GPL Violations of Miranda IM 245
Eesh writes "The Miranda project developers have recently posted to their development blog about two GPL violations of companies using their code - vBuzzer and StarMessenger. Today, they also posted that vBuzzer are taking steps to correct that violation. Hopefully this will work out fine. Miranda 0.401 stable was released recently"
Oh Miranda! (Score:5, Funny)
Question... (Score:5, Interesting)
How does one go about making sure that your source code hasn't been "misappropriated" (read stolen) and placed into a closed source app?
Are there services out there for this sort of thing or do you just have to be forever diligent?
Re:Question... (Score:2)
Re:Question... (Score:5, Informative)
Re:Question... (Score:3, Insightful)
Re:Question... (Score:2)
Re:Question... (Score:5, Funny)
Re:Question... (Score:3, Funny)
Re:Question... (Score:5, Informative)
The short answer is: you can't be sure. In practice, however, people who write programs keep abreast of other software in their field (e.g. people who write an IM client quickly hear about other IM clients). Hwoever, it usually takes an alert user to notice suspicious similarities to existing software. It seems the first tell-tale sign is the directory structure. In almost every case posted to slashdot, it was noted that the directory structures were the same.
If you become suspicious, the next thing is to extract the strings [he.net] utility. The first thing to look for is the error message strings, but if the executable is not stripped then you can see your function names and source file names.
Finally, there's the question of proving that they "stole" your source code, wher your legal claim will usually be that they violated your copyright. Most of the time, they know they are in the wrong and just contacting them is enough. However, not all offenders cooperate. Harald Welte [gpl-violations.org] has successfuly won a preliminary injunction [gpl-violations.org] in a German court against a company which violated the GPL when using code form the ipfilter/iptables [netfilter.org] firewall project.
Re:Question... (Score:2)
Is GPL code so fragile that you must resort to gumshoes and dicks following it around just to be sure no looks at it with squinty eyes?
Re:Question... (Score:3, Insightful)
Re:Question... (Score:3, Informative)
They are getting something from you, you are asking something in return from them. It's kind of like agreeing to buy a car for a set ammount, and then simply never making a payment. Contracts are contracts.
Is there real harm in taking delivery of a car and never making a payment? Not really, I mean, banks have lots of money, right?
As far as fiscal damages, I think you're looking at it the wrong
Re:Question... (Score:2, Interesting)
The new BSD license != "do whatever you want" (Score:3, Informative)
This explanation is where the argument falls down. The new BSD license (or the MIT X11 license which is quite similar) still have requirements for those who distribute derivative works. The requirements are not many, but they are not zero either.
In particular, you may certainly not "do whatever you want" with the source code or any derivative works. The only way to have that power is to either write your own code or base your work on something in the public domain. And even then you cannot "do whateve
Re:On Stealing... (Score:4, Insightful)
On the flip side though, when someone diverts profit...
Someone downloads a movie, makes a few dozen DVDs with inkjet-printed labels and sells them out of the trunk of a Caprice across the street from Blockbuster or the movie theater for five bucks? That's stealing. A person or entity who can plainly afford and otherwise would buy that copy of Photoshop if it weren't so easy to get warez? That's stealing. Get a bunch of albums off Kazaa or Gnutella and sell 'em to people who'd otherwise have bought them legitimately? Stealing. Grab a GPL'ed app, hide what it is, snatch out all the copyrights, credits and license, bundle some spyware/adware with it and seek revenue from advertisers? Oh you better believe that's stealing.
See the difference?
just makes me wonder (Score:2)
A lot most likly... (Score:2)
Re:A lot most likly... (Score:2)
Yeah, I'm thinking that
OT (Score:2)
Re:just makes me wonder (Score:2)
Star messanger source code (Score:4, Informative)
Re:Star messanger source code (Score:5, Informative)
From StarMessenger/core/miranda.c: Mmm... Enjoy that adware goodness...
Re:Star messanger source code (Score:2)
Re:Star messanger source code (Score:5, Funny)
Re:Star messanger source code (Score:2)
Re:Star messanger source code (Score:2)
"Oh, sorry the buffer overflow. Bounds checking is such a pain..."
