Open Source and Legal Protection 250
"I'm in the middle of taking a current bastion of big science and making it open-sourced. I'm not going to say exactly what I'm working on right now but I'm alas confident that shortly after this codebase is released, I will be the target of numerous lawsuits by holders of patents and software patents. Although I am reverse-engineering everything from published work, it has been made clear to me that most of the implementation of the work is considered proprietary and the rest is considered trade secrets.
The field from which this work is drawn is currently in the hands of a minority of individuals, some of whom are scrambling to create startups based on their work. I have real ethical problems with their ongoing hoarding of valuable data and algorithms developed with public and defense money hence I am attempting to get their capabilities into the hands of any interested individual. Not everyone in the field acts this way, but enough do to make it a real issue with me and others.
So, my question is how do I cover my butt? After the DeCSS affair, I want to be ready for the attack lawyers before they come. Who knows, maybe they won't, but I've never gotten very far on optimism."
Trade secret protection doesn't apply (Score:1)
Okay, I'm not a lawyer, but it is my understanding that trade secret protection applies to secrets that were stolen from a company that kept them secret. The standard for violation of trade secret protection is that the secrets must have been protected from the competition and the general public, and the people who acquired them must have made an effort to breech that secrecy. Determining how a product works by black box testing wouldn't qualify as a violation of trade secrets. Stealing confidential documents or getting one of their engineers drunk and recording the conversation would.
are the docs open? (Score:1)
IANAL (of course), but I was under the impression that building software projects based on published specs isn't reverse engineering. Remember that Cringly PBS special? Didn't compaq build their original PC clone by having one engineer reverse engineer the PC BIOS, write out extensive specs, and have another engineer (w/ no knowledge of the work) build the new BIOS based on those specs?
Trolling now correlated to criticism of Gov't (Score:1)
I think trolling is becoming more coordinated.
DVD scrambling patent (Score:1)
publish it anonymously (Score:1)
Publish it anonymously through the cypherpunks remailers and/or "www.freedom.net".
No Identity, no suit (Score:1)
As we all see with this DeCCS deal, once its out there, there's no stopping it.
Re:two things you can do (Score:1)
Sign up for a $GENERIC_FREE_HOMEPAGE account using a fake name. Afraid they might log your IP? Do it from a net cafe or something. Post anonymously to slashdot. Watch mirrors pop up around the world.
%japh = (
'name' => 'Niklas Nordebo', 'mail' => 'niklas@' . 'nordebo.com',
'work' => 'www.sonox.com', 'phone' => '+46-708-405095'
Re:Published works? (Score:1)
There are lots of people out there that are educated or semi-educated in the ways of the law, but you shouldn't really take the word of lay people on something like this, which could potentially land you in a lot of heat.
Hell, there are trained professionals out there who can't get it right, so why would anyone want to risk listening to this bunch. So go talk to someone who is a paid professional, and hope they know what they're doing.
Re:Protection (Score:1)
Face it, whether you are right or wrong doesn't really matter too much in such a case if your opponent has the resources to scare you away by intimidation.
Chilli
Re:Don't ask here. (Score:1)
As a side note, I find it troubling when people say 'this is a legal issue, only talk to lawyers about it.' The law is complicated, but information and thoughts regarding it should not be restricted to just 'the Sacred Priesthood.'
That's very well put. However, in some parts, if you are not a lawyer and your are caught giving what would be considered legal advice, you can get in serious trouble. You certainly open yourself up for a law suit if you tell someone something is legal and it turns out that it isn't.
I don't like all the questions of "can I do this or can I do that" that pop up on here from time to time. These folks should really be speaking to a lawyer because laws vary from region to region. Slashdot may be a good place to get help and advice on technical issues, but the law is not one of them.
As far as restricting what gets posted on Slashdot, the Slashdot crew makes editorial choices about which submissions to post out of the hundreds that they receive in a day, so in essence the content is already restricted. I guess if they could add a filter (like the one for Jon Katz) to block me from viewing these articles, then that might be better.
Patenting algorithms...(OT) (Score:1)
how can you patent for x=1 to x=20, y=x^2 (yep, as far as I can see that's an algorithm).
How?! (see, question and exclamation, must be confused...)
--Remove SPAM from my address to mail me
Re:two things you can do (Score:1)
1. It would still be illegal for anyone else to release/share copies of the software, if it violated patents.
2. What is open source if you can't distribute it openly?
Traditional Warning (Score:1)
Don't do anything you think might get you in trouble until you've consulted a lawyer. When you do, remember that the lawyer will look for ways for you to accomplish what you want, but in the end the lawyer may turn out to be wrong. There is an element of risk here.
The EFF may be able to point you in the direction of people who can help, or even provide a bit of help. But you should not, in any case, rely on what you have heard here. There are quite a few smart people posting here, but you should not rely on any lay advice. Even if some of them are attorneys, you are not in an attorney-client relationship with them, and should not rely on their advice.
Even a preliminary consultation in this case might cost a few hundred dollars. That'll be a lot cheaper than tens of thousands, though.
-TH
Student, University of Minnesota Law School
Product or protocol? (Score:1)
Given that the federal government has the guidelines that all tax-payer funded activities should be released to the public (a trade-off between economic security of the researchers in return for wide-spread public dissemination), it does raise some rather interesting questions about privatising the gains (through patents, etc) and publicising the risks (failures, prototypes, etc) with some claims that the cost of tertiary education is disproportunate to the value due to the inefficient commercialisation apparatus. However, public institutions do provide a valuable social role in fostering income mobility and providing career opportunities to the disadvantaged. In particular they can curb the role of excessive rent-seeking and monopolistic profits. For example, by releasing an open reference design or protocol, common standards can be established with companies motivated to sell additional value to demonstrate clear advantages (either direct, through support, ir indirect through warentees) over the the public version. In an economic sense, this is analogous to the Mum&Pop shop putting limits on the megastore as they can't afford to charge a big price differential while people have alternatives. Of course, if through anti-competitive measures they drive the Mum&Pop out of business, they can then go down the route of the corporate town (aka company store). In a similar way, public individual research & development (effectively what OpenSource is) can (given enough time and resources) replicate any private research (unless they're using some alien technology!).
