Posted by Phil Odence on September 5, 2017
Copyleft terms seemed pretty strange to many seasoned attorneys familiar with commercial software licenses when they first encountered the GPL, but it is far from the weirdest license out there. The GPL-2.0 remains the most popular license and the choice for millions of open source components available today, but there is a long, long tail of over 2700 licenses in the Black Duck KnowledgeBase — many of which are one-offs. While the GPL has come to be reasonably well-understood, a number of licenses on the lunatic fringe will surprise and perhaps amuse.
Several unusual licenses flout the concept of a license altogether. Between the lines, they seem to say, “OK, we’ll play along, but we don’t need no $#(&@ing license.” A few of this class, in fact, employ similarly colorful language to make that point. Best known of these is the WTFPL, the license that says you can do what the F you want. It’s pretty clearly intended to be the most permissive license in the world. However, some companies, notably Google, find the grant of rights too vague and prohibit use of software under that license.
Another along these lines is the No Problem Bugroff License. Here’s the entirety of the text: “Sure, No problem. Don’t worry, be happy. Now bugger off.” And then there’s the DBAD Public License one that emerged last year. The author actually pays homage to the WTFPL and positions the DBAD between the wide open WTFPL and the legal protections of more traditional open source licenses. The spirit of the license is that users of the software should just do the right thing — Don’t Be A (the kind of person who would not respect the intellectual property rights of others) — but it states the concept much more colorfully.
Another class are licenses that specify unusual obligations and/or alternative ways to meet obligations of more standard licenses. Best known of these is the Beerware License (on it’s 42nd revision!). It requires that the notice be retained and suggests that if users like the software, they buy the author a beer.
The Chicken Dance License is GPL-like, but as an alternative to distributing source code with binaries, gives the distributor the option to post a video of employees doing the Chicken Dance to social media sites. Also, inexplicably, it restricts any employee from uttering the word “gazorninplat” in public. Andrew Harris, the author of the license pushed for approval with the Open Source Initiative. The OSI was mildly amused but in a brief discussion thread politely declined on the basis that the license did not meet their criteria.
Many of these funny-ish licenses are tongue in cheek. I recently came across a freeware license that has rather extensive liability disclaimer: “If this program accidentaly [sic] screws up and destroys data on your PC, electrocutes you, makes your monitor explode in your face… causes secret agencies to come after you, makes you believe you got maggots crawling under your skin…” You get the idea.
In an unnamed license for some code on CodeForge, George Yohng, a developer/talented pianist requires his licensees to experience the entirety of a very soothing music video of his creation. In my opinion, it’s worth listening too even if you don’t use his software.
And, continuing the music theme, an open source attorney I know came across a license that, for redistribution, required you to send the copyright holder a Fender Stratocaster guitar. He and his engineering team, after they discovered some code under that license, determined that was a much cheaper alternative than re-engineering their product. Thus, the company met its obligation and the developer got himself a new guitar.
A number of licenses tweak the language of a standard license. Not a good idea for a bunch of reasons. A well-known example I blogged about recently is the JSON license. That license is BSD-like, but becomes problematic with the addition of these nine words: “The Software shall be used for Good, not Evil.”
Finally, speak of devil, the big prize for weirdest license out there goes to the Death and Repudiation License. The text is fairly elaborate but is pretty much summed up in the first line: “This software may not be used directly by any living being.” In fairness, the SYCK parser kit under this license is dual-licensed with a substantially more permissive one. However, in a final show of weirdness, you may note that while the title of the alternative license reads “BSD License,” the text that follows is actually that of the MIT license!
This is all meant to be entertaining, but there is a point: A plethora of licenses exist for software freely available on the Internet. Many are benign, but many deserve attention lest you find yourself dancing on YouTube or suffering death and repudiation. Please share any weird licenses you’ve run across — I’d love to hear about them.
Get the latest AppSec news and trends sent directly to you.