<div dir="ltr">Oh god, yeah. Stack Overflow copypastes are a constant headache today when doing due diligence when acquiring tech companies.<div><br></div><div>Lots of people have been begging Stack Overflow to do something about it. The CC license that SO defaults all it's content to is not compatible with any open source or even proprietary license. They need to change their TOS to make code snippets be either CC0 or MIT.</div><div><br></div><div>(In general, the only CC license that is compatible with anything is CC0. Any software code licensed under any other CC license cannot be mixed with anything else.)</div><div><br></div><div>..m</div></div><br><div class="gmail_quote"><div dir="ltr">On Mon, Jan 30, 2017 at 11:16 AM Daniel Poirot <<a href="mailto:dtpoirot@gmail.com">dtpoirot@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto" class="gmail_msg"><div class="gmail_msg"></div><div class="gmail_msg">What's fun is hearing "No copyright needed, I got it off Stack Overflow!"</div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">...wrong</div></div><div dir="auto" class="gmail_msg"><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg">On Jan 30, 2017, at 12:58 PM, Mark Atwood <<a href="mailto:fallenpegasus@gmail.com" class="gmail_msg" target="_blank">fallenpegasus@gmail.com</a>> wrote:<br class="gmail_msg"><br class="gmail_msg"></div><blockquote type="cite" class="gmail_msg"><div class="gmail_msg"><div dir="ltr" class="gmail_msg"><div class="gmail_msg">Commercial FOSS audit tools like Protecode and Blackduck will be able to recognize the SPDX tags, and the Copyright text.</div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg"></div>In our file ntpsec/devel/hacking.txt :<div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">We use the SPDX convention for inclusion by reference.<span class="m_-2928357395934842061inbox-inbox-Apple-converted-space gmail_msg"> </span>You can read </span>about this at</p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-Apple-converted-space gmail_msg"> </span><a href="http://spdx.org/licenses" class="gmail_msg" target="_blank">http://spdx.org/licenses</a></span></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">When you create a new file, mark it as follows (updating the year) </span>as required:</p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">------------------------------------------------</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg">/* Copyright 2017 by the NTPsec project contributors</p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-Apple-converted-space gmail_msg"> </span>* SPDX-License-Identifier: BSD-2-Clause</span></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-Apple-converted-space gmail_msg"> </span>*/</span></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">------------------------------------------------</span></p>
<p class="m_-2928357395934842061inbox-inbox-p2 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"></span><br class="gmail_msg"></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">For documentation:</span></p>
<p class="m_-2928357395934842061inbox-inbox-p2 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"></span><br class="gmail_msg"></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">------------------------------------------------</span></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">// Copyright 2017 by the NTPsec project contributors</span></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">// SPDX-License-Identifier: CC-BY-4.0</span></p>
<p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">------------------------------------------------</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"><br class="gmail_msg"></span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">Modify as needed for whatever comment syntax the language or markup uses. </span>Good places for these markings are at the end of an extended</p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">header comment, or at the very top of the file.</span></p><p class="m_-2928357395934842061inbox-inbox-p2 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"></span><br class="gmail_msg"></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">When you modify a file, leave existing copyright markings in place - </span>especially all references to Dr. Dave Mills, to Mr. Harlan Stenn, and</p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">to the Network Time Foundation.</span></p><p class="m_-2928357395934842061inbox-inbox-p2 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"></span><br class="gmail_msg"></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">You *may* add a project copyright and replace the inline license </span>with an SPDX tag. For example:</p><p class="m_-2928357395934842061inbox-inbox-p2 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"></span><br class="gmail_msg"></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">------------------------------------------------</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">/* Copyright 2017 by the NTPsec project contributors</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-Apple-converted-space gmail_msg"> </span>* SPDX-License-Identifier: NTP</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-Apple-converted-space gmail_msg"> </span>*/</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">