As to the legality of it, it comes down to a combination of juristictions which is ultimately a codification of individual and social beliefs. The US has a comparative advantage in high tech which means the goverance structure prefers to enact laws (especially property rights) that preserve and protects these advantages. From other countries' perspectives it leads to "unfair" situations such as AIDS drugs being unaffordable to people in Africa due to the drug companies wishing to preserve their market in the US. Given that the US has the military and financial clout to convince
What can one do? Depends on your belief system, if you want to go the Larry Wall approach and diffuse Perl, you can gain fame. If you want to go the Bill Gates approach you can have a chance of becoming rich (but also a good chance of being crushed by competitors, mauled by venture capitalists, and screwed by Wall Street). You cannot say that Perl and Windows can't coexist, they serve different needs. If you wish, you can establish a server in some countries which permits reverse-engineering for compatibility reasons (I believe Australia is one example) and then publicise it and let the world decide. You can publish it as a CD with source code under whatever copyright you wish. You can even forget about it and join the startup and try and make a living. Ultimately the choices one makes in life are individual and you can only act in concordance with your beliefs and values.
If other people believe otherwise, then that is only a concern if they attempt to impose their values on you. Now whether the patent system and the associated heavy-handed branding and trademark protection is worth believing in as a system to promote innovation and invention is a different question. All I can say is that with umpteen legal variations and juristictions around the world, there is no reason to shift your work to another location where it can be protected under different laws. Some countries (e.g. Taiwan I believe) even refuse to accept certain interpretations of IP laws. Note that IANAL and there would be serious complications on the interactions of various laws (e.g. the US insists on taxing citizens on world-wide income). Perhaps one day somebody would create a special juristiction to accomplish your desires (OpenNation?) but until then, if you believe strongly enough in the sharing of ideas (as compared with products or provision of related services), you can blaze your own path much as Linus did.
LL
Anon if your really doing it for reasons you state (Score:1)
If that is really the case just release it and take no credit for it. No one to sue, if it just shows up on a bunch of ftp servers around the world.
Re:This would not help (Score:1)
(see http://www.uspto.gov/web/of fices/ac/ido/ptdl/ptdlib.htm [uspto.gov]) Chances are there's one nearby. Its actually rather interesting to sift through it all. Most of these libraries also have some kind of search engines too. Or if you want to do it from home look at http://www.patents.ibm.com/ [ibm.com]. If its a decent library they'll probably even have someone who can help you figure out how to do a search. Its not eaxactly easy, but nor is it rocket science. If you make a reasonable effort you'll probably find all of the relavent patents quickly. The $10,000 is for a professional lawyer or librarian or both to search thouroughly the entire patent database. You can probably restrict yourself to just the software stuff.
-cpd
Re:This would not help (Score:1)
-cpd
Re:Public Library! (Score:1)
BUT....
you meant "source code to an algorithm that can factor large numbers INTO primes in linear time".
Factoring primes is easy. I'm sure you knew that. But I would hate for anyone else to be confused - it's such a common mistake.
Apparently, even Bill Gates (or more likely, his ghost writer) made this mistake in the first edition of "The Road Ahead".
Torrey Hoffman (Azog)
Re:What gives people the right to do this? (Score:1)
Re:two things you can do (Score:1)
This seems like a very difficult proposition in our networked world. Has there ever been a service that facillitates true anonymous publishing of digital works?
Idea: A PO box that accepts magnetic media and duplicates it to a network of automatic, unstructured, and uncontrolled mirrored web servers. The disk can get posted and then the mailer and media will be destroyed.
I have to disagree (sort of) (Score:1)
As DeCSS has shown us, just creating it is not enough. I agree with you that it is sometimes neccessary to be anonymous to speek freely, but something like this isn't exactly speech. The value of what this person is creating can only be realized if it is actually used, and as we've seen with the DeCSS case, the lawyers will go after everyone who uses the work, not just the creator. In a pure speech case (like the guy who posted Scientology's "secret" information) just getting the info out there is enough, because just knowing the info is what the whole case is about.
But in these cases we need to make it legal somehow, because the scientists who use this work are presumably not in a position to do so anonymously (after all, they must publish their results).
Hopefully your option B wouldn't actually require martyrdom, merely lots of community support (both financial and otherwise).
Re:two things you can do (Score:1)
www.freedom.net or
www.zeroknowledge.com
They claim complete anonymity, and their credentials look good.
Kaa
Legal Protection. (Score:1)
Get a good business lawyer. Maybe try contacting the EFF or Software in the Public Interest(?) to locate a lawyer who would be willing to help cheap.
You can get some legal protection by incorporating (like apache did). Unfortunately this takes some amount of money.
As others said, Document document document. Keep an engineers notebook (stiched bining, numbered pages). These have a higher evidence value than a text file log because they make alteration difficult. One DOD project that I was involved with used these notebooks, not because the DOD wanted them. The lawyers for the company required them.
True, but this is precisely the new problem... (Score:1)
Fool (Score:1)
Good day.
Where in the world? (Score:1)
In which parts of the world are the patents active? Remember the RSA patent - covered the US but not Europe. If the patents are US only, consider getting Europeans to do the OSS work. If I recall correctly, you can't patent algorithms in the EU.
It does seem to me that you're setting yourself up for much legal hassle. In the US, as I understand it (IANAL), patent disputes are heard before juries, making them a pain to fight and even more of a pain to win. The situation is different in the EU.
OT but important (Score:1)
I pity the newbies visiting
Something should be done about it. Ideas anyone?
BTW: When I get moderator points, I try to exclusively moderate good posts up.
Re:Freenet is the solution (Score:1)
Re:What gives people the right to do this? (Score:1)
I have reverse-engineered a few systems, and in every case, it was a measure of last resort, when working within the system didn't help. Reverse-engineering is a lot of work, and getting a working solution is usually cheaper.
But if the vendor just tells you, that you are out of luck then it's time to get out the debuggers, the logic anaylizers and teh hex dumpers. The same happens if you need to import legacy data into the new system and the vendor provides no support.
When buying a system, I expect the vendor to provide the minimum means to do with it what I need (or like). This usually means at least access to the documentation of all file formats and transmission protocols. If he doesn't, he witholds from his customers part of what they paid for:
The possibility to get the maximum use out of the product.
It all depends (Score:1)
If patents are involved you will have little or no protection, regardless of what you do. With a patent it doesn't matter how you 'discover' the technique or process. Whoever has the patent 'owns' the idea under US law. Unless you are willing to take them to court over it and can prove prior art, etc.
