Slashdot Mirror


Finding the Pits In CherryOS

An anonymous reader writes "DrunkenBlog is carrying a story with piles of gathered evidence (including screenshots of code diffs) exposing the speed claims of CherryOS, and that the company behind it (Maui X-Stream) is not only stealing code from the open source project PearPC but at least several other OSS projects too. There are some choice quotes from PearPC developers on how it is harming their project. They appear to have a strong case, but enforcing the GPL could take help."

32 of 494 comments (clear)

  1. Warez too! by sH4RD · · Score: 5, Informative

    According to this thread on PearPC.net, he is using a warez'd copy of several programs as well.

    --
    WASTE - The Secure P2P
    1. Re:Warez too! by tyleroar · · Score: 2, Informative

      Actually, the thread doesn't say he is using several warez programs. They say he is using ONE warez program. Plus, some guy saying the installer he used was warezed, doesn't really make it true.

      --
      Portland, North Dakota Puppies
  2. Mirror by Joey+Patterson · · Score: 3, Informative

    The DrunkenBlog site is very slow, so here's a MirrorDot mirror of it.

  3. already slow... by Neophytus · · Score: 5, Informative
  4. Copyright infringement is NOT THEFT! by serviscope_minor · · Score: 5, Informative

    It is copyright infringement, just like the subject says.

    It does not matter who's copyright is being infringed or who is claiming it, it is STILL NOT THEFT.

    I'll bet I'll be modded down now, since this sort of thing is only accepable on an anti *AA thread.

    --
    SJW n. One who posts facts.
  5. "Troll"??? by Saeed+al-Sahaf · · Score: 3, Informative

    "Troll"??? It's not a troll. And it's not a condemnation of GPL either. It's a truthful statement that most FOSS developers can't afford to sue people.

    --
    "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
  6. Re:The sad truth... by serviscope_minor · · Score: 3, Informative

    The sad truth is that the GPL has no real teeth, because most of the people writing GPL'd code do not have the resources or time to do anything about "code theft".
    --
    What's worth doing is worth doing for money...


    That does not mean the license has no teeth, just like many other civil laws: you have to have the money to go to court.

    Oh and regarding your .sig: does that apply to sex too?

    --
    SJW n. One who posts facts.
  7. Re:The sad truth... by Anonymous Coward · · Score: 1, Informative

    If it is possible to sue for ?damages? then I'm sure at least one geak who is a lawyer would like to take a stab at it.

    Remember when the SCO lawsuits began? For those old enough to remember that far back, that gives an indication of how long a lawsuit can take and still have no end in sight. In fact they can take a lot longer. And they cost money that whole time. What you need is not a geek with a lawyer, but an unbelievably wealthy geek with a lawyer - and I don't think Bill G will be stepping up to the plate for this one.

  8. Re:Steal or Copy? by NetNifty · · Score: 2, Informative

    IIRC the GPL says you can charge whatever you want for the binary, but you have to release the source code which you used in it (ie make it available, at the very least by including the LICENCE.txt in the main directory of the software) and release it under the GPL licence. CherryOS has not done this.

  9. Re:Grab zagrabyonnoye by RdsArts · · Score: 2, Informative

    Cherry-OS is a PPC emulator. If someone runs Mac OS X in "violation" of some EULA, that's the user's problem. Many have used it to, for example, test out PPC Linux distros.

    Furthermore, no one with half a brain would say that software someone bought and then used on something other than the exact hardware someone else wanted them to is "stealing." That's just daft double-speak.

  10. Re:The sad truth... by jacksonj04 · · Score: 3, Informative

    I would say it depends on how the phones work. If all they are is a basic kernel with the companies own proprietary binaries on top, then there's nothing the company has to distribute. The kernel is available, it's their own binaries which make it special.

    Remember - as long as it's not a modification of or using parts of GPL code, then you can do what you like with it.

    --
    How many people can read hex if only you and dead people can read hex?
  11. Re:Is Pear allowed to... by MooseGuy529 · · Score: 2, Informative

    Yes, first, click-through EULA's are iffy anyway, and second, if you can extract the data from the SETUP.EXE program, you can do anything, since their site allows downloads without accepting the EULA!