Lazyness is a pretty lame excuse for not doing it right!
Re:Star messanger source code (Score:5, Funny)
Re:Star messanger source code (Score:2)
99% of the time, you use such functions because you just want to run an external program. You don't care about their security attributes, or environment, or inheritance, or "where" they think they run - You just want them to start and do their thing. CreateProcess() will let you do that, but takes TEN parameters, including two structures, to do so.
So yes, I too still use WinExec()
Re:Star messanger source code (Score:2)
There's more info in the linked article. It's not an outright STEALING o
Re:Star messanger source code (Score:2)
If the grammar wasn't so bad, they'd be able to articulate their point in a much better fashion.
*Ahem* - it's a web log. Enough said?
Re:Star messanger source code (Score:2)
Re:Star messanger source code (Score:2)
It looks like they moved the copyright notices around. But I don't think that is a copyright violation...
I still think the company sucks for adding spyware.
Just to be clear (Score:4, Informative)
The Starmessanger program is in violation not because they used GPL'd code and don't make source available. They are completely up front that Starmessagner is actually Miranda, but they screwed up and punted the Miranda copyright information. Thus, it appears that this program is copyrighted/developed by someone other than the actual dev's.
Our copyrights have been removed, this is a violation of the GPL as well as copyright law
Kudos to the Miranda folks for explaining all of this really well.
Re:Just to be clear (Score:2)
Re:Just to be clear (Score:3, Informative)
Actually if I'm reading this correctly they aren't complying with the source requirement either. Miranda displays a copyright notice on a screen where StarMessenger displays a different, incorrect, and altered copyright notice. Yet the source they have available for download does not have any alterations to the copyright notices. Therefore, it seems that the source they provide for download is NOT the source to the binaries they are distributing, eh?
Re:bad logic (Score:5, Informative)
c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.)
I really wish they wouldn't give in so easily (Score:5, Interesting)
This isn't good, though, as it will only encourage the less-than-scrupulous companies to commit further license violations, many of which *will* go undetected. It's one thing to essentially take a product, slap a new name on it, and then try to sell it (like was the case in the CherryOS case) or at least claim it as your own; that's easily detectable. Taking code from a GPL'ed library, though, for example, and integrating that into your $10K+ enterprise application, will most likely not be noticed, even though it is just as illegal.
As such, I'd really like to see an actual lawsuit some time where the developers of the project that was ripped off seek (punitive) damages, and maybe, if the case allows for it, press criminal charges against the company executives, too. Violating a free software license is *no* small matter - it's just as illegal and immoral as it is to press and sell illegally-produced copies of Windows, for example, and companies need to realize that.
Re:I really wish they wouldn't give in so easily (Score:3, Informative)
That would be illegal only if the software package was distributed under non-GPL license. You can sell free (GPL or otherwise) software for $$$ but you have to give the users the same freedoms that you have.
Re:I really wish they wouldn't give in so easily (Score:3, Insightful)
What I don't get is the repeated offenders. If one project "makes good" they are still required to stop development/distribution of offensive software. If I take your source code and put it in my 1.0 series application and then finally release the code with my 2.0 series... I have no right to go onto develop the 3.0 series of the software.
Once you violate the GPL, you've lost all rights under the license. Maybe the FSF should spend a few of those donations they collect and sue a few of these
Re:I really wish they wouldn't give in so easily (Score:3, Informative)
Re:I really wish they wouldn't give in so easily (Score:3, Interesting)
Maybe the FSF (or someone) should collect money on the behalf of those GPL coders who want to sue violators but can't do it on their own.
[[Aside: I wonder, how much GPL code found its way into OpenServer and UnixWare]]
Re:I really wish they wouldn't give in so easily (Score:3, Informative)
The Software Freedom Law Center [softwarefreedom.org] does exactly that, and is headed up by Eben Moglen himself...
From their page:
IMBlaze a blatant violation (Score:5, Informative)
I informed the devs of gaim, and they aparently wont act (or cant afford to). But aparently are NOT happy about it.
http://www.imblaze.com/screenshots.asp [imblaze.com]
Someone needs to stop these creeps.
