The open secret of open washing – why companies pretend to be open source
(2024/10/25)
- Reference: 1729879509
- News link: https://www.theregister.co.uk/2024/10/25/opinion_open_washing/
- Source link:
Opinion If you believe Mark Zuckerberg, Meta's AI large language model (LLM) Llama 3 is open source.
It's not, [1]despite what he says. The [2]Open Source Initiative (OSI) spells it out in the [3]Open Source Definition , and [4]Llama 3's license – with clauses on litigation and branding – flunks it on several grounds.
Meta, unfortunately, is far from unique in wanting to claim that some of its software and models are open source. Indeed, the concept has its own name: open washing.
[5]
This is a deceptive practice in which companies or organizations present their products, services, or processes as "open" when they are not truly open in the spirit of transparency, access to information, participation, and knowledge sharing. This term is modeled after "greenwashing" and was [6]coined by Michelle Thorne , an internet and climate policy scholar, in 2009.
[7]
[8]
With the rise of AI, open washing has become commonplace, as shown in a recent study. Andreas Liesenfeld and Mark Dingemanse of Radboud University's Center for Language Studies [9]surveyed 45 text and text-to-image models that claim to be open. The pair found that while a handful of lesser-known LLMs, such as [10]AllenAI's OLMo and [11]BigScience Workshop + HuggingFace with BloomZ could be considered open, most are not. Would it surprise you to know that according to the [12]study , the big-name ones from Google, Meta, and Microsoft aren't? I didn't think so.
But why do companies do this? Once upon a time, companies avoided open source like the plague. Steve Ballmer famously proclaimed in 2001 that " [13]Linux is a cancer ," because: "The way the license is written, if you use any open source software, you have to make the rest of your software open source." But that was a long time ago. Today, open source is seen as a good thing. Open washing enables companies to capitalize on the positive perception of open source and open practices without actually committing to them. This can help improve their public image and appeal to consumers who value transparency and openness.
[14]
Some corporations use open washing to shield their models and practices from scientific and regulatory scrutiny while benefiting from the "open" label.
Another major factor is that the [15]EU AI Act provides special exemptions for "open source" models. This creates a powerful incentive for open washing: if their models count as open, they'll have far less restrictive requirements. That, in turn, means they'll need less money to meet regulatory requirements or have to clean their datasets of copyright and other intellectual property (IP) issues.
However, the EU still doesn't have a clear definition of open source AI. In all fairness, no one does yet. The OSI will release its [16]open source AI definition in the next few days. That said, the current crop of open washing licenses fail by anyone's definition – other than their creators.
[17]
That's not to say all the big-name AI companies are lying about their open source street cred. For example, [18]IBM's Granite 3.0 LLMs really are open source under the Apache 2 license.
Why is this important? Why do people like me insist that we properly use the term open source? It's not like, after all, the OSI is a government or regulatory organization. It's not. It's just a nonprofit that has created some very useful guidelines.
[19]WinAmp's woes will pass, but its wonders will be here forever
[20]Elon Musk's disaster relief promises: Should we believe the hype?
[21]OpenAI reportedly considering for-profit plans, but what would that be good for?
[22]CockroachDB scurries off to proprietary software land
As Dan Lorenc, CEO of security company [23]Chainguard , said in his keynote speech at the [24]Secure Open Source Software (SOSS) Fusion Conference in Atlanta this week, no one can "force you to use the OSI's definitions." But "fortunately, many people, particularly lawyers, believe in this definition. They trust the work that the OSI does, and they trust and understand the protections that companies are granted when they use these licenses when they meet the open source criteria. That's why we see it showing up in procurement contracts of big companies all over the world."
Open source isn't just a legal and business matter. Open source gives developers the freedom to operate the way they do. Without it, they'll "lose the benefits that we've all grown accustomed to of being able to freely use code without having to know about or care about all the different terms in these licenses."
If we need to check every license for every bit of code, "developers are going to go to legal reviews every time you want to use a new library. Companies are going to be scared to publish things on the internet if they're not clear about the liabilities they're encountering when that source code becomes public."
Lorenc continued: "You might think this is only a big company problem, but it's not. It's a shared problem. Everybody who uses open source is going to be affected by this. It could cause entire projects to stop working. Security bugs aren't going to get fixed. Maintenance is going to get a lot harder. We must act together to preserve and defend the definition of open source. Otherwise, the lawyers are going to have to come back. No one wants the lawyers to come back."
I must add that I know a lot of IP lawyers. They do not need or want these headaches. Real open source licenses make life easier for everyone: businesses, programmers, and lawyers. Introducing "open except for someone who might compete with us" or "open except for someone who might deploy the code on a cloud" is just asking for trouble.
