[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20120203021536.GA14449@openwall.com>
Date: Fri, 3 Feb 2012 06:15:36 +0400
From: Solar Designer <solar@...nwall.com>
To: john-dev@...ts.openwall.com
Subject: Re: copyright and license statements
magnum, Jim, all -
On Thu, Jan 12, 2012 at 06:02:03AM +0100, magnum wrote:
> On 01/11/2012 05:36 AM, Solar Designer wrote:
> > 1. Move your non-trivial contributions to separate (new) source files
> > such that you can unambiguously apply your copyright statement and our
> > standard permissive cut-down BSD license just to those. Modify the
> > original file (such as rules.c) in trivial ways only - e.g., adding
> > calls into functions found in your new file.
>
> This is optimal but it's too complicated. Typically I would hack away
> until things are good. Then I would need to revert everything and move
> it to another file. I don't think it's gonna happen in reality.
Understood.
> > 2. Don't retain your copyright to your changes to shared files, but
> > instead transfer copyright either to me or to a legal entity that will
> > be the copyright holder for JtR - perhaps to Openwall, Inc. IIRC, this
> > is the approach that e.g. the Nmap project is using (with copyright for
> > contributions transferred to Insecure.Com LLC). You will continue to be
> > credited as an author of those files anyway, but not be a copyright
> > holder. (Authorship and copyright are distinct things.)
>
> This is fine with me. Could this too be accomplished with just a
> standard text that I add in the top comments? Ideally, there should be
> an example of such a text on the licensing wiki page!
Definitely.
In the same message, I also wrote:
"If we go with #2, then it would make sense to apply the same approach to
entirely new files as well - e.g., to new formats. (Jumbo now has so
many extras compared to the main JtR that those extras alone (such as
many of the formats) may be of value to a company developing a
proprietary password cracker.) This raises the issue of your own
ability to reuse your code without GPL restrictions, though. Maybe
Openwall should issue a license to each contributor with right to
sublicense that contributor's source files to third-parties if/when the
contributor chooses so. But this gets complicated."
Since I am uncomfortable about restricting rights of contributors for
their possible reuse of their own code e.g. in another project (which
might not be GPL'ed), I've been thinking of ways to leave those rights
to the contributors while also gaining similar rights to the
contributions myself (such that I don't have to coordinate with each
contributor each time I need to re-license or sublicense).
The first idea was as above - copyright transfer to Openwall + license
back to the contributor with right to sublicense. %-)
Then a much simpler idea occurred to me (I should have arrived at this
sooner): the contributors may non-exclusively license their
contributions to Openwall and/or to me with right to sublicense under
arbitrary terms. This may be applied to files where I am a copyright
holder too (in fact, these are the primary target for it initially).
Then in the LICENSE file Openwall or I may license the entire thing to
the general public under GNU GPLv2 like it's done now.
An additional benefit of non-exclusive license with right to sublicense
over copyright transfer is that the latter must be "in writing", whereas
the former does not absolutely have to be (at least per the US law).
http://www.copyright.gov/circs/circ1.pdf
"Transfer of Copyright
...
... the transfer of exclusive rights is not valid unless that transfer
is in writing and signed by the owner of the rights conveyed or such
owner's duly authorized agent. Transfer of a right on a nonexclusive
basis does not require a written agreement."
http://en.wikipedia.org/wiki/Copyright#Transfer_and_licensing.2C_and_assignment
"Non-exclusive grants (often called non-exclusive licenses) need not be
in writing under U.S. law. They can be oral or even implied by the
behavior of the parties."
http://www.ivanhoffman.com/nightmare.html
"The same copyright law also provides that a copyright proprietor may
transfer rights to a copyrighted work without a writing but that such a
transfer operates only to transfer non-exclusive rights ...
...
By its terms, the Copyright Act's writing requirement applies only to ...
...
... Thus, the requirement does not apply to the transfer of nonexclusive
copyright licenses."
http://www.ivanhoffman.com/transfers.html
"And while an assignment of non-exclusive rights can be made without a
writing, a procedure which should *never* be followed, in order to
transfer exclusive rights the assignment must be in writing and signed
by the owner of those rights or that owner's duly authorized agent."
So a lawyer does not recommend "non-written" assignment of non-exclusive
rights, but what can we do if we really dislike paperwork (it'd
discourage at least some prospective contributors - e.g., this happens
with the FSF's software, where they require copyright assignment).
At least we'll have public electronic records (which might even qualify
as "writing", although this is not formally required by law in this case).
If this works for you, then I'll try to come up with specific license
statements. Please let me know.
Thanks,
Alexander
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
