Slashdot Mirror


P2P Scammers' Lawyers Attack Open Source Team

An anonymous reader writes "Late last year a company affiliated with the French RIAA hijacked the Shareaza.com domain name from the original, open source project's owner. They are passing off their own for-pay software, which violates the GPL, as the real thing. Now, having stolen the Shareaza project's identity, the scammers are threatening legal action to shut down the real open source team."

24 of 157 comments (clear)

  1. Reminds me of a story... by Darundal · · Score: 3, Funny

    ...from a while back in which some hardware counterfeiters in china got to the point where they where actually paying a firm for R&D for new products.

    1. Re:Reminds me of a story... by paeanblack · · Score: 4, Informative

      ...from a while back in which some hardware counterfeiters in china got to the point where they where actually paying a firm for R&D for new products.

      A hundred years ago the same thing was happening here in the US. Intellectual property law enforcement was non-existent in practice. US companies were ripping off European IP and then grew to the point when they needed their own R&D to compete with other US companies doing the same thing. Oddly enough, right about the time when serious commercial research was starting to take off in the States, the US IP laws grew some real teeth.

      History is a funny thing. It almost seems like it keeps repeating itself.

  2. Interesting move by the French RIAA by downix · · Score: 4, Interesting

    First they work to strengthen copyright laws to the point that they make capital murder seem less a crime, THEN they help a group which targets a GPL piece of software, and as we all know, the GPL utilizes the full strength of Copyright for it's own power... They are about to reap what they have sown.

    --
    Karma Whoring for Fun and Profit.
    1. Re:Interesting move by the French RIAA by SharpFang · · Score: 3, Insightful

      Exactly if Discordia took the source, modified it, distributed it and...

      Don't skip that step. You're allowed to make GPL into closeware ("nobody but me is allowed to use it"), but you can't distribute it to others without sources.

      --
      45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
    2. Re:Interesting move by the French RIAA by jrumney · · Score: 3, Informative

      They don't seem to be distributing the Shareasa client. They seem to be distributing the iMesh client rebadged as Shareasa 4. The only copyright infringement seems to be the use of the Shareasa project's logo on their website. The biggest problem is trademark infringement and passing off, but the former is going to be difficult to pursue without registering the trademark first, which they don't have the money for.

  3. Smoking in the licence agreement... by craig1709 · · Score: 5, Funny

    "SMOKING

    Smoking overall is bad for you. It gives you bad breath and may kill you sooner than you'd expect." - the licence agreement
    All I can say is: WTF?

  4. Not so black & white by LilWolf · · Score: 4, Insightful

    While the company may violate the GPL, their legal note says they want some threads removed from the forum that contain instructions on how to conduct an DoS attack against them. That may or may not be illegal where you live, but in no case does it gather sympathy from me.

    If they're violating the GPL then sue them for that, but don't complain if they come at you for something that's likely illegal where ever you live.

  5. Do better than that by roman_mir · · Score: 4, Insightful
    Warning to Shareaza users by the original team:

    ShareazaV4, is totally fake. It violates the open-source license, GPL (Version 2) in many ways. Also, it isn't free nor open source. It requires a subscription and installs a suspicious toolbar. You can read what happened from this reference list: http://tinyurl.com/2cx7ff

    Please, update your Shareaza version to Shareaza 2.3.1.0, and change the site from Shareaza.com to the new official site at Sourceforge: http://shareaza.sourceforge.net/ .

    The short version of why this is happening from the article:

    A company trying to pass itself off as vendors of the open-source file-sharing software Shareaza, has set the legal dogs on the real Shareaza forum. Discordia Ltd, who earlier turned Bearshare and iMesh into pay services, demanded action after a member of the real Shareaza forum suggested a DOS attack on the site.

    This is due to this suggestion by real shareaza forum user :

    Make it so the real shareaza program queries their site [shareaza.com] every couple of seconds. As an individual user this won't take much personal bandwidth. But all shareaza users worldwide put together should be enough to kill their server and they won't really be able to do much since it will be coming from so many different IPs.

    The letter by the shyster hired by the thief/impersonator of the shareaza domain and project:

    This law firm represents Discordia, Ltd., the operator of the website Shareaza.com and owner of the rights in the Shareaza branded software distributed from that domain. Please be advised, that your forum contains a string of posts under the title: "suggestion to kill Shareaza.com." Under the string, the poster, RedSquirrel offers directions for users of Shareaza software to implement a DoS that would have the effect of destroying or seriously impairing our client's application and network. The poster OldDeath also offers a manner to illegally attack our client's business.

