Post AQ2wZmdmtoDZIWitto by athos@bolha.one
 (DIR) More posts by athos@bolha.one
 (DIR) Post #APyX2eqFbFUQ4DowFs by ParadeGrotesque@mastodon.sdf.org
       2022-11-25T21:58:12Z
       
       0 likes, 1 repeats
       
       I was informed today that the $MEGAPROJECT I am the IT architect of had to go through a review of software licenses by Legal Dept.Fun fact number 1: Legal regards GPL and LGPL as spawns of the devil himself and refuses to accept projects that use software that are GPL licensed.Fun fact number 2: $MEGAPROJECT is 2 years behind schedule and 25 million $ over budget.Fun fact number 3: $MEGAPROJECT is entirely based on a major Linux distribution...Reconsidering my career options right now.
       
 (DIR) Post #APybHP5OrQqBMWC3UG by philippmichelreichold@mastodon.sdf.org
       2022-11-25T22:45:41Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque 😢
       
 (DIR) Post #APyhigJVW674KuBMpc by trurl@mastodon.sdf.org
       2022-11-25T23:57:50Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque I've experienced this too!  One of our stakeholders wanted a list of dependencies. So I did an automated traversal of the deps graph in our build tool, annotated the results, and sent it along. Cue an E-mail from legal forbidding (L)GPL code in all work without special review and approval. We had, of course, been shipping a flagship platform that was built with gcc for a decade longer than I had been there. I was just more diligent than most in reporting what we were doing.
       
 (DIR) Post #AQ2jOyrbocgQcJhrZQ by craig@masto1.100flowers.tech
       2022-11-27T22:07:59Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque - you don't say why it is late and over budget/
       
 (DIR) Post #AQ2jslWtxIZfwxDuDo by ParadeGrotesque@mastodon.sdf.org
       2022-11-27T22:40:55Z
       
       0 likes, 0 repeats
       
       @craig It has something to do with this COVID-19 thingie that you may have heard of.Also: no IT Architect on a project which is totally dominated by IT,Oh, and our devs are... relentless optimists. "Sure, it should take 3 to 4 weeks".
       
 (DIR) Post #AQ2kzphwv3hWtDKBvs by jwildeboer@social.wildeboer.net
       2022-11-27T22:01:04Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque If you need someone with experience to explain how and why (L)GPL are perfectly OK for big projects (and why they should stop reading that one legal article that claims otherwise) - DMs are open.
       
 (DIR) Post #AQ2la3ZQr7QEJCc6To by ParadeGrotesque@mastodon.sdf.org
       2022-11-27T22:59:57Z
       
       0 likes, 0 repeats
       
       @jwildeboer Hold that thought, because, yes, I am going to need your help on this one.If I cannot pacify Legal, that's an entire year of work down the drain.Thank you so much for your kind offer.
       
 (DIR) Post #AQ2lub9xgK2KH8Ukee by richard4444@fosstodon.org
       2022-11-27T22:24:50Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque They are totally right. Linux and other open source software are not safe, hence they are never used for servers. Legal are clearly better informed and know this well:linus: :linux: 📝 🚔 👨‍✈️ :androidalt: :fosstodon: 🖊️ :crazy: :xmonad: :vim: :idle:
       
 (DIR) Post #AQ2mnetLVXHhmEygjo by ParadeGrotesque@mastodon.sdf.org
       2022-11-27T23:13:37Z
       
       0 likes, 0 repeats
       
       @richard4444 I... see what you did there.
       
 (DIR) Post #AQ2tDVQVv7vBfyCSw4 by richard4444@fosstodon.org
       2022-11-27T23:16:40Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque #BaBoomTish 🥁
       
 (DIR) Post #AQ2tvAx3PLP0unFAyu by phf@mastodon.sdf.org
       2022-11-28T00:33:23Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque Seems to me that unless you're statically linking proprietary code to GPL code, legal should have no concern whatsoever? I am usually more worried about the non-GPL firmware required to make some weird chunk of hardware boot properly. But then again, I tend to be a little naive about these things maybe...
       
 (DIR) Post #AQ2u7xAvwF65xBpRZY by lp0_on_fire@social.linux.pizza
       2022-11-27T23:23:32Z
       
       0 likes, 0 repeats
       
       Ah, but which 3-4 weeks… or is it 504-672 hours?
       
 (DIR) Post #AQ2wZmdmtoDZIWitto by athos@bolha.one
       2022-11-27T23:43:17Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque if the project is proprietary software it would make sense to not allow GPL/LGPL, no?
       
 (DIR) Post #AQ337PtcZKykKMY9dQ by ParadeGrotesque@mastodon.sdf.org
       2022-11-28T02:16:28Z
       
       0 likes, 0 repeats
       
       @athos GPL code is not used in the application.LGPL - as far as I know - allows linking to GPL code from a proprietary one.Both GPL and LGPL allow reuse, as long as modified code is published under the same license.As far as I know, our application does not use a single line of GPL-licensed code. It runs on a stock Linux distribution, with zero modification on our side, except for some clever configuration.
       
 (DIR) Post #AQ3EjA1h7UEjblWhaC by athos@bolha.one
       2022-11-28T02:28:51Z
       
       0 likes, 0 repeats
       
       @ParadeGrotesque I believe that if you use a library that has a GPL license you would need to adhere to GPL as well, however I am not an expert on software licensing so I could be wrong https://opensource.stackexchange.com/a/1461
       
 (DIR) Post #AQ44MikF4AiiF2z5Ae by ParadeGrotesque@mastodon.sdf.org
       2022-11-28T14:05:09Z
       
       0 likes, 0 repeats
       
       @athos Nope, that's why the LGPL has been invented.