Bonum Certa Men Certa

Free Software Foundation Discourages Dependence on Mono, Dismisses Microsoft Community Promise

Last week, Microsoft extended the terms of their Community Promise to implementations of the ECMA 334 and 335 standards. You might think this means it's safe to write your software in C#. However, this promise is full of loopholes, and it's nowhere near enough to make C# safe.

Why Worry About C#?



Since we published Richard's article about Mono last week, some people have been asking us why we're expressing special concern about free software developers relying on C# and Mono, instead of other languages. Sun probably has patents that cover Java. Maybe IBM has patents that cover C compilers. "Shouldn't we discourage the use of these too?" they ask.



It's true that all software patents are a threat to developers—but that doesn't mean that all software patents are equally threatening. Different companies might have patents that could be used to attack other languages, but if we worried about every patent that could be used against us, we wouldn't get anything done. Microsoft's patents are much more dangerous: it's the only major software company that has declared itself the enemy of GNU/Linux and stated its intention to attack our community with patents. If Microsoft designed a patent trap into C#, that is no more than what it said it would do.



The company has been quite clear about its intentions since late 2006. At a user conference in November that year, Microsoft CEO Steve Ballmer said, responding to a question about their patent agreement with Novell:



... the fact that [GNU/Linux] uses our patented intellectual property [sic] is a problem for our shareholders. We spend $7 billion a year on R&D, our shareholders expect us to protect or license or get economic benefit from our patented innovations. So how do we somehow get the appropriate economic return for our patented innovation...?


(Seattle Post-Intellegencer, The Microsoft Blog, "Ballmer on Novell, Linux and patents," November 16, 2006.)

A few days later, an interview with Microsoft President Bob Muglia was published, and he made it clear that they considered C# one of these so-called "patented innovations:"



There is a substantive effort in open source [sic] to bring such an implementation of .Net to market, known as Mono and being driven by Novell, and one of the attributes of the agreement we made with Novell is that the intellectual property [sic] associated with that is available to Novell customers.


(eWeek.com, "Microsofts Muglia Talks Longhorn, Novell and Java", November 17, 2006.)



They've been turning up the heat ever since. In May 2007, Microsoft followed all this up by announcing in a Fortune magazine interview that they believed GNU/Linux infringed 235 Microsoft patents. And recently they made it very clear that these were not idle threats: the company sued TomTom for using the VFAT filesystem implementation in the kernel Linux without buying a license from it.



All of this can't simply be brushed aside. These are statements and actions made at the highest executive levels of the company. Using patents to divide and conquer the free software community is a fundamental part of their corporate strategy. Because of that, C# represents a unique threat to us. The language was developed inside Microsoft, so it's likely they have many patents to cover different aspects of its implementation. That would make free software implementations of C#, like Mono, an easy target for attack.



“The Community Promise does nothing to change any of this.”The Community Promise does nothing to change any of this. Microsoft had an opportunity to take action and demonstrate that it meant us no harm with C#. Instead, they took meaningless half-measures that leave them with plenty of opportunities to hurt us.



Incomplete Standards



The ECMA 334 and 335 specifications describe the core C# language, including information about standard libraries that must be available in any compliant implementation. However, there are several libraries that are included with Mono, and commonly used by applications like Tomboy, that are not required by the standard. And just to be clear, we're not talking about Windows-specific libraries like ASP.NET and Windows Forms. Instead, we're talking about libraries under the System namespace that provide common functionality programmers expect in modern programming languages: binary object serialization, regular expressions, XPath and XSLT, and more.



Because these libraries are not defined in the ECMA specifications, they are not protected in any way by Microsoft's Community Promise. If this were the only problem with the promise, it might be safe to use applications that avoid these libraries, and stick to what's in the standard. But even the code that's covered by the promise isn't completely safe.



Figuring Out What's Necessary



The Community Promise only extends to claims in Microsoft patents that are necessary to implement the covered specifications. Judging just by the size of its patent portfolio, it's likely that Microsoft holds patents which a complete standard implementation probably infringes even if it's not strictly necessary—maybe the patent covers a straightforward speed optimization, or some common way of performing some task. The Community Promise doesn't say anything about these patents, and so Microsoft can still use them to threaten standard implementations.



