Feeds

Google open codec 'not open,' says OSI man

Net video play faces 'serious questions'

Internet Security Threat Report 2014

A board member with the Open Source Initiative (OSI) — the organization that approves open source licenses — has warned that there are "some serious questions" surrounding Google's swashbuckling efforts to create an open and royalty-free codec for web video.

Hoping to defend the VP8 codec against patent attack, Google has open sourced the technology under a new license that includes some patent-centric language, but it has yet to submit the license for OSI approval. With a Monday blog post, OSI director Simon Phipps questioned whether there's a hole in the license that could expose users to third-party patent holders, and he urged Google to join hands with the OSI on the project, saying that before it does so, the codec cannot be considered open source.

But he also urged Google to release more information about the patents backing the technology so that software makers can adopt it with added confidence. And he called on the company to work with an open standards organization with a strong patent disclosure policy.

At the same time, Phipps — the former head of open source at Sun Microsystems — took a jab or two at Google for building a new license after criticizing others for "license proliferation." But he tells The Reg that the primary aim is to bring Google to the table, and Google open source guru Chris DiBona has told us that the company intends to approach the OSI "in the coming weeks."

Last week, at its annual Google I/O developer conference, Mountain View announced that VP8 had been open sourced under a royalty-free license, hoping to challenge the patent-backed H.264 codec favored by Apple and Microsoft. Acquired last year when Google purchased video compression outfit On2 Technologies in a deal worth $124.6 million, VP8 has been rolled into a larger media format known as WebM, and it has already been included in developer-build browsers from Mozilla and Opera.

With his blog post, the OSI's Simon Phipps called Google's move "a positive and welcome development," praising the company for offering an alternative to H.264 and the existing open source codec Ogg Theora. And he pointed out that Google had "done their homework" in securing the backing of Mozilla, Opera, and even Flash-maker Adobe.

But his post was meant to show that more homework lies ahead. "Once all the hoopla had died down, it became clear there are some serious questions that need considering," he said.

For starters, there's the license issue. Google has used a new license to open source VP8, and at Google I/O last week, the company told us the license had not been submitted to the Open Source Initiative. Product manager Mike Jazayeri said that Google will "certainly follow the best practices" where the license is concerned, but it still hasn't submitted it to the OSI, and Phipps questions whether the license can be approved without changes.

Google's license is essentially a BSD that has been modified to include language that provides the licensee with patent rights to the technology and at the same time prevents them from using other patents to file an infringement suit against the technology. "The main difference between the standard BSD license and the VP8 license is that this license grants patent rights, and terminates if patent litigation is filed alleging infringement of the code," Google says in a WebM FAQ.

The addition is a bastardized version of language that appears in the Apache 2 license. Like Apache 2, Google rescinds patent rights if you file suit, but it also rescinds your right to use the technology. "The main reason it was not used is that filing patent litigation against someone using the Apache 2 license only terminates patent rights granted under the license. Whoever filed the litigation would still be able to use the software they are suing over and still be in compliance with the license," Google's FAQ says.

"This license, however, terminates all rights when patent litigation is filed. Rather than modify the Apache license to meet our needs, which would probably lead to significant confusion, we went with the simpler approach of a BSD style license + patent provision."

Simon Phipps questions whether the added language is a stumbling block. "As it stands it possibly can't be approved due to Google's ironic inclusion of a 'field of use' restriction in the patent grant (which is restricted to 'this implementation of VP8' rather than the more general grant in the Apache license from which the text started)," he wrote.

Whereas Google specifically refers to "this implementation of VP8," the Apache license simply refers to "the work." Phipps wonders whether Google's license still grants patent rights if someone uses only a portion of the VP8 code and not the whole thing. "One of the questions I would ask is: 'Does this narrowing of the language cause any problems?'" he told The Reg. "And that's the sort of question that gets answered during an OSI license review."

Security for virtualized datacentres

Next page: Googly irony

More from The Register

next story
Microsoft WINDOWS 10: Seven ATE Nine. Or Eight did really
Windows NEIN skipped, tech preview due out on Wednesday
Business is back, baby! Hasta la VISTA, Win 8... Oh, yeah, Windows 9
Forget touchscreen millennials, Microsoft goes for mouse crowd
Apple: SO sorry for the iOS 8.0.1 UPDATE BUNGLE HORROR
Apple kills 'upgrade'. Hey, Microsoft. You sure you want to be like these guys?
ARM gives Internet of Things a piece of its mind – the Cortex-M7
32-bit core packs some DSP for VIP IoT CPU LOL
Microsoft on the Threshold of a new name for Windows next week
Rebranded OS reportedly set to be flung open by Redmond
Lotus Notes inventor Ozzie invents app to talk to people on your phone
Imagine that. Startup floats with voice collab app for Win iPhone
'Google is NOT the gatekeeper to the web, as some claim'
Plus: 'Pretty sure iOS 8.0.2 will just turn the iPhone into a fax machine'
prev story

Whitepapers

Forging a new future with identity relationship management
Learn about ForgeRock's next generation IRM platform and how it is designed to empower CEOS's and enterprises to engage with consumers.
Storage capacity and performance optimization at Mizuno USA
Mizuno USA turn to Tegile storage technology to solve both their SAN and backup issues.
The next step in data security
With recent increased privacy concerns and computers becoming more powerful, the chance of hackers being able to crack smaller-sized RSA keys increases.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.
A strategic approach to identity relationship management
ForgeRock commissioned Forrester to evaluate companies’ IAM practices and requirements when it comes to customer-facing scenarios versus employee-facing ones.