JHS 169 hyväksytty – vihdoin avointa lähdekoodia julkiselle sektorille?

Julkisen hallinnon tietohallinnon neuvottelukunta JUHTA hyväksyi vihdoin perjantaina suosituksen avoimen lähdekoodin käyttämisestä julkisella sektorilla. Hyväksytty dokumentti menee tosin vielä viralliseen kielenhuoltoon ennen sen lopullista julkaisemista JHS-sarjassa, joten toistaiseksi asiasta kiinnostuneiden pitää tyytyä hieman aikaisempaan draft-versioon. Olin mukana kirjoittamassa suositusta, joka on toivottavasti osaltaan helpottamassa avoimen lähdekoodin käyttöönottoa julkisella sektorilla.

Suosituksessa käydään läpi seikkaperäisesti, mitä asioita hankintayksiköiden (kunnat, ministeriöt ym.) tulee huomioida hankkiessaan käyttöönsä avoimen lähdekoodin tuotteita. Vaikka asia tuntuisikin nopeasti miettien helpolta, se on tarkemmin tutustuttaessa yllättävän monisäikeinen ongelmakenttä. Ensimmäinen ja päällimmäinen syy tähän on voimassa oleva hankintalaki, joka rajoittaa merkittävästi tarjouspyyntöjen sisältöä. Lähtökohtana on, että toimittajilta ei voida edellyttää tietyn tuotteen käyttöä, vaan sen sijaan pitää määritellä käyttötarpeen sanelemat tekniset tai oikeudelliset reunaehdot. Toisin sanoen esimerkiksi tekstinkäsittelyohjelman hankinnassa ei voida vaatia tarjouksen tekemistä OpenOfficesta tai edes sen varianteista. Sen sijaan voidaan kyllä edellyttää, että hankittavan tekstinkäsittelyohjelman lisenssi sallii sen vapaan jakelun ja muokkauksen, mikäli tällaiselle vaatimukselle on olemassa perustellut syyt.

Toinen ja vähän radikaalimpi vaihtoehto on ostaa ainoastaan ylläpito ja- tukipalvelut. Pelkkä avoimen lähdekoodin ohjelman lataus ja käyttöönotto ei nimittäin muodosta vielä julkista hankintaa, eli organisaatio voi vapaasti asentaa haluamansa ohjelmiston ja vasta tämän jälkeen kääntyä kaupallisten toimijoiden puoleen. Kyseessä on varsin tyylikäs “legal hack”, josta kunnia kuuluu itse asiassa Hollantiin.

Kokonaan oma lukunsa on, että Suomessa ei ole tällä hetkellä erityisen helppo löytää luotettavia toimittajia, jotka olisivat valmiita myymään avointa lähdekoodia julkiselle sektorille. Toimivia tuotteita ei löydy kovinkaan moniin käyttökohteisiin (vrt. esim. tuore keskustelu eduskunnan sähköpostijärjestelmästä) ja pienten, muutaman hengen toimittajien varaan jättäytyminen ei ole edes avoimen lähdekoodin tuotteiden tapauksessa erityisen hyvä idea – vaikka lähdekoodi onkin vapaasti käytössä, monimutkaisemman järjestelmän haltuunotto ei välttämättä ole nopea tai halpa operaatio erityisesti jos (ja kun) sen dokumentaatio ei ole kunnossa.

Pitemmän päälle olisi hyvä, jos Suomessa (ja miksei ihan EU-tasolla) saataisiin käyntiin Forge.milin kaltaisia järjestelyitä, joissa pidetään keskitetysti yllä julkishallinnon tarpeeseen modifioituja avoimen lähdekoodin tuotteita. Näin julkisen sektorin vähäiset resurssit saataisiin IT-puolella mahdollisimman tehokkaaseen käyttöön ja lisenssimaksujen maksamisen sijaan rahat jäisivät (toivon mukaan) kotimaisten koodarien taskuun. Samalla pystyttäisiin myös vähentämään tietoturvaan ja avoimen lähdekoodin lisensseihin liittyviä riskejä. Sääli vain, että tällaiset ideat eivät Suomessa saa ihan vastaavaa huomiota kuin maailmalla, jossa julkishallinnon massiivisia OSS-hankintoja on esimerkiksi pidetty yhtenä hyvin tehokkaana elvytyskeinona.

