7

This is very similar to this question: What happens if stolen software is published as Open Source? – but it doesn't exactly answer my question. This is also a thought experiment with no real companies.

Say there is a company: Acme Corporation. They've released a new IoT device that uses a technology made by the company Foobar Inc.

Cool as they are, Acme Corp. decided to release the whole source code for this new IoT device – including confidential source code from Foobar Inc.

Now, let's say Wile E. Coyote, Acme's most loyal customer, bought this IoT device and downloaded the source that's publicly and officially available on Acme's website, and then Mr. Coyote found the confidential Foobar Inc. source code. Some of the code from Foobar Inc. is under GPL, but others are marked as confidential. Some of the code from Foobar Inc. only has copyright headers, but has no GPL license nor Confidential headers and is also available.

Should Mr. Coyote report this leaked source code to Foobar Inc.? Let's say most of the code is under GPL, should he report it to the Free Software Foundation? Or should he contact Acme Corporation and ask them whether the code that they publicly released was meant to be released?

Improve this question

2 Answers 2

Reset to default
16

Mr. Coyote should talk to his lawyers ASAP. While he was unaware that the code he was using was a copyright violation, he could make a reasonable defense against punitive damages. However, now he is aware (or has a strong suspicion) it is a copyright violation and continues to use it, a court will look far less favourably on him.

Unrelated to that:

Let's say most of the code is under GPL, should he report it to the Free Software Foundation?

No; the FSF do not police the use of the GPL. If code is distributed under the GPL which should not have been, that is a matter between the copyright holder (Foobar Inc.) and the person distributing the code.

Improve this answer
3
  • 4
    The FSF themselves will not, they will tell you to talk to a lawyer. Depending on the project, the Software Freedom Law Center, who are closely related to the FSF but legally a different entity for very good reasons, may get involved.
    – Philip Kendall
    Feb 22, 2021 at 15:04
  • I edited the question because there’s something important that I missed. Not all code from Foobar Inc. that was provided is confidential - some of the code is actually under GPL.
    – Anya
    Feb 23, 2021 at 22:03
  • 1
    @ViniM. That doesn't really matter that much; the fact that there is any code which it is not 100% clear has been properly released under the GPL is enough to get the lawyers involved.
    – Philip Kendall
    Feb 23, 2021 at 22:30
2

Acme Corp. has created an unholy legal mess, both for themselves, Mr. Coyote, and Foobar, Inc.

Acme Corp. has committed two acts of copyright infringement: Obviously Foobar's code, which they were not allowed to copy at all. But also all the GPL licensed code: Acme created a derived work of the GPL licensed code. They couldn't distribute it under the GPL license because they had no right. And because the couldn't distribute it under the GPL license, distributing the GPL licensed code was also copyright infringement.

In addition their claim that the software is GPL licensed is false (Mr. Coyote might have bought the product just to get the GPL licensed source code, so was defrauded), so Mr. Coyote might sue them, and it puts Mr. Coyote in a position where he might unknowingly commit copyright infringement.

Acme, Inc. should have done one of two things: Either negotiate a license from Foobar to allow distributing Foobar's code under the GPL. Or release their product without Foobar's code. What they did instead was illegal, stupid, and most definitely not cool.

Improve this answer
2
  • You are assuming that ACME Corp. is not the copyright holder for the GPL portion of the code. They cannot breach their own license.
    – I'm with Monica
    Feb 23, 2021 at 9:02
  • Foobar Inc. provides some of the code under GPL, but alongside the GPL code, confidential code was also released. Consider the IoT device as a consumer device, all of the software is already baked into it. Code from Foobar Inc. is crucial for the operation of this device.
    – Anya
    Feb 23, 2021 at 22:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.