<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>OSI opinion &#8211; Open Source Initiative</title>
	<atom:link href="https://opensource.org/blog/category/osi-opinion/feed" rel="self" type="application/rss+xml" />
	<link>https://opensource.org</link>
	<description>The steward of the Open Source Definition, setting the foundation for the Open Source Software ecosystem.</description>
	<lastBuildDate>Tue, 18 Feb 2025 13:27:06 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	

<image>
	<url>https://i0.wp.com/opensource.org/wp-content/uploads/2023/01/cropped-cropped-OSI_Horizontal_Logo_0-e1674081292667.png?fit=32%2C32&#038;ssl=1</url>
	<title>OSI opinion &#8211; Open Source Initiative</title>
	<link>https://opensource.org</link>
	<width>32</width>
	<height>32</height>
</image> 
<atom:link rel="hub" href="https://pubsubhubbub.appspot.com"/><atom:link rel="hub" href="https://pubsubhubbub.superfeedr.com"/><atom:link rel="hub" href="https://websubhub.com/hub"/><site xmlns="com-wordpress:feed-additions:1">210318891</site>	<item>
		<title>Meta’s LLaMa license is still not Open Source</title>
		<link>https://opensource.org/blog/metas-llama-license-is-still-not-open-source</link>
					<comments>https://opensource.org/blog/metas-llama-license-is-still-not-open-source#comments</comments>
		
		<dc:creator><![CDATA[Jordan Maris]]></dc:creator>
		<pubDate>Tue, 18 Feb 2025 13:27:02 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[ai]]></category>
		<category><![CDATA[llama]]></category>
		<category><![CDATA[meta]]></category>
		<guid isPermaLink="false">https://opensource.org/?p=121585</guid>

					<description><![CDATA[At a time when Meta is trying to redefine Open Source for their own benefit and at the expense of our freedom, we call on the whole Open Source community to unite and call out Meta’s open washing.]]></description>
										<content:encoded><![CDATA[
<p>A year ago we <a href="https://opensource.org/blog/metas-llama-2-license-is-not-open-source">called on Meta</a> to stop calling Llama 2&nbsp; “Open Source.” Since then, Meta has released new versions of Llama with new licensing terms that continue to fail the Open Source Definition. Llama 3.x is still not Open Source by any stretch of the imagination. Despite that, Meta keeps on falsely promoting Llama as “Open Source.” You can help us stop that now: call on Zuckerberg and Yann LeCunn to change the Llama license and comply with the Open Source Definition.</p>



<p>There is no need to bring up the new <a href="https://opensource.org/ai/">Open Source AI Definition</a> v.1.0 to evaluate if the Llama 3 model series and its Llama 3.x community licences convey basic freedoms to their users. We agree with the Free Software Foundation’s <a target="_blank" href="https://www.fsf.org/blogs/licensing/llama-3-1-community-license-is-not-a-free-software-license">recent evaluation</a> that the Llama 3.1 Community Licence agreement fails in spectacular ways at granting basic rights:</p>



<ul class="wp-block-list">
<li>Fails at freedom 0, the freedom to use the model for any purpose</li>



<li>Fails at the <a href="https://opensource.org/osd">Open Source Definition</a> point 5, discriminates against users</li>



<li>Fails at the <a href="https://opensource.org/osd">Open Source Definition</a> point 6, restricts fields of endeavour</li>
</ul>



<p>These restrictions were already clear in the license used by Llama 2. The newer versions of Meta’s Llama community licence impose even more restrictions, like excluding any persons in the European Union from using the model without explanation; and all of the restrictions from the previous licences remain.&nbsp;</p>



<p>We are disheartened to see a couple of individuals entangling their criticisms of the Open Source AI Definition with Meta’s abuse of the term Open Source referring to Llama. The OSAID did not create any confusion about the proprietary nature of Llama; in fact, Meta’s open washing, and our response to it, predate the OSAID entirely.</p>



<p>These individuals are supporting Meta’s open washing efforts, and sowing fear, uncertainties and doubts within the community.</p>



<h2 class="wp-block-heading">What you can do about it</h2>



<p>At a time when Meta is trying to redefine Open Source for their own benefit and at the expense of our freedom, we call on the whole Open Source community to unite and call out Meta’s open washing.</p>



<p>OSI will continue to fight back against open washing with public statements, events, and educational work with the Open Source and AI communities, lawmakers, and businesses.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://opensource.org/blog/metas-llama-license-is-still-not-open-source/feed</wfw:commentRss>
			<slash:comments>3</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">121585</post-id>	</item>
		<item>
		<title>Standards and the presumption of conformity</title>
		<link>https://opensource.org/blog/standards-and-the-presumption-of-conformity</link>
		
		<dc:creator><![CDATA[Simon Phipps]]></dc:creator>
		<pubDate>Tue, 10 Dec 2024 12:44:01 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[cra]]></category>
		<category><![CDATA[europe]]></category>
		<category><![CDATA[legal]]></category>
		<category><![CDATA[policy]]></category>
		<category><![CDATA[standards]]></category>
		<guid isPermaLink="false">https://opensource.org/?p=115594</guid>

					<description><![CDATA[Access to the law includes access to the harmonized standards it predicates. But is it right that those standards can include royalty-due patents (SEPs)?]]></description>
										<content:encoded><![CDATA[
<p>If you have been following the progress of the<a target="_blank" href="https://www.europarl.europa.eu/legislative-train/theme-a-europe-fit-for-the-digital-age/file-european-cyber-resilience-act"> Cyber Resilience Act</a> (CRA), you may have been intrigued to hear that the next step following<a target="_blank" href="https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A52022PC0454"> publication of the Act as law in the Official Journal</a> is the issue of a European Standards Request (ESR) to the three official European Standards Bodies (ESBs). What is that about? Well, a law like the CRA is extremely long and complex and conforming to it will involve a detailed analysis and a lot of legal advice.</p>



<p>Rather than forcing everyone individually to do that, the ESBs are instead sent a list of subjects that need proving and are asked to recommend a set of standards that, if observed, will demonstrate conformity with the law. This greatly simplifies things for everyone and leads to what the lawmakers call a “presumption of conformity.” You <em>could</em> go comply with the law based on your own research, but realistically that&#8217;s impossible for almost everyone so you will instead choose to observe the harmonized standards supplied by the ESBs.</p>



<p><strong>This change of purpose for standards is very significant.</strong> They have evolved from merely being a vehicle to promote interoperability in a uniform market – an optional tool for private companies that improves their product for their consumers – to being a vehicle to prove legal compliance – a mandatory responsibility for all citizens and thus a public responsibility. This new role creates new challenges as the standards system was not originally designed with legal conformance in mind. Indeed, we are frequently reminded that standardization is a matter for the private sector.</p>



