08-18-2016, 02:09 PM | #1 |
Enthusiast
Posts: 36
Karma: 42
Join Date: Sep 2013
Device: Onyx Boox M92
|
GPL issues
Since Onyx published their first e-reading device using a custom system based on the Linux kernel they mostly ignored the community's attempts to take part in the development by not releasing the source code of the GPL'ed software they used. Some years ago it seemed possible that there could be a developer community for the Onyx Boox M92. Onyx released a public SDK and a compiler toolchain and accepted bug fixes and bug reports by the community. Anyway, this didn't last long and Onyx decided to move on. They released new devices and deleted the kernel code they had published again. From time to time requests were filed, asking for the source code for the GPL'ed software of the Onyx Boox M92 as well as of the Android based devices. Requesting the sources always followed the same pattern. After some emails trying to convince the people of their lack of knowledge (or how to interpret it), Onyx always decided to be deaf for further communication attempts. I don't know of any successful such request. Their German vendor ereader-store.de insisted on their position as vendor - therefore being not responsible for inquiries like this.
This thread is dedicated to coordinating further approaches. We want to be heard by Onyx and strive for a friendly agreement with them. The last thing we would want is, denouncing Onyx in any way. Quite the contrary, we just want them to respect the GPL including their rights and duties. This way, we want to save Onyx from juridical consequences following their GPL violations if they cooperate. People who just want to name and shame this company are not at the right place here. Anyway, the GPL is known to be enforced in Germany as well as the US. If you want to take part in this race for a piece of software freedom, please join this thread. |
08-18-2016, 05:16 PM | #2 |
Connoisseur
Posts: 54
Karma: 21028
Join Date: Apr 2015
Device: T68 Lynx, T68+
|
Hear hear, their modifications to the GPL-licensed code need to be released. I know that there have been some attempts to contact the developers. Could this be documented here so we know what has already been tried.
Thanks, Warren |
Advert | |
|
08-19-2016, 05:05 AM | #3 |
Enthusiast
Posts: 46
Karma: 20251
Join Date: Jan 2015
Location: Poland
Device: Onyx Boox C67ML AG2
|
While I am OSS licenses supporter I just wonder how do they apply to China. Onyx does not sell directly in US or Germany. They modify the source code in China and they don have to pay attention to GPL as long as their product distribution is within China. They also distribute to their partners abroad. It is partners who violate law in their respective countries by selling products without fulfilling licensing requirements. They should demand from Onyx to publish the code before attempting to sell anything. Am I wrong here?
|
08-19-2016, 07:00 AM | #4 |
Enthusiast
Posts: 36
Karma: 42
Join Date: Sep 2013
Device: Onyx Boox M92
|
@DoctorWkt: Of course this should be documented. IMHO the best would be, if anyone who tried could post in this thread or maybe on a Wiki page... All in good time.
@bulek: In my understanding of the GPL you are right. Although for example ereader-store.de is only a reseller, they are the sole contract partner for their customers. This means, they are be responsible for giving the sources to their customers and not Onyx itself. So this thread should more correctly be about Onyx' and its resellers' GPL violations. |
08-19-2016, 08:41 AM | #5 |
eBook Enthusiast
Posts: 85,544
Karma: 93383043
Join Date: Nov 2006
Location: UK
Device: Kindle Oasis 2, iPad Pro 10.5", iPhone 6
|
How do you reach that conclusion? China is a signatory to the Berne Copyright Convention, and the GPL can be enforced via the Berne Convention. What makes you believe that it doesn't apply in China?
|
Advert | |
|
08-19-2016, 09:24 AM | #6 |
wannabe developer
Posts: 192
Karma: 156548
Join Date: Mar 2011
Device: Kindle: 2xKeyboard, Classic, 2xTouch, 2xPW, PW2; Onyx: Boox M92
|
That is bizarre. I remember discussing the very same issue with Polish vendor (aka ArtaTech). Even they as a distributor were not granted access to GPL sources, only limited SDK, which funnily, was taken down from GitHub later on. The same applied to obfuscated kernel which I have managed to retrieve from one of employees account, which led to unlocking bootloader, signing updates, etc... My guessing is that they are either unwilling to share it due to fear of competition or lack of proper separation of stuff which they built on top of OSS.
|
08-19-2016, 11:28 AM | #7 |
Enthusiast
Posts: 36
Karma: 42
Join Date: Sep 2013
Device: Onyx Boox M92
|
@HarryT: I didn't hear of any tries to enforce the GPL in China, but that does not mean it can't be done. I didn't know of that convention which should make the GPL even more likely to be enforceable there.
