How can my business use open source without risk of litigation?

How can my business use open source without risk of litigation?

Aren't businesses who bring open source apps making themselves vulnerable to potential legal claims against those apps by proprietary vendors? (Naturally, SCO is an example with Linux code; but the issue of software patent infringement seems broader than that.) How can my organization use open source software without risk?

    Requires Free Membership to View

    When you register, my team of editors will also send you resources covering Linux administration and management; integration and interoperability between Linux, Windows and Unix; securing Linux and mixed-platform environments; and migrating to Linux.

    Cathleen A. Gagne, Senior Editorial Director

    By submitting your registration information to SearchEnterpriseLinux.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseLinux.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

The first question appears to assume that source code for open source applications is generally derived from a protected proprietary source and used thereafter without permission, which is hardly a safe assumption. Indeed, the parenthetical example illustrates the flaw in the assumption as there is no public evidence to date that the Linux kernel violates any statutorily protected rights. Moreover, because only open source applications are accompanied by the application source code, it is easier to determine whether an open source application infringes on proprietary code than it is to assess whether proprietary code infringes on protected rights.

Having said this, there are many relationships involving electronic and computer interconnectivity today and risk, including the risk of infringement, is attendant to all of them. The issue here is the extent to which parties have mitigated the risk through negotiation and proper documentation and shifted as much of the risk to third parties, such as insurance companies. In the open source context, this includes a complete understanding of the applications with which any open source application will interface and the scope of the General Public License or similar licensing agreement in that environment. So, while nothing is risk-free, some cogent planning, due diligence and negotiation should create a manageable risk environment.

This was first published in March 2004