<p>So for example, the three ESBs (ETSI, CENELEC and CEN) all have “IPR rules” that permit the private parties who work within them to embed in the standards steps that are patented by those private companies. This arrangement is permitted by the European law that created the mechanism,<a target="_blank" href="https://eur-lex.europa.eu/eli/reg/2012/1025/oj"> Regulation 1025/2012</a> (in Annex II §4c). All three ESB&#8217;s expressly tolerate this behaviour as long as the patents are then licensed to implementers of the standards on “Fair, Reasonable and Non Discriminatory” (FRAND) terms. None of those words is particularly well defined, and<a target="_blank" href="https://meshedinsights.com/2015/01/26/frand-is-always-discriminatory/"> the consequence</a> is that to implement the standards that emerge from the ESBs you may well need to retain counsel to understand your patent obligations and enable you to enter into a relationship with Europe&#8217;s largest commercial entities to negotiate a license to those patents.</p>



<p>Setting aside<a target="_blank" href="https://the.webm.ink/exempting-open-source-from-seps"> the obvious problems this creates for Open Source software</a> (where the need for such relationships broadly inhibits implementation), it is also a highly questionable challenge to our democracy. At the foundation of our fundamental rights is the absolute requirement that first, every citizen may know the law that governs them and secondly every citizen is freely able to comply if they choose. The<a target="_blank" href="https://law.resource.org/pub/eu/docket/2024-03-21.Letter_to_European_Commission.pdf"> Public.Resource.Org case</a> shows us this principle also extends to standards that are expressly or effectively necessary for compliance with a given law.</p>



<p>But when these standards are allowed to have patents intentionally embodied within them by private actors for their own profit, citizens find themselves unable to practically conform to the law without specialist support and a necessary private relationship with the patent holders. While some may have considered this to be<a target="_blank" href="https://the.webm.ink/seps-cut-both-ways"> a tolerable compromise</a> when the goal of standards was merely interoperability, <strong>it is clearly an abridgment of fundamental rights to condition compliance with the law on identifying and negotiating a private licensing arrangement for patents</strong>, especially those embedded intentionally in standards.</p>



<p>Just as Regulation 1025/2012 will need updating to reflect the<a target="_blank" href="https://curia.europa.eu/jcms/upload/docs/application/pdf/2024-03/cp240041en.pdf"> court ruling on availability of standards</a>, so too should it be updated to require that harmonized standards will only be accepted from the ESBs if they are supplied on FRAND terms where all restrictions on use are waived by the contributors. Without this change, standards will serve only the benefit of dominant actors and not the public.</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">115594</post-id>	</item>
		<item>
		<title>How we passed the AI conundrums</title>
		<link>https://opensource.org/blog/how-we-passed-the-ai-conundrums</link>
					<comments>https://opensource.org/blog/how-we-passed-the-ai-conundrums#comments</comments>
		
		<dc:creator><![CDATA[OSI]]></dc:creator>
		<pubDate>Wed, 09 Oct 2024 17:01:26 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[ai]]></category>
		<guid isPermaLink="false">https://opensource.org/?p=73926</guid>

					<description><![CDATA[Some people believe that full unfettered access to all training data is paramount. This group argues that anything less than all the data would compromise the Open Source principles, forever...]]></description>
										<content:encoded><![CDATA[
<p>Some people believe that full unfettered access to <strong>all</strong> training data is paramount. This group argues that anything less than all the data would compromise the Open Source principles, forever removing full reproducibility of AI systems, transparency, security and other outcomes. We’ve heard them and we’ve provided a solution rooted in decades of Open Source practice.</p>



<p>To have the chance for powerful Open Source AI systems to exist in any domain, the OSI community has incorporated in the Definition this principle:&nbsp;</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>An Open Source AI needs to make available three kinds of components: the <strong>software</strong> used to create the dataset and run the training, the model <strong>parameters</strong> and the code to run inference, and finally <strong>all the data</strong> that can be made available legally.</p>
</blockquote>



<p>Recognizing that there are four kinds of “data”, each with its own legal frameworks allowing different freedoms of distribution, we bypass what Stephen O’Grady called the “<a target="_blank" href="https://redmonk.com/sogrady/2024/07/03/ai-conundrums/">AI conundrums</a>” and give Open Source AI builders a chance to build freedom-respecting alternatives to pretty much any proprietary AI.</p>



<p>Limiting Open source AI only to systems trainable on freely distributable data would relegate Open Source AI to a niche. One of which is that the amount of freely and legally shareable data is a tiny fraction of what is necessary to train powerful systems. Additionally, it’d be excluding Open Source AI from areas where data cannot be shared, like medical or anything dealing with personal or private data. What remains for “Open Source AI” would be tiny. There are abundant motives to reject this limitation.</p>



<p>The fact is, mixing openly distributable and non-distributable data is very similar to a reality we are very familiar with: Open Source software built with proprietary compilers and system libraries.</p>



<h2 class="wp-block-heading">Is GNU Emacs Open Source software?</h2>



<p>I’m sure you’d answer yes (and some of you will say “well, actually it’s free software”) and we’ll all agree. Below is a rough diagram of Emacs built for the GNOME desktop on a modern Linux distribution. Emacs depends on a few system libraries that GNOME provides with OSI-Approved Licenses. The whole stack is Open Source these days and one can distribute Emacs on a disk with all its dependencies without too much legal trouble. Imagine scientists who want to freeze the whole environment of an experiment they made; they could package all the pieces of a system like this without trouble and distribute it all with their paper. No problem here.</p>



<figure class="wp-block-image size-large"><img data-recalc-dims="1" fetchpriority="high" decoding="async" width="640" height="444" src="https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image.png?resize=640%2C444&#038;ssl=1" alt="" class="wp-image-73928" srcset="https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image.png?resize=1024%2C711&amp;ssl=1 1024w, https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image.png?resize=300%2C208&amp;ssl=1 300w, https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image.png?resize=768%2C533&amp;ssl=1 768w, https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image.png?w=1219&amp;ssl=1 1219w" sizes="(max-width: 640px) 100vw, 640px" /></figure>



<p>Now let’s go back to an age when Linux systems weren’t ready. When Stallman started writing Emacs, there was no GNOME and no Linux, no gcc and no glibc. He thought very early on that in order to have more freedom, he had to create a wedge to allow Emacs to run on proprietary software.</p>



<p>Emacs on the latest Solaris versions would look something like this: some pieces like X11 and Gstreamer are Open Source. Others, like libc and others aren’t. The hypothetical scientists from before couldn’t really freeze their <strong>full </strong>scientific<strong> </strong>environment. All they could say in their paper was: “We used Emacs from this CVS version, built with gcc version X with these makefile; tar.gz attached” and make a list of the operating system’s version and libraries versions they used. That’s because they have the right only to distribute Emacs, X11, some libraries and not the rest of Solaris.</p>



