Bonum Certa Men Certa

Free Software Foundation Discourages Dependence on Mono, Dismisses Microsoft Community Promise

Last week, Microsoft extended the terms of their Community Promise to implementations of the ECMA 334 and 335 standards. You might think this means it's safe to write your software in C#. However, this promise is full of loopholes, and it's nowhere near enough to make C# safe.

Why Worry About C#?



Since we published Richard's article about Mono last week, some people have been asking us why we're expressing special concern about free software developers relying on C# and Mono, instead of other languages. Sun probably has patents that cover Java. Maybe IBM has patents that cover C compilers. "Shouldn't we discourage the use of these too?" they ask.



It's true that all software patents are a threat to developers—but that doesn't mean that all software patents are equally threatening. Different companies might have patents that could be used to attack other languages, but if we worried about every patent that could be used against us, we wouldn't get anything done. Microsoft's patents are much more dangerous: it's the only major software company that has declared itself the enemy of GNU/Linux and stated its intention to attack our community with patents. If Microsoft designed a patent trap into C#, that is no more than what it said it would do.



The company has been quite clear about its intentions since late 2006. At a user conference in November that year, Microsoft CEO Steve Ballmer said, responding to a question about their patent agreement with Novell:



... the fact that [GNU/Linux] uses our patented intellectual property [sic] is a problem for our shareholders. We spend $7 billion a year on R&D, our shareholders expect us to protect or license or get economic benefit from our patented innovations. So how do we somehow get the appropriate economic return for our patented innovation...?


(Seattle Post-Intellegencer, The Microsoft Blog, "Ballmer on Novell, Linux and patents," November 16, 2006.)

A few days later, an interview with Microsoft President Bob Muglia was published, and he made it clear that they considered C# one of these so-called "patented innovations:"



There is a substantive effort in open source [sic] to bring such an implementation of .Net to market, known as Mono and being driven by Novell, and one of the attributes of the agreement we made with Novell is that the intellectual property [sic] associated with that is available to Novell customers.


(eWeek.com, "Microsofts Muglia Talks Longhorn, Novell and Java", November 17, 2006.)



They've been turning up the heat ever since. In May 2007, Microsoft followed all this up by announcing in a Fortune magazine interview that they believed GNU/Linux infringed 235 Microsoft patents. And recently they made it very clear that these were not idle threats: the company sued TomTom for using the VFAT filesystem implementation in the kernel Linux without buying a license from it.



All of this can't simply be brushed aside. These are statements and actions made at the highest executive levels of the company. Using patents to divide and conquer the free software community is a fundamental part of their corporate strategy. Because of that, C# represents a unique threat to us. The language was developed inside Microsoft, so it's likely they have many patents to cover different aspects of its implementation. That would make free software implementations of C#, like Mono, an easy target for attack.



“The Community Promise does nothing to change any of this.”The Community Promise does nothing to change any of this. Microsoft had an opportunity to take action and demonstrate that it meant us no harm with C#. Instead, they took meaningless half-measures that leave them with plenty of opportunities to hurt us.



Incomplete Standards



The ECMA 334 and 335 specifications describe the core C# language, including information about standard libraries that must be available in any compliant implementation. However, there are several libraries that are included with Mono, and commonly used by applications like Tomboy, that are not required by the standard. And just to be clear, we're not talking about Windows-specific libraries like ASP.NET and Windows Forms. Instead, we're talking about libraries under the System namespace that provide common functionality programmers expect in modern programming languages: binary object serialization, regular expressions, XPath and XSLT, and more.



Because these libraries are not defined in the ECMA specifications, they are not protected in any way by Microsoft's Community Promise. If this were the only problem with the promise, it might be safe to use applications that avoid these libraries, and stick to what's in the standard. But even the code that's covered by the promise isn't completely safe.



Figuring Out What's Necessary



The Community Promise only extends to claims in Microsoft patents that are necessary to implement the covered specifications. Judging just by the size of its patent portfolio, it's likely that Microsoft holds patents which a complete standard implementation probably infringes even if it's not strictly necessary—maybe the patent covers a straightforward speed optimization, or some common way of performing some task. The Community Promise doesn't say anything about these patents, and so Microsoft can still use them to threaten standard implementations.