Take them down (Score:2, Insightful)
Re:Take them down (Score:2, Informative)
Re:Take them down (Score:2)
And they can't block it by filtering HTTP requests from DDOSing clients.
Re:Take them down (Score:2)
wget http://www.imblaze.com/download/IMBlazeVersion1Bu
rm -rfv www.imblaze.com
done
-----
That file is pretty large:)
I found it by using wget -r http://www.imblaze.com/screenshots.asp [imblaze.com]
which is also useful
Re:Take them down (Score:2)
Re:Take them down (Score:3, Insightful)
1. Hit them where it counts. Find out who their advertisers and voice your grievances. I'll bet there are more people in this sub-thread than use IMBlaze.
2. Launch an informational site (or page on gaim.sf.net) and Google bomb it so that anyone who's likely to run across imblaze.com will also run across this other site.
3. And of course... Find out who they are and in what jurisdiction they're located. Take legal action if possible.
Re:IMBlaze a blatant violation (Score:2)
What you sue them for is licensing costs. You figure out what portion of their application is yours and sue based on a percentage of that.
Re:IMBlaze a blatant violation (Score:2)
Copyright is granted to you automatically, and you have to assign it to someone if you want to lose it.
Re:IMBlaze a blatant violation (Score:2)
But it sure ticks off my sense of justice no end.
Re:IMBlaze a blatant violation (Score:2, Insightful)
Wow. Just wow. (Score:2)
If Gaim can't do anything about it, maybe AOL will.
The plot thickens! (Score:2)
I just downloaded this abomination, and yep, up comes the GPL licence.
*THEN*
Up pops the part where you have to enter the serial code. Oh yeah. The sourcecode AINT on that site, and it AINT in the package. Do you detect a problem? I do.
Anyway. Lets just see what
strings imblaze.exe reveals;-
Theres;
GAIM_NO_DLL_CHECK
gaim.dll
gaim_main
Yup its gaim.
Interestingly removeing imblaze.dll from the plugins directory *seems* to remove the advertising crap.
Theres more. "idletrack.dll" won't dele
Re:The plot thickens! (Score:2)
Re:The plot thickens! (Score:2)
Re:IMBlaze a blatant violation (Score:4, Informative)
This [imblaze.com], compared to this [img200.echo.cx], or this [imblaze.com] compared to this [img200.echo.cx]. Almost completely identical, you'd think that they'd at the very least change the names of the buttons, or at least make some attempt to hide what they've done. About the only thing I can see they've changed is added some icons and changed the main login picture - even the icons for "accounts", "sign on" etc are identical.
If it ever did get to court i'd say its an open and shut case, but hey I'm not in the legal business. Maybe the GAIM team should set up a legal fund, I'd donate at least something and I'm sure many others would too.
Re:IMBlaze a blatant violation (Score:3, Interesting)
The point is, IMBlaze *IS* gaim, but with a nominal amount of crappy spamvertising code chucked in.
The Gaim developers are probably owed the entire revenue stream the product made, because IMBlaze are wrongfully claiming someone elses product as there own and charging people money for it.... and possibly triple damage style too because IMBLaze *HAS* been informed.
If the Gaim people want to, they are going to get a bunch of dollars compensation and IMBlaze are hist
Re:IMBlaze a blatant violation (Score:4, Insightful)
Like all those trolls who love to ride people who remark about the inequities of corporate America,"If you don't like it then start your own company."
And just where does the magic startup capital come from?
The solution is not increased government assistance. That would only lead to abuse and frivolous lawsuits. The solution is a streamlined system of justice which isn't endlessly bottlenecked by paperwork, frivolous forms, and lawyers. If a GAIM developer should walk into an attorney's office with proof that IMblaze is a ripoff of their code, there should be a compensation check and a court injunction against IMblaze within 24 hours.
Re:IMBlaze a blatant violation (Score:2)
So how does that work? Does IMblaze not get a chance to defend itself?