<p>Is Emacs on Solaris Open Source? Of course it is, even though the source code for the system libraries are not available.</p>



<figure class="wp-block-image size-large"><img data-recalc-dims="1" decoding="async" width="640" height="433" src="https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image-1.png?resize=640%2C433&#038;ssl=1" alt="" class="wp-image-73929" srcset="https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image-1.png?resize=1024%2C692&amp;ssl=1 1024w, https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image-1.png?resize=300%2C203&amp;ssl=1 300w, https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image-1.png?resize=768%2C519&amp;ssl=1 768w, https://i0.wp.com/opensource.org/wp-content/uploads/2024/10/image-1.png?w=1213&amp;ssl=1 1213w" sizes="(max-width: 640px) 100vw, 640px" /></figure>



<p>One more question, Emacs on Mac OS: it can only be built with a proprietary compiler on proprietary GUI and other proprietary libraries. <strong></strong></p>



<p>Is Emacs on Mac Open Source? Of course it is. Can you fully study Emacs on Mac OS? For Emacs, yes. For the MacOS components, no. There are many programs that run only on MacOS or Windows: for OSI, those are Open Source. Would someone argue that they’re not “really Open Source” because you can’t see “everything?” Some people might but we’ve learned to live with that, adding governance rules in addition to those of the Open Source Definition. Debian for example requires that programs are Open Source<strong> and </strong>support multiple hardware platforms; the ASF graduates only projects that are Open Source <strong>and</strong> have a diverse community of contributors. If you only want to use Open Source applications running on Open Source stacks, you can decide that! Just as you can decide that your company will only acquire Open Source software whose copyright is owned by multiple entities.&nbsp;</p>



<p>These are all additional requirements built on top of the base floor set by the Open Source Definition.</p>



<p>For AI, you can do the same: You can say “I will only use Open Source AI built with open data, because I don’t want to trust anything less than that.” A large organization could say “I will buy only Open Source AI that allows me to audit their full dataset, including unshareable data.” You can do all that. Open Source AI is the floor that you can build on, like the OSD.</p>



<h2 class="wp-block-heading">Bypassing the conundrums</h2>



<p>We&#8217;ve looked for a solution for almost three years and this is it: Require all the data that is legally shareable, and for the other data provide <strong>all the details</strong>. It&#8217;s exactly what we&#8217;ve been doing for Open Source software:&nbsp;</p>



<p>You developed a text editor for Mac OS but you can&#8217;t share the system libraries? Fine, we’ll fork it: give us all the code you can legally share with an OSI-Approved License and we&#8217;ll rip the dependencies and &#8220;liberate&#8221; it to run on GNU. The editor will be slightly different, like code that runs on some ARM+Linux systems behaves differently on Intel+Windows for the different capabilities of the underlying hardware and OS, but it&#8217;s still Open Source.</p>



<p>For Open Source AI it’s a similar dance: You can’t legally give us all the data? Fine, we’ll fork it. For example, you made an AI that recognizes bone cancer in humans but the data can’t be shared. We’ll fork it! Tell us exactly how you built the system, how you trained it, share the code you used, and an anonymized sample of the data you used so we can train on our X-ray images. The system will be slightly different but it’s still Open Source AI.</p>



<p>If we want to have broad availability of powerful alternatives to proprietary AI systems that respect the freedoms of users and deployers, we must recognize conditions that make sense for the domain of AI. These examples of proprietary compilers and system libraries used to build Open Source software prove that there is room for similar conditions when talking about Code, Data and Parameters within the definition of Open Source AI.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://opensource.org/blog/how-we-passed-the-ai-conundrums/feed</wfw:commentRss>
			<slash:comments>1</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">73926</post-id>	</item>
		<item>
		<title>Is “Open Source” ever hyphenated?</title>
		<link>https://opensource.org/blog/is-open-source-ever-hyphenated</link>
		
		<dc:creator><![CDATA[OSI]]></dc:creator>
		<pubDate>Thu, 26 Sep 2024 18:25:39 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<guid isPermaLink="false">https://opensource.org/?p=72792</guid>

					<description><![CDATA["Open source" (no hyphen) is a lexicalized compound noun which is no longer transparent with respect to its meaning (i.e., open source is not just about being source-viewable, but also about defining user freedoms) which can then be further compounded (with for example “open source license”)]]></description>
										<content:encoded><![CDATA[
<p>No! Open Source is never hyphenated when referring to software. If you’re familiar with English grammar you may have more than an eyebrow raised: read on, we have an explanation. Actually, we have two.&nbsp;</p>



<p>We asked <a target="_blank" href="https://dvg.in-berlin.de/">Joseph P. De Veaugh-Geiss</a>, a linguist and KDE’s project manager, to provide us with an explanation. If that’s not enough, we have one more argument at the end of this post. </p>



<h2 class="wp-block-heading">Why Open Source is not hyphenated</h2>



<p>In summary:</p>



<ul class="wp-block-list">
<li>&#8220;open source&#8221; (no hyphen) is a <strong>lexicalized compound noun</strong> which is no longer transparent with respect to its meaning (i.e., open source is not <em>just</em> about being source-viewable, but also about defining user freedoms) which can then be further compounded (with for example “open source license”);</li>



<li>by contrast, &#8220;open-source&#8221; (with a hyphen) is a <strong>compound modifier</strong> modifying the head noun (e.g. “intelligence”) with <em>open</em> having a standard dictionary meaning (i.e., &#8220;transparent&#8221; or &#8220;open to or in view of all&#8221;).</li>
</ul>



<h2 class="wp-block-heading">Open Source as a lexicalized compound noun</h2>



<p>&#8220;Open source&#8221; is a <strong>lexicalized compound noun</strong>.  Although it originates with the phrase &#8220;open source software&#8221;, today &#8220;open source&#8221; is itself a unique lexeme. An example, in <a target="_blank" href="https://www.redhat.com/en/topics/open-source/what-is-open-source">Red Hat</a>’s article:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>Open source has become a movement and a way of working that reaches beyond software production.</p>
</blockquote>



<p>The word open in &#8220;open source&#8221; does not have the meaning &#8220;open&#8221; as one would find in the dictionary. Instead, &#8220;open source&#8221; also entails user freedoms, inasmuch as users of the software for any purpose do not have to negotiate with the rights owners to enjoy (use/improve/share/monetise) the software. That is, it is not only about transparency.</p>



<p>A natural example of this usage, in which the phrase <em>open source license</em> is clearly about more than just licensing transparency:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>Because Linux is released under an open source license, which prevents restrictions on the use of the software, anyone can run, study, modify, and redistribute the source code, or even sell copies of their modified code, as long as they do so under the same license.&#8221; (from Red Hat website https://www.redhat.com/en/topics/open-source/what-is-open-source)</p>
</blockquote>



