Live data from Hacker News

HTC Willfully Violates the GPL in T-Mobile's New G2 Android Phone

freedom-to-tinker.com

51–54 of 54 posts

Re: HTC Willfully Violates the GPL in T-Mobile's New G2 Android Phone

#51

Earlier quoted context omitted.

Well it may not necessarily be malicious. Maybe the developers responsible for say preparing the source tarball properly have just been given a lot of other pressing work.

There is no preparing. They don't own the code. They need to release it in exactly the same state it was in when deployed as binary. Otherwise, they are violating copyright (often referred to as pirates). That said, I'm almost certain that the linux kernel is released under a modified form of the GPL, or at least Linus refuses to enforce parts of the GPL. Binary modules and blobs are a clear violation of GPL, but the…

That said, I'm almost certain that the linux kernel is released under a modified form of the GPL...

Nope, it's standard stock GPLv2-only. There's a clarification included in the COPYING file that reminds people that userspace binaries that use the documented system call interface are not considered derived works, but that's not a modification of the license; it's just included for clarity reasons.

or at least Linus refuses to enforce parts of the GPL.

Not entirely. He's stated that he doesn't believe that a kernel module is automatically a derived work of the kernel. For example, he's of the opinion that the nvidia binary driver is not a derived work of Linux because the driver core was first designed and written for a completely different OS.

Regardless, Linus Torvalds is not the last word on this: just about any kernel contributor with copyright ownership could file suit.

There is no preparing. They don't own the code. They need to release it in exactly the same state it was in when deployed as binary. Otherwise, they are violating copyright (often referred to as pirates).

Exactly.

Re: HTC Willfully Violates the GPL in T-Mobile's New G2 Android Phone

#52
post #48

Earlier quoted context omitted.

Yes it is. It takes advantage of a known vulnerability to spread. You can't expect a non technical person to understand the importance of strong, unique passwords. Most people can't remember more than one (and a simple one, at that).

I don't really see from that article what the issue is. It just tries to SSH into your phone, and if you left the default root password, ta-da, it's in; then it tries to use your phone to SSH into other people's phones. Is there some part of the story missing here? The only vulnerability I see is that foolish people are allowed to run SSH servers on their phone.

Well if you don't see the potential vulnerability in that, I guess there's no point arguing. Back when Linux distro's shipped with all services enabled out of the box, and sometimes with default passwords, people used to say "oh that's not a real problem, it's the stupid users." Well maybe so, but that doesn't reduce the amount of rooted boxes. So as people wised up, and the hardliners were told to shut it, things moved to 'secure out of the box' (for some definitions of 'secure') setups. Hardware-locked phones are the next step of that. There may be (misguided) commercial interests in trying to control the software; most real-world issues with a higher complexity than 'what will I have for breakfast' are multi-faceted. All that said, there is a real case to be made to control the setups of devices that are supposed to 'always work'. That's all.

Re: HTC Willfully Violates the GPL in T-Mobile's New G2 Android Phone

#53
post #29
post #20

I wonder where they got the within the requirements of the open source community . It doesn't sound like something they would just make up.

Sounds like something their lawyers made up, perhaps? The first comment on the post has a pretty relevant paragraph, which I think sounds plausible: Section 3(b) allows you to provide a written offer for source. I think HTC is interpreting this to mean that if you respond to their written offer for source, there's obviously going to be a delay for them to get your written request, put together the source code and sen…

Although further comments point out that there was no written offer provided, so that section is irrelevant.
Post reply on HN