Recently, I was looking into licensing an open-source project I’m creating. My preferred license is the BSD-3, but was given advice that I should seek a license that offers patent protection as well. I saw there is a BSD 2-Clause + Patent option, but not one for the BSD 3-Clause, not that I found through OSI or SPDX. This seems odd to me, because I’m pretty sure the BSD 3-Clause is more commonly used than the BSD 2-Clause. Because of this, I’ve had to dual license my project as BSD 3-Clause AND BSD 2-Clause+Patent, which is a bit unwieldy, but achieves the same desired results.

This seems like an odd oversight though, I’d be curious if there’s a reason the 2-Clause was chosen for the patent protection over the 3-Clause version? I could just add in the patent protection part to the 3-Clause version, but creating arbitrary licenses like that definitely makes me feel a bit… uncomfortable.

Edit: Due to some confusion as to what I meant, I wanted to add some details.

I’m definitely aware that licenses such as the Apache 2.0 exist, I just like the BSD licenses for their simpler language (and also don’t have that odd state changes clause from Apache 2.0). I’m more so just curious why the choice was made for only the BSD 2-Clause license to gain the Patent Clause, but not the BSD 3-Clause version. That’s what I’m not sure about, and why I’m curious about the logic behind this choice. I’m gonna paste in the content of both licenses below, since they are both short and easy to read and understand.

BSD 2-Clause + Patent

Copyright ©

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

  1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

Subject to the terms and conditions of this license, each copyright holder and contributor hereby grants to those receiving rights under this license a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except for failure to satisfy the conditions of this license) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer this software, where such license applies only to those patent claims, already acquired or hereafter acquired, licensable by such copyright holder or contributor that are necessarily infringed by:

(a) their Contribution(s) (the licensed copyrights of copyright holders and non-copyrightable additions of contributors, in source or binary form) alone; or

(b) combination of their Contribution(s) with the work of authorship to which such Contribution(s) was added by such copyright holder or contributor, if, at the time the Contribution is added, such addition causes such combination to be necessarily infringed. The patent license shall not apply to any other combinations which include the Contribution. Except as expressly stated above, no rights or licenses from any copyright holder or contributor is granted under this license, whether expressly, by implication, estoppel or otherwise.

DISCLAIMER

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

(Fun Fact: A lead developer on the Rust team said they would have chosen the BSD 2-Clause+Patent license if it existed at the time of them first releasing the Rust programming language. Instead, it’s why they chose to dual-license under the MIT and Apache 2.0 instead.)

BSD 3-Clause

Copyright © .

Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

  1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
  2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
  3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

  • wmassingham@lemmy.world
    link
    fedilink
    arrow-up
    9
    ·
    1 year ago

    Nobody is stopping you from copy-pasting the third clause into the two-clause plus patent license.

    What are you trying to accomplish with the patent thing? Have you already patented your software?

    • Southern Wolf@pawb.socialOP
      link
      fedilink
      arrow-up
      1
      arrow-down
      1
      ·
      1 year ago

      Wanted patent protections for myself mostly. I know the Apache 2.0 is best well-known for that, but I tend to prefer the simplicity of the BSD licenses. More so curious why the BSD 2-Clause was chosen for that Patent clause and not the BSD 3-Clause. Just seems odd to me. I updated my original post with more info.

    • 0x4E4F@infosec.pub
      link
      fedilink
      English
      arrow-up
      0
      arrow-down
      3
      ·
      1 year ago

      Yeah, everyone could just snatch it, reimplement it and say it was their idea 🤷.

      • heeplr@feddit.de
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        1 year ago

        no, the patent office would find your publication, deem it Prior Art and not grant the patent. If it would miss it (some don’t research very well), anyone can notify them to void the patent afterwards anytime.

        IANAL, there are lawyers specialized on patents who’ll reassure you for free/cheap (relatively, they are friggin expensive). It also depends on legislature. Countries that break/never agreed to the PCT will do what they please.

        • 0x4E4F@infosec.pub
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          1 year ago

          no, the patent office would find your publication, deem it Prior Art and not grant the patent.

          Yeah, but what if they completely rewrite the code, making it completely indistinguishable from yours. They could claim that they came up with the idea themselves 🤷.

