Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
United States

Is the BSA "Grace Period" a Scam? 879

An anonymous reader asks: "I work at a small non-profit that has 18 employees plus a 13 seat computer lab. We received a form letter from the Business Software Alliance (BSA) telling us to do a self audit and if we find any unlicensed software to report it during our 'Grace Period' because 'if you organization's software is not licensed, it could become to focus of a BSA investigation'. Now this is obviously a method to scare up some business for the BSA members. If we ignore this, how likely is it that we will be 'investigated'. I know that I cannot produce the original CD's and/or documentation for some of the software that we HAVE paid for."
This discussion has been archived. No new comments can be posted.

Is the BSA "Grace Period" a Scam?

Comments Filter:
  • by Champaign ( 307086 ) on Wednesday February 05, 2003 @10:41PM (#5237247) Homepage Journal
    My understanding when I read about their organization some time ago is that this inital letter is basically a flag in the ground. They'll come for the audit, and basically say "prove that this was purchased before we sent you the first letter". Its to prevent someone from going out and buying all the software they use once they know they're going to be audited ("here's the single receipt for all 23 seats we bought yesterday").

    If this is the case I don't think there's a whole lot you can do... Get ready to negotiate! :-)

  • by ObviousGuy ( 578567 ) <ObviousGuy@hotmail.com> on Wednesday February 05, 2003 @10:41PM (#5237252) Homepage Journal
    Why do you not have the original licensing documentation for your lab? This is the most important thing for a computer lab administrator to take care of. If something goes wrong with one computer, do you have documentation that shows that you are legally permitted to transfer the software from one computer to another? If not, then you're asking for trouble.

    Let this be a lesson to you. Get a box that holds all your licenses. It's really that easy.
  • Google news... (Score:5, Insightful)

    by killthiskid ( 197397 ) on Wednesday February 05, 2003 @10:42PM (#5237254) Homepage Journal

    A Google new search [google.com] reveals all sorts of interesting articles, including some cases where people were [itnews.com.au] busted [dailytimes.com.pk].

    And this little gem: [212.100.234.54]

    The group said that last week's new piracy-fighting proposal from the European Commission is "inadequate in view of the magnitude of the piracy problem and fails to introduce urgently needed measures to hold back the epidemic of counterfeiting." The group claims that in Europe, film, video, music, business and leisure software industries alone suffer losses in excess of EUR4.5 billion annually due to piracy.
  • by assaultriflesforfree ( 635986 ) on Wednesday February 05, 2003 @10:42PM (#5237260)
    Perhaps some pertinent questions:
    Supposing the BSA does perform an investigation, I'm wondering what the actual legal procedures are.
    Are you required to maintain documentation of every last opened piece of software? I know at the CIT department I worked in for school, we had Windows 95 manuals stacked up in storerooms, even though there was a school wide license. I don't know if this is required though.
    Furthermore, what happens if they find you're missing a couple documents, and decide to take you to court. Is any jury going to decide, based on either a "preponderance of the evidence" or "beyond a reasonable doubt" standard that this software was obtained and/or used illegally?
    Any legal experts out there?
  • Ignore it (Score:5, Insightful)

    by Leme ( 303299 ) <jboyce.ci@redding@ca@us> on Wednesday February 05, 2003 @10:43PM (#5237269)
    It's a lot like those DirecTV letters that were going out to people who had bought programmers or emulators. They wanted you to call them and confess, because once you did that, they got you.

    Since they are wanting you to perform a self audit and report any installs you can't find the correct documentation for, it's the same situation. Just an attempt for them to drum up some money for the BSA members.

    We received that same letter about a year ago and I chose to ignore it, so far no one has followed up on it.

    Now, if you get a certified letter from them, then I would take it more seriously, but just a bit more :-)

  • They can't do much (Score:2, Insightful)

    by mfos.org ( 471768 ) on Wednesday February 05, 2003 @10:44PM (#5237276)
    They can't investigate you, they have no police powers what so ever. They can only initiate an investigation if they have sufficent evidence of a crime being commited. Tell them to take there scare tactics and shove them up their ass, where they keep their wads and wads of cash warm.

    Rest assured that you aren't the only ones in this boat.
  • uhmmmm (Score:2, Insightful)

    by SweetAndSourJesus ( 555410 ) <.moc.oohay. .ta. .toboRehTdnAsuseJ.> on Wednesday February 05, 2003 @10:45PM (#5237286)
    Isn't that what the "grace period" is all about?

    Isn't it so you can rush out and buy licenses?
  • by dfenstrate ( 202098 ) <dfenstrate&gmail,com> on Wednesday February 05, 2003 @10:45PM (#5237289)
    Some one wrote this the last time the BSA came up on Slashdot- sorry, I saved the quote but not the poster. The conventional wisdom thus far from other posters seems to be 'ignore it,' but if it goes further, consider this:


    I know someone that was audited by the BSA and decided to fight it. Basically they countered by stating they wanted full disclosure of who reported them so as to determine the validity of the claim prior to wasting internal resources and dollars. They also argued that the reporting tools are a violation of privacy. Yes, they expected them to place some software on their network which scans their entire network not to mention each machine's registry. Third, they also argued that even if they were in violation of license, the license is between them and the vendor (after all, the license does not allow for the BSA as having legal proxy interests) and unless the vendor in questions decides that they'd like to personally persue the issue, the BSA does not have legal authority or the legal grounds to persue the action. Furthermore, they argued that even if something odd was discovered and they lost, only the government has the right to impose fines on legal matters as such and they would be within their legal rights to simply purchase any outstanding licenses or settle directly with the vendor in question and completely dismiss the BSA altogether thereby eliminating the need to pay any fines or added fees.

