Harald Welte | 3 Apr 09:23 2006

[ADM] netfilter.org scheduled downtime

Hi!

Starting at 10am GMT today, April 1st 2006 netfilter.org/gnumonks.org
will experience a multi-hour administrative downtime.

All machines ({vishnu,lakshmi,durga}.netfilter.org,ganesha.gnumonks.org}
will be moved to a different rack for thermal reasons.

In addition, one new machine will be placed (parvati.netfilter.org)
next to them in the new rack.

For www access, I suggest using one of our many mirrors, reachable under
their individual www.CCTLD.netfilter.org or as a round-robin dns record
mirror.netfilter.org.

svn, bugzilla, mailinglists and other services will be unreachable, sorry.

--

-- 
- Harald Welte <laforge <at> netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie
Pierre Michon | 12 Apr 00:16 2006
Picon

Sagem livebox GPL violation

Hi,

France Telecom is a french provider that propose triple play Gateway
(adsl, voip, TV) named Livebox. You can rent or buy your Livebox.
Furthermore all Livebox come with a Rescue cd that contains a rescue
firmware.

There are 2 models : a Inventel one and a Sagem one.

The situation on the Inventel one is more or less clear [1].

For the Sagem one it is unclear.

The first Sagem Livebox were running a Vxwork software.
Recently (this summer), Sagem add a Linux Os and both Linux and Vxwork
seem to run at the same time (I wonder how they manage to do that, may
be it is a feature of vxwork ?).
This was discovered [2] on some version on the Livebox where you could
loggin on Vxwork telnet. A hidden network interface was discovered,
and it was possible to execute some commands with rsh.
With rsh they discovered that this interface go to a linux kernel
(Linux version 2.4.18) [3].
There were also able to dump the file system [4]. This file system
contains GPL software like busybox.

Somebody understand how to "decrypt" their rescue firmware [5]. The
rescue firmware could be get from the cd that come with the Livebox or
also from the France Telecom website [6].

You need to skip the first 0x8C bytes with dd :
(Continue reading)

Loic Dachary | 12 Apr 03:22 2006
Picon

Re: Sagem livebox GPL violation

Pierre Michon writes:
 > Hi,
 > 
 > France Telecom is a french provider that propose triple play Gateway
 > (adsl, voip, TV) named Livebox. You can rent or buy your Livebox.
 > Furthermore all Livebox come with a Rescue cd that contains a rescue
 > firmware.

        Could you please provide us with the full text of the contract
under which the livebox is provided ? Do you have one ? Do you know
someone who has one and who would be willing to ask Sagem / FT for the
sources matching the binaries ?

        FSF France is willing to help resolve this issue, if needed.
The phone number is +33 1 42 76 05 49. 

        Cheers,

--

-- 
Loic Dachary, 12 bd Magenta, 75010 Paris. Tel: 33 8 71 18 43 38
http://www.fsffrance.org/   http://www.dachary.org/loic/gpg.txt

Daan Biere | 12 Apr 10:24 2006
Picon

Re: Sagem livebox GPL violation

Hi Pierre,
You could try the magic_ofs utility from the Revenge Tools, this utility 
try's to find similair as the "file" command which magics the file contains, 
you could just do an fgrep then and search for any gzipped or romfs 
strinngs, then you should dd the file from that offset and you can just 
mount,extract the filesystem.

Hope you find something.

Kind Regards,
Daan Biere
----- Original Message ----- 
From: "Pierre Michon" <pierre.michon <at> gmail.com>
To: <legal <at> lists.gpl-violations.org>
Sent: Wednesday, April 12, 2006 12:16 AM
Subject: Sagem livebox GPL violation

Hi,

France Telecom is a french provider that propose triple play Gateway
(adsl, voip, TV) named Livebox. You can rent or buy your Livebox.
Furthermore all Livebox come with a Rescue cd that contains a rescue
firmware.

There are 2 models : a Inventel one and a Sagem one.

The situation on the Inventel one is more or less clear [1].

For the Sagem one it is unclear.

(Continue reading)

Ard van Breemen | 17 Apr 15:06 2006
Picon

intel SS4000-E gpl violation?

Hello,
I stumbled across this neat piece of hardware:
http://www.intel.com/support/motherboards/server/ss4000-e/
In germany this is a thing of about 570 euro including taxes.
The beauty is that it runs linux (it says so in the folders).

Now comes the violation:
I can download the latest firmware (zImage, ramdisk.gz and a .pkg
file is included in the .zip which probably contains a flash
image), but I cannot find a link to source code anywhere.
The worst part is that in the manual it states that you have to
explicitly accept intels software license (in order to use a gpl
system?).

I've been browsing for a few hours now (spread across a few
days).

I've sent the following mail to the customer support:

> Subject: Intel(R) Entry Storage System SS4000-E Email Support Request
> 
> On Mon, Apr 17, 2006 at 07:42:35AM -0400, Intel Customer Support wrote:
> > Below is a list of documents that may contain the solution to your issue.
> > Please follow the document links to view the results in a web browser.
> <snipped all of the links that did not apply to the ss4000>
> 
> > ==============================================================================
> > Original E-mail Follows:
> > ==============================================================================
> > Hello, I've recently discovered the ss4400-E, which looks like
(Continue reading)

Schmitz, Carsten | 18 Apr 13:34 2006

Questions on GPL application for embedded product


I am going to re-send this email now that my correct alias is signed up
with the list. The original post is still pending moderator approval
(for more than a week), I appologize if this turns out to be a
double-posting.

