[LRUG] Open Source and the Enterprise

[Sleepyfox]

I'd like to add that as former Open Source professional, and a Black Duck
certified... quackpot? That there is software that Black Duck will happily
provide your Enterprisey company with to trace all of your source code and
tell you what OSS is in your project and where the source came from. This
is achieved by source code matching, so even if you stripped the comments
and cut and pasted code from someone's github repo, it will catch it and
attribute it correctly.

This is expensive and a) worthless to most startups/SMEs and b) invaluable
to companies like ARM that @Gavin mentioned.

Fox
--



On 30 July 2014 19:37, Kerry Buckley <kerryjbuckley at gmail.com> wrote:

> On 30 July 2014 at 19:04:45, Gavin Heavyside (gavin at heavyside.co.uk)
> wrote:
>
> To most of us, me included these days, this goes beyond the scope of what
> is necessary or proportionate to protect our businesses. With larger, more
> legally minded enterprises, particularly those with enterprise and/or
> potentially litigious customers, projects with a CLA or other attribution
> agreement required for all contributions might be easier to get approval
> for.
>
> Also important for any policy to distinguish between open source use in
> products where you actually ship the software, those where it’s used to
> power services, and those that are purely internal.
>
> Kerry
>
> _______________________________________________
> Chat mailing list
> Chat at lists.lrug.org
> Archives: http://lists.lrug.org/pipermail/chat-lrug.org
> Manage your subscription: http://lists.lrug.org/options.cgi/chat-lrug.org
> List info: http://lists.lrug.org/listinfo.cgi/chat-lrug.org
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.lrug.org/pipermail/chat-lrug.org/attachments/20140731/14a10c90/attachment-0003.html>