    Last I heard, even though two ex-employees had turned them in, the BSA simply walked from the issue as, from what I gathered, they really don't have a legal leg to stand on.
  • Shakedown (Score:4, Insightful)

    by ka9dgx ( 72702 ) on Wednesday February 05, 2003 @10:50PM (#5237323) Homepage Journal
    The proper term is shakedown [reference.com]. The idea is to rattle the cages of people in the hopes that they will cough up money.

    --Mike--

  • by Like2Byte ( 542992 ) <Like2Byte@@@yahoo...com> on Wednesday February 05, 2003 @10:52PM (#5237332) Homepage
    It seems to me that the big winners, once again, are the lawyers that represent the small companies and non-profits alike. Even if a company does disregard the letter, it would seem a prudent move to investigate the matter more closely by bringing such material to your company's lawyer.

    While the BSA does not directly say that you will be sued, you *could* be sued by the company whose software they are looking for. IANAL, but to say that the BSA is going to sue you is a threat that is illegal in the US if the entity does not have legal grounds on which to sue - in your company's sake, proof of no licenses. Entities, whether corporate or personal, can not go around saying they're going to sue and not sue, either; that's a method of blackmail, I would think.

    I think that the BSA just tries to use FUD to make money. They scare some company into letting them in their doors and then its game-time! They've got you.

    Keep them outdoors and tell them to pack sand - or toss the letter out.

    In the mean time, I'd do some damage control and find those licenses, just in case.
  • The odds? (Score:5, Insightful)

    by Bowie J. Poag ( 16898 ) on Wednesday February 05, 2003 @11:00PM (#5237392) Homepage


    The odds?

    0.

    Literally.

    0.

    If they had any intention of "auditing" people (which, btw, is illegal in and of itself! It violates property laws, search & seizure laws, as well as laws against extortion, to name a few) they would have just gone ahead and done so already. Instead, they've put millions into cranking out form letters to people as scare tactics, since they know they're effectively powerless.

    If auditing companies produced any meaningful monetary award, they would already be doing so...which they aren't. And even if they did, they sure as hell wouldn't tell you or I about it in advance.

    Logic prevails.

  • by JonnyO ( 119156 ) on Wednesday February 05, 2003 @11:03PM (#5237416) Homepage
    To not retain the manuals and receipts of your software may hurt you when you want support, but since when was that legal grounds for prosecution? Do you have the receipts for every single thing you own? Suppose you buy a suit from a department store, and, two years down the road, a store employee sees you at a formal gathering and tries to demand proof of ownership of the suit. According to your logic, if you don't cough up the receipt for the suit (and if suits were bought like software, the invoice from your tailor for making alterations) you're as good as guilty.

    My company received one of these letters last year from Microsoft. We ignored it and they ignored us. I imagine this works like OSHA, in that someone can make a complaint against you but if they won't sign off on the complaint and back it up with proof, the government won't waste their time.
  • by ChangeOnInstall ( 589099 ) on Wednesday February 05, 2003 @11:04PM (#5237420)
    "Yes, they expected them to place some software on their network which scans their entire network not to mention each machine's registry."

    I'm curious to know if the registry scanner has the capability to differentiate between actively installed software and previously installed software that failed to correctly uninstall itself? My guess is no.
  • by Anonymous Coward on Wednesday February 05, 2003 @11:10PM (#5237453)
    "On what legal basis can they force me to let them into my business to perform an "audit" to their satisfaction?"

    I take it that you didn't read all those EULAs barfed out at you during the installs.
  • by rindeee ( 530084 ) on Wednesday February 05, 2003 @11:13PM (#5237470)
    And that's when I tell them "prove I didn't". The burden of proof is on them. The only organization in the US that this DOES NOT apply to is the IRS. The BSA only has as much power as you give them. Has anyone else seen the page on their web site where you can rat your employer/friend/etc. It has a picture of some idiot with an evil *I stuck it to da man* smirk on his face and the whole bit. Gimme a break.
  • Whatever (Score:1, Insightful)

    by Anonymous Coward on Wednesday February 05, 2003 @11:15PM (#5237474)
    I got one of these too. These dumb monkeys are getting the names from free industry rags that you sign up for and any of those jars you dropped your business card in as well as anywhere else they can buy or steal a name.

    We have 2 person company that is fully licensed, but these crack monkeys are welcome to come by with a warrant if they want. Expect additional discussions with my lawyer though.

    All of the new companies we are working on will be running OSS whenever possible. No Adobe, MS, Macromedia, whatever.
  • by Anonymous Brave Guy ( 457657 ) on Wednesday February 05, 2003 @11:22PM (#5237539)
    I take it that you didn't read all those EULAs barfed out at you during the installs.

    Sure I did. Of course, whether they have any legal basis or not, and if so whether it confers rights on the BSA rather than the software vendor(s), are different questions. The BSA can find out in court, if they really want to know whether I've got any illegal software installed (I haven't) and they're prepared to risk a test case that could destroy their whole threat model (I doubt it).

  • by cgenman ( 325138 ) on Wednesday February 05, 2003 @11:31PM (#5237605) Homepage
    This is the most important thing for a computer lab administrator to take care of.

    It's a sad, sad day when the most important thing a computer lab administrator can take care of is CYA maneuvers for legally purchased software.

    Just because it is so hard to prove software piracy doesn't mean the burden of proof falls on the defendent. Software makers by now have shunned the thing that could actually make this trivial: online registration of single codes. If you have codes that are in use outside of your IP block, or you are registering more machines than you have licences for inside of a reasonable upgrade cycle, you're busted. If you can't press the little "audit" button upon request to re-send the legitimate codes, you're busted. This technique has worked for many years in shareware, and is only avoidable if you stealth the thing and don't send information back upon first registration. But if you are audited, your stealth-mode fails, and you are forced to comply. Or at least, you *should* comply, and I don't know of any court who would consider a 10 minute walk around the lab pushing a little Help->Send Audit button an unreasonable request. It could even be exported to disk, for those machines not on the wider network, because what you are checking for is simply the existance of legitimate, non-duplicate registration codes.