If only trade secrets are invovled you are in much better shape. Assuming of course that you haven't broken any NDA you may have agreed to. If you were able to figure out a trade secret via publicly available information, and you can show this is the case, you will probably win out in the long run. You may well have a few years of court battles on your hands however.
As for general protection make sure you have copies of ALL of you work and work related items, i.e. source code, notes, correspondance, etc.
Also talk to a real lawyer. It is all fine and good to get comments here, but only a lawyer will be able to help you with all the details.
I'm at work (Score:1)
BTW, ever read Freud?
Get Real (Score:1)
Re:Reverse-engineering-Information (Score:1)
Get Real (Score:1)
Re:As anonymous as possible. (Score:1)
Congratulations, you have just discovered obscurity.
Search for Mixmaster on google to learn about security, generally considered a lot smarter.
-
We cannot reason ourselves out of our basic irrationality. All we can do is learn the art of being irrational in a reasonable way.
SCIENCE has been ripping people off ! NOT. (Score:1)
Total anonymity (Score:1)
Re: How many people can they sue? (Score:1)
Re: How many people can they sue? (Score:1)
I was wondering about this one. Large corporations sue with the expectation that the individual will run out of money. What would happen if they had to sue a hundred (or a thousand)different people, each putting up a small defense. (admittedly this would take alot of potential martyrs, but Gahndi succeded in the end, didn't he?) How long could they last? Are public defenders available for such cases?
Re:Protection (Score:2)
Re:What gives people the right to do this? Bzzt (Score:2)
The copying isn't the illegal part. It's the distribution of copies that is illegal. I can copy a CD or DVD perfectly legally. If I then give that copy to someone else who hasn't paid for the right to own a copy of that work, I've broken the law.
This means you can only do what the owners WANT you to do. This means no copying, no broadcasting, and yes, even no playing.
Can you cite an instance where a license of this sort has been upheld in court as taking precedent over an individual's right to fair use? I've not heard of one, and until I do, I won't consider such licenses to be legal or enforceable.
Re:What gives people the right to do this? (Score:2)
It's much more legal if you do that with a lock that you own.
Re:civil action/public defenders hack (Score:2)
Well, you can always represent yourself, can't you? Plead that the corporation is trying to scare you into submission with the prospect of a costly trial.
Somehow, I suspect that the main difference between that and a summary judgement would be the number of days you have toi take off from work/school.
Until the law takes into account that in today's world, civil courts can be nearly as effective as criminal court at depriving an individual of freedom, and that furthermore, they allow any entitity with money to do it (rather than just the government in the case of criminal court), the best bet is stay anonymous or hope you can get an attourney to work pro bono or for a percentage of a countersuit.
Re:two things you can do (Score:2)
The guy asking the question wants to release something legally to the community (meaning: allowing others to use it without being prosecuted because they use some dirty stuff that some 31337 d00dz have spread all over the net).
The problem is, the way the courts allow themselves to be abused these days, even if you do something that is legal, moral, and ethical, if it is inconvieniant to people and corperations with plenty of money, you can still be dragged through legal mud for years and face ruinous legal bills. It is entirely possable to have the court find in your favor every single time (initial case, appeals, additional and closely related suits etc) and end up loosing more money than it would have cost to settle in the first place. Eventually, you might well face one more suit and have no resources left to fight a summary judgement. For all practical purposes, a civil court decision can be bought. In such a case, it may be best to be anonymous and avoid all of that.
That is a perfect example of something that is legally acceptable even though it is ethically and morally reprehensable.
Re: How many people can they sue? (Score:2)
How long could they last? Are public defenders available for such cases?
Unfortunatly, no. The right to an attourney only applies to criminal court.
Re:Public Library! (Score:2)
If the traceroute has a long way, such as 20 hops to the first remailer and, say *.maryland.core.gov or something comes up in the route, you are in deep trouble!
Re:What gives people the right to do this? (Score:2)
Your opinion has been registered. Fortunately, there are alternative concepts of "morality" and "ethics" that are out there today. The standard set of morals that would lead you to believe that what the person asking the question in this article was doing is wrong is not the root of the way that everybody thinks about things.
Economics is morality, and morality is economics. They're essentially indistinguishable, and this is one of those examples where it's a bit more evident than in other places.
Freenet is the solution (Score:2)
Re:What gives people the right to do this? (Score:2)
at least that's the case with CDs. I don't see any reason why DVDs would be any different.
Published works? (Score:2)
Re:Published works? (Score:2)
In btw this is one of the additional protections on linux besides GPL. Have a look at the ethernet drivers.
After it has been patented the situation becomes much more difficult. There is a number of patents floating around that have actually been developed with government money (mostly in biology, pharmacology, chemistry, etc). And US government seems reluctant to chase the offenders. I do not know the reasons for the reluctance but it is quite likely that US legal system protects the offender in this case.
So my suggestion is Hurry. IANAL of course...
YES!!! Public funds == Public knowledge (Score:2)
Ideas vs Implementations (Score:2)
Most people around here do not believe they have that right. Implementations should be protected, and only pirates would argue against that. But there is apparently still some debate about whether or not the ideas and mathematics -- upon which implementations are based -- should be protected. When certain parties try to use "idea protection" (like software patents and the DMCA) to inhibit competing implementations and interoperability, then we have a problem.
I agree. But that's not what this is about. For example, nobody really wants to "force" Microsoft to release their media player's source code, or to force Xing to release their DVD player's source code. We just want the specs for the media formats that these programs play. And that is the right that we demand: the specs for data formats and protocols. If you're going to send or sell me files, then they simply must be in an understandable format. Since the specs are unavailable, disassembling and reverse-engineering an existing implementations is what we have to resort to, so that we can infer the specs and start to make independant implementations. It's not pretty, but sometimes it's the only way. Congress understood the importance of that right, which is why even the highly-restrictive DMCA protects the right of reverse engineering. Unfortuantely, they didn't understand open source so now the right of distributing the knowledge gained by reverse engineering is now in danger.
That right is important to freedom, and you're going to hear a lot of screaming around here whenever it is endangered..
You are implying that there's a double-standard here. But there isn't. If someone were to copy GPL'ed code into a closed-source implementation, that would be a copyright violation and you can bet your ass that there would be an uproar. But if someone were to study that code to understand how it works, or to understand the format of the data that it manipulates, and then they were to write their own closed source implentation that is based upon that knowledge, there would be no "moral outrage" at all. Yeah, I bet a few people might question the business sense of whoever does this (i.e. trying to sell a product that competes with an already existing open source product) but that's another issue.