Re:IMBlaze a blatant violation (Score:2)
Re:IMBlaze a blatant violation (Score:3, Interesting)
They claimed it would be there own code indeed about 10 months ago
SINCE THEN
they have revamped the website, changed the system, and its *STILL* fucking gaim.
They are *LYING THRU THERE TEETH*
Seriously, the developer *NEEDS* to post the GPL code *NOW*.
Re:IMBlaze a blatant violation (Score:2)
Re:IMBlaze a blatant violation (Score:2)
But *surely* you dont see an *tiny* little problem with them saying that they where on it *TEN MONTHS AGO*
That was ten months ago they where supposed to of removed the code *OR* put up the GPL violation.
Theres only one legal way for the IMBlaze people to resolve this, and thats to put up the code or remove the download.
He doesnt have any other options. The third option is to continue to
Re:I really wish they wouldn't give in so easily (Score:3, Interesting)
Well, that's your theory. Have you got case law to back it up? I don't have much trouble imagining a judge, who's easil
Re:I really wish they wouldn't give in so easily (Score:2)
Well, that's your theory. Have you got case law to back it up?
Who needs case law for this? We've got statutory law.
having real trouble quantifying the loss of a wronged GPL developer and calling it zero.
Learn what the GPP meant when he said "(punitive) damages" [wikipedia.org].
Sure, the actual damages of the developer might be zero, but 17USC504 [gpo.gov] provides for not just actual damages, but also profits that the offender made. Also, 17USC504(c) allows the copyright owner to, rather than receive actual damages + pro
Are you going to finance this legal battle? (Score:3, Insightful)
Re:Are you going to finance this legal battle? (Score:2)
The GAIM developers could transfer their copyright(s) to the FSF and let them hack it out.
Re:I really wish they wouldn't give in so easily (Score:2, Insightful)
Re:I really wish they wouldn't give in so easily (Score:2)
Thats not actually true it's perfectly legal to interate GPL'd code into your enterprise application without GPL'ing the whole app. The GPL only applies to redistribution and I would guess most enterprise application development is web based these days and is therefore never distributed.
Re:I really wish they wouldn't give in so easily (Score:2)
That would be our politicians teaching this to the companies.
I've long proposed that
Re:I really wish they wouldn't give in so easily (Score:2)
Removing GPL'd Code? (Score:3, Interesting)
I don't think that (b) should ever be an acceptable option.
It's too easy for a company to violate the GPL and calculate the risk of getting caught and the cost of implementing a solution to replace the GPL component.
Re:Removing GPL'd Code? (Score:2)
Then it WOULD be viral! (Score:2)
If it really bothers you all that much, then, when it happens to you, you can try to go for your share of the profits and maybe some punitive damages on top when your case comes up. If you can establish
Miranda is really really good (Score:4, Interesting)
Give it a try if you haven't already!
Re:Miranda is really really good (Score:2)
(cough) portability (Score:2, Insightful)
How about multi-platform? Sure well-coded OSS ported to Windows is cool (eg The GIMP), but Windows-only OSS?
It's verging on hypocritical idealogically (if it could be ported, it should) and very few Windows end-users are ever going to compile it from source (certainly more than 3 commands on Windows (exception perl modules))
Re:(cough) portability (Score:3, Insightful)
I fail to see how this is verging on hypocritical idealogy - the developers of a piece of software have licensed it under an OSS license and the source is available if anyone does want to port it to another platform.
Re:Miranda is really really good (Score:3, Interesting)
It's sad that this is what it takes to get the word out about some GPL products.
Voiding the GPL (Score:2)
Re:Voiding the GPL (Score:3, Interesting)
And that's just the point: it's not about downloading, it's about whether you (the person) are allowed to use the program under certai
Theft and intellectual property (Score:2, Interesting)
Oh God, this bullshit again (Score:4, Insightful)
to taking someone else's product, repackaging it, and reselling it as a commercial venture.
But even then trying to reduce the views of the millions of people who read slashdot down to a single viewpoint is asinine.
