Slashdot Mirror


Maui X-Stream: GPL Violations, Lies, and Damn Lies

Jeremy writes "Drunkenbatman is at it again. This time he takes apart Maui X-Stream and all the who and whats that go along with it. Deconstructing Maui X-Stream has GPL Violations with reproducable proof (not done this myself), chat logs, and double talk from the CEO's and supposed authors of the software."

20 of 444 comments (clear)

  1. Coral Cache by dagnabit · · Score: 5, Informative
    1. Re:Coral Cache by Chmarr · · Score: 2, Informative

      When you hit a nyud.net address, the DNS gives you back a small handful of IP addresses, based on where the request came from. Unfortunately, one of those IPs, the one your browser chooses to use, is as likely of getting slashdotted as the master site is.

  2. Re:Its not such a big deal by Laurentiu · · Score: 4, Informative

    You, sir, are a troll. From the horse's (or, more appropriately, goat's) mouth (aka the GPL FAQ):

    Does the GPL allow me to sell copies of the program for money?
    Yes, the GPL allows everyone to do this. The right to sell copies is part of the definition of free software. Except in one special situation, there is no limit on what price you can charge. (The one exception is the required written offer to provide source code that must accompany binary-only release.)

    Q: Does the GPL allow me to charge a fee for downloading the program from my site?
    Yes. You can charge any fee you wish for distributing a copy of the program. If you distribute binaries by download, you must provide "equivalent access" to download the source--therefore, the fee to download source may not be greater than the fee to download the binary.

    Does the GPL allow me to develop a modified version under a nondisclosure agreement?
    Yes. For instance, you can accept a contract to develop changes and agree not to release your changes until the client says ok. This is permitted because in this case no GPL-covered code is being distributed under an NDA.
    You can also release your changes to the client under the GPL, but agree not to release them to anyone else unless the client says ok. In this case, too, no GPL-covered code is being distributed under an NDA, or under any additional restrictions.
    The GPL would give the client the right to redistribute your version. In this scenario, the client will probably choose not to exercise that right, but does have the right.

    --
    Just /. IT
  3. overwhelming evidence! Great article! by xiando · · Score: 3, Informative

    This was a unusually well written, well-based article with a lot of good facts. The proof is overwhelming and is clearly accurate. Maui X-Stream, Inc. really got their pants pulled down like they deserve.

  4. Re:Its not such a big deal by justforaday · · Score: 4, Informative

    While your answer is correct, you don't seem to have addressed the OP's (OT's?) argument, which is that he's supposedly required to release the source code including his changes. This is only true if they were selling their modified versions to other people. Since they were in no way (that was mentioned) selling compiled binaries or modified versions of anything, they are under no obligation to publish those changes.

    In short, feel free to do whatever you want with GPL'd code in house, just be sure you're ready to give all those changes back to the community if you decide to sell the product you made with it.

    --
    I'll turn into a supernova and burn up everything. Well I'll turn into a black little hole and you'll turn into string.
  5. Re:Its not such a big deal by justforaday · · Score: 2, Informative

    ermm, change the word "sell" to "distribute" up there...

    --
    I'll turn into a supernova and burn up everything. Well I'll turn into a black little hole and you'll turn into string.
  6. Re:The problem is the penalty by /ASCII · · Score: 5, Informative

    This has happened multiple times, and the infringing company usually ends up posting the source.

    The original MPlayer devellopers wanted to dual license MPlayer because they felt exactly the way you do after the MPlayer vs Kiss debacle. When it was discovered that Kiss had stolen GPL'ed code from MPlayer, they first flat out denied it, they even went as far as to imply that MPlayer had somehow stolen code from a KISS DVD-player. But in the end Kiss where forced to comply with the GPL and offer source downloads.

    --
    Try out fish, the friendly interactive shell.
  7. Re:The problem is the penalty by hacker · · Score: 5, Informative
    "PS: Not trolling, genuinely curious. All the focus seems to be on "Is the GPL enforcable", not "Who shall enforce it". And IMHO, both are important."

    Its simple. Once violated, your rights to continue to use the GPL are revoked. This means every copy you allow to be downloaded, sold, or given away is now a US Copyright Violation, subject to $20k to $200k in penalties per-copy. Its easier to enforce if they filed their copyright with the US Copyright office (we did to fight just the same thing).