    --

    Tired of free iPod sigs? Subscribe to my blacklist

  12. Re:The sad truth... by Tim+C · · Score: 3, Informative

    No, they have to make the source of the kernel they use available to anyone who has the binary (ie an owner of the phone). Just saying "it's stock 2.4.2, get it from kernel.org" isn't good enough, they have to make it available themselves.

    You are correct that they don't have to give out the source to their own binaries, as long as they're not GPLed or derived from GPLed software.

  13. Re:Is Pear allowed to... by Mycroft_VIII · · Score: 1, Informative

    You need an actual lawyer to answer this clearly. But I seem to recall that if said decompiling and so on shows the code to belong to the pear people, cherryos people have no standing to limit what they do to it.
    It's like I own a car, but you claim it's yours so I prove it's mine by starting it with my chipped key and comparing the vin number to sales records then you trying to have me jailed for using your car w/o permision.
    There's also something about the fact that cherry os people are doing something illeagle here and since thier hands are dirty they don't really have any recourse to ask the courts to protect it or something like that.
    Like I said a real lawyer could probably explain/clarify my what I vaguely remember here, or even show whether it made leagle sense (even though it makes common sense to me).

    Mycroft

    --
    https://signup.leagueoflegends.com/?ref=4c3ed6600b6ea
  14. Re:The sad truth... by dominator · · Score: 5, Informative

    That's not true at all. I've hashed it out with a few corporations over wvWare, my MSWord reading library. Usually the threat of action is enough to have the infringers quaking in their boots, and coax them into complaince. When it's not enough, you've got the FSF all-too willing to come to your aide:

    http://www.fsf.org/licensing/licenses/gpl-violatio n.html

    Regarding these cases, Eben Moglen (the FSF's general legal counsel) once told me that the reason you've never seen a GPL violation case go to court is because it's always a slam-dunk case that will be decided in your favor; that it's always in the infringer's best interest to settle out of court. I don't know how self-serving that statement was, but it's worth pondering at least. It's been my experience, in any case.

  15. Re:The sad truth... by slux · · Score: 2, Informative
    Luckily, we now have the Software Freedom Law Center.

    FSF has also been taking action against GPL infringers for a long time now AFAIK.

    Some infringers do get away with it, one such case was a proprietary messenger application misappropriating Psi's code, but the defense is available if the developers are willing. Another sad case for me are the Linux kernel binary-only modules which apparently aren't perfectly legal either, yet I myself have a D-Link router that contains several. No-one is sure what the court would find on those, though.

  16. Re:The sad truth... by FlashBuster3000 · · Score: 2, Informative

    Yeah, but after the netfilter vs. sitecom case the GPL proved as legal in real life.
    see http://www.netfilter.org/news/2004-04-15-sitecom-g pl.html

  17. All tell the CherryOS authors how nice they are... by rbarreira · · Score: 3, Informative

    Why don't we all send a nice letter to the makers of CherryOS? Here are some email addresses:

    mail@cherryos.com; press@cherryos.com; info@mxsinc.com; arben@vx30.com; vx30@mauionline.com

    I was thinking of posting this anonymously, but I didn't. Feel free to mod me as troll or anything else you want, but before that just think - how would you react if they were doing this to your own software project?

    A nice letter is not as much as those guys deserve... They are scammers and deserve to be trusted as such.

    --

    The AACS key is NOT 0xF606EEFD628B1CA427BEA93A9CA9773F
  18. Re:Stealing code? by madaxe42 · · Score: 2, Informative

    They're not code diffs, and they haven't released any code - they're diffs of hex dumps of libraries and executables - a lot of strings remain human readable - play around with a hex editor a bit, or use 'strings' in unix.

  19. Re:Hypocrisy.. by spaeschke · · Score: 3, Informative
    Possibly not... A case could be made that PearPC merely emulates the PPC, and isn't specifically made to run OSX. Hell, you could probably run YellowDog on it if you wanted to.

    Of course, we all know that's not the true purpose behind PearPC, but they could win on a technicality.

  20. Re:The sad truth... by zotz · · Score: 2, Informative

    "No, they have to make the source of the kernel they use available to anyone who has the binary"

    Actually, according to 3b,

    "b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange;"

    they have to provide the source to any third party, not just people who have the binary.