From Berkeley to Montreal

The second day of the service conference was very interesting. As a matter of fact, it was so interesting that I didn’t want to ruin my concentration with live blogging ;-) My own presentation went OK or at least I got some positive feedback afterwards. The slides are here.

Me at Muirwoods:

Me and Dodge ChargerDriving near the airport:

HighwayAnyway since then I have already moved to Monreal to Computer, Freedom & Privacy 2007. It will officially start tomorrow, today we have had some tutorials

He’s living right outside our hotel room: Neighbour

Gowers review to shape IPR-policy

(This text will be published also in OSSI’s blog)

Former Financial Times editor Andrew Gowers has published a very comprehensive study on the IPRs in United Kingdom, which is a product of extensive public consultations and careful analysis of received data. The review was commissioned by the Chancellor in the 2005 Pre-Budget Report to look at patents, copyright and trademarks and how IP is awarded and enforced

While the public discussion is likely the to concentrate on the review’s sections pertaining to private copying and additional enforcement of IPRs, the document covers also other themes. For example, it discusses about alternative options for IPRs including keeping material secret, patronage, prizes and open source. The study argues that:

The approach of ‘open source’ is for creators to allow open access to their
products, ideas and inventions, enabling information to be freely shared and developed. This keeps transaction costs low and has allowed user-driven innovation to flourish. Examples of open source projects include the Linux operating system and the Firefox Internet browser. The incentive mechanism for contributors is reputation. However, open source has some serious limitations; for example, the incentive mechanism is usually financially weaker than using IP in its conventional commercial form and hence contributors often rely on supplementary sources of income.

From the perspective of OSSI, the most relevant substantial section is about the software patents. Here the study takes a rather sceptical view :


“There have been calls in the UK to introduce pure computer software patents to
ensure that innovation is properly protected and encouraged. In Europe, patents are not granted for computer programs as such, but patents have been granted to computer-based innovations provided they have a technical effect. In the USA, pure computer software patents can be granted. The evidence on the success of pure computer software patents is mixed. The software industry in the USA grew exponentially without pure software patents, suggesting they are not necessary to promote innovation. The evidence suggests software patents are used strategically; that is, to prevent competitors from developing in a similar field, rather than to incentivise innovation.”

The problems of software patents have apparently been raised especially by SMEs. The following arguments are very familiar to anyone who has followed the recent European discourse:

Several submissions to the Call for Evidence, for example the Professional Contractors Group’s submission, argued that software should not be patentable in principle. Where freelance businesses develop software, they rely on copyright to protect it. This protection is free and automatic. …Introducing pure software patents could raise the costs for small software developers to mitigate against risks surrounding R&D, thereby inflating the capital needs of software development.

It is therefore not surprising that the outcome of the study is that software patents should not be extended from the current situation. Of course, it is quite hard to describe what this means in practical terms because the EPO practice and national practices varies a lot. The recent Aerotel Ltd v Telco Holdings Ltd case aimed at answer the question and created a new four-step test, which is now already being used by the UK Patent Office:

(1) properly construe the claim;
(2) identify the actual contribution;
(3) ask whether it falls solely within the excluded subject matter; and
(4) check whether the actual or alleged contribution is actually technical in nature.

Getting religious on GPL?

Jonathan Zuck (the president of Association for Competitive Technology, ACT) recently compared the discourse on draft version of GPL v.3 to the 15th century Europe. He argued that Richard Stallman is the same for open source movement as Girolamo Savonarola, a Dominican priest, is to Renaissance. Girolamo Savonarola is famous for his fight against vanity, which culminated to several book burning events, in which many great works of art and science were permanently destroyed.

ACT is funded by Microsoft and Zuck was naturally making a very strong hyperbole in his op-ed. However, his writing was not completely of the mark (a sign of good professional “propaganda” ;-) . Richard Stallman is more interested about the ideology than business i.e. for him the interests of companies are indeed not high on priority.

Stallman and his “comrades” at FSF are not stupid, though. They understand that commercial support to free software is very useful for their cause. A good example of this is the creation of B-group, which incorporates the corporate interests to the GPL drafting process.

The importance of corporate feedback became very evident at the GPL v.3 event, which we (OSSI, COSS, IT-oikeuden yhdistys) arranged on Tuesday. Dietmar Tallroth (Nokia) gave there a very thorough and sober presentation about the existing problems in the current draft. It brought up many issues (especially pertaining to patent clauses) the other presenters didn’t have noticed. If these problems are not corrected in the final version, the legal risks using GPL will increase considerably and thus hinder its corporate acceptance – and in the end also the popularity of free software.

