• Zeth will be attending PyCon UK on the 12th to 14th September 2008.

Are your Firefox extensions proprietary software?

1 June 2008

In the last-post, I went through the most popular Firefox extensions and talked about whether they were good ideas or not. However, it seems that not a lot of people think about another side to this, i.e. what are your Firefox extensions licenced under?

It turns out that a lot of the extensions available through Firefox are not free/open source software at all.

One example is the StumbleUpon Extension. StumbleUpon is a web service that allows you to share links with other users. Sometimes readers have shared this site and my number of visitors have gone up (cheers for that). StumbleUpon is commonly used through a toolbar provided as an extension through Firefox or Internet Explorer, (and a comment-in-the-last-post reminded me about it).

This made me think, what is the licence of this Firefox extension? If you go to the StumbleUpon-homepage, there is no software licence or terms at all. If you click the "Download now - Free" button, you go through to the download-page, still no licence or terms. I unzipped the extension, looking for a software licence, nothing. This made me very suspicious, when people are proud of their licence, they put it right in front of you, what are they hiding?

Eventually, after a bit of digging and Googling, I found their Toolbar-License and guess what? Yes you guessed it, it is proprietary software. So if you want to run free software/open source, then get it off your system now!

Their licence only gives you:

"a non-transferable ... non-sublicensable ... license to reproduce (solely to install and execute) the Toolbar on one of your computers, in executable object code format only, for your personal, non-commercial use only,"

Of course, the "Toolbar" is released as a Firefox extension, in plain-text Javascript and XUL, not in object code format. There is not really object code at all in Javascript, object code is a C term. But the lawyer writing the boilerplate probably didn't know or care about the difference. Anyhow, the licence continues:

"You may not modify, make derivative works of, copy, reproduce, publish, or reverse engineer the Toolbar"

This is in complete opposition to free software/open source, where all users have four freedoms:

  • The freedom to run the program, for any purpose (freedom 0)
  • The freedom to study how the program works, and adapt it to your needs (freedom 1). Access to the source code is a precondition for this.
  • The freedom to redistribute copies so you can help your neighbor (freedom 2).
  • The freedom to improve the program, and release your improvements to the public, so that the whole community benefits (freedom 3). Access to the source code is a precondition for this.

Don't sell out your freedoms so cheaply! If you want the most free software computer possible, look up the licenses of your extensions.

For example, here are five popular extensions that are free software/open source:

  • Firebug: Mozilla Public License 1.1
  • Flashblock: Mozilla Triple Licence (MPL 1.1/GPL 2.0/LGPL 2.1)
  • AdblockPlus: Mozilla Public License 1.1
  • FireGPG: Mozilla Triple Licence (MPL 1.1/GPL 2.0/LGPL 2.1)
  • NoScript: GPL

Please do audit your own, and let us know what you find. Knowing which extensions are free and which are not free would be really helpful.

Digg-entry

1 zxcopiedfromirc says...

It's a difficult problem. Even when people get bitten by proprietary stuff they don't seem to realise what's going on. So they happily line up to buy the next shiny thing.

Posted at 3:23 a.m. on June 1, 2008


2 Jonas says...

I don't understand why they do not use a free license really. Okay, I sometimes can see why a proprietary license would feel more palatable for the people in charge (I disagree with the reasoning but I can see how they're thinking) but only when their product is softare. While the toolbar certainly is software it is the service that is valuable. And even more silly when the source code is, by definition in this case, is included to begin with.

Posted at 3:36 a.m. on June 1, 2008


3 gregf says...

Wow, I really never gave this much though till I saw your title. Maybe if a bunch of users talked to the Firefox developers, they could be convinced in warning users they are about to install software without a open source compatible license? Or is that even something they should or would be worried about?

Posted at 5:21 a.m. on June 1, 2008


4 NickF says...

Not surprising. If you install Skype on Windows it automatically install a firefox plugins, even if you say no. You can uninstall it, but it comes back at every update. The same for RealPlayer, which is worse because you can't uninstall it. Having proprietary addons is not the problem, but having them forced down on you, that is really where the problem is

Posted at 9:36 a.m. on June 1, 2008


5 Ubu Walker says...

If I download an extention from the Firefox website (which is open source), I expect, unless told otherwise, that it is open source.

Posted at 5:16 p.m. on June 1, 2008


6 Anurag says...

As most of my extensions are provided by Ubuntu's Add/Remove, they are opensource anyways...

Posted at 6:26 p.m. on June 1, 2008


7 Emily says...

Ubu Walker said: If I download an extension from the Firefox website (which is open source), I expect, unless told otherwise, that it is open source.

You may expect that, I may have expected that, but it is not true. The Firefox website just puts them up without license information, free and non-free extensions are all mixed in together.

Posted at 11:35 p.m. on June 1, 2008


8 Steven says...

Being open source is nice, but whats better is code that works. If there are two weather plug-ins, one works, the other doesn't, and the one that works is proprietary but still works, I'll take it. They're both free. Let the guy horde his code, I don't care. He has neither hurt nor helped the "movement."

nVidia > ati but nVidia != open source... still use nVidia, oh well!

Posted at 5:22 a.m. on June 2, 2008


9 Max says...

@Steven -

Let the guy horde his code, I don't care. He has neither hurt nor helped the "movement."

He hasn't hurt the free software movement, but you have. You just showed your support for his proprietary software.

Posted at 10:02 p.m. on June 2, 2008


10 Morten Juhl-Johansen Zölde-Fejér (mjjzf) says...

Anurag said: As most of my extensions are provided by Ubuntu's Add/Remove, they are opensource anyways... Now, how did you arive at that conclusion?

Anyway, Flashblock may be entire free software, but as yet it isn't much needed without a certain item of very proprietary software.

Posted at 7:53 a.m. on June 3, 2008


11 db0 says...

Anyway, Flashblock may be entire free software, but as yet it isn't much needed without a certain item of very proprietary software.

you mean like Gnash?

Posted at 11:56 a.m. on June 3, 2008


12 mithrandir says...

No, Swfdec...

Posted at 4:02 p.m. on June 3, 2008


13 dwr50 says...

If I get something from the Firefox site I expect it to be open source and virus free... it's a given. If Firefox endorses the program, that's good enough for me.

Posted at 10:47 p.m. on June 4, 2008


14 Steve Purkiss says...

I'm in a slightly different position - I've created a sidebar for the video conversation site http://seesmic.com - you can find it at http://seesmicsidebar.com and the code at http://code.google.com/p/seesmic-sidebar/

So you can get the code for my extension, but not for the service I provided it for - seesmic. They're very much a closed community and of course have all your data/videos too.

I'm hoping that some project will start up which does cool stuff like video conversations, but open source and where the application is data-unaware, i.e. I don't have to give all my data to BigCo (or soon-to-be-BigCo).

Trouble is, it seems all the free software developers are focusing on re-implementing what's already out there and not creating cool new stuff. If I knew more about Flash and decentralised networking then I'd do it myself. But then Flash isn't open. Bugger. When will it end?! ;)

Posted at 11:15 p.m. on June 4, 2008


15 Craig says...

Here's a thought: I don't recall ever being asked to agree to a EULA before downloading a Firefox add-on. Maybe I just haven't downloaded any proprietary ones, but I think if they don't even require you to click "I Accept" on a click-through EULA, there's no way they can claim that you're bound by a license. Simply installing software, by itself, cannot be reasonably construed to indicate that you accept a license that you are never shown or asked to agree to. (They can say otherwise, but I doubt it would hold up in court.)

Posted at 11:25 p.m. on June 4, 2008


16 Swashbuckler says...

"object code is a C term."

Uh no. It's any compiled language.

Posted at 10:26 p.m. on June 5, 2008


17 Orlandus says...

Well, if they offer only an object-code-only license.and no object code, then I suppose nobody is legally entitled to have the software at all.

Posted at 11:54 p.m. on June 9, 2008


18 vermin says...

> Eventually, after a bit of digging and Googling, I found their Toolbar-License...

You simply found the license of the StumbleUpon Toolbar for Internet Explorer. This is another product, much more common than the FF toolbar. It indeed does not include any source code.

Posted at 3:32 a.m. on July 7, 2008


19 paul21 says...

Shame on Mozilla. They should make developers specify the extension license before hosting it. They should show the license next to download button as well.

Posted at 6:19 a.m. on July 10, 2008


What do you have to say?

Show Editing Help


PyCon UK

About

Hello, my name is Zeth, I'll be your host here.

Command Line Warriors is about taking control of your own technology, it looks at our experiences of computing; especially using GNU/Linux, the Python programming language, the command-line and issues such as techno-ethics, best practices and whatever is cool now. If you take control of your technology then you are a Warrior too!

This site is your site too which means that you can contribute and get involved. You can leave comments using the facility provided. For me, the comments and discussions are by far the best part of the site. So please do have your say!

Latest Discussions

deesha

September 8, 2008
hey all, i just wanted to check the other stuf if nay1 can help me what i want is i have to convert the line starting with my function name ...
Email Syntax Check in Python

Daniel Black

September 3, 2008
Hey, sounds good already. There's another Python script for command-line 140-character-messaging (won't call it "tweeting" for obvious reasons), Tweety Py, that's currently languishing. Not, I think, because the developer's disinterested, ...
Using new social networking service Identi.ca from the command line

Antonio Araujo

September 2, 2008
Dear friends, has anyone built debian packages of db xml 2.4.13? Best regards Antonio
Native XML storage with Berkeley DB XML - part one

Zeth

September 1, 2008
Thanks everyone for your different solutions, absolutely fantastic. I have tried them all. The one from Ciaran McCreesh was the one I was subconsciously groping for.
Sisu and typing unicode in GNOME

andylockran

September 1, 2008
In ubuntu, I do ctrl, and the functions to the right of my keyboard for extra characters. Such as: alt gr + ; + e for é I'll post more ...
Sisu and typing unicode in GNOME

Jinks

September 1, 2008
I am from Germany but i use an US-layout keyboard since that's a lot easier for most my programming needs. Now, having to also write the occassional german letter or ...
Sisu and typing unicode in GNOME

Toni

September 1, 2008
Hi, You might want to add an xkb keymap. Make backups before you begin ;) And sorry about formatting. in /usr/share/X11/xkb/symbols/gb, after "intl", add this: partial alphanumeric_keys xkb_symbols "intl_fi" { ...
Sisu and typing unicode in GNOME

Ciaran McCreesh

September 1, 2008
On a UK keyboard you do alt-gr+[ followed by a to get ä. You don't need the control key at all.
Sisu and typing unicode in GNOME

name

September 1, 2008
Hi!,
List files recursively by modified time

name

September 1, 2008
Hello!,
List files recursively by modified time

Leif

September 1, 2008
On my Norwegian keyboard, the diaeresis is easily accessible, like on Jani's Finnish one. It's one of the few keys that doesn't advance the cursor, along with the tilde, circumflex ...
Sisu and typing unicode in GNOME

Lornix

September 1, 2008
ä <= compose, ", a ö <= compose, ", o å <= compose, o, a Ä <= compose, ", A Ö <= compose, ", O Å <= compose, o, A ...
Sisu and typing unicode in GNOME

name

September 1, 2008
Good day!,
List files recursively by modified time