---
Re:Get a friendly front in a safe country for rele (Score:2)
That could be a good idea, indeed. However, the most important advice (document everything) will then become very tricky. The ghost author will have to explain how he has acquired the information, written the code, and so on. The ghost author will also need one or several friends who can testify that he has found all this by himself.
Nevertheless, finding a friendly party in a country that allows reverse-engineering might be a good solution for people living in the USA or in other countries that have stupid restrictions on reverse-engineering. Alas, even European countries are now modifying their laws to prohibit reverse-engineering because of the pressure from several big companies.
Your Best Defense is a good precedent (Score:2)
Put simply, your best chance here is probably to have had a previous case on a similar subject decided in your favor. If the companies see that they can crush open-source projects like DeCSS they'll get bolder and do it as a standard business practice.
If however, DeCSS beats the DVDCCA and MPAA, most specifically if they beat them in a very public and somewhat humiliating manner, you may well see the companies thinking about who they sue before they sue.
Even better, if the Judge's ruling in one of these cases were to actually address the issue of reverse engineering and either implicity or explicity allow it you stand in very good shape.
So you stand to lose a lot with the DeCSS case, keep this in mind. Write editors of newspapers asking them to give fair and balanced coverage, organize a protest where it will get noticed by the media, and above all, BE POLITE! Don't do anything that would make everyone think we're a bunch of law-breaking freaks who deserve to what we get. This battle will be fought much more in the court of public opinion than any particular jurisdiction.
Protection (Score:2)
If what you are doing is illegal, why should you be able to simply use 'open source' as a shield?
Re:What gives people the right to do this? (Score:2)
All software should be free.
Who cares if it's in binary.. it's *STILL* instructions that are understood by a computer, and I have every moral right in the world to read those instructions and translate them into whatever language I want.
Re:most important: Get your ass out of US (Score:2)
The US Govt will still say 'americans found it, americans can get ahold of it, and this guy is an american, therefore, he must abide by american law'
Re:Protection (Score:2)
What I am debating is.. If you *know* what you are doing is illegal, Open Source is not a shield.
What Jon did in the DeCSS fiasco, he thought he was allowed to do, and at best, it's a grey-area thing right now. He did not set out to commit a crime.
If you are stating that you want to reverse-enginner something, and you believe what you are going to do is illegal, and you want to challenge that in court, that's up to you.
And you know what's missing from the law? Retribution for misuse of the law. By one right, Jon was accused of some heavy crime, and was arrested for it. By the same token, if it turns out there was no heavy crime, and any part of the clam was bad..... someone should pay.
Re:Protection (Score:2)
I guess I read the question more along the lines of 'I know what I am doing is blatantly illegal. How can Open Source protect me?'.
Re:OPERATION: POINT WASTE (Score:2)
This appears to be a fairly popular tactic now for people without the skills to do something constructive with their time.
Perhaps the moderation system should adapt to handle it. I propose that moderators not lose points for marking trolling posts like this, but not actually lower the score of the post until a certain number of moderators have rated the post as a troll. Perhaps 3.
With the current system, I'm sure that this could be handled simply by increasing the number of points available in the system, granting moderation more frequently, and allowing moderators to (as this "enlightening" series of posts states) waste points putting the smack-down on the richly deserving. But this really goes against the spirit of moderation, which is to spend as many points as possible elevating good posts. Simply cleaning up is a waste of moderator time and cheapens the responsibility of it.
Another option would be to let it ride and tell people to read at 1+. The downside here is that we could miss insightful AC posts, and links to comments from other news sources will still be loaded with trash (BTW, I love the idea of defaulting to posts to be ordered descending by score to make Slashdot more presentable to the rest of the community).
Allowing moderators to strike down large groups of posts after several moderators have decided they are pointless trash would go a long long way towards quickly cleaning up messes like this.
- StaticLimit
Re:two things you can do (Score:2)
Next, go to a net cafe, paying with cash. Open a webmail account with fake details - not exactly tricky - and use that to submit it to as many different servers as I could think of. But don't do anything else or it's easier for someone to establish a usage pattern and identify you. DEFINITELY don't log in to any other services...
Finally, go. Flush the cache on your machine manually, take all media with you and go. But go via a park (or somewhere else secluded with plenty of cover) and remove a top layer of clothing - say, cap, glasses and jacket. Dump these in bushes or wherever and go home.
Would that be secure enough for most people?
Greg
The only way to be ready is to be ready (Score:2)
In other words, talk to a full-blooded lawyer about the question before you release. Have materials and papers ready, being ready to ambush the ambushers with motions and declarations before the ex parte and rush TRO hearings. Have all your ducks in a row, to the extent you do have a legal defense, and make certain that you don't overstep or lose on a technical glitch.
The only way to do this right is to have a lawyer, whom you have retained for your particular problems. If money is an issue, you may have to find someone willing to do it pro bono, which may be possible if the cause is worthy. This may require some shopping, and I'd be pleased to help guide you to finding such a person working in your jurisdiction.
But do this ALL UP FRONT, with a clear sense of what you are doing and why you are doing it. In a recent thread, slashdotters lambasted the legal system for moving too quickly. Count on it to move quickly, too quickly, once you release. In the meanwhile -- YOU CONTROL -- when that happens. So be ready for the deluge, before it descends upon you.
Although its not what you want to hear, the only way to be ready, legally speaking, is to be ready, legally speaking.
Re:Public Library! (Score:2)
Re:If you take away patents all together... (Score:2)
But, like I said before, the patent system discourages alternate funding systems, so I would like to see it go.
If you take away patents all together... (Score:2)
Second, all the bio-tech start-ups and research departments shut right down. No company on earth could afford to spend that kind of money unless a government supported monopoly was the reward.
Third, there will be a lot of scientists out of work who would very much like to still be working.
Those scientists still want to do research for reasonable salaries (say $60-200k). Some would do it for less, of course, but I doubt many would reject these salaries (cause i don't believe there are many scientists out there doing it for the stock options and the getting rich part).
So, what those scientists need, is spending money. A software tax is an interesting idea. The basic plan is fund it with public money. This would be fine. I personally wouldn't like delegating the choice of what which research projects to fund, but this would be an improvement over the current patent system.
