Do you have 30k CHF pocket money?
cds.cern.ch
cds.cern.ch
EDIT: The proper way to handle this would've been to say "Hey! Your site license doesn't cover this. Please don't do it again, as we depend on that license revenue to pay our bills to write great software."
That's mostly the proper way to get people to not care and end up killing your business anyway.
> Someone that's selling proprietary software is
> acting like an ass, let's teach them a lesson.The naivete and total absence of awareness of how things work in the Real World in this thread make me shake my head. 'Hey all, someone should write an open source version!' - sure, and in the mean while, those same people gush over some guy raising 300k for "the next generation code editor" who then barely manages to build something that works at all, let alone is an actual improvement.
Software is hard and expensive, especially software that has actual domain knowledge embedded, unlike the 1000th 'micro js framework for single page apps' and fads like that. All the hate on people and companies who make a living selling software (gasp!) is... well, there is no other word for it - plain dumb.
(yes, I make (part of) my living from selling software)
> If it was truely the easy to replicate cash cow some seem to be assuming, there would be competition all over the place; or a lab would get some intern to replace it in 6 months.
Okay, now I have to ask. Do you have any experience with interns at a university trying to write even, let us assume, a relatively simple and straightforward piece of software?
Don't get me wrong, I partly agree with you, nobody's going to rewrite the high-end scientific software in a weekend.
But you seem to be saying that's because it's too hard. What I'm saying is that the people with the domain knowledge (physics students, interns, PHDs, whatnot, even the computational science guys) are pretty much uniformly shit at writing software. It's a big reason why there's not a lot of code sharing going on in the scientific community: Shame. And that if it was published nobody would want to read it, and there's a rather big chance it would reveal fundamental research errors.
The real reason this "high end" scientific software is guarded so heavily is because the fact that they have other users than themselves, they know they are in possession of a unicorn.
Then there's the part where all the old professors have their (unreadable) scripts written for that ancient unicorn, so even if something better comes along, nothing's going to change much. And even if the students translate (read: completely rewrite and fix some longstanding bugs) those scripts to the modern software, the professors won't have anything to do with it because they don't want to learn the newer thing since they spent so much effort getting to know the arcane old thing (though they will claim they don't trust the new software yet).
Dinosaurs. People will wax nostalgic over having worked at (gasp) actual UNIX terminals in their university years. Except it was the year 1999 and you had to FTP to the one machine with a floppy drive to take your stuff home. Sorry I digress, but yaaaaay science.
Let's get building!
https://www.comsol.com/press/news/article/821/
"Another factor that was attractive was the fact that a single network license allows CERN to run a COMSOL job on any number of cores or a compute cluster."
And their "Floating Network License" allows use across an entire network, but not off that network: https://uk.comsol.com/products/licensing
[1] http://information-technology.web.cern.ch/services/software
Would that be a justified response? By the exact reading of the law/agreement probably not. But then again, this student was free to use the software at CERN, he just went out of his way to also work with it on his laptop (for the same project I suppose). That means the company is punishing someone for using their software, even though there was no lost sale. For me it feels unnecessary to put a 30k CHF fine on someone that way.
Essentially, this person could legally claim that CERN or one of it's employees requested he install the software, and to just download it if the normal process didn't work.
If as part of your job you violate commercial agreements (this includes copyright related infractions and licence violations), the company is responsible for any and all damages and contractual consequences of these action(s). Even if there is no contract involved, for example in the course of your job function, you drop a pallet onto someone's car, the company is responsible for the damages. They can, of course, fire you as a result of this mentioning something about "lack of proper judgement", but that's the limit of what they can do. They can also not withhold wages for any period the employee was under contract, no matter how much damage he caused.