In the end, open washing will dirty the legal, business, and development work for everyone. Including, ironically, the shortsighted companies now supporting this approach. After all, almost all their work, especially in [25]AI , is ultimately based on open source. ®
Get our [26]Tech Resources
[1] https://about.fb.com/news/2024/07/open-source-ai-is-the-path-forward/
[2] https://opensource.org/
[3] https://opensource.org/osd
[4] https://www.llama.com/llama3/license/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[6] https://michellethorne.cc/2009/03/openwashing/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://techxplore.com/news/2024-07-generative-ai-meta-google-feign.html
[10] https://allenai.org/olmo
[11] https://huggingface.co/bigscience
[12] https://dl.acm.org/doi/pdf/10.1145/3630106.3659005
[13] https://www.theregister.com/2001/06/02/ballmer_linux_is_a_cancer/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://www.theregister.com/2024/07/31/eu_ai_act/
[16] https://www.theregister.com/2024/09/14/opinion_column_osi/
[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[18] https://www.zdnet.com/article/ibm-doubles-down-on-open-source-ai-with-new-granite-3-0-models/
[19] https://www.theregister.com/2024/10/20/opinion_column_winamp/
[20] https://www.theregister.com/2024/10/17/opinion_column_elon_musk/
[21] https://www.theregister.com/2024/09/27/opinion_openai/
[22] https://www.theregister.com/2024/08/23/cockroachdb_opinion/
[23] https://www.chainguard.dev/
[24] https://events.linuxfoundation.org/soss-fusion/
[25] https://www.zdnet.com/article/why-open-source-is-the-cradle-of-artificial-intelligence/
[26] https://whitepapers.theregister.com/
It's not, [1]despite what he says. The [2]Open Source Initiative (OSI) spells it out in the [3]Open Source Definition , and [4]Llama 3's license – with clauses on litigation and branding – flunks it on several grounds.
Meta, unfortunately, is far from unique in wanting to claim that some of its software and models are open source. Indeed, the concept has its own name: open washing.
[5]
This is a deceptive practice in which companies or organizations present their products, services, or processes as "open" when they are not truly open in the spirit of transparency, access to information, participation, and knowledge sharing. This term is modeled after "greenwashing" and was [6]coined by Michelle Thorne , an internet and climate policy scholar, in 2009.
[7]
[8]
With the rise of AI, open washing has become commonplace, as shown in a recent study. Andreas Liesenfeld and Mark Dingemanse of Radboud University's Center for Language Studies [9]surveyed 45 text and text-to-image models that claim to be open. The pair found that while a handful of lesser-known LLMs, such as [10]AllenAI's OLMo and [11]BigScience Workshop + HuggingFace with BloomZ could be considered open, most are not. Would it surprise you to know that according to the [12]study , the big-name ones from Google, Meta, and Microsoft aren't? I didn't think so.
But why do companies do this? Once upon a time, companies avoided open source like the plague. Steve Ballmer famously proclaimed in 2001 that " [13]Linux is a cancer ," because: "The way the license is written, if you use any open source software, you have to make the rest of your software open source." But that was a long time ago. Today, open source is seen as a good thing. Open washing enables companies to capitalize on the positive perception of open source and open practices without actually committing to them. This can help improve their public image and appeal to consumers who value transparency and openness.
[14]
Some corporations use open washing to shield their models and practices from scientific and regulatory scrutiny while benefiting from the "open" label.
Another major factor is that the [15]EU AI Act provides special exemptions for "open source" models. This creates a powerful incentive for open washing: if their models count as open, they'll have far less restrictive requirements. That, in turn, means they'll need less money to meet regulatory requirements or have to clean their datasets of copyright and other intellectual property (IP) issues.
However, the EU still doesn't have a clear definition of open source AI. In all fairness, no one does yet. The OSI will release its [16]open source AI definition in the next few days. That said, the current crop of open washing licenses fail by anyone's definition – other than their creators.
[17]
That's not to say all the big-name AI companies are lying about their open source street cred. For example, [18]IBM's Granite 3.0 LLMs really are open source under the Apache 2 license.
Why is this important? Why do people like me insist that we properly use the term open source? It's not like, after all, the OSI is a government or regulatory organization. It's not. It's just a nonprofit that has created some very useful guidelines.
[19]WinAmp's woes will pass, but its wonders will be here forever
[20]Elon Musk's disaster relief promises: Should we believe the hype?
[21]OpenAI reportedly considering for-profit plans, but what would that be good for?
