Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license?

If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license?

Scheduled Pinned Locked Moved Uncategorized
75 Posts 37 Posters 148 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • bgalehouse@mathstodon.xyzB bgalehouse@mathstodon.xyz

    @kevinr @lcamtuf And if you ask it to write a detailed spec based on its implementation, and then separately to write an implementation of that spec?

    Just a moment...

    favicon

    (www.allaboutcircuits.com)

    H This user is from outside of this forum
    H This user is from outside of this forum
    hashbangperl@hachyderm.io
    wrote last edited by
    #35

    @bgalehouse @kevinr @lcamtuf unless the training data is entirely clean of the original implementation, it's tests and documentation and any forks or other derivatives of it, it's still not a clean-room implementation. Research has shown that you can reconstruct entire book chapters with prompting because they were pulled into the training data.

    1 Reply Last reply
    0
    • tbortels@infosec.exchangeT tbortels@infosec.exchange

      @bgalehouse @lcamtuf @kevinr

      Assuming you used the original source code to derive the detailed spec, then yes, that too is a derivative work.

      The "viral" nature of that sort of license has bothered me for a long time. It's always been simultaneously overly far reaching and impossible to realistically enforce.

      H This user is from outside of this forum
      H This user is from outside of this forum
      hashbangperl@hachyderm.io
      wrote last edited by
      #36

      @tbortels @bgalehouse @lcamtuf @kevinr the GPL is not problematic unless you want to use other people's work in a more restrictive way.. have you read proprietary software licenses?

      1 Reply Last reply
      0
      • revk@toot.me.ukR revk@toot.me.uk

        @ahltorp @tbortels @lcamtuf @bgalehouse @kevinr and indeed there are arguments that simply “reading” is not copying, same as reading a book, even if via a web site. But getting your AI to “read” it is probably a different matter.

        rustynail@floss.socialR This user is from outside of this forum
        rustynail@floss.socialR This user is from outside of this forum
        rustynail@floss.social
        wrote last edited by
        #37

        @revk @ahltorp @tbortels @lcamtuf @bgalehouse @kevinr idk about AI but I've heard more than once that when people are actually implementing something as free software that is originally non free but was either leaked or is source available, they completely restrict themselves from even looking at the thing and only use what any user would know and do some reverse engineering, so I assumed it's actually legally unsafe to taint yourself with original code and let it potentially influence you

        revk@toot.me.ukR tbortels@infosec.exchangeT 2 Replies Last reply
        0
        • lcamtuf@infosec.exchangeL lcamtuf@infosec.exchange

          If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license? In philosophy, this problem is known as the Slop of Theseus

          tony@toot.hoyle.me.ukT This user is from outside of this forum
          tony@toot.hoyle.me.ukT This user is from outside of this forum
          tony@toot.hoyle.me.uk
          wrote last edited by
          #38

          @lcamtuf
          If that works there's plenty of closed source code I'd like to open..

          1 Reply Last reply
          0
          • lcamtuf@infosec.exchangeL lcamtuf@infosec.exchange

            If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license? In philosophy, this problem is known as the Slop of Theseus

            fchaix@piaille.frF This user is from outside of this forum
            fchaix@piaille.frF This user is from outside of this forum
            fchaix@piaille.fr
            wrote last edited by
            #39

            @lcamtuf
            It is the problem of software patents. No need to have an AI : if an human writes a new software that does exactly the same thing than a free software, is it the same software?

            khleedril@cyberplace.socialK 1 Reply Last reply
            0
            • tbortels@infosec.exchangeT tbortels@infosec.exchange

              @lcamtuf @bgalehouse @kevinr

              But here's an interesting question:

              If you do not execute the code - did you accept the license? Does simply reading it sufficiently to be able to write a spec bind you to that license? That seems a bit too much.

              marta@corteximplant.netM This user is from outside of this forum
              marta@corteximplant.netM This user is from outside of this forum
              marta@corteximplant.net
              wrote last edited by
              #40
              @tbortels why would execution be needed to agree? You as a third party don't need to agree to the license, but if it's an open license to have the privilege to edit/reuse the code you have to agree to do it. By default the code is closed, the license opens it up for you, if you somehow don't agree to it you can't use the code at all because it's closed by default

              (completely unrelated to the AI thing. fuck AI)
              tbortels@infosec.exchangeT 1 Reply Last reply
              0
              • lcamtuf@infosec.exchangeL lcamtuf@infosec.exchange

                If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license? In philosophy, this problem is known as the Slop of Theseus

                aakaynjl@social.vivaldi.netA This user is from outside of this forum
                aakaynjl@social.vivaldi.netA This user is from outside of this forum
                aakaynjl@social.vivaldi.net
                wrote last edited by
                #41

                @lcamtuf we will know

                1 Reply Last reply
                0
                • lcamtuf@infosec.exchangeL lcamtuf@infosec.exchange

                  If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license? In philosophy, this problem is known as the Slop of Theseus

                  philbetts@mastodon.socialP This user is from outside of this forum
                  philbetts@mastodon.socialP This user is from outside of this forum
                  philbetts@mastodon.social
                  wrote last edited by
                  #42

                  @lcamtuf Bravo.