The typical argument against public (tax) funding is that it's inefficient and will cost a lot. Here's where I bring up point 1: do you have any idea how much we'll save in health costs? I don't, but I bet it's a handsome amount. Health insurance costs would come down, significantly. Medicare and Medicaid would cost less to administer. In the public funding system, our money would go directly to research, bypassing patent and court costs. Strikes me as more efficient. And, all scientific findings would be public domain (even those no one would have wanted to patent before). Another bonus.
There are other ways to fund as well. Charities get money - scientific foundations could be formed which receive donations. That way, people could choose which projects they fund. Probably not enough people are educated enough to go straight to this, but some sort of hybrid could probably be worked out. ie, whatever you donated to a foundation could be subtracted from your research tax.
Socialist, you say? Maybe so. Do you think there's no place for socialistic concepts? The biggest argument against socialism is that the government can never allocate resources as efficiently as the market. I happen to agree very strongly with this argument, so I would prefer a more chaotic system than having our legislators "legislate" where the funding goes. I would prefer that each individual gets to "vote" for their favorite research foundation. That way, the allocation of research funding could change very quickly to meet the demands of the people. Currently, Michael J. Fox has to go before congress to try and work out increases for Parkinson research. With my way, he could go directly to the people and it would happen immediately, according to the people's desires.
But, I don't think any other funding model could work or be put into place so long as Patents are around. Patents make any other source of funding something only a fool would choose to do since you'll be paying for those government supported monopolies either way. Get rid of patents, then we'll be open to other possibilities.
Re:What gives people the right to do this? (Score:2)
If we did not have laws protecting IP then there would be no incentive to create works and/or new products.
This is simply untrue. There are usually at least two motivations to invent something - one is economic, and the other is the joy/satisfaction of doing the thing itself. Thousands of open-source coders should have clue'd us in to that by now. For scientific research, this is even more true. The problem is, how do we fund research, not how can we profit from it. Given money, there will be more than enough people who will do research regardless of whether they can sell a product as a result. Patent law is unnecessary - what's necessary is a new funding model.
Re:If you take away patents all together... (Score:2)
I was suggesting patent law serves the purpose of a funding model, but is actually an incentive model (subtle difference, but important). That distinction leads me to suggest that if we could come up with a realfunding model, we could do away with patents. That is why I talked about bio-tech - because it is an example of an industry that really would go away if patent law disappeared (without a replacement). I was trying to take on the most difficult area. Open-source software is much easier - it's here, despite patent law.
You also point out that currently we are doing pretty good having both open and closed source. That's great, I agree. The more various funding models we can have, the better. But the patent model discourages competing models, unfortunately. A company can make much more money through the government protected monopoly than almost any other way. The playing field is not level with that incentive out there.
Open-source software gets around this because the cost of development is very small. It would still be improved by the addition of a funding solution, though. I personally like Co-Source's funding model. I think that method gets at your objection that open-source has limited output in many areas. Developers there are asked to develop solutions, and are paid for the work they do, not for the output. ie, the output is forever free, there is simply a one-time charge for the work to produce it.
In my opinion, a co-source model needs to be combined with a tech support model using similar means. Consumers of open-source ought to be able to make an open request for tech support, deliverable by whatever person(s) or agency out there willing to take on the job. I've even described a business model based on the idea of making all the developers "out there" potential employees, paid on a per-job or per-service basis. The customers of the fantasy business would pay a subscription cost, which would give them any number of "points" to spend, asking questions, requesting software or service. Developers in the forum that answered the questions, or developed the software, or who actually visited the customer to solve the problem would be the recipients of real money, based on the number of points the customer assigned to the request.
Example:
Customer has a problem mass installing linux on all their employee desktops. They send in a question to the business' website asking for help/suggestions/code for doing this. They assign 100 points to the successfull completion of this request. A develop "somewhere" reads this request, gets more info from the client, and writes a brief script to solve their problem. The customer is happy and grants the developer the 100 points. The business pays out money to the developer based on the points they've accumulated.
Re:What gives people the right to do this? (Score:2)
I do disagree with one point, however - that of your "award" system. I don't like award systems. They inherently favor small, cheap solutions to problems, whether or not that's the best way. Who would undertake to build a brand new operating system based on an award system? Who would risk drug development based on the possibility of getting an award, but having to foot the bill in the meantime?
I think the reason you chose an award system, and this public body, are to create a valid way of determining who is deserving of funding. But, as I said in another post, I prefer a more dynamic way of determining who gets funded. Let the people decide individually. You can still have a public body that generates a list of valid projects if you like, to protect against fraud. But, the point is, projects get funded up front, and money is free to switch projects when people choose to do so.
Re:Legal hindquarter-covering. (Score:2)
Not that I think that these shrink-wrap licenses are ever going to stand up in a higher court. But they do give the big money a tool to harass people with until they can afford to appeal up to an educated judge.
Could one of the people who actually bought one of these devices post the text of the claimed license ?
Re:What gives people the right to do this? (Score:2)
Sounds like a prime target for corruption.
Re:Public Library! (Score:2)
> that. But I would hate for anyone else to be
> confused - it's such a common mistake.
Yes I know....slip of the fingers.
Anyway...you know what I meant
Slashdot needs a new posting system that scans
a post, and posts what the author meant instead
of what he typed. It will solve alot of problems.
Re:Public Library! (Score:2)
All that an evesdropper would be able to tell is
that you sent an email through remailer A.
Since it is encrypted, they would first need
to break the encryption (IDEA or RSA...I doubt it)
Just to find out what the second remailer is.
and then it has to be broken again to get the
next step.
Since noone knows what you are sending prior to
it reaching the final remailer, there is no reason
for them to suspect anything and go through the
effort. (and breaking the encryption of PGP is
most probably very hard work...even for the NSA)
Even if the NSA themselves could break PGP
easily and decode every message going to every
remailler....they would gain nothing and lose
alot by admitting to the fact that they can...
so it wont matter anyway.
That is of course unless you are releaseing
source code to an algorithem that can factor
large primes in linear time. Then you can expect
to arouse their attention.
anyway... 6 hops through remailers in at least
3 differnt countries should do the trick.
Re:Public Library! (Score:2)
Find encrypting anonymous remailers. Get their
public keys.... encrypt the message a few times
over with them....
then bounce it through 6-10 of them, all in
differnt countries, then into a mail to usenet
gateway.