There are exceptions which mostly relate to an employee signing contracts in the name of the company and criminal acts, but they don't seem to apply here (the company board must name and publish a list of people who are authorized to sign in the name of the company in a government registry. Anyone who signs an agreement with said company is responsible for comparing the signature of the contact with that list. If you fail to do this, the contract may be null and void) (also, this is assuming it was not a criminal act. But neither copyright law nor contract law falls under criminal law, so only copyright violations committed as part of your job cannot result in you losing more than your job)
This employee should immediately cease all communication with CERN relating to these damages, neither admit or deny anything at all and resolve the matter with the help of a labor lawyer. Ideally, he should continue to carry out his duties as specified in his employment contract, but NOT talk about this incident, instead requesting all communication relating to this happen through registered mail.
This strongly looks like CERN is trying to pull a fast one on an employee. CERN, not the employee, has to pay damages resulting from one of their employees violating a contract they signed.
Really? I could take a job with a software company, then purposefully pirate everything in sight, and the worst that could happen is I get fired? And the company has to pay the damages?
(Be right back, applying for an NSA job.)
I am not a lawyer.
They could try. I've seen HUGE fusses being thrown over way more reasonable refusals than this.
Submission tends to be covered by laws as well.
Now, we're more using "her" for "person of unspecified/unknown gender", but the problem remains: We've got three states (male, female, and unknown/unspecified), and only two words (him and her). No matter what, there's going to be this kind of problem, until we come up with a third word. (People have suggested "they" or "them", but I don't like it because of singular/plural issues.)
The story refers to the article, the student, in the masculine form. In English, we do not have explicit masculine/feminine forms of adjectives, therefore the article, in this case a student, is a male as the story's author referred to the article as 'him', 'he' and 'his'. I simply do not understand what you are finding so hard about this, other than petty political correctness. QED.
Furthermore, it is totally irrelevant to the story itself!
You. Are. Wrong.
That's one of the ways people use "him". Other times, they use "him" to mean that the individual in question is male.
These days, "her" to combat the implicit assumption that people must be male is common enough, it's almost safer to assume that "him" means someone who is specifically male.
I think this is not true yet. Anecdotally I personally only noticed this first a few months ago and no one I've discussed it with in real life has yet known what I'm talking about.
The software company was within it's rights, but there's a big difference between what you're legally allowed to do when you detect a licence violation by a big customer and what you should do. You should attempt to preserve your company's good name at CERN and get the licensing situation fixed (by removing the extra copy or relicensing it). You should not try to go after a poor CERN student for 30k because he/she installed your software on the wrong computer despite having a valid license.
Part of running a good business is looking for opportunity wherever it exists. The company can see the opportunity to squeeze 30K from a client, but when that license expires, the chance the customer goes a different direction is higher. Instead if you accept that it was a mistake, use it as an opportunity to expand the license, not only have you increased the revenue from that company, but you've also shown you are easy to work with, forgiving and therefore the customer is more likely to renew.
I'll provide a very anecdotal story that happened to me. I once worked in a bar/kitchen and was paid under the table in cash each week. The owner would give me the cash in an envelope with the number of hours I worked. On a few occasions he would overpay me by $20 or so. Some may this as an opportunity to get an extra $20. Instead, I would go to my boss and say "Hey, you accidentally over paid me by $20" and hand him a $20. I can tell you that the respect and admiration I received for being honest, was worth way more than the $60 or so extra I would have received if I had just shut up and took the money. Moral of the story - look for the real opportunity, not the immediate payout (as the software vendor did with CERN).
Various people tried to steal our stuff. Every once in a while someone would call us up and tell us what we should give them a free copy because, in a lot more words, "it would generate goodwill." I'm sure they might have even believed what they were saying. But it wasn't their rent money on the line. It was ours.
(Other people would call us and tell us, literally, that they had mailed us a check, so please ship out the software now. The most obvious "we are lying to your face and fuck you if you need money to live" was a military branch that said they couldn't buy a license until we removed our copy protection. After a bunch of negotiation, we finally said "sorry, take it or leave it" and they bought three licenses. Huh.)
I'm not saying that the company is right. But I am saying that that software company is the one with their butts on the line. If you are wrong, absolutely nothing goes wrong for you. But if they listen to your advice and it turns out to be wrong, they lose money, or maybe go out of business. They can't use "goodwill of 'giarc" to pay their lease.