</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg">------------------------------------------------</span></p><p class="m_-2928357395934842061inbox-inbox-p1 gmail_msg"><span class="m_-2928357395934842061inbox-inbox-s1 gmail_msg"><br class="gmail_msg"></span></p></div></div><br class="gmail_msg"><div class="gmail_quote gmail_msg"><div dir="ltr" class="gmail_msg">On Mon, Jan 30, 2017 at 10:44 AM Daniel Poirot <<a href="mailto:dtpoirot@gmail.com" class="gmail_msg" target="_blank">dtpoirot@gmail.com</a>> wrote:<br class="gmail_msg"></div><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="auto" class="gmail_msg"><div class="gmail_msg"></div><div class="gmail_msg">Commercial FOSS audit tools like Protecode and BlackDuck will match a snippet and attribute to the FOSS project. </div></div><div dir="auto" class="gmail_msg"><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><br class="gmail_msg">On Jan 30, 2017, at 12:30 PM, Mark Atwood <<a href="mailto:fallenpegasus@gmail.com" class="gmail_msg" target="_blank">fallenpegasus@gmail.com</a>> wrote:<br class="gmail_msg"><br class="gmail_msg"></div><blockquote type="cite" class="gmail_msg"><div class="gmail_msg"><div dir="ltr" class="gmail_msg">That's... complicated.<div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg"><div class="gmail_msg"><div class="gmail_msg">We don't need to have a notice attached to every file, because there is a copyright notice attached to the project as a whole, and there is a notice attached to each repo. Individual files generally don't each need their own notice, since individual files generally no longer get "detached" from a project or tree.</div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">But, if you were to copy in a substantial amount of text from another source, you should make sure that the copyright from that source is properly declared, right next to the text pulled in.</div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">Also, however, documentation is a bit unusual in that it is much more likely to be detached and separately distributed from the rest of the project. We should make sure that if the documentation is ever printed out, or is separately displayed on sites like <a href="http://man7.org" class="gmail_msg" target="_blank">man7.org</a>, that a copyright notice should be readable.</div></div></div><div class="gmail_msg"><br class="gmail_msg"></div><div class="gmail_msg">..m</div></div><br class="gmail_msg"><div class="gmail_quote gmail_msg"><div dir="ltr" class="gmail_msg">On Mon, Jan 30, 2017 at 1:55 AM Hal Murray <<a href="mailto:hmurray@megapathdsl.net" class="gmail_msg" target="_blank">hmurray@megapathdsl.net</a>> wrote:<br class="gmail_msg"></div><blockquote class="gmail_quote gmail_msg" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br class="gmail_msg">
<a href="mailto:fallenpegasus@gmail.com" class="gmail_msg" target="_blank">fallenpegasus@gmail.com</a> said:<br class="gmail_msg">
> Right now our standard copyright text is "Copyright $YEAR_YOU_ARE_WRITING_THI<br class="gmail_msg">
> S by the NTP Project contributors"<br class="gmail_msg">
<br class="gmail_msg">
Should the documentation files have a copyright notice?<br class="gmail_msg">
<br class="gmail_msg">
<br class="gmail_msg">
--<br class="gmail_msg">
These are my opinions. I hate spam.<br class="gmail_msg">
<br class="gmail_msg">
<br class="gmail_msg">
<br class="gmail_msg">
</blockquote></div>
</div></blockquote></div><div dir="auto" class="gmail_msg"><blockquote type="cite" class="gmail_msg"><div class="gmail_msg"><span class="gmail_msg">_______________________________________________</span><br class="gmail_msg"><span class="gmail_msg">devel mailing list</span><br class="gmail_msg"><span class="gmail_msg"><a href="mailto:devel@ntpsec.org" class="gmail_msg" target="_blank">devel@ntpsec.org</a></span><br class="gmail_msg"><span class="gmail_msg"><a href="http://lists.ntpsec.org/mailman/listinfo/devel" class="gmail_msg" target="_blank">http://lists.ntpsec.org/mailman/listinfo/devel</a></span></div></blockquote></div></blockquote></div>
</div></blockquote></div></blockquote></div>