<p>Note that &#8220;open source license&#8221; is itself a compound noun phrase made up of the lexicalized compound noun &#8220;open source&#8221; + the noun &#8220;license&#8221;; same for &#8220;open source movement&#8221;, etc.</p>



<h3 class="wp-block-heading">What is lexicalization?</h3>



<p>According to the Lexicon of linguistics (Utrecht University), <a target="_blank" href="https://lexicon.hum.uu.nl/?lemma=Lexicalization&amp;lemmacode=615&amp;lemma=Lexicalization&amp;lemmacode=615">&#8216;lexicalization&#8217;</a> is a &#8220;phenomenon by which a morphologically complex word starts to behave like an underived word in some respect, which means that at least one feature (semantic, syntactic, or phonological) becomes unpredictable&#8221;.</p>



<p><em>Underived word</em> here means the phrase has a specific, unique meaning not (necessarily) transparent from its component parts. For instance, a &#8220;black market&#8221; is not a market which is black but rather a specific kind of market: an illegal one. A &#8220;blackboard&#8221; can be green. In other words, the entire complex phrase can be treated as a single unit of meaning stored in the mental lexicon. The meaning of the phrase is not derived using grammatical rules.</p>



<p>Today, the meaning of <em>open source</em> is unpredictable or semantically intransparent given its usage (at least by a subset of speakers) and meaning, i.e., open source is about user freedoms, not just transparency.</p>



<p>Other examples of lexicalized compound nouns include &#8220;yellow journalism&#8221;, &#8220;purple prose&#8221;, &#8220;dirty bomb&#8221;, &#8220;fat chance&#8221;, &#8220;green card&#8221;, &#8220;blackbird&#8221;, &#8220;greenhouse&#8221;, &#8220;high school&#8221;, etc. I tried to think of examples which are composed of adjectives + nouns but with a specific meaning not derivable by the combination of the two. I am sure you can come up with many more!</p>



<p>In some cases, lexicalization results in writing the compound noun phrase together as a single word (&#8216;blackboard&#8217;), in other cases not (‘green card’). One can also build larger phrases by combining the lexicalized compound noun with another noun (e.g., black market dealer, green card holder).</p>



<h2 class="wp-block-heading">Hyphenated open-source is a compound modifier</h2>



<p>By contrast, <em>open</em> in &#8220;open-source intelligence&#8221; is the dictionary meaning of &#8220;open&#8221;, i.e., &#8220;open to or in view of all&#8221; or &#8220;transparent&#8221;. In this case, open-source is a compound modifier/compound adjective with a meaning comparable to &#8220;source-viewable&#8221;, &#8220;source-available&#8221;, &#8220;source-transparent&#8221;.</p>



<p>For <a target="_blank" href="https://en.wikipedia.org/wiki/Compound_modifier#Hyphenation_of_elements_in_English">compound modifiers</a>, the hyphenation, though not obligatory, is common and can be used to disambiguate.&nbsp; The presence of a head noun like &#8220;intelligence&#8221; or &#8220;journalism&#8221; is obligatory for the compound-modifier use of open-source, unlike in lexicalized compounds.</p>



<p>Examples of other compound modifiers + a head noun: &#8220;long-term contract&#8221;, &#8220;single-word modifier&#8221;, &#8220;high-volume printer&#8221;, etc.</p>



<h3 class="wp-block-heading">Examples</h3>



<p>There are some examples of&nbsp; the compound-modifier use on Wikipedia where I think the difference between meanings lexicalized compound noun and compound modifier becomes clear:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>&#8220;Open-source journalism, a close cousin to citizen journalism or participatory journalism, is a term coined in the title of a 1999 article by Andrew Leonard of Salon.com.&#8221; (from <a target="_blank" href="https://en.wikipedia.org/wiki/Open-source_journalism">Wikipedia</a>)</p>
</blockquote>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>&#8220;Open-source intelligence&#8221; is intelligence &#8220;produced from publicly available information that is collected, exploited, and disseminated in a timely manner to an appropriate audience for the purpose of addressing a specific intelligence requirement&#8221; (from <a target="_blank" href="https://en.wikipedia.org/wiki/Open_source_intelligence">Wikipedia</a>)</p>
</blockquote>



<p>In these examples open-source is clearly referring to transparent, viewable-to-all sources and not to something like ‘guaranteeing user freedoms’. Moreover, my intuition for these latter examples is that removing the hyphen would change the meaning, however subtle it may be, and the change could make the original sentences incoherent (without implicit internal modification while reading):</p>



<ul class="wp-block-list">
<li>&nbsp;&#8220;open source journalism&#8221; would refer to journalism about open source software (in sense I above), not transparent, participatory journalism;</li>



<li>&#8220;open source intelligence&#8221; would refer to intelligence about open source software (in sense I above, whatever that would mean!), not intelligence from publicly available information.</li>
</ul>



<h2 class="wp-block-heading">The Open Source Initiative says: No hyphen!</h2>



<p>If that explanation still doesn’t convince you, we invoke the rules of branding and “<a target="_blank" href="https://www.businessinsider.com/twitters-who-to-follow--bad-english-great-functionality-2-2010-8?op=1&amp;r=US&amp;IR=T">pull a Twitter</a>”, who vandalized English with their <em>Who To Follow</em> <img src="https://s.w.org/images/core/emoji/15.1.0/72x72/1f642.png" alt="🙂" class="wp-smiley" style="height: 1em; max-height: 1em;" />: we say no hyphen!</p>



<p>Luckily others have already adopted the “no hyphen” camp, like the <a target="_blank" href="https://github.com/cncf/foundation/blob/main/style-guide.md">CNCF style guide</a>. Debate closed.</p>



<p>If you like debates, let’s talk about capitalization: OSI in its guidelines chose to always capitalize Open Source because it is a proper noun with a specific definition. Which camp are you on?</p>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">72792</post-id>	</item>
		<item>
		<title>The European regulators listened to the Open Source communities!</title>
		<link>https://opensource.org/blog/the-european-regulators-listened-to-the-open-source-communities</link>
					<comments>https://opensource.org/blog/the-european-regulators-listened-to-the-open-source-communities#comments</comments>
		
		<dc:creator><![CDATA[Simon Phipps]]></dc:creator>
		<pubDate>Fri, 02 Feb 2024 09:10:00 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[cra]]></category>
		<category><![CDATA[europe]]></category>
		<category><![CDATA[policy]]></category>
		<guid isPermaLink="false">https://blog.opensource.org/?p=6112</guid>

