Slashdot Mirror

I'm the owner of Tliquest.net, and me and the drunkenblog guy collaborated on this issue for some time now. Most of my research on the tliquest site had to be pulled due to legal threats (I don't have any legal support at this time), but he could handle being sued. About the Java player, there has been lots of speculation on what they have used. I'll post my research log right here, so you can see what still needs to be found (if we need to; unless MXS somehow comes clean):

From primary archive,
http://www.tliquest.net/mxs
There are 20 supposed mirrors of my site, and I'll find out where they are soon.
---------
Listing of projects that VX30 has taken code from:

XviD 0.9.2 (all VX30 versions use this Xvid version)
Media Player Classic (VX30 live also uses MPC's webserver)
LAME (old 2004 version used version 3.93)
Possibly Filezilla (found a whole bunch of error messages from it)
Nero Freeware Advanced Audio (AAC) Decoder
Liba52
Ogg Vorbis code (it contains libVorbis, but that is under a BSD license; they haven't given credit, so it's a violation)
but - the vorbis streaming code seems to be part of another non-Xiph app

What I still don't know:
-origination of Xvid encoder frontend they used for the original VX30 and later versions
-origination of audio/video streamer server they used
-origination of Java-based decoder client
-which ones of these make up the Live Server app
-which app the threaded Ogg Vorbis code is from
---------

-eventhorizon

The real analysis of CherryOS and VX30 is on Tliquest. The "drunkenblog" guy just took excerpts from there.

What's so wierd about the VX30 mess is that they've apparently developed a reasonably decent video player written in Java. (It's not "playerless"; the player is a Java applet.) Which anyone can download. "VX30" is just the encoder.

The player is at "http://movies.mxsinc.com/NewHome/vxmPlayer.jar".

The problem is that MXS has already violated the GPL, and so their license was terminated - as far as I know, nothing they can do will every make CherryOS fully legal:

from the GPL v2:

"4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance."

5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it."

Also, about a half hour ago older binaries of MXS's main product, VX30 were contributed to me for use on the PearPC discussion forum. They can be found here, complete with analysis pics:
http://www.tliquest.net/ryan/cherryos/vx30/oldvers ion

VX30 contains large amounts of XviD code (if not all of it), large amount of LAME code, and more. I was in contact with one of the XviD developers about that issue, and they are considering legal action against MXS in this matter, and want to possibly join PearPC's legal efforts.

From the VX30 Live (aka VX30 B-Cast) manual:
"The VX30 codec is one of the most powerful in the world with an unmatched compression ratio of over 100 to 1"

Wow - the most powerful video codec in the world, with unmatched compression. Impressive. Sounds like XviD.

MXS also must release the code ASAP (all products), and not in June. Their delay tactics show that they are trying to do anything they can to "clean up" their code. It's possible that CherryOS would be legally owned by the PearPC group and affiliated parties from this situation, but I'm not totally sure on that.

-eventhorizon

Just found Mplayer code and text references to Mplayer's CVS pages in the VX30 Live app...
This is making me sick.
http://www.tliquest.net/ryan/cherryos/vx30/analysi s/vx30_live/

-eventhorizon

VX30 has XVid code in it. I'm analyzing a memory dump of VX30's encoder demo app (the program's been packed using Petite. I'm about to upload screenshots of it, and also the memory dump itself (I'll analyze the second app too fairly soon) - the dump is 90mb and I'll try to compress it as much as I can.
The new stuff will be in http://www.tliquest.net/ryan/cherryos/vx30/ in a few minutes.

-eventhorizon

Also a third product they have called PdfConv (hosted on their one-product "store" at http://www.mbloom.com/) was entirely taken from VeryPDF's PDF2HTML code, and some effort by PearPC developers was required to make MXS release the source for that. The problem though was that the source they released was entirely stripped of all VeryPDF's copyrights and authorship acknowledgements, and only contained one small reference to them on the webpage (just referencing "VeryPDF" - no links or anything). So even their source is in violation with the GPL (since all previous copyrights must remain intact) - I think they also stripped the XPdf copyrights (VeryPDF's PDF2HTML was based on XPdf).

