Obligatory End of Year Post - 2009

Yes, I know it's already 2010, but this post is still my official "end of 2009" post. I've included some highlights from the posts on this blog along with my choice of top 5 open source stories and themes of the year. Please add your comments on what you think are the top stories for 2009.

Reflections on This Blog

The readership of this blog grew substantial in 2009 and I am very thankful for that. Visitors from 30 states, 29 countries and 6 continents came to this blog with the top 3 countries being the United States, Brazil and the United Kingdom. I have to admit, the prominence of Brazil surprised me. Visitors seemed to be attracted to a wide variety of subjects, but management of open source within a company and GPL enforcement seemed to be the favorites. Here are top 5 most visited posts of the year, beginning with the most popular:

1. In-House Counsel - Managing Open Source
2. FSF Motives in the Cisco Case
3. Obligatory End of Year Blog Post (2008) (emphasis on the FSF-Cisco case)
4. Highlights of the Open Source Business Conference - Day 1
5. Show Me the Money at OSCON - Venture Capital and Open Source

Top 5 Open Source Stories

Shifting to the industry as a whole, the top stories of 2009 also illustrated the importance of in-house open source management and GPL enforcement among many other themes. Below, I have provided my list of the top 5 stories and themes of the year:

1. Oracle Acquisition of Sun Microsystems - As a Sun employee, I have a deep personal interest in this deal, but it is also a significant event for the business of open source (not to mention the software and hardware business too), particularly the EU's competition investigation of the MySQL business. The deal could be characterized as a definitive affirmation of the importance of open source in that even companies whose success is perceived to rely on the traditional proprietary software model (such as Oracle), see open source as an important strategic element. Questions on the MySQL aspect of the deal even prompted industry heavyweights like Eben Moglen, founding Director of the Software Freedom Law Center, to explore the impact of the GPL.

2. GPL Enforcement Actions - The relative popularity of my blog posts on the Cisco-Free Software Foundation litigation (which has since settled) is one indication that GPL enforcement is a hot topic. This trend gained momentum throughout 2009 and will likely continue to do so in 2010. Examples include the Software Freedom Law Center's December announcement of litigation against Best Buy, Samsung, Westinghouse and 11 other entities on behalf of the owners of BusyBox, and a French court case in which users of GPL software got a ruling affirming their right to receive the source code to that software and modifications.

3. Microsoft Release of GPL Code - Few companies raise the ire of the open source community more than Microsoft. That's why open source proponents were pleased, and surprised, to see hear Microsoft announce that it would contribute driver code to the Linux kernel. It is not clear whether Microsoft's decision was based on necessity in the face of a potential GPL violation, or a strategic move to enhance compatibility with Linux. Regardless of the motive, Microsoft's actions indicate that even the most sophisticated of companies must pay close attention to their use of open source and honor the provisions of open source licenses. This is especially true in light of the recent enforcement activities discussed in the previous paragraph.

4. US Government Commitment to Open Source - The principles of technology neutrality have long been recognized in the European Union to the benefit of open source software usage by European governments. The United States federal government has not been as accommodating of open source, but at least two events in 2009 indicate a possible change in US attitudes. The US Department of Defense revised its guidelines on use of open source software in October to essentially give it a procurement preference over proprietary software when all else is equal. In addition, it appears that the Obama Administration is actively looking for ways to bring the benefits of open source to government operations.

5. Red Hat's 10 Year IPO Anniversary - Red Hat is commonly viewed as the most successful pure open source company with its status as a Fortune 500 company with a market cap of almost $6 billion and generating over $700 million in revenue in 2009. As such, it's longevity and success are significant barometers on the health of the open source business as a whole. With a lingering cloud over the economy, and the relatively slow growth trajectory of most open source companies, it seem unlikely that we will see any open source IPOs in 2010.

Please post your thoughts on the most important open source events of 2009. I wish the best of success to all of us in this corner of the world we call "open source."

[Note: The "Top 5" portion of this post was updated after the original post to make non-substantive changes for purposes of clarification and adding more reference links.]

