Bonum Certa Men Certa

Free Software Foundation Discourages Dependence on Mono, Dismisses Microsoft Community Promise

Last week, Microsoft extended the terms of their Community Promise to implementations of the ECMA 334 and 335 standards. You might think this means it's safe to write your software in C#. However, this promise is full of loopholes, and it's nowhere near enough to make C# safe.

Why Worry About C#?



Since we published Richard's article about Mono last week, some people have been asking us why we're expressing special concern about free software developers relying on C# and Mono, instead of other languages. Sun probably has patents that cover Java. Maybe IBM has patents that cover C compilers. "Shouldn't we discourage the use of these too?" they ask.



It's true that all software patents are a threat to developers—but that doesn't mean that all software patents are equally threatening. Different companies might have patents that could be used to attack other languages, but if we worried about every patent that could be used against us, we wouldn't get anything done. Microsoft's patents are much more dangerous: it's the only major software company that has declared itself the enemy of GNU/Linux and stated its intention to attack our community with patents. If Microsoft designed a patent trap into C#, that is no more than what it said it would do.



The company has been quite clear about its intentions since late 2006. At a user conference in November that year, Microsoft CEO Steve Ballmer said, responding to a question about their patent agreement with Novell:



... the fact that [GNU/Linux] uses our patented intellectual property [sic] is a problem for our shareholders. We spend $7 billion a year on R&D, our shareholders expect us to protect or license or get economic benefit from our patented innovations. So how do we somehow get the appropriate economic return for our patented innovation...?


(Seattle Post-Intellegencer, The Microsoft Blog, "Ballmer on Novell, Linux and patents," November 16, 2006.)

A few days later, an interview with Microsoft President Bob Muglia was published, and he made it clear that they considered C# one of these so-called "patented innovations:"



There is a substantive effort in open source [sic] to bring such an implementation of .Net to market, known as Mono and being driven by Novell, and one of the attributes of the agreement we made with Novell is that the intellectual property [sic] associated with that is available to Novell customers.


(eWeek.com, "Microsofts Muglia Talks Longhorn, Novell and Java", November 17, 2006.)



They've been turning up the heat ever since. In May 2007, Microsoft followed all this up by announcing in a Fortune magazine interview that they believed GNU/Linux infringed 235 Microsoft patents. And recently they made it very clear that these were not idle threats: the company sued TomTom for using the VFAT filesystem implementation in the kernel Linux without buying a license from it.



All of this can't simply be brushed aside. These are statements and actions made at the highest executive levels of the company. Using patents to divide and conquer the free software community is a fundamental part of their corporate strategy. Because of that, C# represents a unique threat to us. The language was developed inside Microsoft, so it's likely they have many patents to cover different aspects of its implementation. That would make free software implementations of C#, like Mono, an easy target for attack.



“The Community Promise does nothing to change any of this.”The Community Promise does nothing to change any of this. Microsoft had an opportunity to take action and demonstrate that it meant us no harm with C#. Instead, they took meaningless half-measures that leave them with plenty of opportunities to hurt us.



Incomplete Standards



The ECMA 334 and 335 specifications describe the core C# language, including information about standard libraries that must be available in any compliant implementation. However, there are several libraries that are included with Mono, and commonly used by applications like Tomboy, that are not required by the standard. And just to be clear, we're not talking about Windows-specific libraries like ASP.NET and Windows Forms. Instead, we're talking about libraries under the System namespace that provide common functionality programmers expect in modern programming languages: binary object serialization, regular expressions, XPath and XSLT, and more.



Because these libraries are not defined in the ECMA specifications, they are not protected in any way by Microsoft's Community Promise. If this were the only problem with the promise, it might be safe to use applications that avoid these libraries, and stick to what's in the standard. But even the code that's covered by the promise isn't completely safe.



Figuring Out What's Necessary



The Community Promise only extends to claims in Microsoft patents that are necessary to implement the covered specifications. Judging just by the size of its patent portfolio, it's likely that Microsoft holds patents which a complete standard implementation probably infringes even if it's not strictly necessary—maybe the patent covers a straightforward speed optimization, or some common way of performing some task. The Community Promise doesn't say anything about these patents, and so Microsoft can still use them to threaten standard implementations.



Moving the Goalposts



“The Community Promise does not give you any rights to exercise the patented claims.”Let's say you've written an implementation of one of the specifications covered by the Community Promise, and you want to determine whether or not you'll be sued for infringing a certain Microsoft patent. The necessity question already makes it difficult enough to figure this out. But even if you manage it, you should make sure you check again tomorrow, because the Community Promise might not protect you then.



