Bonum Certa Men Certa

Free Software Foundation Discourages Dependence on Mono, Dismisses Microsoft Community Promise

Last week, Microsoft extended the terms of their Community Promise to implementations of the ECMA 334 and 335 standards. You might think this means it's safe to write your software in C#. However, this promise is full of loopholes, and it's nowhere near enough to make C# safe.

Why Worry About C#?



Since we published Richard's article about Mono last week, some people have been asking us why we're expressing special concern about free software developers relying on C# and Mono, instead of other languages. Sun probably has patents that cover Java. Maybe IBM has patents that cover C compilers. "Shouldn't we discourage the use of these too?" they ask.



It's true that all software patents are a threat to developers—but that doesn't mean that all software patents are equally threatening. Different companies might have patents that could be used to attack other languages, but if we worried about every patent that could be used against us, we wouldn't get anything done. Microsoft's patents are much more dangerous: it's the only major software company that has declared itself the enemy of GNU/Linux and stated its intention to attack our community with patents. If Microsoft designed a patent trap into C#, that is no more than what it said it would do.



The company has been quite clear about its intentions since late 2006. At a user conference in November that year, Microsoft CEO Steve Ballmer said, responding to a question about their patent agreement with Novell:



... the fact that [GNU/Linux] uses our patented intellectual property [sic] is a problem for our shareholders. We spend $7 billion a year on R&D, our shareholders expect us to protect or license or get economic benefit from our patented innovations. So how do we somehow get the appropriate economic return for our patented innovation...?


(Seattle Post-Intellegencer, The Microsoft Blog, "Ballmer on Novell, Linux and patents," November 16, 2006.)

A few days later, an interview with Microsoft President Bob Muglia was published, and he made it clear that they considered C# one of these so-called "patented innovations:"



There is a substantive effort in open source [sic] to bring such an implementation of .Net to market, known as Mono and being driven by Novell, and one of the attributes of the agreement we made with Novell is that the intellectual property [sic] associated with that is available to Novell customers.


(eWeek.com, "Microsofts Muglia Talks Longhorn, Novell and Java", November 17, 2006.)



They've been turning up the heat ever since. In May 2007, Microsoft followed all this up by announcing in a Fortune magazine interview that they believed GNU/Linux infringed 235 Microsoft patents. And recently they made it very clear that these were not idle threats: the company sued TomTom for using the VFAT filesystem implementation in the kernel Linux without buying a license from it.



All of this can't simply be brushed aside. These are statements and actions made at the highest executive levels of the company. Using patents to divide and conquer the free software community is a fundamental part of their corporate strategy. Because of that, C# represents a unique threat to us. The language was developed inside Microsoft, so it's likely they have many patents to cover different aspects of its implementation. That would make free software implementations of C#, like Mono, an easy target for attack.



“The Community Promise does nothing to change any of this.”The Community Promise does nothing to change any of this. Microsoft had an opportunity to take action and demonstrate that it meant us no harm with C#. Instead, they took meaningless half-measures that leave them with plenty of opportunities to hurt us.



Incomplete Standards



The ECMA 334 and 335 specifications describe the core C# language, including information about standard libraries that must be available in any compliant implementation. However, there are several libraries that are included with Mono, and commonly used by applications like Tomboy, that are not required by the standard. And just to be clear, we're not talking about Windows-specific libraries like ASP.NET and Windows Forms. Instead, we're talking about libraries under the System namespace that provide common functionality programmers expect in modern programming languages: binary object serialization, regular expressions, XPath and XSLT, and more.



Because these libraries are not defined in the ECMA specifications, they are not protected in any way by Microsoft's Community Promise. If this were the only problem with the promise, it might be safe to use applications that avoid these libraries, and stick to what's in the standard. But even the code that's covered by the promise isn't completely safe.



Figuring Out What's Necessary



The Community Promise only extends to claims in Microsoft patents that are necessary to implement the covered specifications. Judging just by the size of its patent portfolio, it's likely that Microsoft holds patents which a complete standard implementation probably infringes even if it's not strictly necessary—maybe the patent covers a straightforward speed optimization, or some common way of performing some task. The Community Promise doesn't say anything about these patents, and so Microsoft can still use them to threaten standard implementations.



Moving the Goalposts



“The Community Promise does not give you any rights to exercise the patented claims.”Let's say you've written an implementation of one of the specifications covered by the Community Promise, and you want to determine whether or not you'll be sued for infringing a certain Microsoft patent. The necessity question already makes it difficult enough to figure this out. But even if you manage it, you should make sure you check again tomorrow, because the Community Promise might not protect you then.