People who have been in the business of selling software learn quickly that people who complain online about proprietary software are not their customers and will never under any circumstances end up as their customers.
For what its worth, as a developer, I agree that the vendor should be able to enforce their product licencing. They have to make a living. But their actions here are heavy-handed, and those of CERN and the university are cowardly. Given what CERN does, and that the person in question was a student, its not like anyone profited from the licence infringement.
A more mature response would be to arrange for the student to do a modest amount of unpaid work for the software vendor to symbolically make amends and understand each others point of view.
Bottom-line, if you're active in an organization like CERN you come in contact with a lot of expensive equipment. The student made a mistake, but did so as a result of the involvement with CERN. If you can't even protect your students from virtual claims what happens if you mistakenly do some actual damage at CERN, do they send you a bill for millions?
It seem like they are more interested in enforcing their own rules than anything else. Mindlessly writing things like "CERN offers a variety of commercial software and has all the corresponding licences you'll need for your professional use", when they've just concluded that "However, the CERN AllSIM installation would not allow for this, as roaming usage is not covered by CERN's AllSIM licence".
The student should of course refuse to pay, forcing the license holder to either sue or settle. Probably for far less of an amount. At least if CERN hadn't published the whole thing, increasing the risk of the student being made an example of.
But. Students are usually young, relatively inexperienced, and have limited resources. A $31k fine would probably end their academic career and have a long-term effect on their life. And to what end? Why do this to someone at the start of their adult life?
CERN and the university - without agreeing with the student's actions - should recognise the power imbalance between the student and the software vendor, and the absence of any real damage caused, and they should look after their people. That doesn't mean siding with the student, just using their position as respected institutions to bring about a just settlement. Their failure to do that makes them cowards.
Also, the software company didn't go after the student themselves. They billed CERN, which billed the Uni, which billed the student.
I'm inclined to side with the student, I think. When I pay for stuff, I want to be free to use it in a reasonable manner, and restricting usage of the software on the specific computers the company likes is not reasonable.
Again, I might have misunderstood.
This was OP's point. If I'm paying for a boatload of expensive licenses, why should I be limited to how and where I use the software?
Makes no sense to me.
[1] http://www.joelonsoftware.com/articles/CamelsandRubberDuckie...
FTFA; But our student failed to download AllSIM from DFS onto his office PC, since that wasn’t where he wanted to use it. He wanted to install it on his laptop so that he could work on his simulation while travelling. However, the CERN AllSIM installation would not allow for this, as roaming usage is not covered by CERN's AllSIM licence. The student had a need and was not willing to compromise i.e. by using the Windows Terminal Service. Instead, he used Google and quickly found AllSIM for free on a dubious website. Three clicks later, he was ready to go.
For convenience, the student essentially stole the license.
The license for his usage existed in the pool - it is only a combination of CERN security policies and the company licensing check limitation of their product that prevented proper identification and therefore infringement.
Sure there is violation, but the elephant in the room here is that a license was available and paid for so the company producing the software had been compensated. We are not in the grey area "but I would not have bought it anyway" where "stealing" could somewhat apply.
So the "stolen" word is a strange word for an act which leaves the owner with the goods, and does not cost the owner a sale that they otherwise would have had.
What it is, though, is taking the owner's software in violation of the owner's terms. That's immoral (arguably), and definitely illegal. What it isn't, though, is stealing in the historic meaning of the term. (Though that may not be a valid argument, as uses of words change with time and new circumstances...)
The car theft example is not an analogy it is a fact. I never said that taking a car is legal. However, the crime is "taking without permission" not "theft" (although it is I admit often referred to as theft in common parlance). This is because theft has a clear long standing meaning which for various reasons is often difficult to establish for cars. Therefore a new type of crime (which happens to have the same punishment) was created.
The point about how stupid you copyright maximalists sound to the general public when about software 'theft' stands. You weaken you position when you do so and make yourselves subject to ridicule.