					<description><![CDATA[Open Source communities defended developers and foundations against risks posed by the CRA to Open Source development, and their voices were heard. Workshops being offered at FOSDEM offer a chance for others to participate moving forward.]]></description>
										<content:encoded><![CDATA[
<p>During 2023, OSI and many others across the Open Source communities spent a great deal of time and energy engaging with the various co-legislators of the European Union (EU) concerning the Cyber Resilience Act (CRA). Together with a revision to Europe&#8217;s Product Liability Directive (PLD), the CRA will bring the responsibilities of product liability to software for the first time.</p>



<p>In the light of <a target="_blank" href="https://digital-strategy.ec.europa.eu/en/library/study-about-impact-open-source-software-and-hardware-technological-independence-competitiveness-and">the EU&#8217;s own research</a> showing the huge impact of Open Source on Europe’s economy, the authors of these legislative instruments sought to ensure that the lifecycle of Open Source software was impacted as little as possible. Indeed, at FOSDEM 2023 the authors of the CRA and PLD said as much in their first-of-a-kind <a target="_blank" href="https://archive.fosdem.org/2023/schedule/event/cyber_resilience/">main track appearance</a>. But when we all looked at the details, community members found that was not as true as we hoped. As <a target="_blank" href="https://blog.opensource.org/the-ultimate-list-of-reactions-to-the-cyber-resilience-act/">a range of organizations explained</a>, the CRA was likely to be an <a target="_blank" href="https://blog.opensource.org/what-is-the-cyber-resilience-act-and-why-its-important-for-open-source/">existential threat</a> to Open Source development, because instead of placing all the compliance requirements of the CRA on companies deploying Open Source software for profit, the obligations as written potentially fell on developers and Open Source foundations.</p>



<h3 class="wp-block-heading"><strong>Reactions To The Final Text</strong></h3>



<p>Many OSI Affiliates engaged with the European Commission, European Parliament and European Council during 2023. With the welcome coordination of Open Forum Europe, a group met regularly to keep track of progress explaining the issues. Many of us also committed time and travel to meet in-person. As a result of all this effort from so many people, the <a target="_blank" href="https://data.consilium.europa.eu/doc/document/ST-17000-2023-INIT/EN/pdf">final text of the CRA</a> mitigated pretty much all the risks we had identified to individual developers and to Open Source foundations. As the Python Software Foundation said in <a target="_blank" href="https://pyfound.blogspot.com/2024/01/CRA-update.html">their update</a>:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>…the final text demonstrates a crisper understanding of how open source software works and the value it provides to the overall ecosystem of software development.</p>
</blockquote>



<p>And the Eclipse Foundation <a target="_blank" href="https://eclipse-foundation.blog/2023/12/19/good-news-on-the-cyber-resilience-act/">wrote</a>:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>The revised legislation has vastly improved its exclusion of open source projects, communities, foundations, and their development and package distribution platforms. It also creates a new form of economic actor, the “open source steward,” which acknowledges the role played by foundations and platforms in the open source ecosystem.</p>
</blockquote>



<p>As the Apache Software Foundation <a target="_blank" href="https://news.apache.org/foundation/entry/update-on-eu-software-regulation-lots-of-improvements-good-news">said</a>:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>So, all in all, this is mostly good news for volunteers who run and innovate with open source software. Or, more accurately, much better than most of us could have imagined at the end of last summer.</p>
</blockquote>



<p>This time last year OSI <a target="_blank" href="https://blog.opensource.org/what-is-the-cyber-resilience-act-and-why-its-important-for-open-source/">recommended</a> that the CRA:</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>…exclude all activities prior to commercial deployment of the software and … clearly ensure that responsibility for CE marks does not rest with any actor who is not a direct commercial beneficiary of deployment.</p>
</blockquote>



<p>That recommendation has been accepted and implemented, and the OSI is very grateful to the various experts who took the time to listen.</p>



<h3 class="wp-block-heading"><strong>OSI Observations</strong></h3>



<p>While it&#8217;s all much better, and while the burden placed on individuals and charities is minimal, there are still challenges ahead. For example, the concerns that the Debian project <a target="_blank" href="https://bits.debian.org/2023/12/debian-statement-cyber-resillience-act.md.html">articulated</a> give cause for thought. With Open Source projects exempted from the requirement to place a CE certification mark on their software, downstream users will need to pay careful attention to their responsibilities under the CRA as well as to their liabilities to consumers under the PLD.</p>



<p>In particular, &#8220;digital artisans&#8221; using Open Source software at small scale &#8211; the main concern of Debian &#8211; will need guidance from the European Commission. While the experts we have met have all said that using an Open Source software distribution as part of a commercial activity is unlikely to require CE marking of the distribution itself, the interpretation of the key phrase &#8220;making available on the market&#8221; will need careful clarification. OSI encourages the Commission to seek expert advice from the Open Source communities as they did last year, and not to rely on outsourced consultants alone in preparing this advice.</p>



<h3 class="wp-block-heading"><strong>FOSDEM 2024</strong></h3>



<p>There is also the question of how future engagement by legislators should proceed. The effort made by developers and Open Source foundations in 2023 is not sustainable, and the Commission needs to <a target="_blank" href="https://blog.opensource.org/modern-eu-policies-need-the-voices-of-the-fourth-sector/">accommodate the Fourth Sector</a> in future deliberations. To get this started, a group of us who have engaged during 2023 got together to organize a unique set of <a target="_blank" href="https://md.softwarefreedom.net/s/FOSDEM24">workshops at FOSDEM 2024 on Sunday February 4</a>. If you want your voice heard, come along to one of the workshops!</p>
]]></content:encoded>
					
					<wfw:commentRss>https://opensource.org/blog/the-european-regulators-listened-to-the-open-source-communities/feed</wfw:commentRss>
			<slash:comments>19</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">6112</post-id>	</item>
		<item>
		<title>Diverse Open Source uses highlight need for precision in Cyber Resilience Act</title>
		<link>https://opensource.org/blog/diverse-open-source-uses-highlight-need-for-precision-in-cyber-resilience-act</link>
					<comments>https://opensource.org/blog/diverse-open-source-uses-highlight-need-for-precision-in-cyber-resilience-act#comments</comments>
		
		<dc:creator><![CDATA[Simon Phipps]]></dc:creator>
		<pubDate>Tue, 05 Sep 2023 06:31:00 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[cra]]></category>
		<category><![CDATA[cyber resilience act]]></category>
		<category><![CDATA[policy]]></category>
		<guid isPermaLink="false">https://blog.opensource.org/?p=4718</guid>

					<description><![CDATA[The final legislative phase of the Cyber Resilience Act (CRA) is starting and the drafts still have issues arising from framing by the Commission or Parliament. Read OSI's recommendations to frame the trialogue.]]></description>
										<content:encoded><![CDATA[
<p>As the European Cyber Resilience Act (CRA) is entering into the final legislative phase, it still has some needs arising from framing by the Commission or Parliament that result in breakage no matter how issues within its scope are “fixed”.&nbsp;</p>