Moving the Goalposts



“The Community Promise does not give you any rights to exercise the patented claims.”Let's say you've written an implementation of one of the specifications covered by the Community Promise, and you want to determine whether or not you'll be sued for infringing a certain Microsoft patent. The necessity question already makes it difficult enough to figure this out. But even if you manage it, you should make sure you check again tomorrow, because the Community Promise might not protect you then.



The Community Promise does not give you any rights to exercise the patented claims. It only says that Microsoft will not sue you over claims in patents that it owns or controls. If Microsoft sells one of those patents, there's nothing stopping the buyer from suing everyone who uses the software.



The Solution: A Comprehensive Patent License



If Microsoft genuinely wants to reassure free software users that it does not intend to sue them for using Mono, it should grant the public an irrevocable patent license for all of its patents that Mono actually exercises. That would neatly avoid all of the existing problems with the Community Promise: it's broad enough in scope that we don't have to figure out what's covered by the specification or strictly necessary to implement it. And it would still be in force even if Microsoft sold the patents.



This isn't an unreasonable request, either. GPLv3 requires distributors to provide a similar license when they convey modified versions of covered software, and plenty of companies large and small have had no problem doing that. Certainly one with Microsoft's resources should be able to manage this, too. If they're unsure how to go about it, they should get in touch with us; we'd be happy to work with them to make sure it's satisfactory.



Until that happens, free software developers still should not write software that depends on Mono. C# implementations can still be attacked by Microsoft's patents: the Community Promise is designed to give the company several outs if it wants them. We don't want to see developers' hard work lost to the community if we lose the ability to use Mono, and until we eliminate software patents altogether, using another language is the best way to prevent that from happening.








Copyright ۩ 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Privacy Policy.



Verbatim copying and distribution of this entire article are permitted worldwide, without royalty, in any medium, provided this notice is preserved.

Comments

Recent Techrights' Posts

Contemptuous Law Firm Accusing Others of Contempt of Court
Keeping a running tally can help
Links 10/10/2026: Let's Encrypt Making Changes (Problem for Small Sites/Operations), Quartz is Officially a Slopfarm (Busted)
Links for the day
Brigading Against Women - Part XXV - No Anonymity for People Who Did Illegal Things
"Empathy is the sunlight to the vampire of culture."
Links 09/10/2026: Stranded Busan Shark Still a 'Circus', Endangered Monkey Rescued, BBC Shells Out Money
Links for the day
 