Re:Oh God, this bullshit again (Score:2)
Re:Let me see if I understand this.... (Score:4, Insightful)
Observing people on a message board who feel some way about A,
then observing people on same message board who feel some way about B,
then going "AHA! This message board has hypocritical views on A!",
is never anything but stupid. You want to complain about some hypothetical opinion? Fine. Find someone expressing it first, then explain why it's hypocritical. Don't just set up a big box labeled "HYPOCRITE" in a public space, then try to back random people into it.
Re:Start making examples (Score:3, Interesting)
Actually, this is not what needs to be done. Lawsuits, yes, w/ plenty of media attention, but the point should not be to attack businesses. Instead it should be to legally strengthen the GPL and show that open source code is of such high quality that businesses use it in their own commerical products. Suing business for astronomical payouts would result in short term gains for open source, but would scare many businesses away from trying o
Re:Start making examples (Score:2)
There is no conflict. (Score:2)
In this case, respecting copyright is "letting information be free."
Just because a work is in the public domain you still have to cite it if you use it as a source.
Re:Today is...? (Score:2)
Re:Today is...? (Score:2)
The grand parent comment was, in my opinion, a sarcastic remark about the double standards often seen on /. regarding copyrights holde
Re:Today is...? (Score:2)
This would be consistent with stealing from the poor v. stealing from the rich. Obviously, both are wrong (in most cases), but I think more people would agree that if one had to steal, one should steal from the rich rather than the poor. Such is the same with software -- steal from MS, rather than from GNU, Li
Re:You fool! (Score:5, Insightful)
Let me try to clarify a few points... maybe then there will be 249 people left without a clue:
1. If the situation were reversed (closed/proprietary source included within an OSS project) there would be a huge stink about it. So make no mistake. It would be immensely easy to show and the perps would be shamed out of the community. I think that's the reason it probably doesn't happen...(that often? I've never heard of it before.)
2. What makes "us" angry about big companies doing bad things is attempting to and often succeeding in taking away our rights and freedoms in order to secure their business model. I don't think there has been a single instance of people getting pissed off over a company embracing and following the GPL rules. In fact, when it happens, we generally flock to these companies in droves. Linksys is a perfect example of this effect. They use Linux in their WRT54G and it's incredibly popular as a result. Speaking only for myself, I look for the Linksys label now when getting small network equipment.
This stuff has nothing to do with music and movies, so don't even go there. It's not the same thing in my mind nor in the minds of others I reckon. It would only become similar if we attempted to make money from copying CDs and DVDs and claimed that we created those works ourselves.
I only wish physical goods could be shared in the way software, music and video can be shared... hunger would be a forgotten problem. (Sure, you can take my sandwich to make a copy for yourself...) If everyone had everything they ever wanted, what would the world come to though? Maybe I'll write a book and give it out to the world for free.
Re:I'm confused (Score:2)
Re:I'm confused (Score:2)
Really? They do?
Re:Just shows open source doesn't work (Score:4, Informative)
Because software can technically be copied at no cost, and therefore has the potential of empowering all people. While your computer is a file copier, have you ever seen a supermarket copier, a house copier, a car copier? No. Each "copy" of a car takes much costly resources. The day we are able to copy these things as easily as files, I'll be a huge proponent of free (as in freedom) cars and houses.
The other aspect of software freedom, namely that of open specs so you can learn from it and improve it, are mostly already present in cars and houses. You can open the lid of a car or tear open the floor of your house to see how it was built and maybe improve things.
Re:Just shows open source doesn't work (Score:2)
Well, when I tear open the lid of any recently built car then I see the basic stuff every car has and... SMD microchips.
I dare to claim that it does indeed take some ressources to access, reverse engineer or even modify them to any worthwhile extend.
There's a "car modding"-industry now, offering all kinds of assistance with the task but AFAIK the more interesting parts of a cars "business logic" are generally deliberatel
Re:Just shows open source doesn't work (Score:2)
Yes, you need a file copy device to copy a file. They come very cheap these days, and even developing contries have them.
And what do you need to copy a supermarket, a house, a car? You cannot copy them with any devices known to man today, you have to build new ones. On the other hand, to copy a computer program, you don't have to hire programmers to code it all over again, you simply
Re:Just shows open source doesn't work (Score:2)
But yes, not all p