You're right that what that user did was not ok. Unfortunately comments like this one just compound the problem. When you can't flag a comment, someone else probably will. Or you can email us at hn@ycombinator.com. But please resist getting into a personal spat.
Additionally I have attempted to be reconciliatory during this discussion whereas she has only been confrontational.
I'm sorry that I eventually got slightly annoyed.
We all lose it on the internet sometimes. On HN the thing to do is recognize that you broke the rules, stop blaming the other person for it, and move on.
The I-merely defense ("I was merely X-ing, but they were Y-ing") doesn't work. You can, and people do, justify anything that way.
Good luck in your future endeavours.
What do you think a software license is?
A physical piece of paper or something?
The student didn't "take" a license, if he could have, and did, there would not even have been a case because he would have had a license!
For clarity, not attacking you, just pointing out your completely inaccurate view of intellectual property law, with the intention that other people may not get any ideas this is actually how copyright works.
But don't worry, I won't call you out for being patronizing, not when you're the one being taught.
If you want to be pedantic - then no it is not that simple.
The student is in license infringement, copyright violation, contract with CERN violation, ... but has not stolen anything.
But yes, he need to pay for those "crimes". That's what the 30K fine is for ?
Nope the 30K is just an agreed payment between the CERN and the Company for the discovery of his infringement. That money will charged back to the University thanks to another agreement and only then is going to be charged to him. The "theft" will go unpunished in the eye of the law.
The student fucked up - that part is simple. Everything else that leads to him having to pay 30K is anything but simple. Considering the context described in the blog it involves a lot of bad faith from the company and the CERN.
First, there was NO theft. Copyright isn't about theft, no matter how the media likes to portray it, what matters is the law. License violation. Not theft. Not stealing. Violating license.
Further,
> He went to a website, not under CERNs jurisdiction and downloaded a cracked copy of the software
Has absolutely no bearing on the license violation. None whatsoever. No theft, no "illegal downloading" (whatever that means), especially in the world's saner jurisdictions where reverse engineering and/or cracked software by itself is NOT illegal.
It doesn't matter where he got the copy, because a copyright license has nothing to do with obtaining or possession. So it can't be theft. Copyright license only covers WHAT you can do with a piece of intellectual property.
CERN has a site-license. If the student had downloaded the cracked software, from anywhere, but used it only on-site: No problem. Covered under the license. Bonus: no dongle required.
> It really is that simple.
It's not actually that complicated to stick to the legal facts either.
EDIT; I agree entirely that CHF30000 is way over the top, but if that is a negotiated figure, then he owes it.
The student has wilfully broken the law. Due process has clearly been undertaken. Again, RTFA.
Due process implies a legal process not a random invoice and several large organisations charging an individual an arbitrary amount.
Let's examine your quoting the word "facts". Are you disputing that HE acted unethically? By using unlawfully procured software? Are you really arguing that these actions should go entirely unpunished?
There is only 1 organisation charging an individual, who has used said company's product unlawfully (this is the bit you seem incapable of acknowledging). The other 2 were implicated by HIS unlawful and unethical and merely met their legal obligations in identifying the guilty party.
Whichever way you look at this, however militantly anti-capitalist you are, failing to accept the individual acted unethically and with impunity is a ridiculous position to take. Should HE pay the money? No. HE should negotiate. HIS career in the very small field that is academic particle physics is over as HE has acted unethically.
End of discussion.
If I get caught taking a $5 item from a store in my pocket, should I just be able to pay the $5 and say "hey, we're all even now."?
This works both ways : if he invents/builds/... something and CERN sells the fruits of his labor (or otherwise profits from it), he doesn't have a claim to single cent of that profit. If he does something as part of his job that damages CERN, the most he can lose is his job. If he unintentionally blows up CERN headquarters, CERN quite literally has to pay him his wages for doing so, medical expenses, ... the company would even have to replace his cell phone if it broke during the explosion and pay to have his pants cleaned afterwards. The unintentional part is only required because, if intentional, it would be a criminal act (and this intent needs to be proven beyond reasonable doubt, not merely indicated). Even if he failed to follow safety procedures while doing so, it was the company's responsibility to correct him, and the consequences for failing to do so are theirs.