The Community Promise does not give you any rights to exercise the patented claims. It only says that Microsoft will not sue you over claims in patents that it owns or controls. If Microsoft sells one of those patents, there's nothing stopping the buyer from suing everyone who uses the software.



The Solution: A Comprehensive Patent License



If Microsoft genuinely wants to reassure free software users that it does not intend to sue them for using Mono, it should grant the public an irrevocable patent license for all of its patents that Mono actually exercises. That would neatly avoid all of the existing problems with the Community Promise: it's broad enough in scope that we don't have to figure out what's covered by the specification or strictly necessary to implement it. And it would still be in force even if Microsoft sold the patents.



This isn't an unreasonable request, either. GPLv3 requires distributors to provide a similar license when they convey modified versions of covered software, and plenty of companies large and small have had no problem doing that. Certainly one with Microsoft's resources should be able to manage this, too. If they're unsure how to go about it, they should get in touch with us; we'd be happy to work with them to make sure it's satisfactory.



Until that happens, free software developers still should not write software that depends on Mono. C# implementations can still be attacked by Microsoft's patents: the Community Promise is designed to give the company several outs if it wants them. We don't want to see developers' hard work lost to the community if we lose the ability to use Mono, and until we eliminate software patents altogether, using another language is the best way to prevent that from happening.








Copyright ۩ 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Privacy Policy.



Verbatim copying and distribution of this entire article are permitted worldwide, without royalty, in any medium, provided this notice is preserved.

Comments

Recent Techrights' Posts

Massive Cuts Inside Microsoft (the Media Does Not Talk About That)
It is in many ways like IBM a decade ago
 