Moving the Goalposts



“The Community Promise does not give you any rights to exercise the patented claims.”Let's say you've written an implementation of one of the specifications covered by the Community Promise, and you want to determine whether or not you'll be sued for infringing a certain Microsoft patent. The necessity question already makes it difficult enough to figure this out. But even if you manage it, you should make sure you check again tomorrow, because the Community Promise might not protect you then.



The Community Promise does not give you any rights to exercise the patented claims. It only says that Microsoft will not sue you over claims in patents that it owns or controls. If Microsoft sells one of those patents, there's nothing stopping the buyer from suing everyone who uses the software.



The Solution: A Comprehensive Patent License



If Microsoft genuinely wants to reassure free software users that it does not intend to sue them for using Mono, it should grant the public an irrevocable patent license for all of its patents that Mono actually exercises. That would neatly avoid all of the existing problems with the Community Promise: it's broad enough in scope that we don't have to figure out what's covered by the specification or strictly necessary to implement it. And it would still be in force even if Microsoft sold the patents.



This isn't an unreasonable request, either. GPLv3 requires distributors to provide a similar license when they convey modified versions of covered software, and plenty of companies large and small have had no problem doing that. Certainly one with Microsoft's resources should be able to manage this, too. If they're unsure how to go about it, they should get in touch with us; we'd be happy to work with them to make sure it's satisfactory.



Until that happens, free software developers still should not write software that depends on Mono. C# implementations can still be attacked by Microsoft's patents: the Community Promise is designed to give the company several outs if it wants them. We don't want to see developers' hard work lost to the community if we lose the ability to use Mono, and until we eliminate software patents altogether, using another language is the best way to prevent that from happening.








Copyright ۩ 2004, 2005, 2006, 2007, 2008, 2009 Free Software Foundation, Inc. Privacy Policy.



Verbatim copying and distribution of this entire article are permitted worldwide, without royalty, in any medium, provided this notice is preserved.

Comments

Recent Techrights' Posts

The PIPs or 'Voluntary Termination Offers' Help IBM Fake Its Situation
"IBM is not a tech company"
General Assembly Covers EPO Strikes on Thursday, September 17th (2026)
The EPO's staff representation at The Hague has asked people to join an upcoming online session about industrial actions
SLAPP Censorship - Part 182 Out of 200: UK Dockets With Machine-Generated Applications to the Court (From American Slop Companies)
Earlier this year Garrett was using machine-generated output as legal papers and submissions
 