2) stealing is a criminal act, and governed by an ENTIRELY different part of the law. The two cannot be compared. This case would be governed by employment law and commercial law, stealing is covered by criminal law.
But your example has another flaw: if you can even vaguely reasonably claim you took the item by accident, yes you should be able to pay the $5 and be even. No criminal court judge is going to convict anyone who non-violently took a $5 item, and offered to pay the damage in full the second he was confronted. This would not be reasonable.
That is a warning to be careful I heard was given to sysadmin. Even if their boss require them to steal personal information or "find" software, they are legally responsible for doing it.
There is a point area somewhere between murder and failure to protect confidential information at which the company takes over responsibility, but that's not a blanket protection as financial obligations.
So, very generally speaking, anything you can't get arrested for is covered by your employer.
So the student is only technically at fault in the same way as you are technically trespassing when you sneaked behind your colleague that day your forgot your badge.
The reason the company was able to extort ( I think that's the only appropriate term here ) 30K is because of the enormous B2B corporate administration will process this issue routinely rather than using common sense.
As a European tax payer that is not the behavior of a company I want my tax money to fund.
His choice was between accessing the software over a display proxy, and accessing the software locally. The provided functionality was essentially the same either way.
I don't understand how this minor technical distinction should be worth 30 kCHF.
The fact that there was a technically inferior workaround means jack shit. Yes, it's technically inferior, that's why you should pay for the real thing.
"A workaround to your licensing deal existed so I wasn't violating your licensing deal!" is nonsense.
If you're going to have arbitrary "You can't use the software except at this location" clauses, then they should be applied consistently
And even if it were "abritrary," the time to discuss that is when you are negotiating the software license with your vendor. This isn't shrinkwrap software being sold at ElBo under a clickwrap license. It's a sophisticated buyer who has a staff member dedicated to the job.
You can tell "roaming license" was valuable because this student went to a warez site to get around it. The vendor likely charges more for it, and CERN didn't want to pay it, so CERN voluntarily left that functionality off the table. Then the student decided to overrule CERN's negotiating and the rules CERN had explicitly set out[1]. Oops.
I don't get to decide the GPL is stupid and release modified software without source.
In that case, it is applied consistently.
Sure, people using your software without a valid license is not cool. On the other hand, AllSIM didn't suffer any damages.
Also, there are probably not that many potential customers in the world for AllSIM(TM). Maybe CERN should have used their power to make clear that this was the act of a naive student, and that a ridiculous fine could seriously impede the future business relation with CERN...
I've seen many photographers who ended up with the exact same behaviour because any other is a good way to get steamrolled. Infringement = infringement invoice, period, end of the story.
> 30kCHF is an outrageous claim.
Depending how the original license cost (for a roaming license too) is, not necessarily. An infringement invoice must be significantly higher than a regular license or there's no point to getting a license, you can just wait to be caught. Considering the kind of products we're talking about, licenses are probably in the 5k~10k range. A 3~5x infringement surcharge isn't outrageous.
> On the other hand, AllSIM didn't suffer any damages.
Somebody used their product unlicensed in a way not allowed by the licenses they had access to, that sounds like damages.
> Also, there are probably not that many potential customers in the world for AllSIM(TM).
On the other hand, there probably aren't that many potential replacements in the world for AllSIM.
> Maybe CERN should have used their power to make clear that this was the act of a naive student, and that a ridiculous fine could seriously impede the future business relation with CERN…
Why? CERN suffered no damages, they forwarded the invoice to the student.
Total different scale. One photographer vs thousands of infringers is different from team of lawyers vs one casual infringer which is also a good customer.
> A 3~5x infringement surcharge isn't outrageous.
We'll have to disagree there. The copyright industry is the only industry on earth using multiplicators as liberally as this, for "damages" that are very hard to prove in the first place.