Is this still viable? I havn't checked out
anonymous remailers in years but...I would
imagine that tracing back to you would be nearly
impossible if done right.
Too bad annon.penet.fi is gone. (am I the only
one still lamenting their demise? whats it been
4 years now?)
Re:What gives people the right to do this? (Score:2)
Sure, it's complex. But I don't see that it's any more arbitrary than "Lets make some random laws and rely on people to sue each other all the time and hope that everything just works out".
It's an ambitious enterprise certainly. But it's worth the effort because the potential rewards are enormous.
Don't forget that patents and intellectual property are articficial constructs. They were created at a time when information was scarce and economic progress was paramount.
Now, technology has brought us to a state where information could be made free and the sum of human knowledge could be harnessed for everbody's mutual advantage. How sad then that antiquated laws remain, stifling the economy and providing little more than a way for businesses to stab each other in the back and extort monopoly power.
Quite easy. New products get registered and published. Anyone is free to take them up, package them and sell them. Over the next yaer or two, surveys are done on the uptake of different types of products. Awards are given to creators based on how well used the products are, with a modifiying factor for the type and complexity of software.
I don't think that is particularly hard to administer. With reasonable data gathering a fairly small team of people could distribute awards to a whole industry. If people get missed out, you can always give them an award later when the true potential of their idea/product is realised. A democratically elected steering committee can stamp out abuses, but I think these would be relatively few since the process would be open to public scrutiny.
Re:What gives people the right to do this? (Score:2)
Re:What gives people the right to do this? (Score:2)
Some people seem to think that patents are in some way neccessary to create innovation. This is demonstrably untrue. People have been programmed to regard ideas as property, but this is a lie perpetuated by a combination of inertia and vested interests. If you look at the issue with an open mind, you can see that there is in fact no need for intellectual property at all.
So what is the solution? There are many good ones, but I think my solution is relatively simple and effective.
All ideas / algorithms / techniques are to beconsidered public knowledge. This has big economic benefits, since it ensures competitive markets and guarantees that the benefits of science will be utilised to the maximum extent, which is *not* the case when you are restricted by patents.
Now, the incentive to innovate is created by a public body that is independant of the government, perhaps even with its own democratically elected committee. Its role is to reward those who create useful innovations with hard cash awards.
Awards are only given if an innovation is a proven success, i.e. people take it up and use it effectively in the market. In a way, the award is meant to reflect what the inventor would have been able to earn under a patent system. Note that the product could be produced by anyone, not necessarily the inventor, which is a good thing because the market will now be competitive, driving economic growth and further innovation.
Funding for the awards will come out of general taxation. This is the fairest solution, since innovations now benefit society and the economy as a whole. I would estimate that this would be a fairly small addition to the tax burden, which would be more than compensated by greater economic progress.
The award system will undoubtably cost money to set up and run effectively, but will probably still be cheaper than the current patent system, if you include all the legal expenses paid by firms.
Biggest bonus of all is that since all ideas are now free, innovation and research can occur much faster without being encumbered by other people's patents, the need to patent your own ideas or any of the frightful legal wrangling that currently occurs.
Of course, there are a lot more complicated economic arguments behind all this. But I'm pretty convinced any country that adopted this model would surge ahead of the rest of the world in technological and economic development. Not only does it have practical economic advantages, I think it is also philosophically more elegant and more morally justifiable in terms of freedom.
Awards vs. Grants (Score:2)
For things like ongoing drug research, it might be better to focus on funding practical scientific research through universities and suchlike. Getting research grants beforehand is certainly much less risky for innovators.
Still, I think the main beauty of the award system is that it virtually eliminates potential corruption and uncertainty about the value of a project. Awards are only given for things which are a proven success, at which point the innovator has certainly shown themselves to be deserving.
Ultimately, I guess that the exact nature of funding would be somewhat dependant on the nature of the field being researched. You'd also need a transitional period as these new systems are introduced, although I think this could be managed quite easily provided the long term objectives are always bourne in mind.
Re:It's still the law - just loopholed. (Score:2)
Legal hindquarter-covering. (Score:2)
In either case, what you'll need to worry about is what restrictions were put on the material you used. The problem with the DVD issue is that they use a shrink wrapped licence stating that you can't reverse engineer it, but as long as nothing like that applies (in which case you'd have to fight that what you're doing is covered by laws making it legal), what you need to worry about are the usual trouble spots in reimplemantation. Is it clean? Can you document that you at no time used unlawfully attained information? Did you have access to any information for which you're bound to NDAs? Etc.
The biggest problem, probably, is that the companies could sue you whether or not they thought they could win, to frighten you into submission. Assuming you live in the US of A where everyone has the God given right to sue anyone else, there is nothing you can do to prevent this, only fight and win.
-- Eythain
Re:Publicly funded work is NOT public domaim (Score:2)
Hey! That's a terrific idea!
Let's create one. I'm willing to contribute ... after all, I make money off Linux, and not being a programmer don't have any opportunity to contribute. But I know fundraising and non-profits.
I can, at this time, donate:
1. Web hosting space and e-mail (on Pacbell.net)
2. Small amounts of cash after tax day.
3. 4 years of non-profit expertise.
But, of course, this requires Open Source community participation. Who else is interested?
This is serious. Please reply to agliodbs@pobox.com with "OSLDF" in the subject line.
-TheFuzzy (Josh Berkus)
Excuse me? (Score:2)
This individual is working from the idea that someone else came up with, just like millions of others have before him. Making the claim that he's 'stealing' anything without the evidence of wrongdoing seems to be a hallmark of the (in)justice system of the U.S. where guilty until proven innocent seems to hold sway..
If this individual is gleaning information from articles and trade papers he's not stealing; he's availing himself of freely available information to take an idea, whether patented or a 'trade secret' (oxymoron if I ever heard one), to a further level, or along a different path to reach the same result. Much akin to building a homemade skateboard; you know someone patented the idea, but are you really going to hurt their business by 'rolling your own'? If you try to sell the resulting product is one thing, but creating something for yourself, IMHO, cannot be a crime.
I for one am glad that there are individuals like this in society who are willing to step up and make ideas happen, even in the face of the extremely juvenile patent law system of the U.S.; juvenile in the sense that it is not sufficent to deal with the current state of intellectual property, and has no provisions to give a clear cut reach to law regarding trade secrets.