I found only one reference in the code to verypdf:

---
ryan@europa:/data/home/ryan/xpdf$ grep -ir verypdf pdfconv
pdfconv/src/MyReg.cpp: "Dear verypdf.com Inc:%0a"
---

Here's the diff file I made between VeryPDF's PDF2HTML code and Arben's PdfConv source:
http://www.tliquest.net/ryan/cherryos/other/pdfcon v.patch
That diff is proof enough. So with the way they treat the GPL, it seems as if everything they make is dirty.

-eventhorizon

You also have to remember that this company's primary product, the VX30 video codec system, has been suspected (and somewhat proved) to have taken code from other open source projects too - they admitted to taking code from JOrbis (and they're still in violation of the LGPL with that), and it's suspected that they also used XVid and maybe LAME.

My whole info archive (with demo releases of CherryOS, VX30, etc) are all at
http://www.tliquest.net/ryan/cherryos

-eventhorizon

The CherryOS executables seem to be compressed, to hide plaintext symbols (security through obscurity lol). They're trying to hide their tracks. I just put 3 versions of CherryOS on my site, the third being the latest one, for comparison purposes. This is just getting insane.

Here's the site:
http://www.tliquest.net/ryan/cherryos
Go into the "app" directory

-eventhorizon

I originally posted material on the PearPC developer list right after CherryOS was released (including some of my own comparisons of the binaries and stuff). One hilarious thing is that CherryOS has dialogs that say they're formatting an HPFS volume (and more windows that mention the filesystem HPFS) - the funny thing is that MacOS X uses the HFS+ filesystem (OS 9 uses HFS), so right there you know that these people have no clue about the operating system they're supporting. They also claimed that the whole software app was developed by a single guy in 4 months... any person who's familiar with architecture emulators knows that a statement like that is insane - writing an entire software-based PowerPC cpu emulator, along with the hardware emulation layers all by one guy in 4 months?! That is similar to a person saying that Bill Gates wrote Windows 95 all by himself back in '95 lol.

Here's my stash of comparisons; there's many other pages on other sites with info:
http://www.tliquest.net/ryan/cherryos

The in-depth article that features some of my research is here:
http://www.drunkenblog.com/drunkenblog-archives/00 0501.html

-eventhorizon

But remember, the GPL itself is not specifically "tested", per se, because GPL software developers assert them rights granted to them via copyright on an individual basis. This makes it a sometimes long and arduous process to assert rights and/or prove infringement, but hopefully more precedent will help.

Since the provisions of the GPL have been upheld in a case in Germany as well, maybe PearPC will be able to more easily defend itself against CherryOS, which has blatantly taken GPL code, without release of source code or attribution, from PearPC and several other GPL projects:

eWeek has a general overview of the situation:

http://www.eweek.com/article2/0,1759,1775386,00.as p

Below is a comprehensive collection of evidence, which runs the gamut from CherryOS including original PearPC graphics, extremely unique strings and error messages, debug code from PearPC, the same unique MAC address as PearPC's default network adapter, shared specific functionality, including bugs, and so on:

http://www.ht-technology.com/cherryos-pearpc/cherr yos-pearpc.html

http://www.drunkenblog.com/drunkenblog-archives/00 0501.html
http://www.drunkenblog.com/drunkenblog-archives/00 0503.html
http://www.drunkenblog.com/drunkenblog-archives/00 0504.html
http://www.drunkenblog.com/drunkenblog-archives/00 0507.html

http://starport.dnsalias.net/index.php?show=articl e&id=348

http://forums.pearpc.net/viewtopic.php?p=16178#161 78
http://www.tliquest.net/ryan/cherryos/
http://dhost.info/kourge/en/projects/frauds/cherry os.php