*** warning, long posting ***

Hi,

I have some legal questions on how exactly the GPL is to be applied to a
product that uses GNU/Linux (and other GPL'ed software such as Samba,
netatalk, rsync, proftpd) on a device. This contains a good bit of
somewhat technical explainations, but afterall I hope I chose the
correct list in choosing the "legal" list.

I believe some background information is required, along with the "I am
not a lawyer" disclaimer.

For the moment I'd rather not reveal the identity of the manufacturer of
the device and ask for your understanding - if needed I will do so
later, but I still require some support from them in a warranty matter.

But I have purchased an Ethernet-connected RAID enclosure from the
company at the end of 2005. The device runs a modified Debian Linux, an
FTP server, Samba, rsync to allow storage and a multitude of
connectivity options to the storage array. It also runs Apache (not
GPL'ed afaik) to provide a web interface. The entire software "package"
is branded under a brand name given to it - I don't actually know if
this package and branding is done by the company that creates the
(Continue reading)

Peter Roozemaal | 18 Apr 14:31 2006
Picon
Picon

Re: Questions on GPL application for embedded product

I am not a lawyer either... No warranty for free advice.

Schmitz, Carsten wrote:
[...]
> The manufacturer of the hardware RAID enclosure however does admit it
> runs Linux etc. upon questioning, but Linux is usually not refered to in
> the product descriptions and most services have been stripped of the
> banners identifying them (i.e. when connecting with telnet or such -
> fair enough).
> 
> The company claimed on the web site that all GPL'ed code would be found
> on the CD that accompanies the product. In fact this influenced my
> decision to buy the product, and I was astonished to find that this
> claim was wrong - no GPL code is found on the CD. This constitutes not
> per se a GPL violation I believe (as long as the source is made
> available upon request), it does constitute - imho - fraudulent
> marketing though. The manufacturer admitted this: No code found on the
> CD.

They shipped you a CD that didn't match their description. You have a
right to ask them to fix their "mistake" or ask your money back. (Under
EU consumer protection law.) It is legal to provide a binary only
version of GPL'd code, if you provide a "written offer to supply the
source code" instead.

> I have posted on their boards asking for GPL'ed sources in January, and
> the reply I got was the same that other posters got - claiming that the
> manufacturer has proprietary elements in the device which need to be
> stripped before making any sources available. [...]
> I was furthermore told that a CD
(Continue reading)

Schmitz, Carsten | 18 Apr 15:30 2006

RE: Questions on GPL application for embedded product


Hi,

Many thanks for the clarifications.

Although its not quite what I was hoping for in terms of allowing me to
tinker with the device, its good to see that the GPL 3 has fixed that
hole, and the reply was really helpful in clarifying the situation.

Cheers to all who replied so far.

Carsten

p.s. I will email the manufacturer data to the person that requested it
in a bit.

-----Original Message-----
From: Peter Roozemaal [mailto:mathfox <at> xs4all.nl] 
Sent: Dienstag, 18. April 2006 14:31
To: Schmitz, Carsten
Cc: legal <at> lists.gnumonks.org
Subject: Re: Questions on GPL application for embedded product

I am not a lawyer either... No warranty for free advice.

Schmitz, Carsten wrote:
[...]
> The manufacturer of the hardware RAID enclosure however does admit it 
> runs Linux etc. upon questioning, but Linux is usually not refered to 
> in the product descriptions and most services have been stripped of 
(Continue reading)

Armijn Hemel | 18 Apr 15:39 2006
Picon

Re: Questions on GPL application for embedded product

hi,

> Many thanks for the clarifications.
> 
> Although its not quite what I was hoping for in terms of allowing me to
> tinker with the device, its good to see that the GPL 3 has fixed that
> hole, and the reply was really helpful in clarifying the situation.

Right now the GPLv3 is still pretty much "academic". The Linux kernel
sourcecode is GPLv2 only (well, right now it still is).

> p.s. I will email the manufacturer data to the person that requested it
> in a bit.

In case anyone wants to know, I'm putting it in the gpl-violations.org
request tracker, so we can see what we can do.

armijn

--

-- 
 ---------------------------------------------------------------------------
  armijn <at> uulug.nl | http://www.uulug.nl/ | UULug: Utrecht Linux Users Group
 ---------------------------------------------------------------------------

Ard van Breemen | 18 Apr 19:04 2006
Picon

Re: intel SS4000-E gpl violation?

Hi,
On Mon, Apr 17, 2006 at 03:06:29PM +0200, Ard van Breemen wrote:
> So I hope I get a reaction within this week. Currently I think it
> is more or less an "oversight".

We are "getting" there:

On Tue, Apr 18, 2006 at 07:11:16AM -0700, esg <at> mailbox.cps.intel.com wrote:
> Hello,
> 
> Thank you for contacting Intel(R) Technical Support.
> 
> We are currently researching on this issue. As soon as we can,
> we will send you a message with our findings. Thank you for
> your patience and understanding. 
<snip>

I hope this is ok. The last time I heard something like that from
intel (about the e100 burdened by software patents) it took them
pretty long to reply :-(.


Gmane