Money and Who Makes It Is ...

Why SaaS is Vital to Email and Web Security Avoiding the Latest Phishing Attacks Safeguarding Critical Data Intercept Spam & Viruses Seven Steps to Secure and Seamless Field Mobility Backup and Recovery for Microsoft Exchange Server Sign up to receive Security Resource Alerts

August 15, 2005 (Computerworld) -- ... a sensitive issue in the open-source community. According to Mitchell Baker, president of the Mozilla Foundation in Mountain View, Calif., "Anytime money gets into the picture, people get suspicious." Baker was explaining to an audience of open-source
developers at the O'Reilly Open Source Convention in Portland, Ore., earlier this month why she feels her nonprofit organization needs a for-profit sister company to promote and manage the world's No. 2 Internet browser, Firefox.
The money problem inside the open-source world stems from the fact that most developers who contribute to open-source projects do so for free, while some individuals build successful companies around those projects and profit from them. Paul Everitt, executive director of the Plone Foundation in Houston, which promotes the Plone open-source content management software, says, "If you want to attract developers, you can't give off the smell that someone's going to make a lot of money" while leaving the developers in the cold.

Winston Damarillo, CEO of Simula Labs LLC

Mike Shaver, the Mozilla Foundation's technology strategist, says those views helped shape the structure of the new Mozilla Corp. so it would own no assets and, despite its for-profit status, would be unlikely to earn a dime. "Everything we do is for the [Mozilla] community," he says.
Winston Damarillo, CEO of Simula Labs LLC, a venture capital business that nurtures open-source companies, acknowledges that there's "a little bit" of resentment among some open-source programmers. Damarillo, who recently sold open-source application server firm Gluecode Software Inc. in El Segundo, Calif., to IBM , proudly says, "We produced a few open-source millionaires." But he stresses that his goal is to offer the "inner core [of developers] of an open-source project to be co-founders" of the companies that Simula Labs will launch.

	Zach Urlocker, vice president of marketing at MySQL Inc.

Zach Urlocker, vice president of marketing at the leading open-source database company, MySQL Inc. in Cupertino, Calif., claims that open-source developers "are less extremist today." Still, he says it is essential for MySQL "to err on the side of overcommunicating" the company's goals to developers to deflect any resentment that the company makes money. In addition, says CEO Marten Mickos, MySQL pays for key pieces of code developed by contributors to its database.
Damarillo argues that people in the open-source community have much to offer the IT industry. "The biggest loss for open-source is if developers become salaried employees instead of entrepreneurs," he says.
Open-source code can pose legal ...
... headaches for IT departments if they don't carefully manage the Byzantine licensing requirements. Paul Henderson, vice president of marketing at Black Duck Software Inc. in Waltham, Mass., claims that his company's knowledge base includes nearly 600 different licenses and their terms. He says Black Duck's ProtexIP software will analyze your code to make sure you're in compliance with the various terms demanded by these agreements.
Mark Tolliver, CEO of San Francisco-based Palamida Inc., which offers a competing product called IP Amplifier, says open-source license management tools are essential because developers slip free but licensed code from the Internet into corporate projects. And, he says, IT managers involved in mergers and acquisitions need a license evaluation tool to review code to ensure that software assets they are acquiring meet IT policies. Tolliver says that because IP Amplifier can scan your code, a logical extension for IP Amplifier in the future will be to also scan for export-control compliance and security deficiencies.
A licensed version of Black Duck's ProtexIP starts at $25,000. An ASP version begins at $3,000. Palamida's IP Amplifier starts at $5,000 per developer.

ForeScout's CounterAct security appliance

Detect external reconnaissance ...
... of your network, then block the source. That's the "simple" technique used by ForeScout Technologies Inc. in Cupertino, Calif., says Ray Wizbowski, senior director of market development. Its tools detect outsiders who ping devices, sweep network ports and use other hacking techniques, then they refuse the source of those recon efforts to reach your network. The Aug. 22 release of its CounterAct 5.0 appliance software will be able to determine whether endpoint devices accessing the network are compliant with policies regarding antivirus software, patches and other conditions set by IT. Pricing starts at $12,000.

Print this Story

Send Us Feedback

E-mail this Story

Digg this Story

Slashdot this Story

"This company's infrastructure group is running a disaster recovery exercise with a reluctant participant: an IT manager who's notorious as..." Read more... "It's IT Blogwatch: in which Mozilla's Firefox Web browser continues to gain market share, smashing records as it does so...." Read more... Read more Security posts or See all Blogs

Microsoft promises four patches next week Google gives away home-cooked Web application security scanner Storm botnet stages Fourth of July attacks More top stories...