Additionally, PearPC project authors are already asserting their rights under the GPL:

http://sourceforge.net/mailarchive/message.php?msg _id=11116974

And a general compilation of some of the evidence so far against CherryOS:

http://sourceforge.net/mailarchive/message.php?msg _id=11125509

I've also got some scripts on my anti-spam website that I use to analyze spam stored in mbox files. One script lists all of the machines that sent the spam, in decending order according to the amount of spam they sent, like so (this is the top of the most recent results):

(instance, IP, hostname)
5 81.198.237.219 unknown
5 211.243.68.48 unknown
5 209.58.246.26 softdnserror
4 67.140.111.166 h166.111.140.67.ip.alltel.net
4 219.6.220.121 yahoobb219006220121.bbtec.net
4 203.227.243.182 unknown
4 201.6.33.39 c9062127.virtua.com.br

and then another script takes all of the IPs that sent 3 or more spams and dumps them into a block list. Machines that connect to the server are first checked by a script to see if they exist in the block list, then are checked to see if they are listed in Spamhaus, and then are checked to see if they are listed in the ORDB. Finally the message is transmitted, and sent to Spamassassin, which tags the message if it's spam. Another script moves the message to the user's inbox if it's not tagged, and to the spam archive (/var/mail/spam) if it is. Then the webmail system filters out certain messages based on it's own rules.

All of this and still an increase in spam lol

The stuff (including statistic graphs) is here:
http://www.tliquest.net/spam

-eventhorizon

I don't know if the CAN-SPAM act is directly responsible for the overall increase of spam (there isn't really any data that shows a good correlation), but the general amount of spam has definately been going up. I run a small email server that serves a handful of users, and also has an extremely aggressive spam filtering system that I designed (a 5-stage filter, including Spamassassin, Spamhaus, realitime blacklists based on number of spams from machines, etc) and the amount of spam is still going up. A while back when I added the 5th stage to the filtering system, there seemed to be a noticable increase in spam, even though the machine was filtering much more accurately. It's just insane

I have a webpage on the machine with all the stats, graphs, etc of the spam, and even the spam itself archives in gzipped mbox files (used for graph generation and other analysis) at: http://www.tliquest.net/spam

-eventhorizon

"If linux can figure out a way to be built with NO Kernel Recompiling EVER, and have the kernel update as easy as swapping out 1 file, then linux will dominate the market for good." It depends on what area you're talking about. As for kernel upgrades, distributions provide kernel binaries that you can install; you can also get kernel binaries from third parties, including my own very large, fully-featured modular kernels available here. (I need to upload my current versions - these are pretty outdated lol)

As for upgrading kernels without reboots (well probably some shutting down of most services), you could go the microkernel route; there are projects that are implementing a microkernel that runs on top of the Linux kernel, similar to how MacOS X is implemented (the Mach microkernel with the BSD/Darwin kernel running below it). This way (correct me if I'm wrong; I'm no expert in Microkernel architectures) the Linux kernel itself would be running as a user process, divided into subsystems; each subsystem could be upgraded on the fly, mostly without interruption.

So in this design, the microkernel would be the only item running at the true kernel level, while Linux and everything else would be running as user processes. The security and scalability of this is much greater than a traditional monolithic kernel (some other monolitic kernels include xBSD, Solaris, NT, IRIX, etc), but there's around a 20% performance decrease due to the message passing between subsystem processes. This is what the debate between Tannenbaum and Linus was about back in the early 90's.

-eventhorizon

I posted my writings on the subject, and also much more.

View them here

1. And when the time of his circumcision was come, namely, the eighth day, on which the law commanded the child to be circumcised, they circumcised him in the cave.
2. And the old Hebrew woman took the foreskin and preserved it in an alabaster-box of old oil of spikenard.
3. And she had a son who was a druggist, to whom she said, Take heed you sell not this alabaster box of spikenard-ointment, even if you are offered three hundred pence for it.
4. Now this is that alabaster-box which Mary the sinner procured, and poured forth the ointment out of it upon the head and the feet of our Lord Jesus Christ, and wiped it off with the hairs of her head.

