Key Legal Win for Open Source

Federal Appeals Court ruling helps dispel uncertainty for business users of open source software licenses.

By Maureen Garde and Jeffrey Neuburger, Proskauer Rose LLP
Fri, August 15, 2008

CIOOpen source software has been in widespread use for longer than most people realize—consider the majority of websites running on Apache Web server software for more than a decade. It has particularly flourished in the business community over the last several years, despite some uncertainty regarding the legal status of open source software licenses. But an opinion by the United States Court of Appeals for the Federal Circuit this week is likely to go a long way toward dispelling that uncertainty.

In substance, the court ruled that the open source licensors in some circumstances will have recourse under copyright law, and it did so in definitive terms: "Copyright holders who engage in open source licensing have the right to control the modification and distribution of copyrighted material."

The ruling in Jacobsen v. Katzer concerns an open source software program made available in source code form for download and use by the public, free of charge, subject to the provisions of the open source "Artistic License."

In simplified terms, the Artistic License permits the modification of the source code or its incorporation into other software programs, but requires any distributor of such programs to include with any distribution certain information identifying the source of the included code, as well as text the Artistic License itself, among a number of other things. Jacobsen, the head of the group that developed the code, alleged in a federal copyright infringement lawsuit that Katzer and his company incorporated certain of the groups' code into his own competing proprietary software product, but failed to comply with the requirements of the Artistic License.

In defense of the copyright infringement claim, Katzer (who admitted that his program used some of the code) argued that the open source code was provided free of charge pursuant to an intentionally broad, nonexclusive license, and that he had not exceeded the scope of the license in incorporating the code into his own product. The failure to include the required information with his product, he argued, was merely a breach of a license term. The difference between exceeding the scope of a license, and merely breaching a condition, is that the flexible and powerful remedies under copyright law are available only if the scope of the license has been exceeded. If a condition is breached, then only the relatively less powerful breach of contract remedies is available. In the case of open source software that is distributed free of charge, breach of contract remedies are further limited.

The appeals court concluded that the Artistic License "on its face ... creates conditions," that can be enforced under copyright law. The court's opinion also broadly affirmed the societal value of the open source approach: "There are substantial benefits, including economic benefits, to the creation and distribution of copyright works under public licenses that range far beyond traditional license royalties."

Although this is a momentous decision for the open source community, the take-away from the opinion is somewhat old hat for users of open source code. Best practices for business use of open source software include implementation of mechanisms to control the download and use of open source code, documentation of the licenses that accompany open source code, and periodic audits to assure compliance with their requirements.

Jeffrey Neuburger is a partner in the New York office and co-chair of the Technology, Media and Communications Practice Group at Proskauer Rose LLP. Maureen Garde, is a lawyer with the Technology, Media and Communications practice group at Proskauer Rose LLP.

With 1.5 billion instructions in one second (BIPS), while consuming less energy than ever before, Wintergreen Research says IT departments need to sit up and take notice of this hybrid system that combines the System z with servers.
Learn how your answer to this question compares to your peers by taking this quick poll. See how your peers are dealing with the challenge of ensuring a highly capable server infrastructure as technological shifts impact the application server platform.
With increasing data growth, comes increased need for data security.  The existing DLP model, with a focus on compliance/enforcement is not sufficient as the data discovery and classification capabilities are not granular enough.  Read this paper to find how you can efficiently and accurately manage your risk by rapidly inventorying and classifying your data and then developing remediation workflows that support business needs. 
This paper breaks down attack sources into four categories: external, malicious insiders, accidental insiders, and unknown.
The rapid growth of data and technology is creating challenges for organizations as this digital data is considered to be business communications and must be preserved according the same industry-specific regulations governing the retention and discovery of emails and more traditional forms of electronic communications. This paper examines the role that Data Loss Prevention ("DLP") technology can play in helping organizations address the challenges of locating information in response to electronic discovery.
This research, conducted by the Ponemon Institute, focuses on issues relating to the use of data protection solutions such as endpoint encryption and data loss prevention within the workplace.
As greater numbers of datacenter servers transition from the physical to the virtual world, the components of virtualization success come to the fore. What scores of organizations have discovered is that success is derived from an optimal pairing of the right software platform with the right hardware platform.
Have you been looking to hear about customer's experiences with the new VMware vCenter Site Recovery Manager product? View this webcast to learn about VMware customer, Navicure, and their experiences testing and evaluating the recovery manager, their progress in implementing it in their environment and their advice other customers considering using vCenter.
Many enterprises have discovered that the use of virtualization to support desktop workloads creates a range of significant benefits. These benefits include price efficiencies, improved IT management and greater agility and choice for end users.

This VMware sponsored webcast with IDC will provide both quantitative measurement of the business value -- defined as the expected ROI -- and qualitative analysis associated with the use of VMware View™. IDC will also provide an analysis of the View Composer and ThinApp™ features of VMware View, including the business value of these solutions and an overview of how they work.

Attend this webcast to learn about:
- Challenges and barriers that might impede the adoption of desktop virtualization
- Navigating roadblocks to facilitate a strategic implementation
- Optimizing qualitative and quantitative benefits to IT and your business
VMware recently announced VMware vFabric™ Data Director, a new database deployment and operations platform that enables enterprise IT organizations to offer database as a private cloud service. Built on top of VMware vSphere 5, vFabric Data Director enables IT organizations to ontrol database sprawl through automation and consistent policy enforcement and accelerate application development cycles with self-service database management. Attend this webcast to learn how vFabric Data Director can help you build database-as-a-service in your datacenter.
A simple, cost-effective disaster-recovery solution for virtual environments is high on the agenda for IT organizations as they virtualize more business-critical applications with VMware. VMware vCenter™ Site Recovery Manager-the market-leading disaster-recovery product-ensures the simplest and most reliable disaster protection for all virtualized applications. VMware vCenter Site Recovery Manager provides centralized management of recovery plans, enables nondisruptive testing and automates site-failover processes.
Traditional disaster recovery solutions are often too expensive, complex and unreliable to meet business requirements. As a result, IT departments are hesitant to expand disaster protection beyond their most critical applications, largely because they are uncertain whether the quality of the protection is really worth its cost. VMware vCenter™ Site Recovery Manager 5 is the market-leading disaster recovery product that addresses this situation for organizations of all kinds. It complements VMware vSphere to ensure the simplest and most reliable disaster protection for all virtualized applications.
Newsletter Sign-Up »

Receive the latest news test, reviews and trends on your favorite technology topics

Choose a newsletter
  1. View all Newsletters | Privacy Policy
Resource Center