    Until such a time that the business software companies get their act in line with the higher practices of, of all people, shareware and videogame companies, they do not deserve to command the balance of proof.

    It's very legitimate to lose your registration papers. Labs with high turnover rates or multiple location transfers lose lots of things... And it only takes one person forgetting to tell their successor that the Mathlab box from 1987 (which has since been upgraded to Mathlab 89, 92, 96, 99, and 2003) is the official box with all of the important recipts, and you've lost your registrations. Put it in a file folder? With the thousands of pages of documentation a Lab generates? That will be lost even quicker, relegated to a storage room somewhere and forgotten for eternity.

    No, it's better if the software keeps track of its own legality, in a way that can't be faked. This would increase slightly the overhead on software companies, but THEY are the ones with the burden of proof. If it increases the cost of the software by 5 dollars, that's a lot cheaper than the thousands for a full software audit.

  • IANAL, but... (Score:2, Insightful)

    by Plix ( 204304 ) on Wednesday February 05, 2003 @11:49PM (#5237709) Homepage
    The BSA is a trade organization much like the MPAA, RIAA, IDSA, and former SPA (which is called something like the SIIA now or something, I've forgotten). They possess no legal power whatsoever, but they are watchdogs and they do cause a lot of trouble for both big-time pirates (they brought down #warez4cable and were involved in the PWA [pirates with attitude] case). The most they can do is threaten you and rat you out to the real authorities.

    A word of advice, though. Regardless of being able to produce the original CDs, the FBI will almost certainly not persue anyone who's done less than $5000 USD worth of damage to a company in estimated loss sales (the FBI simply doesn't have the resources) - they DEFINATLY wont go after a small non-profit that lost a few CDs. Irregardless of that, unlike the BSA, the government actually has to produce enough evidence to convince a judge to grant a search warrent. So don't worry, you can safely ignore any messages from the BSA.
  • by The Tyro ( 247333 ) on Wednesday February 05, 2003 @11:49PM (#5237712)
    A landlord has the power to enter your "home," and is specifically granted this power under some state laws. At least in my state, they must have a reasonable justification, AND give advance notice; they can't just barge in willy-nilly (IANAL).

    Still, even if you rent rather than own, even your local police department needs a search warrant to enter your apartment. Also, if a person legally consents to a search, that consent can be withdrawn at any time. At that point, a search warrant is required. How is some kind of private "trade group" going to bypass that little requirement? Even if you clicked some EULA, I don't see how you can give up your Fourth Amendment rights with the click of a mouse. The police have much more power than some trade group, and if they need a warrant, how can some trade group skate by without one? Any lawyers want to comment?

    I'd like to see these guys try it, quite honestly... just like that rental car company that was levying fines based on their GPS spy-unit speed measurements... they were denied. Private organizations/businesses don't have the power to levy a fine; that power belongs to the State.

    If they were bold enough barge into your home unannounced, with no legal authority to do so, it would be at least Breaking and Entering, or even Burglary (if you were home at the time). If they threatened you in the process, it would be Aggravated Burglary, and you might even be justified in some self-defense. Somehow, I suspect a bunch of software-licence-hunting bean counters are not up for that kind of action.

    Even if they do have some sort of "compliance inspection" in their EULA, it's just begging for a court challenge if they force the issue.

    If you click a button saying "it's OK to shoot me," don't doubt for one minute that somebody would go to prison for a very long time if they actually pulled the trigger.
  • by jkabbe ( 631234 ) on Thursday February 06, 2003 @12:02AM (#5237795)
    "Although the piracy rate has decreased, software piracy continues to signify lost jobs, wages and tax revenues in Canada," said CAAST president Allan Steel. "Organizations need to realize the importance of implementing policies and procedures in order to achieve and maintain compliance."

    Lost jobs? Don't the companies that pirate software employ people too? Wouldn't they employ LESS people if they had to pay for all their software? So isn't it really a case of different jobs and not lost jobs?
  • by mindstrm ( 20013 ) on Thursday February 06, 2003 @12:04AM (#5237803)
    Non-profit does not mean people do not get paid to work. It means the organization as a whole is not a for-profit organization: It does not exist in order to make a profit for it's owners.

    THe goal of the organisation is to reduce software piracy. The fact that the people who work for them get paid has no bearing.
  • NOT just the IRS (Score:3, Insightful)

    by telstar ( 236404 ) on Thursday February 06, 2003 @12:10AM (#5237830)
    "And that's when I tell them "prove I didn't". The burden of proof is on them. The only organization in the US that this DOES NOT apply to is the IRS."
    • You forgot about the
    • RIAA [theregister.co.uk], the RIAA [theregister.co.uk], and the RIAA [theregister.co.uk].


  • by idsofmarch ( 646389 ) <<moc.liamg> <ta> <margnimp>> on Thursday February 06, 2003 @12:12AM (#5237842)
    Trouble is, read your EULA. There are some very interesting things in there. You essentially agree to the audit, especially in the case of MS software. They use a shotgun tactic: send out the faxes, or emails to any company they can find a listing, then state, using radio commercials, a company's need to report any pirated software, while at the same time asking for disgruntled employees to produce information. They will give out rewards for information to these employees. For the guy who posted this question originally, you should audit your software to first understand what kind of software you own, what software you've bought but don't have the installation disks, and also what software you might have borrowed inadvertantly. Then consider what kind of real liability you're under and if this software is something they cover. Then consider if they would have any reason to check your particular group. If you're using licensed software from Adobe say, and you're running Wintel boxes, you should really own a real copy or license key for Windows. But, seriously read the EULAs and see exactly what you have agreed to. The Bill of Rights does exactly cover these kinds of contracts and if you've signed it by installing the software you've unfortunately agreed to a binding contract.
  • yeah but... (Score:5, Insightful)

    by b17bmbr ( 608864 ) on Thursday February 06, 2003 @12:12AM (#5237846)
    so they "pirated" software. here is the result:

    one, it doesn't cost the software companies a thing. you steal a car, it takes steel, rubber, plastic from somewhere. you make a DIGITAL copy, it costs software co. nothing. and many of the "pirates" wouldn't have bought the software.

