Licensing Violation by iControlOne and ADT

[Rob Stitt]

 have the ADT Pulse security system (www.adt.com), which uses an iControlOne hub that is
managed with software that is written and copyrighted by "iControlOne". The
software itself says to go to "[http://www.icontrolone.com/]" to see open source
license information.

When I go there and then click the link for the "Open Source Attributions" page,
that brings up a list of software, licences, and whether or not they have modified the
code. 

One of the entries in the list is:

./external/elfutils	http://fedoraproject.org/wiki/Licensing:OSL1.1

Furthermore, the site says "Modified versions of open source software available upon
request.", but they have ABSOLUTELY NO contact information nor any method listed to
contact them.

With no way to actually make the request, their statement about "being available upon
request" is nothing short of a fraudulent misstatement. 

As such, this company is clearly violating the terms of the fedora license, as they
provide no method for actually requesting such a copy of the software--and there is no
visible way to even find any contact for the actual company itself.

Sincerely,

...Rob Stitt
   rob(a)robstitt.com

[Ben Cotton]

Hi Rob,

I don't see any indication that they're using Fedora, in which case
they can't be violating a license we can enforce. The entry you
highlight is a copy of the license on the Fedora wiki, but it's just a
reference. The website for the project in question is
https://sourceware.org/elfutils/


Thanks,
BC

-- 
Ben Cotton
He / Him / His
Senior Program Manager, Fedora & CentOS Stream
Red Hat
TZ=America/Indiana/Indianapolis

[Mark Wielaard]

On Fri, 2020-06-26 at 10:21 -0400, Ben Cotton wrote:
>  I don't see any indication that they're using Fedora, in
> which case
>  they can't be violating a license we can enforce. The entry you
>  highlight is a copy of the license on the Fedora wiki, but it's just
>  a reference. The website for the project in question is
>  https://sourceware.org/elfutils/ 
A long time ago elfutils upstream was fedorahosted.org which is
probably where the confusion comes from. Also the current version of
elfutils is distributed under a combination of GPLv3 and GPLv2/LGPLv3,
not the OSL1.1. elfutils has used the GPL since 2006, but maybe they
are embedding a really old version?

You will need to make the request for sources through the company that
provided you with the binaries, which I assume is ADT. If they provided
you with binaries which contain elfutils, then they should also provide
you with the sources.

I am happy to help you obtain a copy of the sources if they are
refusing your requests. Being one of the upstream authors I am
certainly interested in their modifications.

Cheers,

Mark