> CERN suffered no damages, they forwarded the invoice to the student.
Yeah, and that's a dick move as well. The student clearly did wrong, but CERN might have had a responsibility by not monitoring what this student was doing (why did he have to install the software himself? Where was the sysadmin? Why is he allowed to use his own laptop? etc etc). They acted like Pilate, and that's not good in my book.
Well their own blog post will damage their reputation quite a lot.
[citation needed]
With internet commentors. CERN runs on karma and will shut down if people on Twitter say mean things about it.
Since the student had access to the software with a more restrictive license, they should have charged only the price difference between the two licenses (or some reasonable surcharge of that, as you suggested). Also I assume these licenses are multiuser licenses, charging the full license price is kind of unfair.
In the end what is the intention of the software company? They probably only want to enforce the license so nobody uses their software illegally. It's irrational to get a revenue from these cases. 1000 CHF from a student I think is a big enough hit to discourage the illegal usage of their software among students, really, and they wouldn't send a student to deep dept.
This kind of minor stuff is often seized upon to demonstrate self-righteousness and establish a defense for future claims. For example, in a large company in which I worked (tens of thousands of people), someone at my site installed some unlicensed utility, which I think was worth like $200, on his laptop, just to check it out - it was something he didn't even need. The utility phoned home, the author company wrote a letter - not even a rude or threatening letter, just an FYI - to the large company. The next day, the large company made a huge show of having security meet this guy at the entrance with a box of his belongings, and sending a mail to everyone about how they just fired someone for unlicensed use of software, filled with some of the same sanctimony used by CERN. Everyone thought this was ridiculous, and that there were better applications for the high-mindedness.
But it's not his story!
The author is actually the bad guy! The thing that makes the experience hell is...him. He's just being a jerk, for numerous reasons. I hope he has $1 million lying around to contribute to cern's recruitment budget, because that's what his behavior costs as words of stories like this get around.
Just read the comments here at HN. In what possible universe is a public blog post like this an appropriate reaction? The only one damaging CERN's reputation is this guy.
What would "the right thing" be exactly? Nor enforcing their own rules, eating the costs of a student fucking up (when they didn't have to) and gaining the enmity of a software vendor?
As someone who is hardly the student's best friend on this thread, I'm skeptical they could really stick him with the 30K bill, and even more skeptical that they could get any of it from him, since he is judgment-proof.
Alternatively, everyone could be adults and settle for a smaller, much more reasonable amount proportional to harm. Especially considering the company wasn't really harmed substantially by this since he did have access, just not on that machine.
The best way to do is explain and negotiate with AllSIM. As I understood the student used pirated software for a very short period of time. If AllSIM are human, they will not charge CERN, or charge low fine (<1k €).
Rules are rules, without obeying them, student compromised reputation of whole CERN, then his/hers university and finally himself. Probably CERN will not hire him and will not recommend to anybody else.
An uncompromising "rules are rules" attitude for non life-threatening policy violations in an organization comprised of human beings is asinine.
It is not the student who is damaging the reputation of CERN in this situation, it is CERN.
It's just about who is trustworthy and reliable, and who is not, especially in an organisation where people are very educated and probably with high morality standards.
CERN or possibly the University employed the student. They are the relevant party.
AllSIM are almost ridiculous with this speculative invoice.
You are a copyright maximalist. I have a different view where I believe that creators should be paid but not to exclusion of the rest of society and not to the exclusion of the rule of law. This colours both of our views of the facts and we will never agree. We both think that the other is sadly misinformed and a foolish with a politically motivated viewpoint.
Goodbye.
I believe that if you have made an agreement, you keep it and if your employer has agreements with third parties, that you honour those too. If you, or this indivudual, have moral objections to said agreements, the choices are simple, leave their employ.
Taking and using the software without permission or regard for agreements made in legally binding contracts is not an option, and it is not morally or ethically anyware close to doing the right thing. You seem to have lost sight of this because your views are politically motivated. It has nothing to do with your views of how the world should work.