<p>Here&#8217;s a short list to help the co-legislators understand the engagement from the Open Source community.</p>



<ul class="wp-block-list">
<li>OSI and the experts with whom they engage are<a target="_blank" href="https://the.webm.ink/not-trying-to-opt-out"> <strong>not trying to get all of Open Source out of scope</strong></a> as maximalist lobbyists do for other aspects of technology. An exclusion from the regulation for Open Source software <em>per se</em> would open a significant loophole for openwashing. But the development of Open Source software in the open needs to be excluded from scope <strong>just as the development of software in private is</strong>. Our goal in engaging is just to prevent unintentional breakage while largely embracing the new regulation.</li>



<li>There is <strong>no one way to use Open Source.</strong> Many of the policymakers we&#8217;ve spoken to think of Open Source components in supply chains under the care of foundations like the Eclipse Foundation that are used essentially as-is. But the freedoms of Open Source are also used for stack building, consumer tools, enabling research, hobbyist tinkering, as the basis for European small businesses like XWiki, Open-Xchange, Abilian, and more. All these many other uses exist and are broken differently by the CRA.<a target="_blank" href="https://blog.opensource.org/open-source-ensures-code-remains-a-part-of-culture/"> Software is primarily a cultural artifact</a> and that aspect must be prioritized.</li>



<li>There is <strong>no single Open Source business model.</strong> People make money <em>from</em> Open Source (by charging for it, running it as a service and supporting it) and <em>with</em> Open Source (by simplifying their businesses and reducing costs); they <em>shape markets</em> via Open Source by enabling adjacent businesses, commoditising competitors without then monetising their customers, and more – there are a significant number of business models made possible by software freedom. So any attempt to<a target="_blank" href="https://the.webm.ink/the-comprehension-error-behind-the-cra-issue"> identify commerciality</a> is sure to be model-specific and consequently have unintended consequences for other models.</li>



<li>Even larger foundations like Linux Foundation <strong>do not actually employ the sort of staff who ensure code compliance</strong> –<a target="_blank" href="https://blog.opensource.org/regulatory-language-cannot-be-the-same-for-all-software/"> Open Source is conceptually disjoint from proprietary software</a>. To comply with the CRA – if they find themselves in-scope – they will need them to hire a whole new operating unit. To them, the burden of compliance is not a cost of development funded by revenue as it would be for a manufactured physical good where staffing exists and just needs adapting.</li>
</ul>



<p>As we did in January, OSI still<a target="_blank" href="https://blog.opensource.org/what-is-the-cyber-resilience-act-and-why-its-important-for-open-source/"> recommends</a> the Cyber Resilience Act should exclude all activities prior to commercial deployment of software and clearly ensure that responsibility for CE marks does not rest with any actor who is not a direct commercial beneficiary of deployment.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://opensource.org/blog/diverse-open-source-uses-highlight-need-for-precision-in-cyber-resilience-act/feed</wfw:commentRss>
			<slash:comments>25</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">19853</post-id>	</item>
		<item>
		<title>Meta’s LLaMa license is not Open Source</title>
		<link>https://opensource.org/blog/metas-llama-2-license-is-not-open-source</link>
					<comments>https://opensource.org/blog/metas-llama-2-license-is-not-open-source#comments</comments>
		
		<dc:creator><![CDATA[Stefano Maffulli]]></dc:creator>
		<pubDate>Thu, 20 Jul 2023 20:45:00 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[advocacy]]></category>
		<category><![CDATA[ai]]></category>
		<category><![CDATA[meta]]></category>
		<guid isPermaLink="false">https://blog.opensource.org/?p=4436</guid>

					<description><![CDATA[Meta is lowering barriers for access to powerful AI systems, but unfortunately, Meta has created the misunderstanding that LLaMa 2 is “open source” - it is not.]]></description>
										<content:encoded><![CDATA[
<p>OSI is pleased to see that Meta is lowering barriers for access to powerful AI systems. Unfortunately, the tech giant has created the misunderstanding that LLaMa 2 is “open source” &#8211; it is not. Even assuming the term can be validly applied to a large language model comprising several resources of different kinds, Meta is confusing “open source” with “resources available to some users under some conditions,” two very different things. We’ve asked them to correct their misstatement.</p>



<p>“Open Source” means software under a license with specific characteristics, defined by the <a href="https://opensource.org/osd/">Open Source Definition</a> (OSD). Among other requirements, for a license to be Open Source, it may not discriminate against persons or groups or fields of endeavor (OSD points 5 and 6). Meta’s license for the LLaMa models and code does not meet this standard; specifically, it puts restrictions on commercial use for some users (paragraph 2) and also restricts the use of the model and software for certain purposes (the Acceptable Use Policy).&nbsp;</p>



<h2 class="wp-block-heading">Why Open Source matters</h2>



<p>An Open Source license ensures that developers and users are able to decide for themselves how and where to use the technology without the need to engage with another party; they have sovereignty over the technology they use. Open Source is premised on the understanding that everyone gets to share no matter who you are. The commercial limitation in paragraph 2 of <a target="_blank" href="https://github.com/facebookresearch/llama/blob/main/LICENSE">LLAMA COMMUNITY LICENSE AGREEMENT</a> is contrary to that promise in the OSD.&nbsp;</p>



<p>OSI does not question Meta’s desire to limit the use of Llama for competitive purposes, but doing so takes the license out of the category of “Open Source.”&nbsp;&nbsp;</p>



<p>The OSD does not allow restrictions on field of use because you can&#8217;t know beforehand what can happen in the future, good or bad. That&#8217;s what allows the Linux kernel to become popular in medical devices as well as airplanes and rockets.&nbsp;</p>



<p>But the Meta policy prohibits use in several areas that might be highly beneficial to society, such as regulated/controlled substances and use for critical infrastructure. Even something that sounds as simple as “you must follow the law” is <a target="_blank" href="https://the.webm.ink/just-obey-the-law">problematic in practice</a>.&nbsp; What if the law in different places is inconsistent? What if the law is unjust?</p>



<h2 class="wp-block-heading">Avoiding adding more confusion</h2>



<p>The license for the Llama LLM is very plainly not an “Open Source” license. Meta is making some aspect of its large language model available to some, but not to everyone, and not for any purpose.&nbsp;OSI realizes how important it is to come to a shared understanding of what open means for AI systems. These are new human artifacts, much like software was a new creation of human intellect in the 70s. We&#8217;re running a series of events to craft a common definition of &#8220;open&#8221; in the AI context and we <a href="https://opensource.org/deepdive/">welcome submissions of ideas</a>.</p>
]]></content:encoded>
					