Highlights of OSBC 2009 - Day 2

The second day of the Open Source Business Conference in San Francisco again had many thought provoking presentations. The day started with a trio of keynote presentations from executives from Sun Microsystems, Microsoft and IBM. In my opinion, Sun CEO Jonathan Schwartz's keynote address on Clouds was the best presentation of the Conference. (Disclosure: I work for Sun.) As a result, instead of summarizing the entire day, this post focuses on clouds.

As the hot new technology trend, Cloud computing attracts a good bit of interest and was mentioned in virtually all of the keynotes to some degree. I have been caught in the cloud hoopla too, but have had difficulty identifying what makes it different from software as a service. Until this morning, I have not been able to find an answer, but Jonathan Schwartz's presentation pulled together many of the missing pieces.

Schwartz explained Sun's vision for clouds, which includes 3 types of clouds each of which can be deployed in public and private environments. The three clouds are:

1. Infrastructure as a Service - This is a packaged operating system for use in a data center. Amazon's EC2 is a good example.

2. Platform as a Service - These types of clouds go a step beyond infrastructure while trading high switching costs for enhanced value. Google's docs and related services are an example.

3. Application as a Service - This is the type of cloud many enterprises have already experienced. It extends from a platform to implement a fully functioning application over a network in a manner similar to what we already experience on our computers. SugarCRM's offering is a common example.

The public/private distinction is important. While many enterprises will be able to utilize a public cloud and avoid the IT overhead, some enterprises will require private clouds behind their firewall to address security concerns and regulatory requirements (such as HIPPA and GLB in the health care and financial industries). Schwartz sees each enterprise utilizing a "network of clouds" that are mixed and matched to meet its needs.

While this taxonomy of Sun's vision of clouds made them relatively easy to understand, my moment of gestalt came as Schwartz explained that the cloud is not only the ultimate embodiment of super computing, but it is the next logical step beyond open source. As open source becomes a mainstream business strategy, I have struggled with the question of "what happens next?"

I now understand how the benefits of the open source in the application space can be amplified when applied to clouds. (On the point of open source as mainstream, Matt Asay, GM and VP at Alfresco, and co-founder of the OSBC, described the state of open source as reaching the end of the "cancer" phase and beginning the "pragmatism" phase, with a continued need to emphasize evangalism.) I also understand that the vision of clouds (not just Sun's vision) goes well beyond traditional SaaS offerings to encompass a much larger, interconnected infrastructure with much greater potential for a qualitative leap in how business is conducted and problems are solved. No doubt, cloud computing will keep the legal community busy for years trying to understand how to adapt our old methodologies to this new environment.

Matt Asay has his own post that emphasizes other elements of Schwartz's presentation that is worth reading.

For more details on Sun's cloud computing solutions, check out their web site.

[Updated to fix some typos.]

Jump On the Bandwagon

Last week I attended a very informative CLE on Open Source Software 2008: Benefits, Risks and Challenges for Software Users, Developers and Investors, and was lucky enough to join Joyce Chow from Apple in presenting a session on Open Source Business Models. What made the seminar so useful was the breadth of topics it covered … everything from the nuts and bolts of open source licenses, to the technical details of linking and derivative works, and even ethics in open source (presented in part in a very entertaining fashion by Dave Marr, one of my colleagues at Sun). Bob Pierce, a former colleague of mine at Adobe, provides an informative review of the presentations on his blog.

In talking with other presenters and attendees, it became clear that the law surrounding open source software has reached a milestone. The skills needed to support an open source software business are no longer practiced by a handful of attorneys, and instead are skills that every attorney should have. Examples of the importance of understanding open source appear almost daily:

• Current economic troubles make the low cost and convenience of open source software particularly attractive to IT departments and businesses of all sizes.
  

• Cisco has been sued by the FSF and SFLC for failure to comply with the GPL - having a effective open source management process, knowing how to comply with open source licenses and ensuring such compliance occurs is critical to virtually all software businesses.

• The Open Inventions Network is pooling patents and prior art to protect Linux and the open source community from patent lawsuits - the open source community controls intellectual property rights for the benefit of the community.

• Gartner research shows that 85% of enterprises currently use open source software and the other 15% will within the next 12 months - even if you think your client doesn't use open source, it almost certainly does.