                  1 Reply Last reply
                  0
                  • lcamtuf@infosec.exchangeL lcamtuf@infosec.exchange

                    If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license? In philosophy, this problem is known as the Slop of Theseus

                    joelvanderwerf@mastodon.socialJ This user is from outside of this forum
                    joelvanderwerf@mastodon.socialJ This user is from outside of this forum
                    joelvanderwerf@mastodon.social
                    wrote last edited by
                    #43

                    @lcamtuf This story is one of Aislop's Fables.

                    1 Reply Last reply
                    0
                    • rustynail@floss.socialR rustynail@floss.social

                      @revk @ahltorp @tbortels @lcamtuf @bgalehouse @kevinr idk about AI but I've heard more than once that when people are actually implementing something as free software that is originally non free but was either leaked or is source available, they completely restrict themselves from even looking at the thing and only use what any user would know and do some reverse engineering, so I assumed it's actually legally unsafe to taint yourself with original code and let it potentially influence you

                      revk@toot.me.ukR This user is from outside of this forum
                      revk@toot.me.ukR This user is from outside of this forum
                      revk@toot.me.uk
                      wrote last edited by
                      #44

                      @rustynail @ahltorp @tbortels @lcamtuf @bgalehouse @kevinr Hmm, there is another consequence to this.

                      If this is a derivative work, which I expect it is.

                      It causes issues when someone has, in fact, manually, coding an alternative to some copyright work (without reading original code, etc). As someone can suggest that it was done using AI as a derivative work. It no longer needs to actually follow the original code now to be accused of this.

                      Arrg!

                      tbortels@infosec.exchangeT 1 Reply Last reply
                      0
                      • lcamtuf@infosec.exchangeL lcamtuf@infosec.exchange

                        If you ask AI to rewrite the entirety of an open-source program, do you still need to abide by the original license? In philosophy, this problem is known as the Slop of Theseus

                        toriver@mas.toT This user is from outside of this forum
                        toriver@mas.toT This user is from outside of this forum
                        toriver@mas.to
                        wrote last edited by
                        #45

                        @lcamtuf The licence goes from «copyleft» to «sloppyleft».

                        1 Reply Last reply
                        1
                        0
                        • arnebab@rollenspiel.socialA arnebab@rollenspiel.social

                          @tbortels if you do not accept the license, you do not have any right to use the code. It’s "all rights reserved" then. @lcamtuf @bgalehouse @kevinr

                          tbortels@infosec.exchangeT This user is from outside of this forum
                          tbortels@infosec.exchangeT This user is from outside of this forum
                          tbortels@infosec.exchange
                          wrote last edited by
                          #46

                          @lcamtuf @ArneBab @kevinr @bgalehouse

                          "Use" isn't part of the GPL. And "all rights reserved" means normal copyright law, not "you get no rights at all".

                          The GPL defines "modify" and "propagate" as the activities it burdens. If I modify the code, and propagate it, i have a legal burden under the license. Otherwise, I don't.

                          IANAL, but I don't think reading the code and re-implementing a work-alike without incorporating the original code is "modify" - it's "replace".

                          I understand that's where "clean rooms" come into play, but that always felt like splitting hairs and giving copyright too much power - it's about physical books, not ideas. The farther we move from the original intent, the weaker a strong copyright stance becomes.

                          I think you could make an argument that reading code to understand it's interfaces, explicitly rejecting accepting any license, then implementing compatible code is well within the normal copyright definition of "fair use", or should be if we aren't all copyright lawyers. More importantly, it's healthy for Society and the art. If I can read a book under copyright and write a detailed book report, I should be able to read provided source code and do the same. To the extent that we've strayed away from that, the legal system has failed and needs correction.