Re:two things you can do (Score:2)
That people have to release useful, open codes anonymously in order to avoid terrible corporate punishment is a very sad thought.
I should hope that I would have more sense, but I would be very tempted to release such codes with my name on them. To me, the support of the hacker community is worth the price of corporate crackdown. Then there's that whole ego thing a la esr.
Re:two things you can do (Score:3)
Re:What gives people the right to do this? (Score:3)
US Law gives us that right.
The law differentiates certain protections. Copyright protects an expression of an idea. But the ideas in a work are unprotected, and reverse engineering is allowed as a way to retrieve those unprotected ideas, so long as you don't infringe on their copyright by copying the expression.
This isn't a new concept. Society doesn't recognize a permanent right of creators to keep their ideas secret. You have a right to try to keep it secret (trade secret, aka don't tell anyone without contracts), or you can release it fully in exchange for temporary protection (patents).
two things you can do (Score:3)
Get a friendly front in a safe country for release (Score:3)
Bad advice. If the intent of the author is to release something to the community, then he probably wants to be sure that it would be possible for others to use his work. Releasing the code or documentation anonymously would not help anyone, because they would have to prove that the original information was obtained legally, which would be impossible if it comes from an anonymous source.
If the author is in a country where reverse engineering has been made illegal (probably at the behest of Software and Media Mogules such as Microsoft, the RIAA, MPAA, and DVD Forum), then he or she is probably not in a position to take on the overfunded lawyers of these organizations (or other, similar entities), much less have a snowball's chance in hell of winning. However, you are correct, anonymous release of trade secrets doesn't do anyone any good, because we can't show it was obtained legally and therefor can't use it safely.
But, the author could find a friendly party in a safe country and have them take credit for the release. In this way, the author gets the protection of anonymouty (especially if he or she uses an anonymous (e.g. cypherpunk) mail forwarding service to maintain true anonymouty throughout (which I would recommend in case the "friendly party" turns out to be a malicious plant). At the same time, the community gets the benefit of a product which has been legally reverse engineered and made available.
This doesn't guaruntee the community complete safety. After all, the CSS algorithm was legally reverse engineered abroad and that hasn't appeared to slow down the MPAA and DVD Forum from sending the secret police in to drag children from their farms, or go after every Tom, Dick, and Harry for having a link on their web page which might, somewhere, lead to the offending (though perfectly legal) code. Alas, there is no complete safety when taking on powerful, established entities with a monopoly or (in the DVD case) quasi-legal trust to protect.
Reverse-engineering-Information (Score:3)
http://www.softpanorama.org/SE/reverse_engineer
But even the most rigorous dosumentation won't protect yo from litigation. What you need is a "big daddy", someone to front you on any legal expenses. Talk to the Free Software Foundation. I know that is you assign rights to the FSF under specifically and release it under the GPL they have lawyers to help protect your copyrights. Talk to them, if you think the software you have developed is that important they are lieky to listen and maybe even help.
Please send inquiries about GNU and the FSF to
Free Software Foundation
59 Temple Place - Suite 330
Boston, MA 02111-1307, USA
Voice: +1-617-542-5942
Fax: +1-617-542-2652
gnu@gnu.org
or WWW.FSF.org
Re:clean reverse engineering (Score:3)
Patents protect a process or an idea. In order to have patent protection the subject of the patent must be fully documented and publicly available at the patent office. This means that reverse engineering should not be necessary for any product which is covered by patents, because all of the inner workings must be documented.
Trade secret, as we all know from the DeCSS debacle, keeps the "how" out of public knowledge, but (theoretically) once the cat is out of the bag, and someone comes across the secret (by proper means) the trade secret protection is lost. Here is the area where people are trying to use trade secret law, combined with contract provisions against reverse engineering to maintain an unprecedented amount of control over intellectual property.
Copyright, the third traditional form of IP protects a method of epression. But copyright does not protect the idea behind the expression, only the precise expression that was used.
You really need to see an IP lawyer to have him/her identify which forms of protection are currently being asserted over the IP you are working from. Then you can figure out how to complete your project while minimizing the legal consequences.
Dane Torbenson
This would not help (Score:4)
Easier said than done... However, this brings an important point: it is crucial to check for patents before releasing something that is considered to be a trade secret. If something is proprietary but not patented, then it is perfectly legal to re-implement it (as long as you use a "clean room" process and you do not copy anything directly from the current solution). But if anything is patented, then it is not possible to release this to the community.
Why? If he has spent a significant amount of time studying the problem and the existing solutions, I doubt that he would be happy to see some companies taking his solution and making a proprietary product out of it.
Bad advice. If the intent of the author is to release something to the community, then he probably wants to be sure that it would be possible for others to use his work. Releasing the code or documentation anonymously would not help anyone, because they would have to prove that the original information was obtained legally, which would be impossible if it comes from an anonymous source.
I think that the only good advice is: document everything. If you want to release something (possibly controversial) to the community, then the only way to make sure that others can really benefit from what you have done is to be accountable for it. You have to be able to prove that all the information was obtained legally, and that it does not come from any confidential documents. If every source of information is legal, then the community can benefit legally from your work (and you will be able to cover your back because you can prove how you obtained the information).
You nailed it (Score:4)
Of course, IANAL, and there is much more to lawsuits than mere law (as we all know).
Now I don't know what field you are in, but lets say you are reinventing coca cola.
You may analyze a bottle (Reverse engineer) or use open sources (what is printed on the bottle i.e water, sugar, artificial flavoring). If you never seen the real recipy (trade secret) you are in the clear as long as you dont try to call your product "Coca cola" or something too similar.
If, on the other hand, you are making a simpler way to shop online (i.e. one click shopping). Assuming that Amazon's patent would hold in court, you can't recreate it in any way unless you can show that what you have done is really different to what is patented.
In short: Against patents you are screwed if their lawyers find you. Against trade secrets *they* are screwed as soon as you can show that you did the same independently.
Re:What gives people the right to do this? (Score:5)
Certainly from a moral standpoint (and a legal standpoint involving copyright but not patent) their is no theft occuring if I figure out hos someone else did something independently and implement this algorithm myself. (In some sense this is what DeCSS is about. Someone figured out the algorithm mapping encrypted to decrypeted files. This algorithm, being unpatented, should be perfectly within our rights to use as we see fit. No one copied their code and is distributing it.).