@seaniko7: In my understanding of the GPL, if they were not granted access to the sources, they knowingly violated the GPL by selling these devices. Anyway, fear of competition may be a problem, but bad separation shouldn't. Works based on the program have to be released under the GPL. Did I understand you correctly? |
08-19-2016, 11:47 AM | #8 | |
wannabe developer
Posts: 192
Karma: 156548
Join Date: Mar 2011
Device: Kindle: 2xKeyboard, Classic, 2xTouch, 2xPW, PW2; Onyx: Boox M92
|
Quote:
All in all, it can be hard to prove whether a vendor has provided one with modified sources or only OSS part which he based on. Verification of such sources would require compilation and verification against binaries installed on a device and extracting these is a clear violation of license agreement in most cases. Another issue is deliberate obfuscation of GPL code just to make it unusable (Onyx did that by stripping all assembly code, including OSS). |
|
08-20-2016, 09:25 AM | #9 | ||
Enthusiast
Posts: 35
Karma: 102
Join Date: Jul 2016
Device: KOA4
|
Quote:
However a small, chinese company with a relatively small level of penetration can do as they please. By the time the court enforcement comes (because in a case such as ours, all parties, including vendors, etc. must be included), the product is already discontinued, and the loss is mainly at the vendors. Quote:
Also, I believe such verification cannot be a license violation - GPL by its nature should allow it. Of course it's a different question if a product license goes against the license of a part (in our case, the GPL covered kernel), which one is the one to take into account. That is okay - however by GPLv2, Onyx must provide everything to anyone - in possession of the binary version - to be able to recreate the binary version. This includes sources, tools, documentations. |
||
08-20-2016, 02:25 PM | #10 | ||||
Enthusiast
Posts: 32
Karma: 8888
Join Date: Mar 2016
Device: Onyx Boox Max
|
Quote:
Quote:
" 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it." (emphasis mine) Quote:
"The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable." https://www.gnu.org/licenses/old-licenses/gpl-2.0.txt Note that I am not a lawyer, but the license is clear. Quote:
For background, I purchased a Boox Max in April and received it in May, and I wrote to Onyx at the end of June asking for a bug tracker and for the source code. Their answer: "Thanks for your email and support of ONYX BOOX. Now we still have no bug tracker, but we open SDK, if you have Github account, please inform us, TKS" They later answered by creating a read-only public trello board (...), and never replied to my telling them there's nothing related to the Max on their github. So in early July I sent them a formal request for the source code of the kernel and U-Boot source code. They never replied. At the end of July I sent a formal request to ereader-store.de, and after a to-and-fro between email and their tickets system they replied on August 2nd by telling me they forwarded my request to Onyx, along with a promise to push them for an answer. They also stated their position that they are only a reseller and not developers, to which I replied it's their responsibility to provide the code nevertheless (without quoting the GPL though). No news since then. |
||||
08-20-2016, 02:34 PM | #11 | ||
Enthusiast
Posts: 32
Karma: 8888
Join Date: Mar 2016
Device: Onyx Boox Max
|
For the record, my e-mail to <sales@onyx-international.com> dated July 6th:
Quote:
Quote:
|
||
08-22-2016, 04:15 AM | #12 | |
Enthusiast
Posts: 46
Karma: 20251
Join Date: Jan 2015
Location: Poland
Device: Onyx Boox C67ML AG2
|
Quote:
Imho this is very difficult area. Even big fish companies have problems to enforce their licensing in China. Some decided it's better to sell their business to China than fighting never ending license violations. Generalizing it's a culture thing to great extent. The sharing spirit of OSS where there are givers and consumers does not work that well in that part of the world. There it is more an approach of "use whatever is there and make business of it without sharing". I don't want to discourage anyone... you know... just saying . I found quite a nice example of what is happening there: http://www.chinaiplawyer.com/china-c...nse-agreement/ . The lawyer comment at the bottom seems to be a nice summary of whole OSS in China topic. |
|
08-22-2016, 05:40 AM | #13 |
Enthusiast
Posts: 32
Karma: 8888
Join Date: Mar 2016
Device: Onyx Boox Max
|
|
08-22-2016, 03:27 PM | #14 |
Enthusiast
Posts: 36
Karma: 42
Join Date: Sep 2013
Device: Onyx Boox M92
|
I'm really sorry to admit I unexpectedly got so much to do that I will not be able to follow this for the next few days (to weeks, but hopefully shorter). If I find a free minute I will add my conversation with Onyx for the records. If we have enough material we really should report them at gpl-violations.org. Anyway, I'm so glad this whole discussion came back alive!
|
08-25-2016, 05:11 AM | #15 |
Wizard
Posts: 1,138
Karma: 1577094
Join Date: Oct 2008
Device: Samsung EB60, Onyx M92, Onyx Max2
|
It could be the better approach, but a way to stop their activities maybe. Yes, "They must" but if the Chinese don't give the sources, what's they can make ? I'm not sure that Onyx support the European vendors.
|
Thread Tools | Search this Thread |
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
GPL violation? | rfog | Gen3 Developer's Corner | 203 | 08-22-2012 03:46 PM |
Using Recipes elsewhere (GPL) | InvisibleMan | Development | 1 | 06-10-2011 02:16 PM |
Calibre and GNU GPL | Stodder | Calibre | 36 | 05-12-2011 04:10 PM |
Development GPL Compliance | jcase | enTourage Archive | 85 | 01-03-2011 05:58 PM |
(A)GPL as a license for fiction? | Moejoe | General Discussions | 76 | 06-07-2010 08:02 PM |