Curling and lot of links.

I’m watching curling (FIN – UK), which is surprisingly interesting – perhaps because for once Finland is leading. The sport is slow enough that there’s time for surfing, too. As a result, here’s quick review of interesting stuff around:
Raymond T. Nimmer considers open source licensing profileration:

“..But we can get to that realization only by recognizing FSF and OSI as part of a broader theme. In that broader context, other options and approaches are important and valuable, even if they do not fully conform to strict FSOS doctrine. It is in that broader context that the “movement” and the “community” need to be understood.”

In practical terms, compatibility is very essential so I don’t totally agree with Nimmer.

In related news, the licence checker we are developing in OSSI is developing quickly. Check it out here. Comments and even patches are more than welcome!

David Benjamin, EE-Times raports from 3GSM:

“David Birch of Consult Hyperion, a U.K.-based independent IT consultancy, reminded the panel of mobile operators, device-makers and standards developers that the telecommunications industry is at least 15 times larger than the Hollywood “content” industry. Yet, Hollywood is prevailing in its demands for embedded technologies designed to prevent illegal sharing of music and video by mobile phone users.

“Why are you such a bunch of big girls?” asked Birch. “Why don’t you tell the content owners to just get stuffed?

This is not the first time this questions is asked. For example, Cory Doctrorow has made the same argument before in his famous DRM-speech. Still, the tone and place was interesting but the same cannot be said about the answer by Willms Buhse:

“..the imbalance between Hollywood’s size and its power was a matter of glamour, and its effect on public policymakers. Citing the comments of an unnamed professor, Buhse said, “With any politicians who make laws, you’re going to do much better with Christina Aguilera than you are with a handset.”

There’s a bit of commentary in EETimes, too.

There’s lot of development related to Apple’s new Intel-based systems. First of all, Linux has been ported to system (no big suprise here) On the other hand, Apple has been using DMCA to shut down sites, which are used to discuss methods to porting OSX to non-Apple PCs. Apple is even using poetry to fight against this (inevitable?) movement:

The embedded poem reads: “Your karma check for today: There once was a user that whined/his existing OS was so blind/he’d do better to pirate/an OS that ran great/but found his hardware declined./Please don’t steal Mac OS!/Really, that’s way uncool./(C) Apple Computer, Inc.”

Speaking about inevitable events, the first OSX worm and virus has been found. They don’t present any real threat yet but work as a healthy reminder that no OS is totally safe against clueless users.

Torvalds hasn’t ruled out GPL 3 for Linux

Hmm,

it seems that Linus is backing from his previous hard line position. From Linux-Watch: 

…the specific section that Torvalds has trouble with reads:

“Complete Corresponding Source Code also includes any encryption or authorization codes necessary to install and/or execute the source code of the work, perhaps modified by you, in the recommended or principal context of use, such that its functioning in all circumstances is identical to that of the work, except as altered by your modifications. …”

According to Torvalds, this “is the one that seems to disallow digitally signed binaries (or rather: you can sign the binaries any way you want, but you have to make your private keys available).”

If this section is removed, then Torvalds believes that, while practically speaking it may be difficult to bring Linux under GPL 3 due to the sheer number of copyright owners, the kernel might yet be moved to the new GPL.

Full story:

Torvalds hasn’t ruled out GPL 3 for Linux

Friday, Friday..

It’s Friday afternoon.

We’ll be looking after Mikko’s kids tonight. I’m scared – luckilly Pauliina is more expecienced in baby-sitting.

The week has bring few surprises. Tieturi’s open source day was nice but did not have that much novel content. The most interesting news there was the problems pertainging Finnish spelling for open source programs. Hopefully that will be solved soon since fully working all-around speller/thesaurus is one of the missing key components for desktop use.

In other news: If Richard Stallman was a pacifist (i.e. ban military applications with GPL..), The R-gator from iRobot wouldn’t be possible:

“an intelligent UGV ground vehicle) that can autonomously perform dangerous military missions, including acting as an unmanned scout, ‘point man,’ perimeter guard, [and] pack/ammo/supply carrier for soldiers, marines, and airmen.” The R-Gator can be shifted quickly between remote operation, autonomous, and manual modes, a feature that lets military personnel evaluate unmanned vehicle technology in “numerous operational scenarios,” the company says...The R-Gator’s control, navigation, and obstacle avoidance systems are based on LynuxWorks’s BlueCat Linux, which features a 2.6 Linux kernel.