    Despite whatever complaints your forum's users may have with our client's proper and legal business activities, the type of activity promoted on your forum is illegal. Therefore, we request that you immediately remove this string of posts and any future strings of this nature. My client respects your users' rights to express their points of view. However, the line is crossed when users begin to promote the destruction of a legitimate business (evidently based on out some misguided belief that artists and others who create music should not be fairly compensated for their efforts) via illegal or other predatory means.

    If the above cited illegal activity on your site does not immediately cease and desist, our client will take all necessary action to vigorously and relentlessly protect its rights. To be clear, if this action is not immediately taken and, as result, our client's business is harmed, we will not only pursue, locate and hold fully responsible each and every one of those who have implemented this, or any similar DoS, but also those responsible for maintaining your site and the forums.

    Please confirm that the requested action is being taken immediately.

    Jeffrey A. Kimmel

    Meister Seelig & Fein, LLP
    140 E. 45th St., 19th Fl.
    New York, NY 10017
    (212) 655-3578

    I suppose the law is in their hands in terms of a DDoS attack, so it would be more correct to sue the impersonator/thief for t

    1. Re:Do better than that by downix · · Score: 5, Insightful

      To claim that forum trolls represent a project is a weak tactic, and had been thrown out of court in every case I have studied.

      --
      Karma Whoring for Fun and Profit.
    2. Re:Do better than that by ArsenneLupin · · Score: 4, Insightful

      I suppose the law is in their hands in terms of a DDoS attack, so it would be more correct to sue the impersonator/thief for trademark and copyright violations if they indeed are violating the GPL and are using 'shareaza' name on their 'competing' software. It's not actually a DDoS attack, but rather millions of shareaza instances probing the shareaza site for updates. A thing many other software packages (such as virus scanners, or even Windows itself) do routinely. The shareaza authors are perfectly within their rights to do this. Too bad only that somebody hijacked the shareaza domain, and that the relevant URL didn't contain the appropriate CGI to manage the update, and even less the needed cryptographic signatures to validate itself. Too bad also that shareaza probes again real soon after a failure, and only a day after a success.

      Oh, and Meister Seelig needs to be very careful where he steps, so that he doesn't accidentally perjure himself by claiming rights that his clients doesn't have... In his first letter he seems to have avoided the obvious traps (... simply by not using the term "under penalty of perjury ...) but I'm sure that as soon as the action starts, and more letters become necessary, he will end up making a mistake.

      The appropriate reaction to such a letter is to ask the shyster lawyers whether they are ready to uphold their claims under oath in front of a court of law...

  6. Re:direct link by Brian+Gordon · · Score: 4, Insightful

    Oh yeah, they get their domain name illegally hijacked so they should just change the name of their entire project.

  7. Don't do that! by ArsenneLupin · · Score: 3, Funny

    You'll get Slashdot in trouble. Indeed, by your link you effectively trigger a Dos against the shite, by means of Slashdot effect!

    1. Re:Don't do that! by russ1337 · · Score: 4, Funny

      ...you effectively trigger a Dos against the shite
      Sean Connery? is that you?
    2. Re:Don't do that! by spun · · Score: 4, Funny

      ...you effectively trigger a Dos against the shite


      Sean Connery? is that you? Yesh, and I DOShed your wife's shite lasht night, Trebeck.
      --
      - None can love freedom heartily, but good men; the rest love not freedom, but license. -- John Milton
  8. Turnabout is fair play by abbamouse · · Score: 4, Informative

    Aw, someone stole the Shareaza name and used it for their own proprietary crap. I seem to remember something like this from a few years back, except the term is question was Gnutella and an incompatible protocol stealing its name and calling itself "Gnutella 2." Karma can be a bitch sometimes.

    --
    Make cheese not war 8:)
  9. its happened before on a grander scale.. by apodyopsis · · Score: 5, Interesting

    NEC - yes thats right the major international corp. - found a entire fake NEC outfit working in China, complete with factories, hundreds of employees, using the same logo, letterheads and even staff ID badges. They found out when kit started coming back for repair that they had not even made. its still one of my favorite China fake goods stories, because you just could not make it up.

