61–70 of 236 posts
It took them no less than 3 years to actually notice... Holy moly! I wonder what package that is... Just out of curiosity...
You'd think it's like, some proprietary trading algorithm, but in reality it's probably their own implementation of left-pad.
Source: https://twitter.com/seldo/status/1105157348560007168?s=09
Earlier quoted context omitted.
How is this DMCA abuse? A copyright owner is requesting that a site that has safe harbor protection remove an unauthorized copyrighted work. The employee that originally created the unauthorized package may no longer work for the bank, unable to be identified, or doesn't have the credentials anymore.
Does the fact that the bank distributed the material in the first place change the situation?
Is this client side code? Unless this is internal wouldn't it be available when visiting there website?
Tweet thread says it's a react packaged which means it's probably usually transpiled and minified, so not technically available in its original form in its distributed application.
Earlier quoted context omitted.
I’m not sure how universally true that is. When governments fail to redact documents, it’s on them. If you “accidentally” talk to a reporter about your solicitor-privileged comms, it’s not privileged anymore.
This isn't an open question. If you don't have a license from the copyright holder, you can't legally use it, except for fair use exemptions: perhaps you could write a blog post criticizing it.
Earlier quoted context omitted.
This isn't an open question. If you don't have a license from the copyright holder, you can't legally use it, except for fair use exemptions: perhaps you could write a blog post criticizing it.
Was there a licence attached to the files? What if there wasn’t
Why not just take it down? What do you need a lawyer for ? Isnt there an option for deleting your own packages ?
Earlier quoted context omitted.
Does the fact that the bank distributed the material in the first place change the situation?
No. The Bank's intent is what matters, not the intent or actions of a single employee.
This bank uploaded their own code to the repo, and when they found it they didn't bother to do any investigating before they started sending legal demands.
It was 100% their responsibility to ensure that they were not responsible for their own leak before they started making legal threats.
They decided to skip due diligence, and they should pay the price for wasting others' time and energy, regardless of their "intentions".