have the ADT Pulse security system (www.adt.com), which uses an iControlOne hub that is managed with software that is written and copyrighted by "iControlOne". The software itself says to go to "[http://www.icontrolone.com/]" to see open source license information.
When I go there and then click the link for the "Open Source Attributions" page, that brings up a list of software, licences, and whether or not they have modified the code.
One of the entries in the list is:
./external/elfutils http://fedoraproject.org/wiki/Licensing:OSL1.1
Furthermore, the site says "Modified versions of open source software available upon request.", but they have ABSOLUTELY NO contact information nor any method listed to contact them.
With no way to actually make the request, their statement about "being available upon request" is nothing short of a fraudulent misstatement.
As such, this company is clearly violating the terms of the fedora license, as they provide no method for actually requesting such a copy of the software--and there is no visible way to even find any contact for the actual company itself.
Sincerely,
...Rob Stitt rob@robstitt.com
Hi Rob,
I don't see any indication that they're using Fedora, in which case they can't be violating a license we can enforce. The entry you highlight is a copy of the license on the Fedora wiki, but it's just a reference. The website for the project in question is https://sourceware.org/elfutils/
Thanks, BC
On Fri, 2020-06-26 at 10:21 -0400, Ben Cotton wrote:
I don't see any indication that they're using Fedora, in which case they can't be violating a license we can enforce. The entry you highlight is a copy of the license on the Fedora wiki, but it's just a reference. The website for the project in question is https://sourceware.org/elfutils/
A long time ago elfutils upstream was fedorahosted.org which is probably where the confusion comes from. Also the current version of elfutils is distributed under a combination of GPLv3 and GPLv2/LGPLv3, not the OSL1.1. elfutils has used the GPL since 2006, but maybe they are embedding a really old version?
You will need to make the request for sources through the company that provided you with the binaries, which I assume is ADT. If they provided you with binaries which contain elfutils, then they should also provide you with the sources.
I am happy to help you obtain a copy of the sources if they are refusing your requests. Being one of the upstream authors I am certainly interested in their modifications.
Cheers,
Mark
-
Ben Cotton -
Mark Wielaard -
Rob Stitt