linux-kernel - Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20070619012517.GL14788@delft.aura.cs.cmu.edu>
Date:	Mon, 18 Jun 2007 21:25:17 -0400
From:	Jan Harkes <jaharkes@...cmu.edu>
To:	Alexandre Oliva <aoliva@...hat.com>
Cc:	Linus Torvalds <torvalds@...ux-foundation.org>,
	Al Viro <viro@....linux.org.uk>,
	Bernd Schmidt <bernds_cb1@...nline.de>,
	Alan Cox <alan@...rguk.ukuu.org.uk>,
	Ingo Molnar <mingo@...e.hu>,
	Daniel Hazelton <dhazelton@...er.net>,
	Greg KH <greg@...ah.com>,
	debian developer <debiandev@...il.com>, david@...g.hm,
	Tarkan Erimer <tarkan@...one.net.tr>,
	linux-kernel@...r.kernel.org,
	Andrew Morton <akpm@...ux-foundation.org>
Subject: Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3

On Mon, Jun 18, 2007 at 08:31:30PM -0300, Alexandre Oliva wrote:
> On Jun 18, 2007, Linus Torvalds <torvalds@...ux-foundation.org> wrote:
> > In the GPLv3 world, we have already discussed in this thread how you can 
> > follow the GPLv3 by making the TECHNICALLY INFERIOR choice of using a ROM 
> > instead of using a flash device.
> 
> Yes.  This is one option that doesn't bring any benefits to anyone.
> It maintains the status quo for users and the community, but it loses
> the ability for the vendor to upgrade, fix or otherwise control the
> users.  Bad for the vendor.

Not really, Tivo could simply sell you a box without any installed
software. The actual software is mailed to you on a credit card sized
ROM when you activate service. When they want to (or need to) update the
software they send out a new ROM card, maybe yearly as part of the
service subscription renewal.

The box could even be sold by third party vendors, I think they may even
have started off that way, my old Series 1 had a big Philips logo on it.
So now we make sure that this hardware refuses to boot any unsigned
code, but it wasn't shipped containing GPLv3 software, so it's license
terms simply does not apply.

The software is shipped on a ROM card which can no longer be modified by
the manufacturer or any third party, so it would seem to comply with the
GPLv3. I can even imagine that the hardware is really general purpose
but the ROM is encrypted so that only the BIOS/bootloader can unlock it.

So the GPLv3 seems to fall short on actually preventing tivoization. It
just requires an extra layer of indirection, ship hardware seperately
from software.

Jan

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/