    two, the people using the software are not using a cheaper alternative. why would you use OO.org, when ms office is "free". so, piracy destroys competition. i remember there used to be at least three major office suites. corel, lotus, and office. in fact, office 97 offered wordperfect and lotus 123 keystrokes, BECAUSE THEY HAD TO. but "piracy" reduced the market share of the other two to nil

    three, "piracy" promtes sales. as one program and one format becomes the "standard", especially if it is closed, peopole eventually all have to get on board. and not everyone or every business can "pirate".

    i am as big a free market economy guy as you can get. i am as low tax and low regulation as you can get. but this whole piracy thing is bullshit. and they know it.
  • by jesdynf ( 42915 ) on Thursday February 06, 2003 @12:24AM (#5237908) Homepage
    You're a -small businessman-. You're trying to -make a small profit- and -stay afloat-.

    You -pay taxes-.

    It's his job to shoo away criminals. Get an appointment and explain how these clowns are keeping you from doing things that make money, and which law lets them get away with that trash.

    I dunno if this is a good idea, but ask HIM if HE can tell you where all his software licenses are. Would HE like to be audited? Have his computers impounded?

    Tell him you expect him to keep it from happening. Express disappointment in his votes for those laws. Praise his negative votes. ... although if you -do- try this, you might want to try -real hard- to find those CDs.
  • Comment removed (Score:3, Insightful)

    by account_deleted ( 4530225 ) on Thursday February 06, 2003 @12:37AM (#5237982)
    Comment removed based on user account deletion
  • Re:How it works (Score:3, Insightful)

    by SirSlud ( 67381 ) on Thursday February 06, 2003 @12:39AM (#5237990) Homepage
    .phtml?

    Okay, lets hit netcraft (love you guys):

    The site bsa.org is running Apache/1.3.27 OpenSSL/0.9.6g (Unix) AuthMySQL/2.20 PHP/4.1.2 on FreeBSD. FAQ

    Why do I love the fact that a group that reps uber-commercial software interests uses .. hrm:

    - A free Unix
    - A free webserver
    - A free web scripting language
    - A free encryption library

    Hrm, maybe its to save themselves the embarassement of accidentally mailing/civil-suiting themselves?

    Ah, the joys of irony.
  • by zoloto ( 586738 ) on Thursday February 06, 2003 @12:47AM (#5238044)
    before you mod me down, really read this post because it fits a theme I've been noticing lately.

    Ever notice how everyone tries to be the enforcer? Corperations, media mogules, senators and even your local legislators? It seems these days people want to be in charge, or the authority trying for a power grab they can't achieve and throwing in some new speak to throw off the commoner who isn't educated enough to know the difference between REAL authority and a scam or fake.

    The BSA is just another example to me.

    Dunno, just my 0.02c. Mod away
  • by cmoss ( 14324 ) on Thursday February 06, 2003 @12:57AM (#5238101)
    regardless of what it says in the license it should not be binding unless they have a signed contract.

    The stupid UCITA laws in maryland and virginia cloud this issue a bit.

  • by dfung ( 68701 ) on Thursday February 06, 2003 @01:01AM (#5238116)
    Well, I guess this is sort of semantics.

    I believe the most common case where the BSA "busts" somebody is when they have legally purchased 400 licenses for [your software here, but it's seems to usually be MS Office, AutoCAD, or Photoshop] but their internal procedure has allowed that to be installed on 1200 machines.

    You just need to decide at this point whether those 800 illegal installs are "illegally pirated software" or not (I genuinely don't know where you'd place this from your post).

    The case of 100 copies of Photoshop but nobody purchased a single legit copy in the entire company is an easy one for the BSA or software publisher, but the big money for the publisher is getting the incremental licensing fees for all those second copies that an Alcoa or Bechtel installed on all the corporate laptops. They're looking for a company that's big enough to cough up the big, big bucks not some little guy.

    In big companies, when you receive the initial letter, your corporate counsel will ask the execs whether they've done an internal audit, and make and attempt to get in line. So the BSA has had giant bang for almost no effort. Big companies really would prefer to be clean from a licensing standpoint if the publisher gives them any chance to do that (e.g. 20,000 copies of MS Office better not cost 20,000*$500, and in fact, it doesn't).

    This response is much stronger if I could dig up the name of the company that this popped up on a couple of years ago. I believe it was a company that was operating maybe 4x the number of AutoCAD seats that they were paying for. This was an especially blatant case, as (unlike Windows or Office) I don't think it's trivial to do multiple installs of AutoCAD.
  • by Anonymous Coward on Thursday February 06, 2003 @01:31AM (#5238303)
    Funny, if I owned a drycleaning shop in Chicago, I bet at some point I'm going to get an advisement to buy some "insurance" to protect my shop, if you know what I mean.

    They could claim all sorts of legalish mumbojumbo, but still torch my store if worse comes to worse (or drive customers away, deliver chemicals or supplies, or lower the priority of my clothes getting cleaned and pressed at the big cleaners.

    In any other measure of the law, this is Racketeering.

  • Click-through or no, I doubt than any BSA member has the right to force their way onto your premises. This belief, however, only applies to people who have limited themselves to retail (even bulk-retail) purchases. I'd be inclined to just ignore their notification. Of course, I'm not your lawyer.

    If, on the other hand, you have gone out and negotiated and signed a legal agreement with a BSA member, then what a BSA member can do to/around your premises is limited by the terms of the written agreement. A written agreement is far more binding than any click-through agreement might be.

