[shagie]

Who does he get to recind the license from?

Did Defcon contract with Entropic Engineering for hardware and software? Or did Defcon contract with EE for Hardware and non-contract it from Dmitry?

If it is the former, Defcon could say "you need to work that out with EE and if it turns out that EE wants to revoke the license for the software, we'll have our lawyers talk with your lawyers about what is in the contract."

If its the later, then things get trickier and more difficult in many different directions.

Based on https://old.reddit.com/r/Defcon/comments/1eoe4u7/so_the_guy_... "/u/dmitrygr wrote the firmware for the badges as well at the behest of Entropic" - its the former. And so if anyone is in trouble with the licensing, it's Entropic for not having a contract with Dmitry and providing the software to Defcon." Defcon used it, with the understanding that they had a license to the firmware.

[sroussey]

> Defcon used it, with the understanding that they had a license to the firmware.

Until constructive notice as to otherwise.

[shagie]

This would depend on the contract that DEFCON has (had) with Entropic Engineering and what the deliverables were.

It may turn out that Entropic would be the one paying the penalty and footing the bill if one of the people they worked with decided to change the license.

Revoking or changing that license afterwards may fall on the vendor rather than the distributor to make things right.

While this isn't likely to be something anyone is going to come out smelling like roses out of... my crystal ball says that Entropic is going to come out the worse for it.

Having a "volunteer" working for a for profit company has hints of FLSA violations ( https://www.reddit.com/r/Defcon/comments/1ep00ln/comment/lhj... ). Having a person that Entropic is working with for embedded software put in easter eggs that went counter to the SOW becomes difficult. Entropic relying on software that has a license of "as long as the software author is ok with it" may complicate future business relationships with other clients.

[sroussey]

Yes, very much depends on indemnification.

[bawolff]

Isn't it kind of too late at that point? If i understand correctly, this notice came after the badges were already distributed. Like maybe that would work for future uses of the software, but i don't think constructive notice can be retroactive.