The Help Desk

Computing Columns

Shareware

Medical Packages

Open Source Software

Open Source Software

OSS Document Server

What is OSS?

OSS-Med

What is Open Source Software?

Why would I want access to source files?

So?

One advantage of OSS for non-programmers is that they can pay a programmer to write the added features they want. This can be of advantage to groups who want to have the same additional features, such as GPs involved in divisional projects. They are not beholden to a commercial vendor to write these added features.

Is OSS free?

If somebody had access to the source code they could modify it, create something new and then patent the new program. They might choose not to release the source code so they could make money from their new program. The resulting program would no longer be open source and others could not improve or adapt it if they wanted to.

One of the key elements of OSS is its licensing conditions. The licence specifically prevents something like this from happening. There are a number of OS licences and examples of the most common ones can be found at www.opensource.org/licenses/. The original and most widely known licence is the GNU General Public Licence (GPL).

Under the GNU GPL you can use, copy, modify or even sell free software but the software must come with either the source files or access to the source files. If you were to sell the software, or modify it and then sell it, the GPL requires that such software also be covered by the GPL. Thus, you are required to let the buyer know that they can have the source code and they have the right to use it or modify it if they wish. They must also be told that the program is sold under the GNU General Public Licence.

The effect of the GPL is that OSS is rarely sold and that most vendors make their money by installing OS software and otherwise supporting end users.

Isn't it just too dangerous to entrust OSS with our critical data?

In 1998 a problem with a commonly used commercial program led to data ending up in the wrong record under certain rare circumstances. The problem was quickly fixed but the potential for corruption of data had existed for some time. Similar problems are said to have plagued Australian medical software vendors.

In any event, these problems highlight the fact that OSS's lack of warranty is no different to commercial software's. In fact, some argue that since OSS is open to peer review it is actually more reliable than commercial software.

If the source code is freely available doesn't that make it insecure? When confidential medical information is being transmitted on open networks around the world, users have to be sure their data transmissions and systems are secure. With access to the source code, you can clearly see what is happening every time you enter data or press a button. Security lapses, if any, are detected early.

Similarly, with open source encryption protocols like triple-DES and PGP, you know what level of security is being provided. There are no known Trojan horses or trapdoors that might allow unauthorised access to your data.

In 1999, one of Microsoft's encryption protocols was found to have three hidden keys that could unscramble the encrypted data. One belonged to Microsoft and one to the CIA. Nobody seemed to know who owned the other one. With OSS you do not get these surprises.

What is OSS-Med?

The current resources are a mailing list, a document server and links to some OSS software products being developed for Australian medical practice.

Why is MedicineAu (MedAu) supporting OSS?

How can I or my division help?

Vigorous debate, constructive criticism, user feedback, beta testing, assistance with documentation and coding are all sought. Divisions interested in supporting or developing specific modules should contact: oss-admin@medicineau.net.au.

Open source software can help us build a better medical system.

We need your support.