  • Thank you BSA (Score:2, Insightful)

    by Anonymous Coward on Thursday February 06, 2003 @01:44AM (#5238363)
    You've just given OSS another spiffy, shiny selling feature. By going OSS, you no longer have to waste much (if any) company time, resources, effort, or money on software compliance issues. Now, it's our duty as good little employees to make the technologically-challenged managers understand this wonderful money saving aspect of OSS.
  • by TKinias ( 455818 ) on Thursday February 06, 2003 @01:46AM (#5238374)

    scripsit danheskett:

    There is no extortion. There is no coercion. There is no foul play.

    Charging $129 for OS X isn't extortion; sending someone a letter demanding money or you'll sue them is.

  • Corporate mob rule (Score:2, Insightful)

    by Anonymous Coward on Thursday February 06, 2003 @02:11AM (#5238497)
    Let's face it, if corporations can grant themselves the right to search and cease your property through shrinkwrap licenses. I'm not even talking about signed contracts, but shrinkwrap licenses. Unfortunately that's no better than mob rule. Corporate mob rule. What ever happened to search warrants? I'd like to see more corporate officials with pies in their face. There are plenty that deserve them.

    All I can say is keep your guns handy.
  • by WNight ( 23683 ) on Thursday February 06, 2003 @02:18AM (#5238523) Homepage
    But you don't agree to their license agreements, you buy a product. The box has a meaningless piece of paper in it, and the software attempts illegal extortion, but you can ignore it. Your obligation in the process ended when you paid money at the cash register.

    Unless you buy special site licenses. But, dance with the devil...
  • by Anonymous Coward on Thursday February 06, 2003 @02:21AM (#5238533)
    They can not go before a judge and get a warrant. A company hast to sue you or file a criminal complaint. For the most part, the bsa is bs.
  • by Anonymous Coward on Thursday February 06, 2003 @03:29AM (#5238738)
    This is a troll or astroturf.
  • by Lynggaard ( 64990 ) on Thursday February 06, 2003 @03:59AM (#5238828)
    There is basicly 3 roads out of this BSA:

    * if you have paid for your software, just show them the proof of purcage.

    * if you have paid but can't find the documentation, then you can hope that BSA will belive you. You will naturally increase your changes by showing doucmnetaion for all your other software, and telling them freely about your problem.

    * if you have stolen the software: dont do the crime, if you can't take the time...
  • Whatever.... (Score:1, Insightful)

    by Anonymous Coward on Thursday February 06, 2003 @04:07AM (#5238848)
    Is it so much to ask that you keep a little cardboard box with the install CDs in your bookshelf? Or did some of the workers take the CDs home with them? The latter is actually legal for many pieces of software (like AutoCAD 2000), but if they actually care about the organization, they'd bring the CDs back to work. So ultimately, this is about laziness and a stupid cardboard box, or about employee theft. Take your pick.
  • by Kenneth ( 43287 ) on Thursday February 06, 2003 @04:23AM (#5238899) Homepage
    When I go to Best Buy, and give a company like Apple - who is a member of the BSA IIRC - $129 for a copy of MacOSX how is that extortion? How are my rights being violated? Why is that idea so offensive to so many people?


    Dude, you're way missing the point here. Sure a lot of people feel strongly enough against non-Free Software that they won't buy it, but this case is different.

    The BSA is essentially running a protection scheme. Here's the scenario: Let's say you run a business that's large enough that it's difficult to keep total track of everything on every machine.

    You don't (purposely) violate any software licenses, and take pains to follow them correctly. However there is significant overhead to keeping track of what you can and can't do with the software you've bought, and violations are sure to occur. There's just too much to do not to make an error.

    Some employee you've pissed off (and if you're an employer you will piss off an employee) goes to the BSA and tells on you. They don't need actual evidence. To audit you. They 'nicely' tell you to audit yourself and give them money for anything that might not be compliant.

    Let's say that you can't find proof that you purchased some of the software you purchased. You then have to pay for that AGAIN. If you don't pay them for it, and they audit you, you then have to pay for it anyway, plus exorbidant fines because you couldn't proove that you weren't guilty of a crime.

    They also use this as a scare tactic to scare people from going to Open Source, or even competitors. If you are looking at not renewing a licence you get a message that you might be audited. Even if you are in total compliance, it's rather expensive and labor intensive to go and make sure. Were my university to be audited, it would cost around $2,000,000 just to double check, and given the number of people using computers (about 10,000) it is virtually guaranteed that someone somewhere either wasn't careful with licensing proof, or just flat out pirated something.

    What they are doing is no different than the Mafia vandalizing someone's business and then asking money to make sure such things don't happen again. It's protection money, nothing more nothing less. They just couch it in a slightly less ominous sounding name.

    Many Open Source advocates have no problems with paying for software, music, movies or books. What causes problems is when someone tells me I can't do what I want with the media I've bought that I get a little upset.

    If I want to make a mix for my car, the law says I have that right. They're trying to stop me. If I want to use software on a different machine, I have that right. Under strict copyright law (may be different under DMCA now), I can put software on any number of machines as long as they aren't being used concurrently. I can copy movies or cd's (as many times as I want) as long as I don't distribute them. As long as I dont' redistribute what I do, I can do whatever I want with what I've purchased.

    Under the Constitution of the United States, it is not my responsibility to prove my innocence, it is your responsibility to prove my guilt. If you can't prove my guilt, I am to be considered innocent. The BSA has neatly ignored this, and gotten courts to go along with unconstitutional legislation. Fines are imposed without trial, and without proof of guilt, in direct opposition to the Constitution.