    Most GPL violations settle out of court because the costs associated with going to court are enormous. Its hard to assess "damages" against a GPL project where the code is given away, copied, shared, downloaded, etc. for free.

    In some cases, if the project taken by a commercial entity is used to "compete" with the free version (i.e. they claim they wrote it), it is also a "Lanhan Act" violation, or "False designation of origin".

    It gets really ugly when the GPL is violated, but the good thing is that once violated, the GPL is no longer even an issue, its a clear-cut US Copyright violation.

  8. Re:Commercial software pirates by hacker · · Score: 4, Informative
    "I know of dozens of "appliance like" devices that are like this. When you ask the vendor they say "we wrote it all" and just by the look and field you know Squid/BSD/OpenSSL/SSH are at minimum inside."

    This is called a "Lanham Act Violation" (false designation of origin), and can be prosecuted under the law. If some company takes your code and claims they wrote it, you have legal grounds to chew them into dust.

  9. Re:The problem is the penalty by Anonymous Coward · · Score: 1, Informative

    Unless you live in bananaland, just read it as "it's a clear-cut copyright violation".

    (And if you do live in bananaland, smoke some more bananas, and stop worrying about copyright, since you can't copy anything with a banana anyway).

  10. Re:My stuff by eventhorizon5 · · Score: 2, Informative

    If you want to mirror my analysis archive, get it here:

    http://www.drunkenblog.com/mxs/mxs_evidence.tar.gz

    (i can't host it on my webserver yet due to legal issues - these originated from it though)

    The archive can be browsed here:
    http://www.drunkenblog.com/mxs/

    Drunkenbatman said that there's over 20 mirrors of it, so I'll try to find out what those are.

    -eventhorizon

    --
    #Secret Windows Source Code, in MS C% - if (uptime >= "24 hours") then bsod() else print "Windows License Violation!"
  11. Re:Commercial software pirates by Anonymous Coward · · Score: 1, Informative

    This is the reason the FSF wants people who use the GPL to assign copyright to the FSF. If the FSF has the copyright, they will sue the companies who voilate their copyright.

  12. Re:Legal threats. by eventhorizon5 · · Score: 3, Informative

    "Well I got legal threats from MXS too for my research (I was the main tech analyst behind drunkenbatman's article). I'm going to scan the letters and post them somewhere hehe ;)"

    Let me add a little info to my post - do you know what they were complaining about? Jpeg images. Of a hex editor viewing strings in their binaries. Wow that's pretty illegal isn't it? lol - I almost fell out of my chair laughing when I got that. Just like MXS's lawyer said, "these links represent illegal activity" and earlier Jim Kartes told me that what I was doing was "extremely illegal". hehe ;)

    -eventhorizon

    --
    #Secret Windows Source Code, in MS C% - if (uptime >= "24 hours") then bsod() else print "Windows License Violation!"
  13. REUSED TROLL (Read for evidence) by crawdaddy · · Score: 2, Informative

    The formatting of this story just smacks of pre-written garbage. I googled for "specifically, Linux's lack of Token Ring support" and got the following two links:

    Here is this same post being made on /. in 2003.

    Here is a reader's response on CNET to a story in 2004.

  14. Re:The problem is the penalty by mOdQuArK! · · Score: 2, Informative

    He'd just ask his wife to do it - I believe she's won some national-level martial arts championships.

  15. Re:This happens more often than you think... by hacker · · Score: 4, Informative
    "I am very curious about why you should have trouble moving this case forward and/or obtaining representation. It looks to me like a shark would pick up this case and bloody this company for a big, juicy paycheck in a hearbeat, with no upfront costs to you."

    Mostly because Wendy moved on to work for the EFF and all attempts to get a replacement pro-bono attorney from the FSF (with as much clue as Wendy) were unsuccessful.

    And since we are wholly self-funded, putting up the retainer costs to talk to an attorney for 3-4 hours at his dime is not something we can just do, even if he decides to take the case as a "Slam Dunk" on his own merit.

    Also, we're giving the company who is infringing some time to hang themselves while we gather more information. They're now selling "Their Solution(tm)" to a pretty serious mobile vendor who is incorporating it into ROM on their upcoming devices. If this is true, a lot of companies and partners are in a world of hurt.

    It'll happen, it just takes time.