                          arnebab@rollenspiel.socialA 1 Reply Last reply
                          1
                          0
                          • R relay@relay.infosec.exchange shared this topic
                          • kevinr@masto.free-dissociation.comK kevinr@masto.free-dissociation.com

                            @ArneBab @tbortels @lcamtuf @bgalehouse

                            Yeah the license applies whether you accept it or not. And whether your spec counts as a derivative work or not will depend greatly on the details of your spec

                            tbortels@infosec.exchangeT This user is from outside of this forum
                            tbortels@infosec.exchangeT This user is from outside of this forum
                            tbortels@infosec.exchange
                            wrote last edited by
                            #47

                            @kevinr @bgalehouse @lcamtuf @ArneBab

                            It explicitly does not. If I don't accept the license, normal copyright applies. You don't get to make a legally binding contract without consent, "clickwrap" bullshit aside.

                            And normal copyright has carve-outs like fair use.

                            arnebab@rollenspiel.socialA 1 Reply Last reply
                            0
                            • gisgeek@floss.socialG gisgeek@floss.social

                              @tbortels @bgalehouse @lcamtuf @kevinr Well, yes but no. The point about spec is the level of detailing taken from the original work. If you write an original novel about a wild, big monkey found in a jungle, brought to New York, who escapes and so on, the King Kong author cannot claim any rights to that, sorry. If it were different, many narratives and movies would not exist today. That is inspiration, not derivation. Of course it is fair declaring inspiration, but call it with the right name.

                              tbortels@infosec.exchangeT This user is from outside of this forum
                              tbortels@infosec.exchangeT This user is from outside of this forum
                              tbortels@infosec.exchange
                              wrote last edited by
                              #48

                              @lcamtuf @gisgeek @kevinr @bgalehouse

                              Heh. You might even say that's "fair use"... 🤔

                              gisgeek@floss.socialG 1 Reply Last reply
                              0
                              • rustynail@floss.socialR rustynail@floss.social

                                @revk @ahltorp @tbortels @lcamtuf @bgalehouse @kevinr idk about AI but I've heard more than once that when people are actually implementing something as free software that is originally non free but was either leaked or is source available, they completely restrict themselves from even looking at the thing and only use what any user would know and do some reverse engineering, so I assumed it's actually legally unsafe to taint yourself with original code and let it potentially influence you

                                tbortels@infosec.exchangeT This user is from outside of this forum
                                tbortels@infosec.exchangeT This user is from outside of this forum
                                tbortels@infosec.exchange
                                wrote last edited by
                                #49

                                @lcamtuf @kevinr @revk @rustynail @ahltorp @bgalehouse

                                That's the "clean room" that keeps getting thrown around, originally used to try to legally protect free bsd derivatives. The idea was to make the "copy" argument so outlandish it was unsupportable.

                                It does set a standard, but I'm not sure it's a requirement. That is, reading code to create compatible code seems more of a fair use than an illicit copy. Especially of none of the original code appears in the finished work.

                                1 Reply Last reply
                                0
                                • marta@corteximplant.netM marta@corteximplant.net
                                  @tbortels why would execution be needed to agree? You as a third party don't need to agree to the license, but if it's an open license to have the privilege to edit/reuse the code you have to agree to do it. By default the code is closed, the license opens it up for you, if you somehow don't agree to it you can't use the code at all because it's closed by default

                                  (completely unrelated to the AI thing. fuck AI)
                                  tbortels@infosec.exchangeT This user is from outside of this forum
                                  tbortels@infosec.exchangeT This user is from outside of this forum
                                  tbortels@infosec.exchange
                                  wrote last edited by
                                  #50

                                  @marta

                                  I'm not sure "closed" is the right word. Clearly it's not closed if you are providing it - it's right there, I can read it and even redistribute it without burden.

                                  It's "copyrighted", not closed. You can't modify closed source because you don't have the source. The assertion being made is you can't modify GPL'd open source without accepting the license. But copyright has its own carve-outs, and I am unconvinced that writing a spec or net-new code is a modification, as opposed to regular old copyright fair use.

                                  marta@corteximplant.netM 1 Reply Last reply
                                  0
                                  • tbortels@infosec.exchangeT tbortels@infosec.exchange

                                    @lcamtuf @gisgeek @kevinr @bgalehouse

                                    Heh. You might even say that's "fair use"... 🤔

                                    gisgeek@floss.socialG This user is from outside of this forum
                                    gisgeek@floss.socialG This user is from outside of this forum
                                    gisgeek@floss.social
                                    wrote last edited by
                                    #51

                                    @tbortels @lcamtuf @kevinr @bgalehouse
                                    Where is the edge between inspiration and infringement? Are today's office suites infringing MS rights? Copyright says no, patents (a totally different beast) may say yes in some countries and no in others. So pay attention to what you desire for FOSS, because it could happen in many ways, including some very destructive ones.

