Remember when Non Disclosure Agreements were used to restrict sharing
software: and you refused to sign them, and started the whole movement.
What [Open Source Security] is doing is constructively the same thing,
and has the exact same bad effect. It's just history repeating itself.
Before they couldn't rely on easy copyright fully because the berne
convention wasn't ratified yet by Congress; so they used NDAs. With the
GPL, again they /were/ stymied... but now they fell back on an old
solution: again: business law.