    More than a Boycott needs to be done to the members of the BSA. There needs to be a trial that addresses flagrant violations of the constitutional rights of individuals all over the United States, and an appropiate punishment needs to be given.
  • I disagree (Score:5, Insightful)

    by Featureless ( 599963 ) on Thursday February 06, 2003 @04:52AM (#5238974) Journal
    IANAL. That said, there is a generally accepted legal theory that two parties cannot enter into a binding agreement if one of them could not be expected to understand that agreement, is not properly represented when entering into that agreement, or the agreement contains "fine print" conditions which defy common sense or expectation, or which are intended to deceive. There are other exceptions as well, but these are the important ones for the moment.

    I say all this because the shrink wrap license ("EULA") - through which the BSA claims to derive its authority - is thus on extremely thin legal ice. In fact, I am on a neverending quest to find reference to any (any) case where any of the more onerous terms of a shrinkwrap license have prevailed in court. (UCITA, of course, changes everything - but that's a subject for another post.)

    Almost all users of computers never properly understand the "contract" they have supposedly "agreed to" by using their software. They are ignorant of the need to keep and maintain records (as if their word processor was a firearm or motor vehicle), and the idea of granting some organization permission to enter their premises and inspect, demand documentation, and otherwise claim supra-police-like powers just to "insure" that they're not violating their "agreement" must profoundly, breathtakingly, and absolutely fail the test of "reasonable expectation."

    In the case of copyright violations, there are criminal and civil penalties. You can sue me for stealing your software. You can also call the police on me, who may choose to arrest me and try me for said same. But enter my place of business uninvited to "inspect" or "audit" on the basis of a shrink wrap license? I don't think it flies.

    Let's sum up.

    The BSA claims a variety of privileges (from the EULA) which it doesn't really have. It threatens you with actions which are almost certainly illegal. Software users are unaware of their "obligations" under their "licenses" even if you consider them binding (which is asinine), and even when they attempt to follow the rules, there are many cases where it will not be possible to provide documentation "to the satisfaction of the auditor" - whose standard is arbitrary, and purposefully engineered to make it unlikely you can meet it. You are frequently given a very short time in which to reply to the ultimatum - purposefully short, to insure you will not have time to properly inspect your facilities before making a decision. Then there is the oft-cited case of schools and charities which use donated equipment for which the paperwork is not, and probably can never be, in order.

    The cost of self-defense is borne by the defender in civil court. Knowing one is on the receiving end of a legally specious and improper legal challenge is one thing. Being able to afford your defense against some of the world's richer companies is quite another.

    Most victims who receive this have done everything right, but have not retained all their receipts, and/or cannot afford the considerable manpower and expertise it will take to insure "not one single unlicensed copy of anything" exists on any of the machines in their organization. Consider... will even one violation, even when made by an employee in violation of a company policy, result in punitive damages?

    Generally the BSA gets what it wants: a "settlement" in which they are paid not to "report" to federal authorities and/or file a questionable lawsuit. The victim pays again (perhaps many times again) for what they already own.

    We have come a long way from the simple world of Best Buy which you describe.

    The fact that no one understood their options or the consequences of their choices is the very thing at issue here. Extortion, coercion, and foul play describe these practices perfectly.

    Groups like the BSA are not a "price to pay for preventing theft." Their tactics are both immoral and unnecessary. They have no place in the enforcement of copyright. The police are the ones whose job it is to handle software thieves. But then there'd be no money in it for anyone, eh?
  • by Wavicle ( 181176 ) on Thursday February 06, 2003 @05:08AM (#5239009)
    Let's say that you can't find proof that you purchased some of the software you purchased. You then have to pay for that AGAIN. If you don't pay them for it, and they audit you, you then have to pay for it anyway, plus exorbidant fines because you couldn't proove that you weren't guilty of a crime.

    Any case law you can point out that supports this? Even if BSA audits you and you cannot show proof of purchase, they still must show that based on the preponderance of the evidence, you did not legally come by it.

    Under the Constitution of the United States, it is not my responsibility to prove my innocence, it is your responsibility to prove my guilt. If you can't prove my guilt, I am to be considered innocent. The BSA has neatly ignored this, and gotten courts to go along with unconstitutional legislation. Fines are imposed without trial, and without proof of guilt, in direct opposition to the Constitution.

    You are aware that the primary purpose of the Constitution is to outline and limit the powers of the government, right? This is a civil suit we're talking about. And which courts have gone along with this? I'm betting that the BSA usually settles out of court, they have a fairly difficult task in court. They'll make you a deal that will cost you less than defending yourself in court.
  • by Hewligan ( 202585 ) on Thursday February 06, 2003 @05:14AM (#5239023)

    The GPL doesn't give you shit. It's not worth the paper it's written on. I'm just waiting for the day someone tries to pursue this legally by suing someone for GPL violation. Any lawyer would laugh at this instead of taking the case. I'm being 100% serious.

    Eben Moglen seems to feel differently [gnu.org]. And so did the lawyers of the various companies that changed their minds after being told about their GPL violation.

    Ahh, okay, now I understand the link to Debian. You must have some pseudo-religious belief that paying for software is inherently wrong. Can you for a moment accept the fact that the millions of dollars and hard work that goes into making a polished software product is worth some monetary value to someone? Just because you don't think so doesn't absolve you from paying for it, nor does it indicate that they are 'extorting' money from anyone else. They're just making a successful living.

    Well the computer I'm using at the moment has a lot of Free software on it that I did pay for. I'm sure a lot of other /. readers could say the same. So I think it's safe to say that a belief in Free (Libre) software in no way implies a belief that software should be free (Gratis).

  • by bshuttleworth ( 178787 ) <bradNO@SPAMdeimos.co.za> on Thursday February 06, 2003 @05:15AM (#5239025) Homepage
    <disclaimer>I am as fervent an opposer to the BSA as the next Slashdot Sheep, but...</disclaimer>

    A brief note about economics is probably in order. The cost of making a physical CD is not what you are paying for when you buy a CD. You are paying for the cost of developing, testing, marketing, researching both that program and future programs.