					<wfw:commentRss>https://opensource.org/blog/metas-llama-2-license-is-not-open-source/feed</wfw:commentRss>
			<slash:comments>282</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">4436</post-id>	</item>
		<item>
		<title>OSI&#8217;s comments to US Patent and Trademark Office</title>
		<link>https://opensource.org/blog/osis-comments-to-us-patent-and-trademark-office</link>
		
		<dc:creator><![CDATA[OSI staff]]></dc:creator>
		<pubDate>Tue, 27 Jun 2023 13:36:00 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[policy]]></category>
		<guid isPermaLink="false">https://blog.opensource.org/?p=4168</guid>

					<description><![CDATA[OSI submitted its comments to the United States Patent and Trademark Office to defend Open Source from patent trolls.]]></description>
										<content:encoded><![CDATA[
<p>OSI submitted its comments to the United States Patent and Trademark Office to defend Open Source from <a target="_blank" href="https://blog.opensource.org/why-open-source-should-be-exempt-from-standard-essential-patents/">patent trolls</a>. A few days ago the Linux Foundation, Electronic Frontier Foundation and Unified Patents asked for the community to <a target="_blank" href="https://blog.opensource.org/action-needed-to-protect-against-patent-trolls/">send their comments</a>.</p>



<p>Below is the text of the letter we sent.</p>



<p class="has-text-align-right has-small-font-size"><em>June 16, 2023</em><br>Katherine K. Vidal<br>Under Secretary of Commerce for Intellectual Property <br>and&nbsp;Director of the United States Patent and Trademark Office<br>United States Patent and Trademark Office<br>600 Dulany Street<br>Alexandria, VA 22314-5796</p>



<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow">
<p>Dear Director Vidal,</p>



<p>The Open Source Initiative (OSI) is a California 501(c)(3) public charity advocating for and enabling the benefits of open source (community developed and maintained) software in the interests of every citizen. It does not advocate on behalf of any for-profit entity or any political group.</p>



<p>We very much appreciate that the USPTO has provided the opportunity for input on this important matter in advance of the formal rulemaking process. OSI is writing in particular to provide information for your consideration regarding the use of third-party entities to challenge patents.</p>



<p>The oversight of each open source project is usually in the hands of an unincorporated association of individual contributors, or a dedicated public charity (like OSI’s 80+ Affiliate members). Many of the leaders in these communities are entrepreneurs leading small businesses. Open source projects use OSI-approved licenses, which openly convey all rights necessary to use, improve, share and otherwise enjoy the software without any necessary relationship with its rights holders. As such, no open source project depends on patents and communities rarely tolerate royalty-due elements, preferring to design without any encumbered parts.</p>



<p>Open source projects and their maintainers are uniquely vulnerable to attack by hostile parties such as patent trolls (sometimes called “non-practicing entities”) and companies rent-seeking over so-called standard-essential patents. The projects and their non-profit fiduciary hosts are not of a scale to be able to manage the usual defenses of large corporations, while the individuals themselves may seem worthwhile targets for avaricious litigators. When a project faces a patent attack, it is thus frequently defended by others as a matter of civic duty.</p>



<p>The rule changes that the Patent and Trademark Office propose would greatly limit the ability of open source projects to be defended by these third parties. This would both chill the innovation and progress arising from open source software &#8211; which contributes billions to GDP &#8211; as well as embolden malicious litigators seeking reward where they have no claim simply because their victim is unable to defend themselves.</p>



<p>OSI consequently encourages the USPTO to reconsider these rule changes and avoid the harm they would cause open source software.</p>



<p>Your sincerely,</p>



<p>Stefano Maffulli<br>Executive Director<br>Open Source Initiative</p>



<p class="has-small-font-size">Open Source Initiative is a 501(c)(3) corporation (EIN: &nbsp;91-2037395).</p>
</blockquote>
]]></content:encoded>
					
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">4168</post-id>	</item>
		<item>
		<title>Regulatory language cannot be the same for all software</title>
		<link>https://opensource.org/blog/regulatory-language-cannot-be-the-same-for-all-software</link>
					<comments>https://opensource.org/blog/regulatory-language-cannot-be-the-same-for-all-software#comments</comments>
		
		<dc:creator><![CDATA[Simon Phipps]]></dc:creator>
		<pubDate>Thu, 25 May 2023 13:30:00 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[policy]]></category>
		<guid isPermaLink="false">https://blog.opensource.org/?p=3929</guid>

					<description><![CDATA[In reviewing the language and concepts being used in the various draft bills and directives circulating in Brussels at present, it is clear that the experts crafting the language are using their understanding of proprietary software to build the protections they clearly intend for Open Source.]]></description>
										<content:encoded><![CDATA[<p>In reviewing the language and concepts being used in the various draft bills and directives circulating in Brussels at present, it is clear that the experts crafting the language are using their understanding of proprietary software to build the protections they clearly intend for Open Source. This may be the cause of the problems we continue to see as the instruments iterate,<span style="text-decoration: underline;"><a target="_blank" href="https://blog.opensource.org/why-the-european-commission-must-consult-the-open-source-communities/"> especially in the absence of direct consultation</a></span>.</p>
<p>Proprietary software and the company that places it on the market can usefully be seen as the same target for those creating legislation. The software is constructed in secret, under the control of a single party, and the controlling party is responsible for both funding the work and monetizing the result. However, the same cannot be said for Open Source software, which is created openly by a globally-distributed and unaffiliated community whose relationship with the larger work is <span style="text-decoration: underline;"><a target="_blank" href="https://the.webm.ink/on-volunteering">“volunteer”</a></span>. Using terminology associated with the worldview of proprietary software in legislation that affects Open Source is at best ambiguous and at worst extends consumer regulation to the domain of research and development.</p>
<p>Open Source software is an artifact arising from the interactions of a community of contributors with no contractual binding between them beyond the Open Source license itself, which disclaims all warranties and has no conduit for funds. If there is an Open Source charity or trade association hosting the community, there will also be only a limited binding to it and probably none that is a funding conduit. Many communities are unincorporated and don&#8217;t even have this level of interconnection.</p>
<p>Because of this, those who place the artifact with digital elements on the market must be assumed to have no financial, organizational or indeed morally relevant relationship with any other party involved in the artifact&#8217;s origination or use until proven otherwise. There may be links, but it&#8217;s best to start from the assumption there will be none because making them is an outside activity with no accommodation in Open Source licensing.</p>
<p>In many cases (sadly) those placing the artifact on the market have no connection at all with the community, not even at the level where it is appropriate to consider members of the community as suppliers. As one community member <span style="text-decoration: underline;"><a target="_blank" href="https://www.softwaremaxims.com/blog/not-a-supplier">wrote</a></span>:</p>
<blockquote><p>I am not your supplier. So all your Software Supply Chain ideas? You are not buying from a supplier, you are a raccoon digging through dumpsters for free code.</p></blockquote>
<p>The software and the community thus need to be considered separately when choosing language that applies regulation affecting Open Source. Some highlights to note:</p>
<ul>
<li>The software is made freely available under an OSI-approved license that ensures its consumer may do anything it wishes without needing any relationship with rights holders.</li>
</ul>
<ul>
<li>The members of the community collaborate for many different reasons, and even when those reasons have commercial intent the commercial intents in play are likely to be unrelated both formally and informally.</li>
</ul>
<ul>
<li>Many community members have a moral/ethical basis for their participation which can sometimes take priority over pragmatic convenience.</li>
</ul>
<ul>
<li>Treating the software and the company placing it on the market as interchangeable is unsafe.</li>
</ul>
<ul>
<li>As a consequence, it is unsafe to assume that because two parties are monetizing a piece of Open Source software, that there is a flow of funds or even a relationship between them. Regulation should only apply to the party triggering the clause in the legislation, unlike with proprietary software where it is reasonable to assume a link.</li>
</ul>
<p><span style="font-style: italic;">This article first appeared on </span><span style="text-decoration: underline; font-style: italic;"><a target="_blank" href="https://the.webm.ink/open-source-is-conceptually-disjoint-from-proprietary-software">Webmink in Draft.</a></span></p>
<p><span style="font-style: italic;">Image of </span><span style="text-decoration: underline; font-style: italic;"><a target="_blank" href="https://www.flickr.com/photos/webmink/6088328073">Fallen Head</a></span><span style="font-style: italic;"> by Simon Phipps</span></p>
]]></content:encoded>
					