    Assuming they are not giving the phones away. If they are, they may get by with 3c.

    all the best,

    drew

    --
    FreeMusicPush If you want to see more Free Music made, listen to Free
  21. Re:The sad truth... by tomjen · · Score: 5, Informative

    No you need assitance from the GNU foundation - they have the lawyers (two law professors if i am not mistaken) and they would like to fry that company - then everybody would fear and respect the GPL.

    --
    Freedom or George Bush
  22. Not everybody knows by Craig+Ringer · · Score: 4, Informative

    That's the issue. Not everybody knows. I saw a post on the local Mac user group list (I support macs at work so I need to keep track) about CherryOS. They had no idea of the issues involved and the article they referred to did not mention them.

    It's worth making some noise even about something this blatant.

  23. Re:Hypocrisy.. by polyp2000 · · Score: 4, Informative

    Thats bollocks!
    PearPC - While able to run OSX - it is simply an emulation of PPC hardware. There are plenty of operating systems that PearPC can run eg: linux, bsd , beos etc. It is upto the person running the emulator whether they violate apples licensing agreement.

    Cherry OS however - albeit the same thing as PearPC are explicitly advertising their (stolen) product for the purpose of running OSX. They are much more likely to find themselves on the end of an apple lawsuit than the PearPC developers.

    --
    Electronic Music Made Using Linux http://soundcloud.com/polyp
  24. Re:Why does CherryOS even bother? by northcat · · Score: 3, Informative

    Everyone already knows that their project was a ripoff of PearPC

    Correction: Everyone on Slashdot and the PearPC forums.

  25. Re:Hypocrisy.. by Animats · · Score: 2, Informative
    Even though Apple Computer could sue your ass off because they have a clause in their EULA disallowing it, it's a really stupid clause

    Yes, it is a really stupid clause, because it's an "illegal tie-in sale". IBM lost that one decades ago, trying to prevent clones of their mainframes. That's how the third-party IBM mainframe market was created.

  26. Re:The sad truth... by Bruce+Perens · · Score: 4, Informative
    FSF does not own copyrights on the Linux kernel, and I don't know of anyone who has come to FSF who does own such copyrights. But we now have the resources to pursue such matters outside of FSF. I would like to hear from kernel copyright holders who would help with that. If we let the unauthorized derivative works go on for too long, I'm afraid we will create an estoppel that would limit the effect of the GPL.

    Bruce

  27. Why not do something about this? by Amich · · Score: 5, Informative

    It's obvious this sort of thing is an outrage, and we should stand up and do something better than preaching to the choir on Slashdot.

    This story made me decide to donate to the PearPC project http://sourceforge.net/donate/index.php?group_id=1 08675 . I'm sure if enough donations piled up, PearPC's authors would go after CherryOS in court.

  28. Re:The sad truth... by KarmaMB84 · · Score: 2, Informative

    They have to make it available upon request, but I don't see anyone getting upset and taking them to court when they tell them the exact source for the underlying OS is available at kernel.org. If it becomes unavailable at kernel.org, then they'd have to either start mailing it on physical media to people who request it or link them to their own FTP (possibly even with a one time username/password) for it or something similar. It would be incredibly stupid for the OSS community to force anyone distributing binaries made from vanilla sources to become a mirror for the source.

  29. Re:The sad truth... by shellbeach · · Score: 3, Informative
    Actually, according to 3b ... they have to provide the source to any third party, not just people who have the binary.

    This is incorrect. Read section 3 in context ...

    Quoting from http://www.gnu.org/copyleft/gpl.html:

    • 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:

      a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

      b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

      c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.)

      [My emphasis]


    Thus you only have to comply with one of either (a), (b) or (c) and it is perfectly legitimate to sell GPL software and only provide the source with the purchased binary (thereby meeting the requirements of section a). Mind you, anyone who buys it can then quite happily make it available for free download if they want ...
  30. Someone please mod this troll DOWN by Anonymous Coward · · Score: 2, Informative

    This is an obvious troll from a known hypocrite and copyright infringer

    Please mod him down.

  31. Re:The sad truth... by shellbeach · · Score: 2, Informative

    Sure, but in context of the thread, they have purchased the router, and thus have the binary and have not been supplied with the source. Therefore, a is out and that leaves b and c for consideration.

    Sorry :( - I thought you were talking in general terms: the idea that the author of GPL'd software has to make the source available to everyone on the internet is a common misconception. So as far as those linux phones go, you're right - the manufacturers should be providing the source of the kernel they're using or a link to that source.