Live data from Hacker News

Police conducted search in the Nginx office due to a copyright claim

twitter.com

141–150 of 228 posts

Re: Police conducted search in the Nginx office due to a copyright claim

#141

If they own copyright.... Which isn't crazy... Then the licenseing Igor put on it is null and void I assume, so everyone's instance would become illegal upon that court decision?

It's a little more complicated than that. One might have equitable defenses to infringement. Its doubtful a violation will be considered criminal (USA). Certainly if you are worried keep an eye on the Russian trial and hire a lawyer!

Re: Police conducted search in the Nginx office due to a copyright claim

#142
post #26

I see it this way (being a Russian): it's not a copyright claim issue, but rather a hostage situation with bandits involved (a.k.a Russian authorities), and what they want is ransom so that top #1-2 nginx contributors don't go to jail for some 10 years.

wow, I would have thought those dudes would have moved to a more friendly country years ago given the fame and profits from creating nginx.

Some say Igor didn't move because he's a patriot. Ironic, isn't it?

Re: Police conducted search in the Nginx office due to a copyright claim

#143
post #128

Earlier quoted context omitted.

In that case, who would pay the new "owner" for the now unlicensed parts provided by outside contributors? I see this having only two outcomes: either nothing happens (it stays BSD), or it becomes nuclear waste, and new owner cannot sell it because it is plagued by mutually incompatible legal status of different portions of the code. I can't see how the third version, where it stays clean, but the new owner can milk…

Well if it becomes toxic waste they could force everybody currently using it into licensing it from them. They could even try and go for damages for previous use.

But my point it that these customers would not be protected by that license, since they'd be using the code of other contributors without license, so they'd still be potentially open for extortion by hundreds other entities (I suppose there were many contributors).

Re: Police conducted search in the Nginx office due to a copyright claim

#144
post #80

Earlier quoted context omitted.

nginx is open source. I tend to use the distribution provided packages which in case of debian are reproducible builds. (yeah, i know there's a pro version of nginx. never used it)

"It's open source, someone surely is doing regular thorough security audits."

the thing is: you have to introduce very subtle bugs when the code is open. And if you exploit it in the millions someone is going to notice.

Re: Police conducted search in the Nginx office due to a copyright claim

#145

Earlier quoted context omitted.

I should remind you that there was a 1:342 ratio of "Not guilty" to "Guilty" decisions on the criminal cases in Russia last year, and the it's declining year-to-year.

I was interested in the ratio for the US, which based on a quick lookup seems to be 1:249 for federal cases... (Numbers taken from here: https://www.pewresearch.org/fact-tank/2019/06/11/only-2-of-f... ) Just wanted to note that it is not a very good way to gauge opressiveness or fairness... In a perfect world, charges would only ever be brought against the guilty, and only the guilty would be found as such by court.…

The corruption in judicial circles of Russia works this way: the police had opened the case, the defendant obviously isn't guilty, we state that he's guilty with a penalty of conditional term instead of a real one and free him in a court's room. If we state that he isn't guilty, then it would start the process of quality check in all parties involved in the development of the case which unavoidably ends with penalties or criminal cases upon the policemen, nah we don't need that.

I agree on a perfect world scenario, but we in Russia have a big pile of ridiculous court decisions every month.

Re: Police conducted search in the Nginx office due to a copyright claim

#146
post #130
post #115

Earlier quoted context omitted.

But this is absolutely a copyright issue! If a company has copyright on something I use, I need a license from them. Now we don't know what Russian courts will decide here, and we also don't know whether courts in other countries would respect that. What could happen as a worst case "robbery" scenario is that the developer is forced to agree they never had copyright! So whether or not the claim was unjustified, it mi…

I am not sure why this is being downvoted. If a Russian court determines (and/or the developer is forced to agree) that the BSD license was issued by someone who did not own the intellectual property, doesn't that create a significant legal issue for anyone who is using nginx under that BSD license since that license would no longer be valid? Doesn't the potential for this exact sort of issue point out a flaw in how…

When you say "if a Russian court determines" this sounds like an insult to me. Simply check out how recently lots of people have been convicted for nothing, for a poster, a like, for jogging, for trying to get elected, for a youtube video.

I kindly ask you to stop believing that Russia is a place where unicorns shit with rainbow and courts work. No, they do not. And by not acknowledging putin's terror against us you literally deprive us of a right to become a normal country again one day.

(just in case, I didn't downvote the post above)

Re: Police conducted search in the Nginx office due to a copyright claim

#147
Some guy on the internet claims this case has no leg to stand on, and the whole reason the office was raided was to scare them into cooperation or revealing useful information. Then they'll catalogue that and say 'not a criminal issue'. The trick is, those materials could then be used in a civil case. This is full text, in russian: https://habr.com/en/company/itsumma/blog/479942/#comment_209...

Re: Police conducted search in the Nginx office due to a copyright claim

#148
post #144

Earlier quoted context omitted.

"It's open source, someone surely is doing regular thorough security audits."

the thing is: you have to introduce very subtle bugs when the code is open. And if you exploit it in the millions someone is going to notice.

Indeed. If, as suggested, a backdoor is planted by something like a three letter agency they're not going for mass surveillance or "hacking all the things". It's a very valuable asset that you use wisely, maybe even just once if the target is worth being discovered afterwards.

Re: Police conducted search in the Nginx office due to a copyright claim

#149
post #85

Earlier quoted context omitted.

Then they would definitely advertise it by attacking the company so that the whole world would know about their secret backdoor. Very smart, indeed!

Physical access is easier to get than remote access when you have a baton and the intelligence of a cop.

FSB/GRU are more than just thugs with batons, they are professionals who could easily slip in to a building at night and access computers without anyone knowing. Basically the Russian CIA.

Re: Police conducted search in the Nginx office due to a copyright claim

#150
post #115

Earlier quoted context omitted.

But this is absolutely a copyright issue! If a company has copyright on something I use, I need a license from them. Now we don't know what Russian courts will decide here, and we also don't know whether courts in other countries would respect that. What could happen as a worst case "robbery" scenario is that the developer is forced to agree they never had copyright! So whether or not the claim was unjustified, it mi…

And yet, copyright is a civil dispute. I’ve never heard of a police raid due to copyright.

https://en.m.wikipedia.org/wiki/The_Pirate_Bay_raid
Post reply on HN