Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #182385 > unrolled thread

Re: Why does no one care that Brad Spengler of GRSecurity is blatantly violating the intention of the rightsholders to the Linux Kernel?

Started byRichard Stallman <rms@gnu.org>
First post2017-06-19 21:00 +0200
Last post2017-07-20 16:20 +0200
Articles 2 on this page of 22 — 10 participants

Back to article view | Back to linux.debian.user

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Re: Why does no one care that Brad Spengler of GRSecurity is  blatantly violating the intention of the rightsholders to the Linux Kernel? Richard Stallman <rms@gnu.org> - 2017-06-19 21:00 +0200
    Re: Why does no one care that Brad Spengler of GRSecurity is  blatantly violating the intention of the rightsholders to the Linux Kernel? Bruce Perens <bruce@perens.com> - 2017-06-19 21:40 +0200
      Re: Why does no one care that Brad Spengler of GRSecurity is  blatantly violating the intention of the rightsholders to the Linux Kernel? Bruce Perens <bruce@perens.com> - 2017-06-28 04:10 +0200
        Re: Why does no one care that Brad Spengler of GRSecurity is  blatantly violating the intention of the rightsholders to the Linux Kernel? Bruce Perens <bruce@perens.com> - 2017-07-10 17:40 +0200
        Re: Why does no one care that Brad Spengler of GRSecurity is blatantly violating the intention of the rightsholders to the Linux Kernel? "Bradley M. Kuhn" <bkuhn@sfconservancy.org> - 2017-07-14 20:20 +0200
          Re: Why does no one care that Brad Spengler of GRSecurity is  blatantly violating the intention of the rightsholders to the Linux Kernel? Bruce Perens <bruce@perens.com> - 2017-07-14 22:30 +0200
            funding & viability questions of GPL enforcement. "Bradley M. Kuhn" <bkuhn@sfconservancy.org> - 2017-07-15 19:30 +0200
              Re: funding & viability questions of GPL enforcement. Alessandro Vesely <vesely@tana.it> - 2017-07-16 13:50 +0200
                Re: funding & viability questions of GPL enforcement. Martin Read <zen75502@zen.co.uk> - 2017-07-16 17:20 +0200
                  Re: funding & viability questions of GPL enforcement. Alessandro Vesely <vesely@tana.it> - 2017-07-19 13:20 +0200
                    Re: funding & viability questions of GPL enforcement. Martin Read <zen75502@zen.co.uk> - 2017-07-19 23:20 +0200
                      Re: funding & viability questions of GPL enforcement. Alessandro Vesely <vesely@tana.it> - 2017-07-20 14:10 +0200
                        Re: funding & viability questions of GPL enforcement. Fungi4All <fungilife@protonmail.com> - 2017-07-20 22:20 +0200
                          Re: funding & viability questions of GPL enforcement. Alessandro Vesely <vesely@tana.it> - 2017-07-21 20:40 +0200
                            Re: funding & viability questions of GPL enforcement. Joel Rees <joel.rees@gmail.com> - 2017-07-22 03:40 +0200
                              Re: funding & viability questions of GPL enforcement. Fungi4All <fungilife@protonmail.com> - 2017-07-27 11:00 +0200
                Re: funding & viability questions of GPL enforcement. "Bradley M. Kuhn" <bkuhn@sfconservancy.org> - 2017-07-17 00:50 +0200
                Re: funding & viability questions of GPL enforcement. Joel Rees <joel.rees@gmail.com> - 2017-07-17 03:00 +0200
                  Re: funding & viability questions of GPL enforcement. "Bradley M. Kuhn" <bkuhn@ebb.org> - 2017-07-17 21:40 +0200
    Re: Why does no one care that Brad Spengler of GRSecurity is blatantly violating the intention of the rightsholders to the Linux Kernel? deloptes <deloptes@gmail.com> - 2017-06-20 00:20 +0200
      Re: Why does no one care that Brad Spengler of GRSecurity is  blatantly violating the intention of the rightsholders to the Linux Kernel? Joel Rees <joel.rees@gmail.com> - 2017-07-15 06:50 +0200
        Re: Why does no one care that Brad Spengler of GRSecurity is  blatantly violating the intention of the rightsholders to the Linux Kernel? Nick Boyce <nick@steelyglint.org> - 2017-07-20 16:20 +0200

Page 2 of 2 — ← Prev page 1 [2]


#183707

FromJoel Rees <joel.rees@gmail.com>
Date2017-07-15 06:50 +0200
Message-ID<u3nbH-5kd-1@gated-at.bofh.it>
In reply to#182388
On Tue, Jun 20, 2017 at 7:12 AM, deloptes <deloptes@gmail.com> wrote:
> Richard Stallman wrote:

I don't think you should assume RMS is monitoring the debian list.

