News: 1585350473

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Gresecurity maker opens its insurance company's wallet to pay Bruce Perens' $300,000 legal bill in row over GPL

(2020/03/27)


After three years of legal wrangling, the defamation lawsuit brought by Brad Spengler and his company Open Source Security (OSS) against open-source pioneer Bruce Perens has finally concluded.

It was clear that the end was nigh last month when California's Ninth Circuit Court of Appeals [1]affirmed a lower court ruling against the plaintiffs.

Spengler and OSS [2]sued Perens for a June 2017 [3]blog post in which Perens ventured the opinion that [4]grsecurity , Open Source Security's Linux kernel security enhancements, could expose customers to potential liability under the terms of the General Public License (GPL).

OSS says that customers who exercise their rights to redistribute its software under the GPL will no longer receive software updates – the biz wants to be paid for its work, a problem not really addressed by the GPL. Perens, the creator of the [5]open-source definition , pointed out that section six of the [6]GPLv2 prohibits modifications of the license terms.

In December 2017, San Francisco magistrate judge Laurel Beeler determined that Perens had expressed an opinion as allowed under American law and dismissed the defamation claim.

Perens then sought to recoup legal expenses under California's Anti-Strategic Lawsuits Against Public Participation (SLAPP) statute, a law designed to penalize litigation brought mainly to discourage free speech and public participation. And a month later he was awarded more than $526,000 in damages.

Maker of Linux patch batch grsecurity can't duck $260,000 legal bills, says Cali appeals court in anti-SLAPP case [7]READ MORE

Spengler and OSS then appealed, and managed to get the award reduced to about $260,000, but not overturned.

Following the Ninth Circuit decision in February, Rohit Chhabra, attorney for OSS, declined to say whether he intended to pursue a further appeal. He insisted that Perens' statement was opinion, rather than settled legal fact, and that OSS has the right to withhold updates from customers exercising their rights under the GPL.

Finally, both parties have agreed to end the litigation.

On Friday, Judge Beeler signed a mutually agreed [8]order [PDF] directing the payment of a $300,000 bond, underwritten by OSS's insurer, Great American Insurance Group, that was set aside to guarantee the 2018 judgement during the appeals process. The final award exceeds the $260,000 judgement because court costs have continued since then and interest payments are also due.

Perens gets nothing personally for his trouble, but his legal team will be paid. O’Melveny & Myers LLP will receive $262,303.62 for the district court litigation (fees and costs) and $2,210.36 for the appeal (costs) while the Electronic Frontier Foundation will be paid $34,474.35 (fees) and $1,011.67 (costs) for its role in the appeal.

As to whether OSS's redistribution terms violate the GPL, that has yet to be tested in court. ®



[1] https://www.theregister.co.uk/2020/02/07/open_source_security_defamation/

[2] https://www.theregister.co.uk/2017/08/03/linux_kernel_grsecurity_sues_bruce_perens_for_defamation/

[3] https://perens.com/2017/06/28/warning-grsecurity-potential-contributory-infringement-risk-for-customers/

[4] https://grsecurity.net/

[5] https://opensource.org/osd-annotated

[6] https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html

[7] https://www.theregister.co.uk/2020/02/07/open_source_security_defamation/

[8] https://regmedia.co.uk/2020/03/27/ossvperens.pdf

You've been leading a dog's life. Stay off the furniture.