Gemini Links 10/10/2026: Radio Romania International, Avoiding GAFAM, Open Camera, and Another Palm
Links for the day
The 2026 Slop Prediction (Slopfarms Perishing)
Morality in the "digital world" has deteriorated profoundly
netsplit.de (Survey of IRC Networks and History) Only Partly Functional This Month
Get well soon, netsplit.de
Microsoft Cuts
GAFAM enshittification
NVIDIA Acts Like It Cannot Pay Salaries (Too Many Obligations, Sales in Circular Financing, or Basically Accounting Fraud)
Masters of acting as clients of themselves
Paying for elections, Reform UK illegal confession in High Court
Reprinted with permission from Daniel Pocock
Microsoft Abuses PERM and Lays Off Workers in India
The US government has made it easier for Microsoft to hide the mass layoffs
The GAFAM Elections in the United States
If the election is run by platforms that have back doors "baked-in" and if the communications are overseen by GAFAM, you would not have to be a "nutty MAGAt" to dispute the outcome
More GAFAM Layoffs (Late on Friday Night)
They say they are worth trillions, but they don't even make money
Male-Dominated EPO Fails to Have "Concrete Measures to Support Female Staff"
Being a female at the EPO is exceptionally hard
Production Freeze at the European Patent Office (Opposing Monarchy, Institutional Maladministration and Corruption)
Eight reasons to participate
Links 10/10/2026: Microsoft 'Open' 'AI' Silencing Critics, "Data Centres are the New Front Line in the Russia-Ukraine War"
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, October 09, 2026
IRC logs for Friday, October 09, 2026
Gemini Links 10/10/2026: Optimism, Stargazing, "Life Without Smartphone", and Fairphone 4
Links for the day
Gemini Links 09/10/2026: Manifesto, Slop, Geminispace, and "Cryptography of the Internet"
Links for the day
Betanews is Still a Slopfarm, Articles About "Linux" Are Fake and Plagiarism by LLMs
Cheaters and plagiarists aren't journalists; they're people who rip off and harm journalists
The Register MS Sponsored to Hype Up "Datacenters" and "AI" (Bubble, Pyramid Scheme)
"Sponsored by Cisco" with "AI" 26 times in this page
James Bottomley Has Promoted Microsoft-Controlled Restricted ('Secure') Boot, His Blog Has Just Been Cracked
Does this meet IBM's and Microsoft's standards for "distinguished" (in security)?
Links 09/10/2026: "Internet Archive to Demo Wayback Machine at Friday’s Uniqlo Street Festival", France Wages Censorship War via DNS
Links for the day
Controlled Opposition
The underlying concept is hardly new
More Stallmans
We need more Stallmans, we don't need to change Stallman
SUEPO Munich (EPO Staff Union in the Main Headquarters) Opposes Monarchy ('Cocaine King' Campinos), Plans Online Meeting Next Week
They may have about 1,000 workers joining in
World Mental Health Day is Tomorrow and EPO Staff Talks About What the Job Does to Workers
In recent years we've written a great deal about mental health consideration in relation to work, with a focus on "IT"
GNU/Linux Flirts With 20% "Market Share" in North America Overnight
Who should we trust on GNU/Linux? Microsofters on an armchair or Cloudflare Radar?
You Definitely Do NOT Wish to Live Close to a Datacentre
put aside for a moment the noise, the pollution...
New Site Makes the Case Against Adoption of Omarchy, But Focuses Almost Entirely on Politics
Let's examine what the page says and what points it focuses on
Brigading Against Women - Part XXIV - Nobody's Name is Unspeakable
Names are not sacred
Microsoft is in Trouble (With the Regime It Sponsored)
It seems like Microsoft paying the existing regime/dictatorship wasn't enough
GGG Pot Calls the Kettle Black
"It means a situation in which somebody accuses someone else of a fault which the accuser shares, and therefore is an example of psychological projection, or hypocrisy. Use of the expression to discredit or deflect a claim of wrongdoing by attacking the originator of the claim for their own similar behaviour (rather than acknowledging the guilt of both) is the tu quoque logical fallacy."
In the United Kingdom, Rising Cost of Hardware Benefits GNU/Linux
GNU/Linux rose from about 4% to almost 6% in one year
Japanese Targets of Cyber Breaches or Insider Threats
Japanese government bureau and major firms experience data breaches
Gemini Links 09/10/2026: Optimism, Stargazing, and Solar MiniServer
Links for the day
The Microsoft Ban Should Go Further (Telecommunications Cybersecurity and Resilience Act Incompatible With Back Doors)
it's not difficult to see where to start
When Americans Export a 'Suicide Mission' to Other Continents
I worry that this culture of debt-taking and overconsumption is being spread from the US to Europe
The Register MS: "AI" Several Times in Same Headline, 31 Times in Page. The Register MS Was Paid to Do This.
The phenomenon is commercial (paid media), not scientific
The Outcome of Microsoft Ban Was Predictable
told you so
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, October 08, 2026
IRC logs for Thursday, October 08, 2026
Gemini Links 08/10/2026: Economical Thrashing, How I Killed the Earth, and Thoughts on Gemini
Links for the day
Links 08/10/2026: Wikimedia Bemoans Chaffbot Slop (Bots Sold as 'Agents') That Sabotage It, ICC's Taliban Warrants
Links for the day
Links 08/10/2026: Slop Scammers (Pushers) Inflate Hosting Bills and "YouTube Testing Everything"
Links for the day
The Register MS Helps Prove the "AI" Frenzy in the Media is Evidence of Compromised Media, Not Legitimate "Revolution"
Ignore the hype and carry on
London Became Synonymous With the Royal Courts of Justice
London used to be a place where we go on holiday/retreat/break; nowadays we have only one destination there
Microsoft Insiders on "Effectively Being Silently Laid Off From Microsoft"
People are laid off by the thousands without the media uttering a word or the companies confirming anything
Brigading Against Women - Part XXIII - Extremism in the Mix and Getting the Police Involved
In 2012 I was getting heckled a lot for opposing back doors in Linux; it has not stopped since
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, October 07, 2026
IRC logs for Wednesday, October 07, 2026