[22]CockroachDB scurries off to proprietary software land
As Dan Lorenc, CEO of security company [23]Chainguard , said in his keynote speech at the [24]Secure Open Source Software (SOSS) Fusion Conference in Atlanta this week, no one can "force you to use the OSI's definitions." But "fortunately, many people, particularly lawyers, believe in this definition. They trust the work that the OSI does, and they trust and understand the protections that companies are granted when they use these licenses when they meet the open source criteria. That's why we see it showing up in procurement contracts of big companies all over the world."
Open source isn't just a legal and business matter. Open source gives developers the freedom to operate the way they do. Without it, they'll "lose the benefits that we've all grown accustomed to of being able to freely use code without having to know about or care about all the different terms in these licenses."
If we need to check every license for every bit of code, "developers are going to go to legal reviews every time you want to use a new library. Companies are going to be scared to publish things on the internet if they're not clear about the liabilities they're encountering when that source code becomes public."
Lorenc continued: "You might think this is only a big company problem, but it's not. It's a shared problem. Everybody who uses open source is going to be affected by this. It could cause entire projects to stop working. Security bugs aren't going to get fixed. Maintenance is going to get a lot harder. We must act together to preserve and defend the definition of open source. Otherwise, the lawyers are going to have to come back. No one wants the lawyers to come back."
I must add that I know a lot of IP lawyers. They do not need or want these headaches. Real open source licenses make life easier for everyone: businesses, programmers, and lawyers. Introducing "open except for someone who might compete with us" or "open except for someone who might deploy the code on a cloud" is just asking for trouble.
In the end, open washing will dirty the legal, business, and development work for everyone. Including, ironically, the shortsighted companies now supporting this approach. After all, almost all their work, especially in [25]AI , is ultimately based on open source. ®
Get our [26]Tech Resources
[1] https://about.fb.com/news/2024/07/open-source-ai-is-the-path-forward/
[2] https://opensource.org/
[3] https://opensource.org/osd
[4] https://www.llama.com/llama3/license/
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[6] https://michellethorne.cc/2009/03/openwashing/
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://techxplore.com/news/2024-07-generative-ai-meta-google-feign.html
[10] https://allenai.org/olmo
[11] https://huggingface.co/bigscience
[12] https://dl.acm.org/doi/pdf/10.1145/3630106.3659005
[13] https://www.theregister.com/2001/06/02/ballmer_linux_is_a_cancer/
[14] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[15] https://www.theregister.com/2024/07/31/eu_ai_act/
[16] https://www.theregister.com/2024/09/14/opinion_column_osi/
[17] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/columnists&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZxwVBx54Ytz0ztFCF7UpZwAAAAA&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[18] https://www.zdnet.com/article/ibm-doubles-down-on-open-source-ai-with-new-granite-3-0-models/
[19] https://www.theregister.com/2024/10/20/opinion_column_winamp/
[20] https://www.theregister.com/2024/10/17/opinion_column_elon_musk/
[21] https://www.theregister.com/2024/09/27/opinion_openai/
[22] https://www.theregister.com/2024/08/23/cockroachdb_opinion/
[23] https://www.chainguard.dev/
[24] https://events.linuxfoundation.org/soss-fusion/
[25] https://www.zdnet.com/article/why-open-source-is-the-cradle-of-artificial-intelligence/
[26] https://whitepapers.theregister.com/
Re: Protection is vital
Bryan W
Old habits die hard. Embrace, extend...
Re: Protection is vital
doublelayer
This isn't an organized campaign planning to eliminate open source. It isn't even in the mind of someone who hopes that open source would go away. It is just people who think lying about what they're making will help them. That person doesn't hate open source, they just don't care about it, know that others do, and think that they can get those others on board by claiming to care.
Open source health software lies have cost the nhs millions
Anonymous Coward
Particularly egregious in health software a preying on the good will of doctors and nhs leaders.
Try find one that publishes their source code.
Look who funds the OSI
Dan 55
Firefox has limitations on branding and nobody could argue that isn't open source.
In any case, if Meta's LLM licence doesn't meet the definition of open source, don't worry, it will do in a few days when the OSI publishes its definition of open source AI. Just look at who funds the OSI.
It's obvious the large corporations which fund the OSI benefit from an absolutist definition of open source where the BSD or MIT licence is preferred over the GPL. Even GPL v3 too restrictive because it doesn't allow for Tivoisation. It helps them take what they want from smaller idealistic developers without paying for it or even contributing back.
Protection is vital
Open Source was developed intentionally in order that everyone can benefit , it is vital that it remains that way in order to avoid the dictatorships and monopolies that will result in its demise.
It is in all our interests that it remains truly open source.