Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Police conducted search in the Nginx office due to a copyright claim

twitter.com

Post reply on HN
Print view View original

81–90 of 228 posts

Re: Police conducted search in the Nginx office due to a copyright claim

#81

Post by mlyle »

neltnerb wrote: post #52
duelingjello wrote: post #4

Best practices for side projects (US): - Never give work full rights to everything you make on your own time. - Never use company hardware, software, time or offices to develop a side project you might want to monetize commercially later. - Charge work a "1 node license fee" of $1 with an invoice and a standard commercial software EULA if you intend to try your creation at work. Also specify that it includes maintena…

I think you will run into conflict of interest issues with having your employer pay you to use your product. It might fly at some places, but I would be hesitant of running afoul of all manner of issues if there could be a perception that you are leveraging your employment position to profit your own company. Especially if your employer accepts money from the government. I agree with the first two though. I personall…

> I think you will run into conflict of interest issues with having your employer pay you to use your product. It might fly at some places, but I would be hesitant of running afoul of all manner of issues if there could be a perception that you are leveraging your employment position to profit your own company.

I think when it's literally "pay me one dollar for a company-wide license, so there's mutual consideration for license and it's clear what the arrangement is"... one does not need to worry about a substantial fiscal conflict of interest or appearance of impropriety.

I mean, it's a whole lot of work to squeeze one more dollar out of your employer ;)

Re: Police conducted search in the Nginx office due to a copyright claim

#82

Post by blackearl »

chupasaurus wrote: post #68
iavael wrote: post #30

Earlier quoted context omitted.

That's not a corporate displute. It's probable cause in criminal law. Ngnix founders are already detained btw.

They are currently being interrogated, not detained.

If you can't walk away from an interrogation, you've been detained.

Re: Police conducted search in the Nginx office due to a copyright claim

#83

Post by synack »

xfalcox wrote: post #73

With the original open sourcing license of nginx in doubt, it is prudent for open source projects to look into alternatives?

OpenBSD's httpd is similar enough for relatively simple use cases, porting it to other platforms wouldn't be impossible.

Re: Police conducted search in the Nginx office due to a copyright claim

#85

Post by kick »

account73466 wrote: post #76
anonymousjunior wrote: post #75

Earlier quoted context omitted.

This is what's really concerning. If FSB was able to actually implement something and shell all nginx boxes (and thusly obtain SSL certs, intercept communications, etc..) imagine how much access they'd have.

Then they would definitely advertise it by attacking the company so that the whole world would know about their secret backdoor. Very smart, indeed!

Physical access is easier to get than remote access when you have a baton and the intelligence of a cop.

Re: Police conducted search in the Nginx office due to a copyright claim

#86

Post by [deleted] »

andrewshadura wrote: post #41
vorot93 wrote: post #11

9.5 rules of doing business in Russia 1. Keep your servers abroad. 2. Register your domains abroad. 3. Register your company abroad. 4. Keep your money abroad and don't put all eggs in one basket. 5. Seriously, don't put all your eggs in one basket! 6. Keep your database abroad. 7. Document everything regarding your office setup. 8. Split the risks and assets. 9. You can give youself up voluntarily. Find a large patr…

0. Don’t do business in Russia

[deleted]

Re: Police conducted search in the Nginx office due to a copyright claim

#87

Post by iaml »

duelingjello wrote: post #4

Best practices for side projects (US): - Never give work full rights to everything you make on your own time. - Never use company hardware, software, time or offices to develop a side project you might want to monetize commercially later. - Charge work a "1 node license fee" of $1 with an invoice and a standard commercial software EULA if you intend to try your creation at work. Also specify that it includes maintena…

Nginx was developed not on company time/resources. I am sure Igor was careful to do it by law, but it doesn't really matter in russia. They can detain you and kick you until you give them what they want, and there is nothing you could do. There are countless examples.

Re: Police conducted search in the Nginx office due to a copyright claim

#88

Post by _jal »

DaiPlusPlus wrote: post #14
eps wrote: post #10

Earlier quoted context omitted.

I'd be surprised if it had been. I'd wager Rambler is after the ngnix itself rather than some cash.

But even if they "owned" nginx - what does it get them? The community would immediately fork it and change the branding. The same happened to MySQL when Sun was bought by Oracle when MariaDB was forked - though I concede MariaDB isn't as popular as I hoped.

No idea what is actually going on, but the "simple" scenario is that it is just a mafia-style bust out. If that's the case, the attackers don't want the source or future development, they want to extract as much money as possible without regard to Nginx as an ongoing concern.

Re: Police conducted search in the Nginx office due to a copyright claim

#90

Post by iforgotpassword »

kiney wrote: post #80
auiya wrote: post #32

Earlier quoted context omitted.

It feels like an intelligence shakedown. Nginx has a rather large install base. FSB would love to have an entry point in it I'm sure, or maybe they previously had one and are trying to gain it back?

nginx is open source. I tend to use the distribution provided packages which in case of debian are reproducible builds. (yeah, i know there's a pro version of nginx. never used it)

"It's open source, someone surely is doing regular thorough security audits."
Post reply on HN