Having One Billion in Personal Debt

SFgate has today interesting article about personal finances of Oracle’s chairman Larry Ellison. Instead of selling Oracle’s stock, he has taken loan from different banks. A LOT of loan, to be precise:

…Getting back to the scary days of 2000, when the tech stock market was imploding, a list of Ellison’s debts as of July 13, 2000, showed that he owed $1.022 billion to five banks: JP Morgan, Bankers Trust, CMB, Merrill Lynch and UBS. At that time, those loans came from credit lines that had a combined limit of $1.35 billion, putting Ellison a mere $328 million from maxing out.
By 2001, when Ellison made the stock sales that triggered the lawsuit, that debt was up to $1.22 billion.

This puts my personal apartment loan into a slightly different perspective but of course, I’m not worth of $17 billion.

In other news: CNET.UK has interviewed Alan Cox, who thinks that draft GPL is quite reasonable:

The majority of it looks very sensible, such as letting copyright information be displayed in an About box, rather than relying on command line instructions [as is the case in GPL 2]. Some of the more contentious stuff has sensibly been made optional. One of the other nice things is the work to make the GPL compatible with other licences. That’s really important — it will allow people to share more code.

Also SUN is apparently seeing GPL v.3 as something positive. As Jonathan Schwartz wrotes in his blog:

..We also recognize that diversity and choice are important – which is why we’ve begun looking at the possibility of releasing Solaris (and potentially the entire Solaris Enterprise System), under dual open source licenses. CDDL (which allows customer IP to safely comingle with Solaris source code) and under the Free Software Foundation’s GPL3…

It seems that very interesting battle lines are developing for GPL v. 3. EWeek has more coverage on the topic

Last but not least: New Open Source discussion/event forum - Open Tuesday – has been launched:

We have created OPEN TUESDAY for ourselves and other open minded people to connect together around the world on a monthly basis to meet, discuss and to find ways of collaborating and taking action on the opportunities of the open future

ZDNet.com’s Carroll hits hard GPL’s draft

It seems that the discussion about forthcoming GPL v. 3 is going to be blistering. First we had Linus dissing the new draft. Now John Caroll, who works for Microsoft, joins the chorus with his strongly-worded column:

» The offer you can’t refuse – John Carroll:

…People may wish to rethink that premise, as the GPL is incredibly important to the open source movement (though Eric Raymond has advocated doing away with it), and Stallman has just thrown down the ideological gauntlet. The question is whether those same developers who followed Stallman down the GPL garden path will continue to follow as he leads them over the edge of a cliff..

..GPL version 3 isn’t going to help the cause of open source and free software. With it’s anti-DRM provisions, it’s more likely to inspire a civil war, and if the Stallman side wins (which he might, given interdependencies between various GPL products and the fact that Stallman has convinced so many to give him arbitrary control over the licensing terms covering their code), open source loses as proprietary software rushes in to fill the void left by GPL code.

It will be interesting to see if FSF will address this criticism.

Plumbing renovation starts

During the three next months, the apartment will be deserted. We used the weekend to move the most important things out to the undisclosed locations. If everything goes alright, the renovation should be ready for the May Day. I’ll be posting pictures from the process here.

In other news: eWeek has today a nice interview from E-Trade’s Vice President of Architecture Lee Thompson. They are not just using open source but also trying to learn how to apply the best part of the methodology for their internal software development:

.. have a very large code base with a large number of committers, and [there is] the probability of conflicting change occurring. We have a very complicated application—nowhere near as complicated as a project like Microsoft’s Longhorn, but complicated enough that you’ll have, say, our stock options business, which is an employee benefit. They have some developers there who can make a change, and then somebody in our cash transfer business puts a change in, and they conflict, and we have to resolve that conflict in our build process. The way the open-source project does that is that the guys who are submitting the change for the employee benefits site would submit a patch, and the other team doing cash transfer would submit a patch, and the committers would look at both and go, ‘You know, that might conflict. We should probably do one versus the other

Oh, I updated the blog with a new style sheet – comments are welcome..