Copyright infringement and GPL violation in tinypeap

[Dean Anderson]

Alan, you should be sure to review the instructions at
http://www.gnu.org/licenses/gpl-violation.html

I suggest notifying GNU, even though it isn't GNU code. I don't know if
GNU will offer legal assistance but I suggest letting them know.

You should pretty quickly retain counsel, at least to discuss your
approach. Email notifications are a good measure but not necessarilly
official notice. Its easy to ignore email.

I also suggest that if Frank Cusak is not a lawyer, he shouldn't contact
GATech.  You've already sent a deadline; our lawyers always advise against
specific deadlines until you've established all the facts, ultimately in a
lawyers conference. I suggest you tell them what you think the facts are
and ask them to respond to your assertions.  They either explain an
alternate view or agree to your version. If they agree, problem is nearly
solved. If they give an alternate view, that has to be sustained.  If they
ignore your email, try phone calls, faxes, and ultimately, get the lawyers
involved.  Also, keep a written log of all contacts.

It sounds like they are ignoring your emails. Try phone calls. 

But you really need to have a lawyer "looking over your shoulder" as it 
were.  Saying/Doing the wrong thing can cost you.

		--Dean

On Wed, 8 Jun 2005, Alan DeKok wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> 
>   Your web site http:/www.tinypeap.com (hosted at the Georgia
> Institute of Techology, machine "rhampora.cc.gatech.edu") is
> distributing programs built at least in part from code that is derived
> from the FreeRADIUS server project (http://www.freeradius.org).  I
> refer you to the following URL's:
> 
> http://www.linksysinfo.org/modules.php?name=Forums&file=viewtopic&t=5649
> 
>   This message contains text with error messages "rlm_eap_tls:
> SSL_read failed inside of TLS ".  The "rlm_eap_tls" module is part of
> FreeRADIUS, is copyright by me personally, and is licensed under the
> terms of the GPL.
> 
>   However, in the forum post at:
> 
> http://www.linksysinfo.org/modules.php?name=Forums&file=viewtopic&t=4533
> 
>   You claim that tinyPEAP is "closed source".  You further do not
> acknowledge my copyright on code that you distribute.
> 
> http://www.tinypeap.com/bin/peapd-beta1.zip
> 
>   This URL points to a file which contains "peapd.exe".  That file
> contains at least the following text strings, which are either
> identical to strings included with FreeRADIUS, or substantially
> similar:
> 
> - --
> rlm_eap_tls: FATAL SSL error ..... %d
> rlm_eap_tls: %s failed inside of TLS (%d), TLS session fails.
> rlm_eap_tls: %s failed in a system call (%d), TLS session fails.
> handshake_send
> rlm_eap_tls: Application Data
> In SSL Connect mode 
> In SSL Accept mode 
> Before SSL Handshake Phase
> In SSL Handshake Phase
> SSL Connection Established
> SSL_read
>  rlm_eap_tls: Requiring client certificate
> rlm_eap_tls: Error creating new SSL
> - --
> 
>   This code is part of the FreeRADIUS project, and you are infringing
> on our copyright, and violating the GPL by copying it without
> following the terms of our license.
> 
>   Nothing under copyright law gives you permission to use our
> copyrighted code without our permission.  The only license terms
> available for the code in question is the GNU GPL, which is
> distributed with the FreeRADIUS server source.  The terms of that
> license require you to make the source code for derived works
> available under the same terms as the the original code.  I refer you
> to section 2 (b):
> 
> - ---
>     b) You must cause any work that you distribute or publish, that in
>     whole or in part contains or is derived from the Program or any
>     part thereof, to be licensed as a whole at no charge to all third
>     parties under the terms of this License.
> - ---
> 
>   We have tried contacting the public email address for tinypeap:
> "tinypeap at yahoo.com".  We have yet to receive a response.  We are
> sending this message to the contact address listed in "whois", and to
> the Georgia Institute of Technology Office of Legal Affairs, as you
> are distributing the infringing material from a machine hosted at that
> institute.
> 
>   You have 24 hours to remove all infringing binaries (tinypeap.exe,
> and any Linksys firmware containing the infringing code) from your
> website, or to comply with the terms of the GPL by releasing the
> source code to tinypeap under the GPL.
> 
>   If you do not choose to release the source under the GPL, you must
> remove the infringing code from any version of tinypeap that is
> released in the future.  This removal may be done by re-writing the
> code in question.  A simple edit of the text strings will not suffice,
> as our copyright applies to the binaries produced from the C source
> code, in addition to the text strings.
> 
>   If you do not comply within 24 hours, we will send a DMCA
> "take-down" notice to you personally, and to the office of the legal
> affairs.  We hope you take our concerns seriously.
> 
>   Alan DeKok.
>   The FreeRADIUS Server Project
>   http://www.freeradius.org
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> 
> iQCVAwUBQqdpEakul4vkAkl9AQF02wP7BBA3R4Kfc79NNvBGX7R7h2xh2uxto816
> CuYAuI51ArqqhjzKmB189Lz9xgMXN4ic0OL1CWuO2iAw5qY8occ2g7LVGwGUYbKM
> 9BxNSTPola0zzjFAwYK0aEgBU3wJnES3PBzwCOFQo9f16ks1oXHhrx8v2FFV//Ix
> eIOlG/+hitY=
> =OsyM
> -----END PGP SIGNATURE-----
> 
>   Alan DeKok.
> - 
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/devel.html
> 
> 

-- 
Av8 Internet   Prepared to pay a premium for better service?
www.av8.net         faster, more reliable, better service
617 344 9000