These are but a handful of examples, but searching everything from broadly circulated business periodicals to the most narrowly pointed open source geek blog will yield a virtually limitless supply of information on the growing importance of the open source model.

In short, this is the time to jump on the band wagon or be prepared to be left behind.

Countdown - Open Source Style

I am a big fan of top 10 lists... particularly humorous ones a la David Letterman. While I can't claim that any of the top 10 list below is humorous, it does paint an interesting picture on the status of open source in the top 10 companies (by market cap) in the Software Application Industry (Technology Sector) of the stock market.

These 10 companies represent over 96% of the market capitalization in the Software Application category. At the end of each entry, I give the company a (purely subjective) grade reflective of its efforts, commitment and contributions to the open source community.

So, here we go...

10. Sybase ($2.7B) - Database Management, Information Management and Business Intelligence Software. Sybase appears to have made at least a minimal effort to embrace open source. It even has an OSI approved license (the Sybase Open Watcom Public License). More important is how many of Sybase's competitors have serious open source credentials ... MySQL/Sun, Pentaho, JasperSoft, GreenPlum. Grade - D.

9. Nuance Communications ($4.1B) - Speech and Imaging Solutions Software. A search for "open source" on the company website results in 0 hits. Enough said. Unfortunately, there are no open source options. Grade - F.

8. Red Hat ($4.2B) - Linux and JBoss Provider. Red Hat, as we all know, is one of the premiere examples of open source software industry success. Enough said. Other Linux providers exist, as do other OS providers, but Red Hat is the go-to open source vendor. Grade - A.

7. BMC Software ($7B) - Enterprise Management Including Application & Database Management. As with Nuance, a search for "open source" on the company website results in 0 hits. However, BMC has a developer network with various, small-scale open source projects. Grade - D.

6. Intuit ($9B) - Personal Finance, Small Business and Tax Software. Intuit does not appear to have any significant involvement in open source and this probably is not the type of software that has attracted a developer community to create open source alternatives. Grade - F.

5. CA ($12.3B) - IT Management Software. To my surprise, this 30+ year old company has embraced open source in a significant way. For example, CA has supported the open source industry's patent pledge for several of its patents. Grade - C.

4. Adobe Systems ($21.6B) - Creative, Knowledge Worker and Enterprise Software Applications. Facing the commoditization of it biggest revenue generating applications (Photoshop and Acrobat), Adobe has taken the initial steps it needs to diversify its business into open source in a significant way. Grade - C+.

3. SAP. ($60.1B) - Business Operations. SAP has dabbled in the open source world, partnering with MySQL on database technology. Overall, however, SAP hasn't made many significant contributions to the open source community. Grade - D.

2. Oracle ($111B). Database, Middleware and Enterprise Management. Oracle might be described as the Jeckyll and Hyde of open source. While it distributes several open source applications (such as Sleepycat and Innobase), it also actively challenges other open source providers (such as with Unbreakable Linux) and would likely acquire competing open source companies to eliminate a business model that threatens its own. This duality makes it hard to settle on a grade. Grade - C-.

... drum roll ...

1. Microsoft ($277B). It's no surprise that Microsoft is in the number one spot (even on Letterman the #1 is always anticlimactic). In spite of making substantial contributions of code as open source, Microsoft is the big bad wolf of open source for good reason... among other things, it has a very proprietary stance on patent licensing for open source projects. Grade - D.

Some other companies that didn't make the list due to technicalities are:

• Google ($178B) - would be the clear number 2 if it were in the "Software Application" category. Google would receive a B for OS Effort (knocked down from A because of its deceptively not open Android platform and other calculating open source strategies).
• Sun Microsystems ($10.2) - would be at number 6 if it were in the "Software Application" category (though its software business is probably valued at closer to $4B, which would drop it a few spots on the list). Sun would definitely receive an A for OS Effort as the largest open source software provider.
• Still other companies like HP and IBM have been long-time contributors to the open source movement, but are not reflected here.

I find it very interesting to note that of these top 10, only 1 got a grade better than C. In addition, one estimate of the total value of the open source industry ($60B) would place the entire industry at only number 3 on the list (though without an objective market cap value, it's hard to draw many conclusions from this).