    That means that pirating software costs the developer the chance to recover the costs of making that software in the first place.

    And before anyone mods this Flamebait, give a moment's thought to what this means for the (non-BSA member) Linux companies out there: companies with (as a rule) very good chances of going out of business each year. They spend time researching, fixing, improving the OSS software that you use regularly... but since most people download this without actually paying a penny for it, they have to find alternative routes to make money.

    Now I think that there are lots of arguments for OSS, but it does make the economics much more complicated for all involved.

    /me removes Economics major hat :)

  • by kfg ( 145172 ) on Thursday February 06, 2003 @07:00AM (#5239293)
    And remember, the next time MS gives you that TCO crap, that this hassle, and its attendant expenses, are part of the TCO of using software that falls under the aegis of the BSA.

    Just say no.

    KFG
  • by Hanno ( 11981 ) on Thursday February 06, 2003 @07:27AM (#5239350) Homepage
    Fuck Scott Adams.

    I once was a fan of his comic and wrote a Comic->Avantgo->Palmpilot filter for Dilbert. I sent a message about it to the dilbert.com webmaster and told them that a) I am the only user and don't intend to make it public and b) if they wish, they can have this filter for their web site and use it there, for free.

    No reply. I totally forgot about it, then months later I got a threatening letter from Scott Adams' lawyer, telling me that my script was a copyright violation, demanding that I send them a list of every person who ever used it and announcing me how much I'll have to pay in licenses for the expected number of users of my script.

    And this for a script that I offered to dilbert.com for free, for their own use, without any malicious intent at all. For something that I told them as "hey, look at this, I use this personally, it's neat, you can have it, check it out."

    I wrote a reply to the lawyer, telling them how disappointed I was that they send a lawyer first instead of just saying "sorry, no interest, and please take the script offline as we'd consider it a copyright violation if you made it public to other Avantgo users". Scott Adams replied, apologized, but his message was clear that he had no clue why I was so disgruntled about it.

    Well, one reader less to worry about, Mr. Adams.
  • by Groo Wanderer ( 180806 ) <{charlie} {at} {semiaccurate.com}> on Thursday February 06, 2003 @08:58AM (#5239608) Homepage
    And the reason the company is not suing him is?

    Seriously though, this person knowingly broke the law. While the company is responsible for that, he is responsible to the company. You should, in no uncertain terms, sue the weasel for all costs incurred in the audit, license purchases, legal fees and damages. Make a precedent out of him, he deserves it.

    -Charlie
  • Re:I disagree (Score:2, Insightful)

    by prentiz ( 565940 ) on Thursday February 06, 2003 @09:06AM (#5239632)
    I too am not a lawyer. However, under British Common Law this is 100% wrong. If you agree to a contract you are bound by its terms (unless they're illegal). There is no necessity to explain or clarify term - its up to each party to seek advice _before_ entering a contract. One party cannot be held responsible for the ignorance of the other. Whether this should be the case or not is a whole different argument.
  • Re:America.. (Score:3, Insightful)

    by jaavaaguru ( 261551 ) on Thursday February 06, 2003 @09:23AM (#5239716) Homepage
    This is Microsoft software. You don't own it. You're licensed to use it. If you don't have the documentation, or more specifically the license certificate (quite often on the cover of the manual), then you loose your right to use it.

    If you don't approve of licensing like that, choose another product or manufacturer.
  • by grundie ( 220908 ) on Thursday February 06, 2003 @09:52AM (#5239917)
    A man I know as a regular in my local pub owns a chain of estate agents. They have 4 branches and they own about 40 PCs and a server or two. The only BSA related software the agency uses is the Windoze OS and a few copies of MS Office which are only used by secretary's (all 100% legit). The main software used for running the agency is actually a bespoke application, developed locally by a small software house.

    He got the letter from the BSA mentioning the grace period, thretening a surprise audit etc. He reponded by informing the BSA if they made any attempt to enter any of his premises he would treat the matter as aggravated tresspass and use whatever means necesary to te remove them. The was followed up with a "We are sorry you are taking this attitude, but we have a right blah, blah" letter, but after that he heard nothing.

    The BSA may have a (questionable) contractual right to audit your software, what they don't have is the right to enter buildings and act like they have legal backing. I know someone who was at the sharp end of such and audit and aparently it is not very pleasant. The BSA folks do act as if they are policemen and they are very upfront.

    The BSA is just a trade body, the software equivalent of the Taxidermists Association of Scotland or the Charterd Institute of Accountants. They exist only to represnt the interests of MS, Adobe etc. They have no legal powers whatsoever. Their powers of enforcement as an organisation are exactly the same as mine as an individual. If they hassle you, ignore them and tell them to sue you or go away, simple as that.

    Whatever your moral stance, legally speaking software piracy is wrong. However there are existing mechanisms in place to deal with piracy. The BSA approach seems to be to squeeze the biggest amount of cash out of the existing customers of its members. What about the many SME's that have never, ever bought legit software? How does the BSA deal with these types, given that the BSA probably doesn't even know they exist? I know of several businesses who don't have one single piece of legit software, the BSA doesn't even know they exist. BTW I won't snitch on these businesses, I live in Northern Ireland and I like having knee caps.

    The BSA duses extortion to make money for its members. Its picks on those who are largely 100% legit, but may have made mistakes, these are easy targets. It would seem to ignore those who are serial pirates, those who do not intend to now or ever buy software. This approach is easy for the BSA, they really should sort their priorities out.
  • by nurb432 ( 527695 ) on Thursday February 06, 2003 @10:16AM (#5240054) Homepage Journal
    Thats one reason I dont register.. and *never* purchase under a MOLP type agreement plan..

    Its retail white boxes all the way, or OSS packages.

    They dont need to know who i am, what im using, or tell me that my software has expired..

