You probably don’t think much about the open-source software running your phone. You just use it. But right now, a battle is being fought that will decide who actually owns your devices—you, or the tech giants.
The GrapheneOS project recently called out Google for being in clear violation of the GPLv2 license. But Google isn’t hiding the code. Instead, they’re doing something far more insidious: they’re “providing” the source code, but in a way that is deliberately impractical to use.
This isn’t just a technical glitch; it’s a calculated legal strategy. They are following the letter of the license while completely destroying its spirit.
Malicious compliance isn’t a mistake. It’s a corporate weapon of choice.
The GPLv2 was written decades ago to ensure software freedom. It requires companies to make source code available when they “convey” software. But what does “available” actually mean in a legal sense? If I put the source code in a glass tower with no stairs, am I technically making it available? Yes. Can you do anything with it? No.
This is where we think open-source licenses are bulletproof shields. The twist: they are just pieces of paper, and big corporations have enough money to shred them.
Think about the contributors who stay up late maintaining the kernel. They built the foundation Google’s empire sits on. Google’s response is a procedural “go find it in my tower.”
Open source relies on an honor system, and corporations have no honor.
Why can Google get away with this? Because the enforcement mechanism is broken. If an open-source project wants to sue, they face millions in legal fees and years of delays. It’s not about who is right; it’s about who has the money to outlast the other. Community norms can’t compete with corporate legal departments.
If you rely on any open-source software—which means basically everyone—this case sets a precedent. Your right to modify, share, and truly own the software you buy is being legally hollowed out.
When the law protects a malicious bully, justice is just another commodity for sale.
Stop expecting tech giants to “do no evil.” They will do the right thing only when they have no other choice, and ambiguous licenses give them a clear exit. Unless we demand harder, technically enforced mechanisms rather than relying on outdated legal threats, open source will continue to be an all-you-can-eat buffet for corporate America.
FAQ
Q: Is Google actually violating the license?
A: Technically, no. And that's exactly the danger. They are engaging in 'malicious compliance,' meaning they follow the GPLv2 to the letter while completely gutting its intent.
Q: How can open-source projects fight back?
A: They can't, not effectively without going bankrupt. The licenses rely on community norms rather than enforceable, immediate legal penalties, giving massive corporations a huge structural advantage in court.
Q: Is the GPLv2 just broken then?
A: Yes, but maybe that's the point. It shows we need to stop relying on outdated licenses and start building technical enforcement mechanisms rather than just legal threats.