>> I am not trying to study the GRsecurity case because (0) it's
>> complicated, and it would take a lot of time to think about, (1) the
>> FSF has no say in the matter (it is about Linux) and (2) I don't think
>> the copany would heed whatever I might say.
>
> Could you explain why it should be complicated?

I don't want to pretend to be answering for Mr. Stallman, but I have done
a small bit of reading now that I see Bruce Perens is taking the time to
get involved.

> GPL states the rights
> obtained should be passed to the recipient, so the recipient should be
> allowed to redistribute the code (IMO) even if he/she is paying for
> improvements.
>
> It would be really nice if GRSec could help improve the kernel security in
> some way acceptable by and for the benefit of all. I don't think someone
> wants to punish them for what they are doing. It would be better to have
> mutual benefit if possible as the GPL does not prohibit modifying and
> redistributing the code and demanding a fee, it however does guarantee the
> right to redistribute is passed to the recipient, which is not the case
> here.

GRSecurity has posted their complaints here:

https://grsecurity.net/announce.php

They have a point, although bending the rules is not a good way to make
your point, in general. (And I'll note that they seem to be thinking they are
following RedHat's example here. At this point I'm more than half inclined
to think they might be following RedHat's example, for what that's worth.)

TheReg's recent article

https://www.theregister.co.uk/2017/04/26/grsecurity_linux_kernel_freeloaders/

indicates they think they might know which large, well-heeled, well-
financed major embedded industry player provided the straw that broke
GRSecurity's camel's back. But it is not just one player. The entire
embedded industry does not seem to understand how their products
came to be or how their future products will come to be.

That said, GRSecurity needs to find a different way to seek redress.

And someone in the community needs to find them a lawyer who will
take their case.

The GPL is a gentlemen's agreement.

When the members of the market refuse to behave like gentlemen, it
destroys the value of the agreement. It makes the agreement useless.

It will also destroy the market, so the moneyed players who are not
paying their fair share back into supporting the "small players" are
basically shortening the life-span of their own companies -- cutting
off their own noses to spite their faces, as we used to say.

I am personally not impressed with GRSecurity's hubris. Their tech
is only impressive in that it sort of helps make up a little bit for the
serious lacks in the security of every major CPU available today,
but especially the ones from Intel. So they do make a contribution,
or have until recently.

If the OP wants to solve this problem, (s)he has done enough
rabble-rowsing this way. He needs to start asking everyone he
knows if they know a good lawyer willing to work on contingency.
The rest of us who are concerned probably should, as well.

Or, perhaps, GRSecurity should go to one of the crowdfunding
sites. Or maybe someone could start a new crowdfunding site to
specialize in providing legal relief for the small guy. (Not sure how
that would work.)

(Yeah, I am willing to name and shame Intel here. If our civilization
survives the next two decades, our children will remember Intel's
processors with the same phrase that Ralph Nader made popular
relative to the auto industry. Who can compete when Intel refuses
to pay the price of making CPUs that are unsafe at progressively
higher speeds?)

-- 
Joel Rees

One of these days I'll get someone to pay me
to design a language that combines the best of Forth and C.
Then I'll be able to leap wide instruction sets with a single #ifdef,
run faster than a speeding infinite loop with a #define,
and stop all integer size bugs with my bare cast.
http://defining-computers.blogspot.com/2017/06/reinventing-computers.html

More of my delusions:
http://reiisi.blogspot.com/2017/05/do-not-pay-modern-danegeld-ransomware.html
http://reiisi.blogspot.jp/p/novels-i-am-writing.html

[toc] | [prev] | [next] | [standalone]


#183981

FromNick Boyce <nick@steelyglint.org>
Date2017-07-20 16:20 +0200
Message-ID<u5kt3-bb-1@gated-at.bofh.it>
In reply to#183707
On Sat, 15 Jul 2017 13:45:13 +0900
Joel Rees <joel.rees@gmail.com> wrote:

> Who can compete when Intel refuses to pay 
> the price of making CPUs that are unsafe at 
> progressively higher speeds?

Er .. s/unsafe/safe/ ???

But basically +1 to everything (else) you wrote.

Nick
-- 
Never FDISK after midnight

[toc] | [prev] | [standalone]


Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | linux.debian.user


csiph-web