Since you are so concerned with the 'the rule of law' (due process doesn't exist in UK law, we have natural justice, but that's by-the-by), the students actions were in direct contravention of established laws and policies. You seem to think that HE is above censure because 'capitalism is bad, man'. Well I'm sorry to be the one to break this to you but, it's actually about ethics. This individual has none, and clearly neither do you.
QED.
I am certainly not an anti-capitalist. Although I don't regard such a comment as a slur.
I do think that creators should be paid.
I don't think that companies should slam arbitrary egregious charges on people -- and I know that courts don't always uphold these speculative invoices and indeed have been known to punish the people making the demand and their legal representation quite strongly.
I do know that most people in the real world would find this utterly outrageous given that the student had the right to use the software in question in the setting in which it was detected.
I personally would not do what he did -- all software that I use is either free (as in speech) or properly licensed.
Oh and you are a copyright troll apologist.
The student didn't have the right to use the software! It was only licensed to be used at CERN. HE downloaded it from an illegal site that provided a cracked version of the software on his own laptop so that HE could travel and not be at CERN, where he was entitled to use the software![0] He was even allowed to access the software using terminal services, but, in caps so it's easy for you to understand, CHOSE TO PIRATE THE SOFTWARE FOR HIS OWN CONVENIENCE!!! If you had read and understood the article, as you claim, you would know this. You even aknowledge that the software was improperly licensed!!!
To your ad hominem, I will respond in kind; you are an idiot.
[0] From the second paragraph of the fucking article: "But our student failed to download AllSIM from DFS onto his office PC, since that wasn’t where he wanted to use it. He wanted to install it on his laptop so that he could work on his simulation while travelling. However, the CERN AllSIM installation would not allow for this, as roaming usage is not covered by CERN's AllSIM licence. The student had a need and was not willing to compromise i.e. by using the Windows Terminal Service. Instead, he used Google and quickly found AllSIM for free on a dubious website. Three clicks later, he was ready to go."
Anyway, they could try a political solution (ie: call someone with authority in AllSIM)
> As he was affiliated with a university, CERN passed all costs to them who, in turn, passed them on to the student.
At first I thought that the software vendor was being unjustifiable. But if you think about it, the student was not just part of CERN, he was also (using the s/w) to work on a CERN project - so it does kind of all fall back into CERN's lap. Yet CERN passed the cost to the university, which passed the fine to the student?
CERN had a license pool available which the student didn't use, and the student most likely broke CERN's rules wrt licensed software. Why would CERN pay for a student's breach of their rules?
Did the student sign some type of a indemnification agreement with CERN?
I'd suggest CERN run a deep scan and begin backing up data and formatting systems. If they think 30k is bad, imagine the bitcoin bill for a cryptlocker key to the entire CERN dataset.
They should have contacted the software company in question and settled this, now both CERN and Allsim have a bad reputation and a student is deep in debt
There's a lot of businesses where someone downloading and running shitware they find on the Internet can be a lot more expensive than 30K.
It makes for a toxic workplace once employees/students in a facility feel like they can be thrown under a bus by management, or worse purposefully made an example of.
The whole approach here is destructive and makes me think that someone at CERN went on a power trip and is a real arsehole to work for.
Yes it was. CERN's negotiated contracts were broken, triggering a 30K damage award. Just because it's "on paper" doesn't mean the damage isn't real. He could have done the same kind of damage if he had sexually harassed an underling.[1]
I can say with very high confidence that "don't pirate software" is a key part of orientation at CERN, the same way as at most large companies.
The student might not have known about the specifics of the contract (and he shouldn't pay the 30K), but it's not the company's responsibility to tell each and every idiot "here is why you obey our policies." It's the company's responsibility to tell each idiot "these rules are important to obey."
[1] of course the student likely didn't have any reports
What's next? The guy who wrote the script that emails Comcast customers that they are doing something illegal makes a blog post bragging about it?
The student was wrong. He had access to a legal copy through CERN, but instead, he used a pirated copy. Not only is that legally wrong, it is bizarre.