                                    1 Reply Last reply
                                    0
                                    • tbortels@infosec.exchangeT tbortels@infosec.exchange

                                      @lcamtuf @ArneBab @kevinr @bgalehouse

                                      "Use" isn't part of the GPL. And "all rights reserved" means normal copyright law, not "you get no rights at all".

                                      The GPL defines "modify" and "propagate" as the activities it burdens. If I modify the code, and propagate it, i have a legal burden under the license. Otherwise, I don't.

                                      IANAL, but I don't think reading the code and re-implementing a work-alike without incorporating the original code is "modify" - it's "replace".

                                      I understand that's where "clean rooms" come into play, but that always felt like splitting hairs and giving copyright too much power - it's about physical books, not ideas. The farther we move from the original intent, the weaker a strong copyright stance becomes.

                                      I think you could make an argument that reading code to understand it's interfaces, explicitly rejecting accepting any license, then implementing compatible code is well within the normal copyright definition of "fair use", or should be if we aren't all copyright lawyers. More importantly, it's healthy for Society and the art. If I can read a book under copyright and write a detailed book report, I should be able to read provided source code and do the same. To the extent that we've strayed away from that, the legal system has failed and needs correction.

                                      arnebab@rollenspiel.socialA This user is from outside of this forum
                                      arnebab@rollenspiel.socialA This user is from outside of this forum
                                      arnebab@rollenspiel.social
                                      wrote last edited by
                                      #52

                                      @tbortels yes, not accepting the license means regular copyrights.

                                      But your arguments afterwards rely on rights the GPL gives you -- you only get them after you accept the license.

                                      EDIT: because "if we aren’t allowed … under copyright" ← we aren’t. That’s the point.

                                      As long as there’s no NDA (there isn’t for GPL), we *can* write a spec. But the one implementing it *must not* know the code.

                                      @lcamtuf @kevinr @bgalehouse

                                      tbortels@infosec.exchangeT 1 Reply Last reply
                                      0
                                      • tbortels@infosec.exchangeT tbortels@infosec.exchange

                                        @marta

                                        I'm not sure "closed" is the right word. Clearly it's not closed if you are providing it - it's right there, I can read it and even redistribute it without burden.

                                        It's "copyrighted", not closed. You can't modify closed source because you don't have the source. The assertion being made is you can't modify GPL'd open source without accepting the license. But copyright has its own carve-outs, and I am unconvinced that writing a spec or net-new code is a modification, as opposed to regular old copyright fair use.

                                        marta@corteximplant.netM This user is from outside of this forum
                                        marta@corteximplant.netM This user is from outside of this forum
                                        marta@corteximplant.net
                                        wrote last edited by
                                        #53
                                        @tbortels you cannot redistribute copyrighted material(?)

                                        If you make a spec of copyrighted code that's effectively instructions on how to reproduce the code and can be used to commercially compete with the owners of the code so I doubt it could classify as fair use.
                                        tbortels@infosec.exchangeT 1 Reply Last reply
                                        0
                                        • revk@toot.me.ukR revk@toot.me.uk

                                          @rustynail @ahltorp @tbortels @lcamtuf @bgalehouse @kevinr Hmm, there is another consequence to this.

                                          If this is a derivative work, which I expect it is.

                                          It causes issues when someone has, in fact, manually, coding an alternative to some copyright work (without reading original code, etc). As someone can suggest that it was done using AI as a derivative work. It no longer needs to actually follow the original code now to be accused of this.

                                          Arrg!

                                          tbortels@infosec.exchangeT This user is from outside of this forum
                                          tbortels@infosec.exchangeT This user is from outside of this forum
                                          tbortels@infosec.exchange
                                          wrote last edited by
                                          #54

                                          @ahltorp @bgalehouse @revk @lcamtuf @kevinr @rustynail

                                          AI is a weird case as you could assert - probably correctly - that the original code may be part of its training corpus. Was that training a GPL violation? It's a stretch. Was it's training a copyright violation? Or was the AI (or rather its owners) exercising their GPL license rights? Or was it fair use under regular copyright?

                                          Who knows?

                                          It's a hot mess is what it is.

                                          This is all so far outside the original reckoning of "it'd be nice if the bookbinder down the street didn't profit off of my work until I had a chance to profit off of it first" that it's not surprising it's a mess.

                                          rustynail@floss.socialR 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups