Hacker News Reader

One question.

If this analysis by Citizen Labs is correct: https://citizenlab.org/2012/07/from-bahrain-with-love-finfis...

Then it seems very much that FinSpy uses GNU libGMP on its source code, right?

If that's the case, aren't they obligated by law and license to release the relevant source code of their system to the public under GNU v3 or GNU v2 licenses?

View on HN

You don't have to release the source code to the public. That is just one of the easiest ways to satisfy the terms of the license.

To further specify: The GPL states that the recipient of the software has a right to also get the source. The public is simply not a recipient of the software.

Is in this case recipent also the user of the infected computer?

Well... now it is ;)

They only have to release that particular source code and any changes they have made. They aren't obligated to release anything related to or using that code. Essentially it just means they need to provide links to download either the original code if they haven't changed it or provide the source if they have altered it.

That's only if it's the LGPL and they modified the original library. If It's GPL licensed, then yes, if someone asks for the source code, they have to make it available.

Reply on news.ycombinator.com