IBM Vapourware on a Budget (to Grab Bailouts From US Taxpayers)
Anderon is the sort of thing that makes IBMers uncomfortable
Links 01/11/2026: Digital Minimalism and "Palantir Cofounder Announces Cruel Plan to Breed Thousands of Lab Monkeys for Medical Experiments"
Links for the day
Microsoft Accenture in Trouble, Accenture’s Debt Skyrockets
Seeing a wave of adoption of Free software in Europe, it's not exactly shocking that "consultants" from Microsoft Accenture are no longer in demand
Microsoft Says Its "Goodwill" Value Has Been Declining for Years, But It Also Claimed That Doubled in One Year
Wall Street deserves far more criticism or scepticism (at the very least)
SkyChatz: From Nothing to #2 in IRC (in Less Than a Year)
Second only to Libera.Chat
Making Up Words or Inventing a Vocabulary
Or why Large Language Models are useless
Assange on What Lula Means to Free Press
Here in the UK we've also found our 'Lulas'
GNU/Linux is No Underdog (But There Are Attempts to Put It "To Sleep")
There's a moral imperative
Intercontinental Brigading - Part XXVI - The "Law and Order" Candidate Who Crushes Both Law and Order and Even Rejects Election Outcomes (Insurrection Follows)
A world without real technical security is a world void of democracy, justice, and human rights
Links 01/11/2026: Malaysian Media Perishing, France Belatedly Identifies Social Control Media as Weaponised Yellow Press
Links for the day
Gemini Links 01/11/2026: "Trick-or-Treating seems to be dead, at least in our neighborhood"; BaseFree Numerical System and Human Emacs
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, October 31, 2026
IRC logs for Saturday, October 31, 2026
Gemini Links 31/10/2026: MangoWM, Qutebrowser and Codeberg, Plugh
Links for the day
In US Government Sites, GNU/Linux Measured at New All-Time High of 7% (or About 10% Across Desktops/Laptops Alone)
There's no doubt GNU/Linux is growing
Intel Has Just Lost in One Single Day Over 150 Billion Dollars in 'Value' (Market Cap), Intel is Also Over 50 Billion Dollars in Debt
This really says a lot about Wall Street and the slop bubble, doesn't it?
They Hate Him Because He's Effective
Effective voices invite more aggressive censorship attempts
Audience Growing in Spite of the Deluge of Webslop
We probably benefit from the rejection of LLM slop
The Munich FUD Tactics (Microsoft Modus Operandi): Microsoft-Connected Sites Claim Denmark Failed With Free Software, But That's Not What Actually Happened
With Microsoft, it almost always boils down to politics
Links 31/10/2026: John Romero Comeback After Being Shafted by Microsoft, Google Faces Criminal Probe Over Deforestation in Finland
Links for the day
Gemini Links 31/10/2026: Rambling on Self-hosting and Ad Video Screens Don’t Make Money
Links for the day
Can't Trust Big Banks, Let's Try 'Bros' Instead?
But let's blame "North Korea"
IRC's Growing Popularity in 2026
No company controls or profits from IRC, it is in the Commons
"AI" as Surrogate for Debt and Distraction From Computing (Bots Described as "Agents" and/or Any Form of "Intelligence" is More Like a Religion)
We're letting people without even college degrees game the "market" (Wall Street) by lying to it
Intercontinental Brigading - Part XXV - Election Integrity at a Time of Back Doors and Very Severe Bugs in UEFI
How dare British media comment on insurrection following a US election?
"The Judge Accepted That Mrs Schestowitz Had Been the Subject of a Vicious Campaign of Online Harassment"
That's consistent with how they men treat women
Gemini Links 31/10/2026: Hallowe'en and "Thinking About People"
Links for the day
Links 31/10/2026: The Hinge on Apple's Constantly Breaking New Foldable iPhone Was "Built With Slop", Slop Causes Cash Squeeze GAFAM
Links for the day
Amazon's Debt Skyrockets by Almost 100 Billion Dollars in 9 Months
On top of that there is additional (secret, kept stealth by accounting tricks) debt
Google Illegally Destroyed a Quarter Million Trees Without a Permit for a Hypothetical Project That Might be Cancelled, Debt Has Soared by 30 Billion Dollars in 3 Months ($10 Billions Borrowed Per Month)
Google is bleeding from slop
Slavery at Microsoft
illegal if true
Many People "Left" Red Hat This Month, Including Yesterday
We already saw this with SUSE
Gemini Links 31/10/2026: "Where I Draw the Line With" Slop Plagiarism and "Nobody Cares That You're Leaving Proton" (Over Slop)
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 30, 2026
IRC logs for Friday, October 30, 2026
Links 30/10/2026: "Over 41,000 DHS Employee Records Leaked Online" and Concerns Over Radicalism in France
Links for the day
Intercontinental Brigading - Part XXIV - It's an Inherently American Issue and American Elections Are at Risk From Restricted ('Secure') Boot and LLM Chatbots (Disinformation at Scale)
We'll focus a lot on US elections in the coming days
Birss Replaces Vos in UK's High Court, LLM Slop Plagiarism a Contentious Issue
Only days ago we mentioned Sir Geoffrey Vos in relation to lobbying for LLM slop
"Early Retirement" (Silent Layoffs) for Everybody Except the Executives
Some will stick around even past 70
Despite the Mass Layoffs Microsoft's Debt Soared by 5.1 Billion Dollars in Just 3 Months
This is why Microsoft asks 60,000 workers to leave
Gemini Links 30/10/2026: Solar MiniBBS, Kubernetes With FreeBSD, "Sysadmin Day"
Links for the day
Microsoft Layoffs Far Worse Than the Media Tells (Microsoft Spin Laundered as "Reporting")
Some people are made to "retire" and sign an NDA to make it seem like a happy ending and mostly consensual retreat
Links 30/10/2026: Google Crashes on Slop Disappointment and GAFAM's "Data Center Blitz Is Burning Through Cash and Scaring Wall St."
Links for the day
Fake 'Articles' in The Register MS Concerning "AI"
We don't suppose The Register MS will be around for much longer after this bubble pops
What Linus Torvalds Told Me Two Decades Ago
It seems like he was eager to distinguish himself from the "elders" of FSF [...] For anything "revolutionary" to happen in the sciences one must accept the risk of living in poverty like Tesla (the person, not the right-wing fanatics) and Torvalds isn't too old to "cause a stir"
GNU/Linux as a Free Software Platform is More GNU (and GPL) Than Linux
GNU predates Linux by nearly a decades and it was born to tackle injustices
Who Or What Are Security Professionals/Experts?
Companies like GAFAM are willing to tolerate cheaters because those companies themselves are cheats
Intercontinental Brigading - Part XXIII - What Garrett Did Puts Elections at Risk (Also in His Own Country, Where a Dictator Trusts Only Machines That 'Support' Him)
UEFI 'security' is only as trustworthy as its ferocious boosters
Gemini Links 30/10/2026: RIP Patrick Stewart and Amp Integration
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 29, 2026
IRC logs for Thursday, October 29, 2026