					<wfw:commentRss>https://opensource.org/blog/regulatory-language-cannot-be-the-same-for-all-software/feed</wfw:commentRss>
			<slash:comments>8</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">3929</post-id>	</item>
		<item>
		<title>Why open video is vital for Open Source</title>
		<link>https://opensource.org/blog/why-open-video-is-vital-for-open-source</link>
					<comments>https://opensource.org/blog/why-open-video-is-vital-for-open-source#comments</comments>
		
		<dc:creator><![CDATA[Simon Phipps]]></dc:creator>
		<pubDate>Tue, 23 May 2023 18:39:00 +0000</pubDate>
				<category><![CDATA[OSI opinion]]></category>
		<category><![CDATA[europe]]></category>
		<category><![CDATA[policy]]></category>
		<guid isPermaLink="false">https://blog.opensource.org/?p=3917</guid>

					<description><![CDATA[The news that the European Commission’s competition directorate (DG COMP) has decided not to conduct a full antitrust investigation into the Alliance for Open Media’s (AOM) licensing policy is to be welcomed.]]></description>
										<content:encoded><![CDATA[<p>The&nbsp;<span style="text-decoration: underline;"><a target="_blank" href="https://aomedia.org/press%20releases/preliminary-aom-royalty-free-licensing-policy-investigation/">news</a></span>&nbsp;that the European Commission’s competition directorate (DG COMP) has decided not to conduct a full antitrust investigation into the Alliance for Open Media’s (AOM) licensing policy is to be welcomed, especially for the&nbsp;<span style="text-decoration: underline;"><a target="_blank" href="https://en.wikipedia.org/wiki/AV1">AV1 CODEC specification</a></span>&nbsp;(successor to the VP9 CODEC and intended to allow royalty-free, high-quality video streaming). It seems that whispering voices had falsely suggested the reciprocal licensing of standard-essential patents (SEPs) in AOM’s policy is somehow anti-competitive.</p>
<p>But reciprocal patent licensing is very common in the software industry generally and Open Source in particular – it’s part of the terms of the Apache License for example – so the accusation seemed far more likely to be projection by the SEP-dependent legacy industries of Europe. One useful insight into the whispers to which DG COMP responded can be seen in the<span style="text-decoration: underline;"><a target="_blank" href="https://aomedia.org/docs/AOM_W3C_Mode_and_the_AOM_Patent_License_1.0.pdf">&nbsp;extra information</a></span>&nbsp;AOM has added to its&nbsp;<span style="text-decoration: underline;"><a target="_blank" href="https://aomedia.org/license/">legal page</a></span>&nbsp;in response to the matter. The questions they address have such obvious and innocuous answers that only express sophistry could have been behind such questions, given the sophistication of the actors involved.</p>
<p>This is all crucially important to Open Source software, and not just as an endorsement of reciprocal terms. While there are edge cases, generally&nbsp;<span style="text-decoration: underline;"><a target="_blank" href="https://blog.opensource.org/why-open-source-should-be-exempt-from-standard-essential-patents/">Open Source projects avoid standards which embed royalty-due patents</a></span>, not primarily because of the royalties but because of the need to submit to the control implied by privately negotiating terms with the patent holders – an obviously anti-competitive aspect for any market entrant,&nbsp;<span style="text-decoration: underline;"><a target="_blank" href="https://the.webm.ink/seps-cut-both-ways">about which Europeans complain</a></span>.</p>
<p>It only takes one patent aggressor to rob everyone of viable Open Source video, so it seems entirely reasonable to scrupulously maintain hygiene by requiring any beneficiary of AV1 to commit to waiving royalties (and thus their negotiation). AOM is creating standards expressly intended to allow implementation by Open Source projects, so their terms are both rational and reasonable … unless you want to keep Open Source out of your cozy market.</p>
<p>The clouds have not all dispersed. AOM’s licensing is unfortunately based on a non-OSI-approved license (for excellent reasons but still an issue). Hopefully this will become more and more unfashionable as Open Source expands its reach. Also, significantly, there are hostile patent pools which, unfathomably and without evidence that their mountain of claims are actually essential, assert that the AV1 standards infringe patents in the pools.</p>
<p>But this is good progress and underlines that the “reciprocal” mechanisms so common in Open Source licenses are generally pro-competitive. &nbsp;Perhaps the Commission will now move on to ask why such an obviously anti-competitive arrangement as standards bodies permitting royalty-due patents in their specifications is still tolerated?</p>
<p><span style="font-style: italic;">This article first appeared on </span><span style="text-decoration: underline; font-style: italic;"><a target="_blank" href="https://the.webm.ink/d/og30zatfjl">Webmink in Draft.</a></span></p>
<p><span style="font-style: italic;">Image </span><span style="text-decoration: underline; font-style: italic;"><a target="_blank" href="https://www.flickr.com/photos/webmink/51296452914/">it&#8217;s not thieving if it&#8217;s from the bin, right? by Simon Phipps.</a></span></p>
]]></content:encoded>
					
					<wfw:commentRss>https://opensource.org/blog/why-open-video-is-vital-for-open-source/feed</wfw:commentRss>
			<slash:comments>12</slash:comments>
		
		
		<post-id xmlns="com-wordpress:feed-additions:1">19850</post-id>	</item>
	</channel>
</rss>