          • heeplr@feddit.de
            link
            fedilink
            arrow-up
            1
            ·
            1 year ago

            not sure why you think that. if it’s indistinguishable, it’s still prior art. If it’s something better or different than your code, it’s a new thing.

            Patents protect technical principles, not actual sourcecode.

            • 0x4E4F@infosec.pub
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              1 year ago

              If it’s something better or different than your code, it’s a new thing.

              They might steal the idea. Analyze the source, make some modifications regarding their needs, reimplement it in whatever language they like… that is still stealing, is it not?

              • heeplr@feddit.de
                link
                fedilink
                arrow-up
                1
                ·
                1 year ago

                What are you trying to prevent? You can’t release anything (opensource or not) without risking someone stealing the idea without patenting.

                No FOSS license will prevent that (quite the opposite, it encourages copying/modifications). Those licenses just prevent someone using your code commercially without releasing the source code again.

                • 0x4E4F@infosec.pub
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  1 year ago

                  I had a particular project in mind, I should have mentioned earlier, Fraunhoffer’s FDK-AAC. It’s open source, but the license is… tricky…

                • 0x4E4F@infosec.pub
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  edit-2
                  1 year ago

                  Mhm… OK, in that case, let’s say I reimplement Fraunhoffer’s FDK-AAC. It’s open source, but you can’t redistribute binaries of it, you can only compile it for your own personal needs and you can’t commercially use it for free. So, let’s say my reimplementation is licensed under BSD or GPL and I allow everything, even commercial use for free. That would cut on the profit Fraunhoffer is making from their product, but they can’t legally persue me because none of their code is in my reimplementation 🤨? That seems kinda off…

    • Southern Wolf@pawb.socialOP
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      You are correct, yeah. I updated my post with more info on what I was asking about, plus the text of the two licenses.

  • SlikPikker@lemmy.ca
    link
    fedilink
    arrow-up
    6
    arrow-down
    4
    ·
    1 year ago

    In part, perhaps it’s because patents are inherently unethical and anti-open.

    • Kaldo@kbin.social
      link
      fedilink
      arrow-up
      3
      arrow-down
      2
      ·
      1 year ago

      I can still see the value in owning it in this shitty climate however - maybe I want to keep the patent just so I can distribute it freely instead of someone else staking their claim on it and then charging people for the same thing?

  • stifle867
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    Is there a reason why you weren’t able to license under the Apache 2.0 license? It’s similarly permissive while including a patent grant.

    • Southern Wolf@pawb.socialOP
      link
      fedilink
      arrow-up
      1
      ·
      1 year ago

      I certainly could have, I just prefer the simplicity of the BSD licenses better. Plus, they don’t have that “State Changes” Clause from the Apache 2.0 license. I updated my original post with more info on what I was asking about.

      • stifle867
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        1 year ago

        Sorry I really don’t know the rationale behind why they did not include a patent grant clause. AFAIK the BSD license is maintained by the FreeBSD project. Maybe they didn’t believe it was necessary to include an explicit patent grant? It seems even they prefer not to use the patent grant clause:

        The BSD+Patent License is acceptable for use in some cases. The Core Team must approve the import of new BSD+Patent License licensed components or the change of license of existing components to the BSD+Patent License.

        This license is approved for the following components:

        EDK2 derived code related to UEFI functionality

        I’m a fan of “simple” and concise licenses myself. However this is more of a mental hangup rather than a practically as the Apache 2.0 license is widely understood and accepted even in commercial settings.

        Regarding the state changes clause, and the patent thing in general I definitely feel your pain. There’s a lot of great, commonly used licenses out there. Yet when you look into it none of them “have it all” in terms of what you’re looking for.

        • hansl@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          1 year ago

          And that can create unexpected situations, like corporations stealing your patents or patenting all usages of your work, and prior art might be damned, and in some cases even sue you for you own work. There are examples of this for people who didn’t patent or license their work, this is not some weird hypothetical. WTFPL is not a license, it is not clear that it protects you or not.

          In the real world, WTFPL has no reasons to exist. If you want to protect your work but want to make it available, there are good permissive open source licenses. Slap an Apache, or CC0 or GPL license.