Microsoft trumpets security additions in upcoming IE8 Apple cuts price of high-end SSD MacBook Air by $500 Ultrathin showdown: Apple MacBook Air vs. Lenovo ThinkPad X300 vs. Toshiba Portege R500

This old laptop: Revitalizing an aging notebook on the cheap All it takes is a couple hours and about $125 to breathe new life into an old laptop. Here's how. Bill Gates moves on Is Microsoft's Golden Age over? What are Gates' most memorable quotes? Find out in Computerworld's complete coverage of the end of the Bill Gates era at Microsoft. Five things you should never tell your boss There are some things your CIO definitely doesn't want to hear. Also don't miss the flipside, Five things you should always tell your boss. Hands-On: Firefox 3 fixes what's broke and keeps what's right With its latest version, Mozilla's browser continues to raise the bar for what Web browsers should be. Windows Vista A to Z Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS. More Continuing Coverage After 9/11: Homeland SecurityAsk a Premier 100 IT LeaderBlackBerry Legal BattleData Security BreachesElectronic VotingFirefoxH-1B VisasHP's Boardroom ScandalHandheld DevicesHurricane Katrina AftermathMicrosoft Legal IssuesMicrosoft's VistaOpen SourceRFID TechnologySCO's Linux FightSarbanes-Oxley ActSpamVoice Over IPWi-FiWindows Meta File VulnerabilityWindows XP Service Pack 3 IT Careers 2010 Four years from now, the IT field will be a vastly different place. Will you be ready? More Special Reports Premier 100 IT Leaders 2007 Best in Class2006 Computerworld Horizon Awards2006 Premier 100 IT Leaders2006 Salary Survey2007 Best Places to Work in IT2007 IT Forecast2007 Premier 100 IT Leaders40 Years of ComputerworldASPs, Take TwoBest Places to Work in IT 2003Best Places to Work in IT 2004Best Places to Work in IT 2005Best Places to Work in IT 2006Business Intelligence Home RunsBusiness Intelligence: Smarter BIBusiness Intelligence: The Future of BICRM Goes VerticalCRM: Sober CRMCareer Planning Guide 2005Careers: IT Profession 2010Computerworld Horizon Awards 2005Data Management: Mining for GemsData Management: Taming Data ChaosDevelopment: Hard-Workin' Web SitesDevelopment: New Tools New ChoicesDevelopment: The New World of Application DevelopmentDevelopment: The Web Services TsunamiDevelopment: Web Services HurdlesDisaster Recovery: Preparing for the WorstE-commerce Grows UpE-mail/Groupware: Big DecisionsFaces of Mobile ITForecast 2006Global MobileHardware: Multiple Cores, Multiple ChallengesHardware: On-Demand Un-HypedHardware: The Shape of Things to ComeHorizon Awards: 10 Cool Cutting Edge TechnologiesIT Management: Guide to Managing VendorsIT Management: Navigating Global ITIT Management: Recovery AheadIT Management: The Future of ITIT Management: The Resourceful Project ManagerInnovative Technology Awards 2004Management: Reinventing ITMicrosoft in TransitionMobile/Wireless Leaders and LaggardsMobile/Wireless: The Untethered WorkerMobile/Wireless: Tiny Gadgets, Huge CostsNetwork Management: Taking ControlNetworking: Turbulence Ahead!Networking: VoIP Goes MainstreamOperating Systems: In the Slow LaneOperating Systems: Linux Goes GlobalOperating Systems: Should You Nix Unix?Outsourcing: Offshore Buyer's GuideOutsourcing: Outsourcing DangersPremier 100 IT Leaders 2004 Best in ClassPremier 100 IT Leaders 2005 Best in ClassROI: Do the Math!Salary Survey 2003Salary Survey 2004Salary Survey 2005Security Action PlanSecurity: Compliance HeadachesSecurity: Proactive SecuritySecurity: Risk and RewardSecurity: Tips From Security ProsSouped-up SecurityStorage: Battling ComplexityStorage: Cheap & Secure Data StoresStorage: Stretching Your Storage DollarsStorage: The Lean Storage MachineStorage: The New Rules of StorageStorage: The Ultimate Backup GuideSupply Chain: Missing LinksSupply Chain: RFID Reality CheckThe Business of SecurityWeb 2.0 SecurityWireless: Wireless At Work All Zones Application Performance Zone Business Continuity Zone Data Center Management Zone Enterprise-Class Security Zone The File Data Management Zone Grid Computing on Windows Zone Security Management Zone ITIL Best Practices Zone The SAS Zone Storage Virtualization Zone Business Intelligence and Analytics Zone See your link here

Why SaaS is Vital to Email and Web Security Why SaaS is Vital to Email and Web Security Download this webcast, free, compilments of Webroot Software Go to the webcast  Computerworld Executive Bulletin: Building a Robust Antivirus Defense Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs. (Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more. Download this executive briefing  Eliminate SPAM, Gain Productivity Get this white paper now! (Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold. Download this white paper  White Papers Read up on the latest ideas and technologies from companies that sell hardware, software and services. Deploying Virtualized NetWare on Linux Whitepaper Toward More Flexible, Next-Generation Collaboration Solutions Driving Business Success Through Workgroup Choice and Flexibility View more whitepapers

• Microsoft promises four patches next week
• Google gives away home-cooked Web application security scanner
• Storm botnet stages Fourth of July attacks
• More top stories 

Security Management Zone Security management is the process of developing a comprehensive data protection plan. It takes into account all potential threats, the existing network environment, the future needs of the organization, and lays out a multi-tiered blueprint to integrate the security technology needed to combat these threats. CDW can help keep your network and data secure. Visit the CDW Security Management Zone now See All Zones

Fired up about IT? Join Sharkbait and share your true tales of IT. SharkBait is the place for you to sound off about everything IT – the good, the bad, and the rest of the weird stuff you deal with every day. New baits

"Security Directions" virtual trade show 2008's Code-Red Security Issues for Protecting the Enterprise Webcasts, white papers, demos, and more. Presented in a unique 3-d environment. Enter our show right now! Click here to enter

In Security Security's important, and risk must be addressed, right? Sure, but watch for four signs your policies go a bit overboard. Click here to read the latest column by Jon Espenschied