The Community Promise does not give you any rights to exercise the patented claims. It only says that Microsoft will not sue you over claims in patents that it owns or controls. If Microsoft sells one of those patents, there's nothing stopping the buyer from suing everyone who uses the software.



The Solution: A Comprehensive Patent License



If Microsoft genuinely wants to reassure free software users that it does not intend to sue them for using Mono, it should grant the public an irrevocable patent license for all of its patents that Mono actually exercises. That would neatly avoid all of the existing problems with the Community Promise: it's broad enough in scope that we don't have to figure out what's covered by the specification or strictly necessary to implement it. And it would still be in force even if Microsoft sold the patents.



This isn't an unreasonable request, either. GPLv3 requires distributors to provide a similar license when they convey modified versions of covered software, and plenty of companies large and small have had no problem doing that. Certainly one with Microsoft's resources should be able to manage this, too. If they're unsure how to go about it, they should get in touch with us; we'd be happy to work with them to make sure it's satisfactory.



Until that happens, free software developers still should not write software that depends on Mono. C# implementations can still be attacked by Microsoft's patents: the Community Promise is designed to give the company several outs if it wants them. We don't want to see developers' hard work lost to the community if we lose the ability to use Mono, and until we eliminate software patents altogether, using another language is the best way to prevent that from happening.








Copyright ۩ 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Privacy Policy.



Verbatim copying and distribution of this entire article are permitted worldwide, without royalty, in any medium, provided this notice is preserved.

Comments

Recent Techrights' Posts

Newer is Not Better, Lunar Edition
Maybe in 57 years (2083, after all these wars) we'll managed to launch a capsule with a human and a dog above the stratosphere again
 
