »
Web Application Vulnerabilities
Security managers may work for midsize or large organizations; they may operate from anywhere on the globe. But inevitably, they share a common goal: to better manage the risks associated with their business infrastructure. Increasingly, Web application security plays a significant role in achieving that goal. Learn more »
Using ERP To Gain Competitive Advantage in a Tough Economy
For midsize enterprises, now is the perfect time to invest in a significant IT expansion - despite the economic climate. Learn more »
Why BI is Ripe For Businesses of Any Size
Oracle's range of offerings to mid-size and emerging companies reflects its vision that BI and EPM solutions can be embraced by companies of all sizes. Learn more »
Oracle Accelerate
Ovum has been following Oracle's Accelerate program over the last couple of years because they thought it is a smart strategy for penetrating the upper mid-market. Learn more »
The New Age of ERP
Not only can small and mid-sized companies reap the renowned ERP benefits of greater agility, increased business visibility and measurable ROI. Learn more »
 
SPONSORED LINKS
 

CRM Built for IT: The Executive Guide to Selecting CRM that Meets IT Needs

ROI of Application Delivery Controllers

White Paper: 4 Customer Service Myths

White Paper: Improve Agility with Operational Responsiveness

Removing the Barriers to IT Governance: How On-Demand Software Changes the Game

Cloud Computing--Latest Buzzword or a Glimpse of the Future?

A Balanced Approach to an Application Development Platform

Adobe® LiveCycle®solutions for intuitive user experience

10 Ways Excel Drives More Value from Your SAP Investment

What's New in SOA Suite 11g?

Unleash the Power of Java with Oracle JRockit Real Time

SOA Best Practices and Design Patterns

Application Grid: Ideal Platform for IT Consolidation

Ready to virtualize tier one applications? Check your virtualization maturity.

Learn how to provide complete Business Service Management.

Increase ROI of Your Application Portfolio

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

See how AT&T can help protect your network.

Streamline IT Costs. Boost Performance with WAN Optimization.

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

eZine: A Roadmap to Reducing IT Complexity

Reduce risk, gain agility. See how Progress can help your business.

What's Next for Enterprise Resource Planning?

Gartner Magic Quadrant, Application Delivery Controllers 2009

White Paper: Managed Security for a Not-So-Secure World

SharePoint - Unchecked growth of content is unsustainable.

Focus Under Pressure: Why IT Governance Becomes Mission-Critical in a Down Economy

Should Your Email Live In The Cloud? A Comparative Cost Analysis

Adobe® LiveCycle® solutions for business process automation

Architecting Business Intelligence Applications for Change: The Open Solution

Increase UPS efficiency without sacrificing protection.

Unlocking the Mainframe: Modernizing Legacy System to SOA

State of the Data Integration Market

Enhance Customer Loyalty through Higher Responsiveness

Achieving Business Agility with Application Grid

Seven Ways ITIL Can Help You in an Economic Downturn

Four steps to populate your CMDB.

"Enterprise-Proven" is the Prerequisite for Enterprise SaaS Portal Solutions

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Top Five CIO Challenges

Read the RSA report: Security for Business Innovation

64-page prescriptive guide to security, compliance, and IT operations.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

The rules of infrastructure management just changed.

 
 
RESOURCE CENTER