  • by AlphaSys ( 613947 ) on Thursday February 06, 2003 @10:44AM (#5240309)
    The only thing they're chasing is the guy with the money.

  • by artemis67 ( 93453 ) on Thursday February 06, 2003 @11:28AM (#5240774)
    The only thing they're chasing is the guy with the money.

    I guess it depends on what the primary objective of the BSA is. If their primary goal is to decrease corporate software piracy, then it makes just as much sense to pursue the admin in this particular case as to pursue the company.

    If the BSA exists solely to shakedown companies, then yeah, worms like this admin are their allies.
  • by The Angry Mick ( 632931 ) on Thursday February 06, 2003 @12:36PM (#5241529) Homepage

    This BSA business has been going on for awhile now, and is apparently proving very profitable to the BSA's member's. Here's a article [eweek.com] from eWeek [eweek.com] article that explains the tactics in a bit more detail.

    Possibly the most misleading and offensive part of this whole mess is the active solicitation by the BSA of "disgruntled" employees willing to rat out their employers. What is hardly mentioned is that, should the BSA claim to have evidence provided by such a source, they must first prove the validity of that source before any legal warrant can be issued. No law enforcement agency will raid a business, big or small, on the uncorroborated word of a suspect source (although, with Ashcroft, you never know). As a few of the posts above have noted, there have already been instances where companies have ratted out rivals in an apparent attempt to gain an business edge from the disruption (Sometimes, you have just gotta love capitalism). If this is in fact happening, I imagine the risks of retaliatory lawsuits by the victimized is sky high, and I'll be willing to bet the dollar amounts awarded to folks unjustly accused will far outweigh any gains the BSA would have made on a few unlicensed copies of Win98.

    Then, there's the extra expense of litigation. Whether necessary or not, businesses forced to litigate against the BSA will have no choice but to raise prices to cover the costs of both the case itself an the inevitable increase in insurance rates. Members of the BSA will also be faced with increases in legal spending, and this in turn will only serve to raise prices for their products. How can this be good for anyone?

    The thing that really burns me is that, by operating on the assumption that the mere threat of an audit is often enough to make smaller companies roll over on command, the BSA membership demonstrates a callous disregard for their customer base, and an apparent gleeful willingness to offend just about anyone as long as they get the cash. If this is their idea of an acceptable new business model, we are in deep trouble in the days/years to come - UCITA or not.
  • by Broodje ( 646341 ) on Thursday February 06, 2003 @12:44PM (#5241578)
    Businesses exchange documents in Word format. They exchange presentations in PowerPoint. Formatting matters. Features matter. Being able to hire secretaries that know the software matters. No matter how much you like Linux or FreeBSD, you won't find a talented pool of officeworkers that know how to use it.
    I have _insisted_ that customers/suppliers/consultants speak to me in non-proprietary formats for about a year now, and I have never bumped into someone that didn't know how to send that DXF or DOC file as a PDF to me.. I think if you ask the question correctly and have some insight as to what tools they are using, you can meet them halfway. Don't put down secretaries too fast, sometimes they are the most willing (and able) people in the whole transaction. In our office, we have two PCs running windows only because there is no equivalent to Quicken/Quickbooks on Linux.. A little patience and respect goes a LONG way in the business world, even if there are a lot of assholes out there. I tried bitter and ruthless, and it didn't work out for me.
  • by anon*127.0.0.1 ( 637224 ) <slashdot@@@baudkarma...com> on Thursday February 06, 2003 @01:30PM (#5242006) Journal
    Nice try, but no cigar. At least not if the BSA actually decided to do an audit or take you to court. They'd question employees, who would tell them that they were using Windows/MS Office up until last week. Then they'd want to know what software you had, where it went, and where the licenses are. You're still screwed.
  • by Doc Hopper ( 59070 ) on Thursday February 06, 2003 @01:32PM (#5242031) Homepage Journal
    I have a copy of a Microsoft Executive license agreement right here in front of me. We have several hundred licenses for Microsoft software at the shop. In black and white, Microsoft states that they will pay for any audit they perform, it will be performed by a licensed national auditing firm, with the penalty for any unlicensed software to be that we immediately purchase licenses for the previously unlicensed software. It also states the audit will be performed during business hours, with minimal if any impact on our staff.

    There seem to be two straw men going up here. On the one side, people saying the BSA and affiliated organizations are the devil that will cost you millions of dollars, while on the other side the BSA is saying it's not a big deal. I think the truth lies in between these two extremes. Yes, a BSA audit is a pain. Yes, they send extortionary notices to companies in order to garner more business for their clients.

    If your organization is large enough to have hundreds of licenses of a particular thing (like Microsoft operating systems), it is not a big deal to negotiate licensing agreements with that BSA member so that your whole organization is covered and you have nice remedies if something does go amuck. If you are so small that you don't have power to negotiate directly with Microsoft/whoever for licensing terms (fewer than 100 users, really), then handling a short internal audit shouldn't be a problem.

    If the BSA sends you a threatening letter about software audits, the best legal response is to not respond at all to their provocation. However, it's a good idea to try to get all your ducks in a row with licensing so that if they do come knocking on your door you can show them the pretty rows of Windows holograms sitting on a shelf. If you respond with the proverbial middle finger to the BSA, expect an audit.

    Personally, if I were running my own mid-sized business, I'd consider it imperative to make sure licenses are well-accounted-for, and make that a big part of the charter of any hired IT person. Desktop configuration must be controlled. If you provide reasonable access controls, and can prove that any unlicensed software installed on your systems is directly contrary to both policy and practice, the BSA won't have a leg to stand on in prosecuting your business. In general, auditors just want to see a good job done and tend to be pretty nice guys. Don't give them a hard time, and they won't tend to give you a hard time. If you're an asshole towards them, though, you can be certain they will do their best to nail you to the wall.

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...