Vista 11 Flunked
Microsoft cannot start a "Vista 12" campaign as it would only make matters worse
Microsoft Urgently Needs Distraction: There's No "Next XBox", But There's a New Boot Screen (Like 'Dark Mode', a Feature That Can be Implemented in Mere Minutes/Hours)
Anything to distract from XBox fiasco
IBM Flying Away to Sweatshops (So Will Red Hat)
Even on Sunday people post about 'leaving' IBM
RFID Ambitions Already Established by Widespread Skinnerbox Adoption
A society that cannot maintain privacy for those who deserve it will not manage to assure dignity of citizens
SLAPP Censorship - Part 183 Out of 200: What Actually Happened Two Months Ago (Based on People Who Attended)
It's dangerous to assert what happened in a hearing you did not attend (there was no video stream or recording, either)
Phil Harvey, an Editor-in-Chief in a B2B Site, Explains Why ChannelFutures (Connected to TechTarget) and Other Sites That Used to Cover Linux Deleted Many Articles
Every old article in channelfutures is gone!
Software Freedom Day 2026 is 5 Days From Now, Fresh Reminder to Boycott Proprietary Software
Let this be a timely reminder of why people should avoid proprietary software
Links 14/09/2026: Slop Hardly Used for Actual Work (Chatbots Are for Lonely People), Slop Bots (Scrapers, Plagiarism) "Are Thirsty for Power"
Links for the day
Gemini Links 14/09/2026: Trip, Hiding, and OCR
Links for the day
IBM PIPs Are Layoffs (RAs Come Later Even If You Satisfy the "Performance" and "Plan")
Notice how "the media" almost never mentions silent layoffs, as if just because they're silent, there's nothing to investigate, nothing to see there
Slop Companies Engage in Plagiarising the Web, Now They Pay People to Contaminate the Web With Their Lies
Remember that the lawfare against us is funded by slop salaries!
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, September 13, 2026
IRC logs for Sunday, September 13, 2026
Microsoft is Laying Off All Year Long (It's Just Keeping Quiet About It)
The issue here is also the media. It's complicit.
MElon's Twitter Takeover Was Meant to Amplify People Like Himself or David Heinemeier Hansson (Slop Pyramid Schemes and Bigotry)
Social control media is not neutral
Microsoft Lunduke of 'Linux Sucks' (and Microsoft Corp.) Tries to Replace GNU/Linux With Toxic Discussions About Toxic Politics
Poisoning the well people drink from
Links 13/09/2026: Republican Campaign Aide Uses Nazi Photo and Convicted Felon is Wielding Power to Stifle Speech
Links for the day
Gemini Links 13/09/2026: Never Settling, Plain Text Digital Life, and Newsgroups
Links for the day
Efforts to Cancel Matt Mullenweg Have Made Us More Sympathetic Towards Mullenweg and More Sceptical of the People Who Run Automattic (Named After Mullenweg)
Mullenweg, unlike Automattic, is not "in it for the money"
Boosters of Omarchy Are No 'Underdogs'
There are many Arch derivatives that do not rely on "viral" marketing in MElon's child porn-pushing social control media and are instead relying on real development, not slop
PIPs Are a Setup: They Set Workers Up to Fail While Working Their Arse Off Before Getting Kicked (Out) in the Arse
Malicious and exploitative
SLAPP Censorship - Part 181 Out of 200: This is Really More Like Brett Wilson LLP v Schestowitz (Using Money From American Slop Companies, Plagiarism Pushers)
We approach the parts where we explain that the Application to the Court with Garrett's name on it was instead complaining about fair criticism of the combative law firm (irrelevant to any injunctions) as if it was impermissible to explain what it had done - and still does - to my wife and I
It Sometimes Feels Like Slop Companies Are Committing Online/Digital Crimes
"GPT" out of control
Gemini Links 13/09/2026: Why Omarchy is "Plain Disgusting" and "AI Slop" and Why "Plain Text To Do List" Rocks
Links for the day
Links 13/09/2026: Scam Altman Admits Issues (Financial), Rival Says Stop Slop (Plagiarism)
Links for the day
Windows Down to New Lows as Switzerland's Federal Government Abandons Microsoft (Where Feasible for Now)
That's how it starts...
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, September 12, 2026
IRC logs for Saturday, September 12, 2026
Televisions Have Become Billboards
Bottom line: you get what you pay for
Mass Layoffs at Microsoft as "Voluntary Separation Agreement" (or PIP)
the man who kept lying about the layoffs has just left the company
The Cyber Show on Media Clickbait About Slop as 'Existential Threat' and Derek Thompson's Response to That
Ignore the hype, focus on real news
Links 12/09/2026: "Revolt Is Here" Against Slop and "Top Chinese Court" Cracks Down on Slop That's Fake/Misleading
Links for the day
Gemini Links 12/09/2026: Rants About Slop, Switching From QWERTY, and Why TVs Are 'Cheap'
Links for the day
SLAPP Censorship - Part 180 Out of 200: A Third Act, (Mis)Using Your Client's Application to the Court for Your Own Purposes as a Law Firm (Reputation Management and Censorship)
How much can a lawfare firm get away with?
Canonical Has Withdrawn Ubuntu 24.04.5 Installer Due to a Critical Bug Connected to Microsoft-Controlled Restricted Boot and TPM
already breaking systems running GNU/Linux [...] Who asked for TPM in Linux?
SLAPP Censorship - Part 179 Out of 200: Using One's Clients to Save Face at Their Expense
Who's being served really?
Switzerland's Software Freedom/Digital Sovereignty is Improving as People Move to GNU/Linux
Well done to them
Links 12/09/2026: "U.S. Debt Surpasses $40 Trillion" and "Trump Wants to [Illegally] Bribe Voters."
Links for the day
Gemini Links 12/09/2026: Readjusting, Fighting Sleep, and FreeBSD bhyve
Links for the day
Matt Mullenweg Got the 'Linus Treatment' or 'RMS Treatment'
"back, but not in charge any more..."
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, September 11, 2026
IRC logs for Friday, September 11, 2026