It Would be Good for Debian to Have a Female DPL, But...
Debian isn't exactly selecting people for quality or policing bad behaviour
IBM Insiders Say What's Wrong With IBM in Albany (and Yes, There Are Layoffs)
promotions boil down to what insiders now call "brown-nosing" and nepotism
After Killing OpenSource.org IBM Together With OSI Told Us It Would Carry on OpenSource.net, But the Site Has Been Essentially Dead for 9 Months (Effectively Abandoned)
OpenSource.org has been dormant for 4 weeks already and OpenSource.net last had a new page 9 months ago (it'll be 9 months tomorrow) [...] That's IBM in a nutshell
A Lot of What Happened to OSI is Because of Reporting by Techrights
Half a year since Stefano Maffuli (Executive Director) "left"
Public Presentations by RMS Hardly Interrupted Anymore
We'll carry on covering those sorts of topics throughout the year
Links 07/04/2026: US Wants to Put Journalists in Prison for Reporting Facts, Artist ‘Bale’ Arrested Over Rape Allegation in Social Control Media
Links for the day
To IBMers, IBM Has Failed and is Fast Becoming a Book of Jokes and One-Word Punchlines
How else can one make it obvious that IBM is circling down the drain?
"AI Revolution" Was a Lie: Microsoft CEO Admits What He Calls "AI" is Sometimes Sloppy and Microsoft Admits That Slop is for "Entertainment Purposes Only" (Not for Any Serious Work)
if it gets "memory-holed", we can bring it up again and again
Social Control Media is Not a Viable Business Model
The future of the Web might not be the Web
From Datacentres Boom to Actual Booms That Target Datacentres, Now Struggling to Justify Humongous Energy and Water Consumption
Datacentres that are used for mindless "entertainment" (as Microsoft calls it) like slop are not a priority at this time
Gemini Links 07/04/2026: Aircraft Lift Force, Editor History, and Consumer Hardware Stagnation
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, April 06, 2026
IRC logs for Monday, April 06, 2026
What Matters is Software Freedom, Not the Brands
The important thing is to speak about Software Freedom
Wikileaks is About to Turn 20
~2 days ago it turned 19.5
The Cloud of Smoke
Will 2026 be the year that "The Cloud" openly confesses the risks it brings about?
SLAPP Censorship - Part 36 Out of 200: Claim KB-2024-003529 in a Nutshell (Microsoft Employee Does Terrible Things, Then Sues the Reporter in Another Continent)
It commences with more of an overview
Gemini Links 06/04/2026: Solar Panel Story and Centralisation
Links for the day
"Free Speech, Free Press": What the World Needs to Improve
Darkness breeds corruption
IBM prioritises a "lot of smoke and hype and use of trending buzzwords"
IBM can pretend all it wants things are fine
GAFAM Paying the Price for Pursuing US Military Money (Taxpayers' Money as 'Stimulus' With Strings Attached)
The "cloud" in cloud computing is a cloud of smoke
Observing Slop's Demise
If energy becomes more scarce, then one rare/side perk (or upside) will be slop companies screaming for lifeboats
Links 06/04/2026: Crackers Breached the European Commission, Why "Old Way of Campaigning Won’t Cut It Anymore"
Links for the day
Enron Versus NVIDIA (the Cost of Circular Financing, or Funding Your Own Customers to Buy Your Products) - “The Inventory Paradox” or “The Vibe Revenue Admission”
Round-tripping (finance)
You Know "The Economy" is Fake When 6 Months After Oracle Says Debt-Saddled 'Open' 'AI' (Slop) Will Pay It $300,000,000,000 Oracle Says It Must Lay Off 30,000 Workers at 6AM
Oracle is in deep debt, which increased at a pace of almost 4 billion dollars per month lately
Free Software Will Outlive GAFAM
GAFAM is overhyped
Techrights Was Further Decentralised Three Years Ago
In 2020 we began working on IPFS stuff
The Military Attacks on Dubai Internet City as Reminder That GAFAM Isn't Safe (Disregard the "Nobody Gets Fired for Buying GAFAM" Mindset)
These are all realistic and foreseeable scenarios that GAFAM sceptics have long warned about
The Wars Aren't Ending, Now We See GAFAM Facilities Being Bombed
This is becoming a tech issue
Links 06/04/2026: Turning 34, Throwing Things Away, and Printing in GNU/Linux
Links for the day
Links 06/04/2026: Ex-Microsoft Engineer Explains Why Azure Fails, Germany Prepares for War
Links for the day
EPO "Cocaine Communication Manager" - Part XI - EPO Strike Enters Its Second Week, EPO Sheds Off Qualified Staff to Make Way for Nepotists
More than six months ago the "Cocaine Communication Manager" got arrested for cocaine use
Another Microsoft Outlook Downtime
Microsoft has sloppy code, it's not something suitable for mission-critical things
Week 2 of April IBM Layoffs Accelerate Based on Rumours
"Heard about Layoff at IBM"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 05, 2026
IRC logs for Sunday, April 05, 2026
Culture of Harassment Inside Microsoft, Says Former Director at Microsoft
listen to Microsoft insiders
Drone Strikes on Amazon (GAFAM) Datacentres Highlight Azure's Miniscule Share
Azure is failing
SLAPP Censorship - Part 35 Out of 200: How to Make ~10,000 Pound Sterling (13,220.50 United States Dollars) by Copy-Pasting and Editing 10 Pages
Today it's Easter Sunday, so we'll keep this part relatively short
Gemini Links 05/04/2026: Artemis II Mission Tracker, Meditation on Copyright, Alhena 5.5.5, "Gemini as the Final Frontier of Human Cognition"
Links for the day
Microsoft Windows Falls to All-Time Low of ~60% in Switzerland, GNU/Linux Among Top Gainers
What will it take for mainstream media (not just geeks' site) to cover it?
Mainstream Media on "Practical Survivalism"
Suffice to say, panic buying begets more panic and price surges
Cloud Computing as a Cloud of Smoke (Your Hosting Provider is a "Legitimate" Military Target)
When a French datacentre went up in flames people joked that the "cloud" meant a cloud of smoke
Andreas Tille Congratulates Sruthi Chandran Before the Election for Debian Project Leader (DPL) is Even Over
Andreas Tille, the current Debian Project Leader (DPL) who has been in this role for nearly 24 months
When You Try to Change the World for the Better and Somehow They Find a Way to Say You Are the Villain
Don't be a fool. Don't fall for inversions of narratives.
Slop Was a Flop and Energy Crisis Will be Slop's Final Blow
Today we see no slopfarms in Google News
Links 05/04/2026: "Taiwanese Airlines to Hike Fuel Surcharges 157%" and Openly Racist Voter Suppression Starts in the US
Links for the day
Gemini Links 05/04/2026: Playing with Hyprland and Migrating Antenna Filters
Links for the day
Links 05/04/2026: "Confidential Computing" as Proprietary Bundle of False Promises and "The Web Is an Antitrust Wedge"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, April 04, 2026
IRC logs for Saturday, April 04, 2026