On the other hand, if we add Sun and Google (two of the top open source contributors) we come closer to a critical mass of open source presence on the list, and lest we forget that numerous open source companies with no market cap at all (because they aren't listed on a stock index) are providing strong, competitive alternatives to the software and solutions provided by the companies on the list.

What can we conclude from all this? First and foremost, we can safely conclude that I am not a mathematician, statistician, or financial analyst, as evidenced by my loose use of numbers and grading to make my point.

More important, even a pessimist would have to say that the presence of a company like Red Hat on the list means open source is making significant inroads into the traditional software industry. The amount of innovation and competition presented by companies not yet public or too small to make the list yet indicates that the trend is strongly pointing towards greater adoption of open source. It might be only a handful of years before all of the top 10 companies on this list receive A's and B's.

Commercial vs. Free: Not a Zero Sum Game

Think back to 1991 and the release of GPLv2 ... the open source software community was abuzz with great anticipation that the goals of the "free software" movement would soon be achieved. Now fast forward to present day ... the open source software business is potentially worth as much as $60 billion, a small Linux provider named RedHat has grown into a successful public company, and an open source database company named MySQL has been purchased by Sun Microsystems for $1 billion. Does this prove the success of the commercial open source movement? Of the failure of the free software movement?

If the recent firestorm in the community over Sun's proposal to sell closed-source add-ons for the open source MySQL database is any example, then the open source community appears to have concluded that the success of one is only at the expense of the other. (In the interest of full disclosure, I am a MySQL/Sun employee, and these opinions are mine alone.) The community would rather punish MySQL, one of the pillars of open source movement, than applaud the prominence it has helped bring to open source through its innovative open source and business strategies.

This "zero-sum" attitude is not only wrong, but also harmful to the open source industry. Instead, the open source industry must accept that both open source purists and commercial opportunists can co-exist in the same environment without forcing an absolute choice between them. Though it appears more open source "rationalists" are reaching this conclusion, the community needs to start acting based on what is good for open source as a whole, not just the purist forms of open source.

The viability of this type of co-existence is well proven in other contexts. Take the example of environmentalism and the "greening" of the business world. Groups like the not-for-profit Sierra Club operate on the same playing field (though at the opposite end) as companies that use the "green" label as an insincere marketing ploy (I won't point any fingers). The business world accommodates this range of diversity allowing groups interested in societal change to organize as not-for-profit entities, which allows them to focus on their chosen area of social good without being subject to income tax. Entities like the Apache Foundation, Linux Foundation and Free Software Foundation play this role in the open source world by focusing on open source for the public good (and get a tax relief too).

At the same time, though commercial entities are primarily motivated by profits, the community pushes them to be "good citizens". We see the pressure the community puts on companies these days to pursue environmentally friendly policies in spite of (or sometimes in support of) their profit motives. Similarly, commercial open source companies perform good citizenship by acting in support of open source ideals, which not only builds community goodwill but also allows them cash in someday.

To make this drive to good citizenship most effective, communities need a way to differentiate commercial entities by evaluating them both their effectiveness and sincerity in pursuing. Many environmental groups act as watchdogs and standard setters for their commercial counterparts. Similarly, the open source community has taken a new focus on improving upon the traditional benchmarks of open source (choice of an OSI approved license and release of copyrighted code) with proposals to include patent and trademarks as well as business and development models in the standard definition of "open source". Another proposal is the creation of an independent body that would objectively grade companies on their "openness". While these are great solutions, they are not likely to reach their potential for effectiveness until we all recognize the importance of co-existence.

Just as we don't hold commercial entities to the same standard of environmental purity as we do the Sierra Club, the open source community must strike the right balance between pursuing its passion and pushing commercial open source companies to act in "acceptable" ways. It must not forget that open source advocates, and good ideas that can further the open source movement, can come from virtually anywhere in the open source spectrum. While it's useful to distinguish between commercial open source companies based on openness, the community must begin acting as if we are all in this together. If we don't learn to co-exists, we risk an irreparable fracture in the movement that we all support.