From a moral issue there is no reason whatsoever to assume that using someone else's idea is wrong or incorrect. They do not lose anything when you use their idea (to say they lose the rights to it is fallacious as it assumes that they have said rights in the first place) like they do when you take physical property from them. The arguments for Intellectual prooperty are ENTIERLY economic. If we did not have laws protecting IP then there would be no incentive to create works and/or new products. It is interesting to note that these laws were all originally choosen to have reasonably limited durations but that lobbying from various companies has pushed up the copyright time to a ridiculous level.
For a while after the revolution the United States had no copyright law to speak of. Of course during this period we produced little literature and became a 'pirate country' reprinting books from other countries beyond their law.
Don't ask here. (Score:5)
You shouldn't be asking these questions here or in any other public forum. I, for one, will not answer these questions. It is asking for trouble to answer legal questions in places such as this.
My advice to you is hire a lawyer, or don't release your work. You'd better know the legal implications of what you're doing before you do it, and the description of what you're tyring to do is too vague for anyone, even a lawyer, to give you any kind of decent answer.
BTW, YOU WILL end up in court if someone has made it clear to you that what you are reverse engineering is considered a trade secret. If you've had any kind of access to that trade secret, and you knew it was a trade secret, you'll probably get sued, and you'll probably deserve it.
Now, we just have to get the Slashdot crew to stop posting these things.
This is not the best place to ask this question. (Score:5)
You mention that the work you are attempting to re-implemenent is the subject of "proprietary" protection and "trade secrets", but then you claim that you will be the subject of patent litigation. I'm sorry - what are you referring to? If they have patents on the technology, then what are the patent #'s? Further, if they have patents, then their technology is NOT a trade secret - patents are published.
You mention that "most of the work is considered proprietary, the rest is considered trade secrets" this doesn't make much sense. First point - "proprietary" is NOT a subset of intellectual property. IF a technology IS the subject of either patent, copyright or trade secret protection, only then can they consider it proprietary.
So again - if there is no patent, there is no patent protection. If the technology is contained in published works, then there is no trade secret protection (unless what you are referring to is object code software that has been released to the public - you are not clear on this point). (If however, you gained knowledge of the technologies you are trying to re-implement under an implicit or explicit agreement of secrecy, then you may be in hot water.) If you are not copying source code verbatim, then you are NOT violating copyright by re-implementing the algorithm.
Further than that, you simply haven't provided enough information to help you in any meaningful way.
clean reverse engineering (Score:5)
I get the impression from your posting that there really isn't even a product available yet to be reversed, but that there is enough information to design a parallel process. Whether or not this can stand as 'clean room' reversing would depend on how the data you obtained was presented.
I agree with one of the prior posters; If it was obtained from patent documents, you might have some problems.
I am curious whether or not, if the data was obtained from published commercial/scientific documents, copyrights might also be claimed?
Re:Published works? (Score:5)
The thing to read in patents is the Claims. Getting a patent is a bit like homesteading a piece of territory used to be: you stake your "Claim", and if nobody else has got it first then its yours.
Imagine how homesteading might have worked if there were no size limits and no need to "prove" the claim (in the sense of exploiting it all). You can stake your claim by putting four pegs in the ground: the perimiter defined by those pegs is your claim. However the claim is only valid if nobody else has put any of their pegs in that area first.
Patent claims work like a series of (mostly) concentric peg claims. Claim 1 pegs out the whole of Arkensas, but you don't really expect to get that one. Claim 2 pegs out the whole of Hazzard County, and you don't really expect to get that one either. Claim 3 pegs out 50 square miles, and you might get that one if you are lucky. Claims 4-6 are the most likely looking homesteads within claim 3, and claim 4 is where you actually start expecting to defend your property.
So, look at the claims on the patent, and figure out which ones are just restatements of prior art. For example in the DVD content scrambling patent [164.195.100.11], claim 1 pretty much describes any PRNG. Claim 2 probably covers a lot of cryptographic PRNGs (its not my field), and claims 7 and 8 cover the use of a PRNG number stream XORed with the data. So those claims would be covered by prior art and the MPAA is unlikely to contest them. They will concentrate on the later, more specific claims, such as the precise pattern of XORs in the PRNG.
So if I were writing a DVD descrambler routine I would try to come up with an algorithm which evaded the detailed claims, and forget about claims 1, 2, 7 & 8, and any others with textbook prior art. If you could show a standard textbook as prior art then I would expect the suit to be declared vexatious. But IANAL, of course.
You have two options: (Score:5)
a) Stay down. Barring your own vanity, releasing something anonymously on the Internet is not that difficult. Put everything together nicely, and then send it to a mailing list or newsgroup on the subject through a Mixmaster or Cypherpunk mailing list. Leave spreading it to the power of the masses and of the Internet, by just creating it you have done enough.
This means major paranoia though, possibly you are not careful enough even when submitting this Slashdot. How sure are you that Rob and Andover are _really_ wiping the logs?
Yes, it sucks to have to be anonymous to speak freely, but such is the nature of living in a non-free society (and I won't even dignify anyone who says we do with a reply). Possibly you could sign the message with a public key, so that when (if) freedom comes you can take credit for your work. Consider that possesion of the private key would be very incriminating however.
b) Make a matyr of yourself. Contact a lawyer, and maybe a charity that is ready to help you first. Then just go out and tell the truth, ready to be the case that gets taken to the supreme court. It's a risky strategy, but it is a lot more glamorous then the first, so some people may still prefer it (being a pompous asshole myself, I think I might). And at least in this case you have a better chance of the data actually becoming legal, so that using it is not thoughtcrime...
-
We cannot reason ourselves out of our basic irrationality. All we can do is learn the art of being irrational in a reasonable way.
What gives people the right to do this? (Score:5)
Forcing a company to release source code really isn't freedom, it sure seems me like strong-arm mafia tactics by snotty brats. Slashdot sure brings itself into a huge fit when a mention of the GPL being violated, now where is our moral outrage that someone is wanting advice on a premeditated violation of someone else's license.
I don't really care if it's legal or not in their home country, I think it's morally wrong to force our opensource ideals onto companies by tactics slashdot would raise holy hell about if the rolls were reversed. If a company doesn't want to release something opensource what right to we have to TAKE AWAY THEIR FREEDOM? I love opensource, I am a firm believer in giving back to the community; but this premeditated stealing of someone else's code I can't agree with.
Documentation (Score:5)
First rule (Score:5)