  16. Re:Even more LGPL violations than GPL by keytoe · · Score: 2, Informative

    If that is accurate, then there's no reason to have the LGPL at all as it functions exactly like the GPL. How do you use a library without the headers? Do you have to write your own headers for the library? Without peeking?
    When a "work that uses the Library" uses material from a header file that is part of the Library, the object code for the work may be a derivative work of the Library even though the source code is not. Whether this is true is especially significant if the work can be linked without the Library, or if the work is itself a library. The threshold for this to be true is not precisely defined by law.
    This is essentially reserving rights to catch people who wrap an LGPL library in their own library, then link to their own library to get around the license (among other similarly tricky things).

    The gist of the LGPL is that your application should be able to work without the library - otherwise it's pretty much a derivative work. However, "The threshold for this to be true is not precisely defined by law".
  17. Re:"Drunkenblog" isn't much of an authority by eventhorizon5 · · Score: 5, Informative

    I'm the owner of Tliquest.net, and me and the drunkenblog guy collaborated on this issue for some time now. Most of my research on the tliquest site had to be pulled due to legal threats (I don't have any legal support at this time), but he could handle being sued. About the Java player, there has been lots of speculation on what they have used. I'll post my research log right here, so you can see what still needs to be found (if we need to; unless MXS somehow comes clean):

    From primary archive,
    http://www.tliquest.net/mxs
    There are 20 supposed mirrors of my site, and I'll find out where they are soon.
    ---------
    Listing of projects that VX30 has taken code from:

    XviD 0.9.2 (all VX30 versions use this Xvid version)
    Media Player Classic (VX30 live also uses MPC's webserver)
    LAME (old 2004 version used version 3.93)
    Possibly Filezilla (found a whole bunch of error messages from it)
    Nero Freeware Advanced Audio (AAC) Decoder
    Liba52
    Ogg Vorbis code (it contains libVorbis, but that is under a BSD license; they haven't given credit, so it's a violation)
    but - the vorbis streaming code seems to be part of another non-Xiph app

    What I still don't know:
    -origination of Xvid encoder frontend they used for the original VX30 and later versions
    -origination of audio/video streamer server they used
    -origination of Java-based decoder client
    -which ones of these make up the Live Server app
    -which app the threaded Ogg Vorbis code is from
    ---------

    -eventhorizon

    --
    #Secret Windows Source Code, in MS C% - if (uptime >= "24 hours") then bsod() else print "Windows License Violation!"
  18. It's the Anonymous Astroturfer! by argent · · Score: 2, Informative

    Every time someone posts a GPL-violation story here, there's always an AC making this same comment with almost exactly the same wording, despite the fact that every time he makes it a bunch of people (1) point out that they are pro-GPL but don't engage in or promote violating music or video copyrights, (2) explain why there are legitimate reasons to oppose DRM that have nothing to do with the inconvenience it adds to playing illicitly acquired media, and (3) point to examples of successful online vendors that shun DRM... so even if the AC hasn't always read the followups he'd have to be deliberately remaining ignorant to miss them all.

    I wonder whether he's being paid by Microsoft or the RIAA.

  19. Re:But this is a problem by belmolis · · Score: 2, Informative

    This simply isn't true. Neither Microsoft nor the BSA has any legal authority to enter anyone's place of business or home in the absence of either a court order or the owner's permission to do so. The necessary permission could be granted at the time, or it could have been granted at an earlier time when a license agreement was signed. When the BSA conducts a raid (and they aren't just being allowed to tag along with real police) the only authority on which they have to rely is a prior valid agreement with the owner. If they try to enter your premises without either your permission or a court order, they are trespassing. You can refuse them entry or throw them out if they get inside, and you can use necessary and appropriate force to do so. (Details of that will vary with your jurisdiction.)

    Even if they DO have a right to audit you, by virtue of a license agreement, they cannot force their way in. Remember, these aren't the police. All they've got is a contract. If you refuse them entry, at worst you're in breach of contract. If they want to do anything about it, they'll have to go to court. They may be able to get a court order, in which case you risk prosecution for contempt of court if you refuse. In an extreme case, they may persuade the court to order the sheriff to provide access for them by force if necessary. They may also be able to sue you for damages and win, though it isn't clear what sort of damages they can get. In general I would guess that they could get very little by way statute or equity, but that some contracts may impose significant penalties for breach.

    There have been incidents reported of BSA clowns conducting raids as if they had a right to force entry, but in most of the cases I have heard about, they were acting beyond their legal rights and succeeded in intimidating people who didn't know their legal rights.