The company was wrong. They are not a law enforcement agency. They have no right to demand a fine of CHF30000 be paid. At best, they can send a cease and desist. If they believe significant damages have occurred, they can sue.
CERN was wrong to pay the fine and pass it on to the student. For one, they had a site license. For another, after investigating, they found it to be the stupid act of a naive student who, I am sure, has learned his lesson by now. However, it was no skin off their back to pay up and pass it on. They should have refused to pay the fine and participated in coming to an amicable settlement between all parties involved.
The company has every right to send a speculative or infringement invoice, the infringing party also has every right to ignore said invoice and try their chance in court.
> For one, they had a site license.
Which didn't cover the student's usage.
> For another, after investigating, they found it to be the stupid act of a naive student who
had likely breached CERN policy and was possibly a hazard to CERN's computer systems.
They have every right to send a notice as I said, myself. It is the fine that I believe is unreasonable regardless of whether it is explicitly part of CERN's contract with the company.
Which didn't cover the student's usage.
No, but then, it wasn't CERN who downloaded and used a pirated copy, was it?
had likely breached CERN policy and was possibly a hazard to CERN's computer systems.
They said flat out that he violated their computing policy, so they can take away his computing privileges, but paying a CHF30K "fine" and sending him the bill?
The high fine of 30k was probably set because the company thought CERN was violating their licensing. For an institution or large company the size of CERN, 30k might be a justifiable fine.
If the company knew the infringement was done by a single student, they probably would not have set such a high fine.
Also, I doubt 30k would hold up in court as a reasonable fine, given that the student had access to the software anyway. Although him downloading the software illegaly shows some criminal energy.
But maybe I'm wrong and the company knowingly fined 30k for the single person's license infringement and CERN tried to avert that. Would be nice to know some more details.
1 CERN will fuck you over, do not count on them, and definitely do not go above and beyond to finish a job assigned by them
2 Use outbound firewall when using pirated software. Download said pirated software only from connections that cant be traced back to you. Learn about output files watermarking (for example IDA Pro watermarks everything).
Good job CERN, prime blog post there, people skills so stronk!
That was the right thing to do, not washing their hands of it and crucifixing a kid. Unfortunate things happen all the time in business, real men deal with it with fairness. This is despicable behaviour.
Having said that, I hope they are going to let go on the student with that 30k.
Well, pretty soon I wanted to read the book outside. Oh, but the rule. But wait, I had him outsmarted! I put the book on table in the house next to a window, and then I could read the book while outside.
Wait, this is stupid. Why am I reading a book through the window? I'll just pull the book out through the window and read it there.
WTF, my neighbor now says I violated the contract? I've triggered the damages clause of the contract I vountarily agreed to? All I did was move a book three feet through a window! I had a contract that I could read it!! I THOUGHT THIS WAS AMERICA!!!
I hope this ends up in court if Switzerland has similar rules. It seems like one of those situations where a company might legally be able to do something, but the ethics are uneasy.
CERN is throwing the student directly to the company. The student will probably be unable (financially) to fight the speculative invoice in court.
There is a reason this sort of thing is covered during orientation training. Sure, many people (especially those new to the real world like students) roll their eyes at it and think it's all just a bunch of mumbo jumbo; and OK, usually in practice it's not as strict as it seems at first, but that doesn't mean it's any less real.
And yes I do have a law degree.
Then you will know that contracts are only enforceable if they are legal. Also you will know that coercive contracts which one party could not understand tend to be looked upon unfavourably by courts.
What are they to do when no such "free software" package exists? Stop research? Spend years trying to build one when there's a known industrial package available off the shelf?
Considering the alternative is conducting research on top of intrinsically obscurantist proprietary software, the trade-off might well be worth it.
Also, because I can anticipate the response: just because 30K is not worth giving up on commercial software, it doesn't mean they shouldn't try to fix the user fuckup that cost them 30K.
The question of how one reconciles obscurantist practices with the scientific method remains open.