    Think I'm joking? I assure you I am not, here are some references...
    http://www.eetindia.co.in/ART_8800416910_1800007_NT_5c0424e2.HTM
    http://www.eetimes.com/showArticle.jhtml?articleID=187200176
    http://www.nytimes.com/2006/05/01/technology/01pirate.html
    http://www.smh.com.au/news/biztech/slick-pirates-seize-entire-brand/2006/05/29/1148754904830.html

    The hardest thing is sometimes to persuade people that what they are doing in actually wrong in the first place, I guess this is the case with Shareaza.

  10. One Way To Easily Defeat French Scammers ... by blcamp · · Score: 3, Funny


    Just declare war on them.

    --
    The problem with socialism is that they always run out of other people's money. - Margaret Thatcher
  11. maybe not accessible ... by Fallen+Andy · · Score: 4, Informative
    ... if you've got Spybot-SD installed then your local hosts file maps shareaza.com along with many other junk sites to 127.0.0.1. (For a moment I thought they'd been slashdotted (grins)).

    Andy

  12. Is this more Discordian FOSS acquisition? by srck · · Score: 5, Interesting

    A quick google for "Discordia Limited" turned up jzip.com - "Based on 7-Zip technology by Igor Pavlov" is the strap line for the site (its a Winzip-style compression tool). Is this another occurrence of their appropriation of open source products?

  13. Re:Darn, now I have to RTFA by drawfour · · Score: 4, Funny

    No, it stands for "Recording Industry Association of Assholes". Applicable for any country.

  14. a quick strings shows they do have the same parent by Anonymous Coward · · Score: 5, Informative

    I downloaded the exe from shareaza.com and unpacked it (strings showed it was a wise installer, google wise unpack)
    strings shareaza.exe gave loads and loads of function names error messages etc.
    Downloaded the source from real shareaza (from sourceforge) ran grep against those names and everyone tried matched.
    I need to try and do a proper comparasion, but IMHO the exe is created from the a branch of the open source 'true' version

  15. What GPL code are they using? by Skapare · · Score: 3, Insightful

    What GPL code are they using? Are they actually using some identifiable GPL code in their distributed software without complying with the GPL licensing requirements? Are they using the original SHAREAZA team's actual software (modified to do the nasty things)? All I see in the article are issues regarding an allegation of a stolen domain and an allegation of a plot to perform a distributed denial of service attack. If they did in fact make any use of GPL software without complying with the GPL licensing (such as making the source code available to anyone they distribute the software to), then by all means pursue legal remedies for that. Otherwise, the standing issues are the stolen domain and DDoS plot.

    --
    now we need to go OSS in diesel cars
  16. Typical scammer behaviour by anticypher · · Score: 4, Informative

    Although TFA mentions the French equivalent of the RIAA, I'm puzzled at which it could be. Is it the IFPI, or the only group with legal jurisdiction in France, the SNEP? I can't find any other reference to France or French companies.

    The original shareaza.com site resolves to an IP address (207.232.22.55) in New York, but listed with a fake front company with an Israeli ISP. The ISPs netvision.net.il and elron.net are known pink-contract, i.e. spammer friendly, hosting companies, they've been known to set up netblocks for spammers and run them until they are in every blacklist, then migrate in another netblock for the spammers. Most of the dodgy hosting is done in the U.S. and Russia. elron.net has been associated with the Russian Business Network, but a quick google doesn't turn up any easy links to back that up.

    Someone posted above about shareazasecurity.be (195.47.247.137), but that goes to a server hosted in Denmark.

    Although there is some mis-direction by throwing international company names into the mix (a classic scammer tactic), this appears to be mostly a U.S. based operation.

    the AC

    --
    Hemos is like...sci-fi fans;he thinks technology is cool, but he hasn't bothered to understand the science it's based on
  17. Re:direct link by Loke+the+Dog · · Score: 3, Interesting

    Yes, exactly.

    History of the Swedish newspaper Aftonbladet:

    When it was first published in 1830 by Lars Johan Hierta, it was a tabloid that reported news and also criticised the new Swedish king Charles XIV John. The king stopped Aftonbladet from being printed and banned it, this was answered by starting the new newspaper "Det andra Aftonbladet" (The second Aftonbladet), which was subsequently banned, followed by new versions named in similar fashion until the newspaper had been renamed 26 times, after which it was allowed by the king. [1]

    Kinda similar.