OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: J.C. Roberts (unknownabac.com)
Date: Tue Sep 04 2001 - 22:53:48 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On Wed, 5 Sep 2001 11:22:25 +1000 (Australia/NSW), you wrote:

    >In some mail from J.C. Roberts, sie said:
    >[...]
    >> If he really believes his software and ideas are so great, he should
    >> have the guts to put them under the BSD license and let the public
    >> decide whether or not his way is the best way doing things.
    >
    >Actually, I think the problem is fairly easy to understand.
    >
    >What he's effectively saying is that if you download djbdns he wants you
    >to know that it is _the_ djbdns and not some modified version of djbdns
    >which may have a security bug introduced by someone else.
    >
    >In essence, he's realises that the software he writes has value because of
    >his name being associated with it (or it being thought of as his) and wants
    >to ensure the integrity of all such packages he makes available. The only
    >method he has available is to prevent any action which might put that
    >integrity at risk - hence the "no modify" licence.
    >
    >His concern isn't about making software others can package but about writing
    >secure software which others can use. A different modus operandi to what
    >OpenBSD is about.
    >

    When you are not allowed to use his software as you see fit, the
    usability itself is diminished. In essence, by using a license to
    control exactly how someone MUST install his software, it stands to
    reason his modus operandi is not about making secure software others
    can use, instead it's about forcing people to adopt his opinions of
    how things should be done.

    >The problem is when you build up a brand name and make it worth something,
    >there is very little you can do to protect it, in free software, a rather
    >annoying conundrum. If RedHat were to include a modified djbdns in its
    >distribution, would you have the same confidence as the one from his web
    >site? What if it were OpenBSD and not RedHat (and lets pretend the user
    >knows who djb is but not that openbsd is cool)?
    >
    >It's almost like he can provide a warranty the way his stuff is currently
    >distributed - something which would be null and void in any OpenBSD distro
    >- and he wants it to stay that way. Who knows? Maybe someone should ask
    >him and see what he says, if anything. He's an intelligent person so I'm
    >sure he has good reasons to do things, we've just got to respect that.
    >
    >This is just my _own_ opinion and may be a load of horse shit.
    >
    >Darren

    Can I take all the linux and gpl source build my own for distribution
    and call it `RedHat'? -Well not without hearing from some lawyers. ;)

    If DJB used an Apache style license (BSD plus "don't call it what I
    call it"), it would take care of the possible dilution of brand name
    or slander to his name caused by patched/ported versions of his
    software. He would still be able to provide a some degree of warranty
    on his releases but as for his true motives for any of this, you said
    it best, "Who knows?"

    He has obviously invested a lot of time in his work and has the right
    to license it in any fashion he damn well pleases but if his goal is
    to produce software that is secure, usable and useful, his choice of
    license is a hinderance not a help.

    More than anything, it's been disheartening to watch DJB's public
    antics these lists because I have a great deal of respect for the code
    he writes. I've learned a lot from the parts of his code that I
    understand and I'm dead certain there are subtleties in his code that
    I don't even comprehend yet. I really appreciate all the hard work
    that has gone into to his software, so loosing respect for the way he
    treats others both on a technical and personal level has been
    disturbing. It's been tough to accept how someone so obviously bright
    can completely lack basic manners in his human interaction and common
    sense in his licensing.

    Like yourself, DJB doesn't just write good code, instead he writes
    really great code but I don't like being forced to change the layout
    of my file system to fit his personal opinions. DJB can, and most
    likely will, do exactly as he pleases regardless of how it affects end
    users and though I don't support his methods or reasoning, I'll always
    support his right to choose his own opinions, license and destiny (as
    well as system layout ;) whether or not he supports my right to make
    those the same choices.

    Best Regards,
    JCR