Bravo. I couldn't have said it better myself. The UN gaining control over the internet would of course be presented as a further move towards global "peace", also known as "progress". Analyzing history, the only possible method some insane global organization would use in order to try to enforce peace, or what I'd call pseudo-peace, would to be to turn Huxley's Brave New World into reality. Now that would be a nightmare. A forced socialist system for all, centrally governed by a few elitist nuts.

There's a really great picture to go along with this:
Fake UN Address

Only Un-Americans put the UN before America.

The prophecies of a 10-nation world confederation, stationed in Europe, in one generational distance from 1948, overseeing the activities of 6 billion people, dictated by 2 rulers, doesn't seem that far off anymore - especially since it's Biblical prophecy.

click here for that link

Well, this is a classic example of how stupid Communism and Socialism (the abolition of private property) are. They just simply move societies towards an absolute dictatorship, aka Nazism (Totalitarianism) that implements Fascism (government control of corporate markets) to get it's way. It's got it's own little name too... Left-wing extremism. Click this link to see an economic chart and see where China stands: Economic-Political spectrum

Globalism is a threat to the entire existance of mankind. September 11th is a small example of an attempt to restructure the United States into a single socialistic society, and then merging it with the other communistic regimes, thus forming a single world government, known as the New World Order. Osama bin Laden and the Taliban DID NOT DO IT. It wouldn't make any sense for them to attack the US, since over 90% of Afghanistan was destroyed by the Russians years ago, and the entire Taliban would just be committing suicide if they really did attack, considering the power difference between their forces and ours. Almost everyone in Afghanistan is dying; everybody is poverty stricken; almost all homes were destroyed including hospitals and food supply locations. This is PURE TRUTH. If you don't believe it, just think of where the planes that attacked on 9/11 came from. Not from Afghanistan. Not from Pakistan. From the US. The 'selected elite', higher officials who are simply greedy for power and money have been establishing a world government since the 20's. Humans naturally want a scapegoat for the attacks, and refuse to believe that their own country had any part in it. So what happens? The moment the planes hit, everybody started talking about Afghanistan. It never changed. It never will. It demonstrates the media's insane influence on the people. How about anthrax? Notice how only 5 people out of all the people in the entire country have died? Wow, that is a real killer. Yeah sure. Think of the media hype, portraying it as a devistating outbreak ready to kill everybody and everything. We are witnessing the outcome of years of MK-ULTRA mind control research which has been portrayed as being a 'conspiracy' even though there is almost too much proof of it. Society is being brainwashed into submitting to a soon-to-be communistic system. Sure, some of you might just laugh and say it's just a 'conspiracy theory'. Some of you might completely ignore any notion of higher governments. But what if it's been proven time and time again. What can you say about that?

I'll name some of the so-called higher organizations that control much of this. They all portray themselves as discussing 'international issues' even though it goes deeper than that. First, the United Nations was established to be a single world government under the viewpoint that it keeps peace (Vietnam? Kosovo? you call this peace?!). Above that is two equally powerful groups; the Council on Foreign Relations (CFR) and the Trilateral Commission. Finally, above all, is the Bilderberg Group; a team of greedy, apocalyptic, insane, power-hungry bastards that all deserve to be imprisoned for life for committing treason against almost every country in existance. One guy I hate the most is David Rockefeller, part of the Rockefeller dynasty that has established most of this crap.

Quick facts:
-Aids never existed. It was proven in Spain by a doctor injecting himself with HIV-infected blood on national TV. It's the side affect of a treatment drug for HIV. HIV is a natural every-day occurrence too that is not a threat. Currently, AIDS is a billion-dollar industry.
-A cure for cancer was created in 1922, and is currently banned in the US because it has no side effects (weird, huh!). Cancer treatment is also a billion-dollar industry. Why do they do stuff like this? Because they make more money creating a problem than solving one. When you're greedy, what do you care only about? Money.

Visit my website dealing with all of this and more at http://www.tliquest.net/truth

God help us all...

I did an entire web site on this issue and other related things just recently. Please, don't take the information in the site the wrong way, since it's based on lots of other sources. Enjoy :) Read it here: http://www.tliquest.net/truth