Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

Finding the Pits In CherryOS

Posted by timothy on Sat Mar 12, 2005 03:18 PM
from the light-the-bombeck-beacon dept.
An anonymous reader writes "DrunkenBlog is carrying a story with piles of gathered evidence (including screenshots of code diffs) exposing the speed claims of CherryOS, and that the company behind it (Maui X-Stream) is not only stealing code from the open source project PearPC but at least several other OSS projects too. There are some choice quotes from PearPC developers on how it is harming their project. They appear to have a strong case, but enforcing the GPL could take help."
+ -
story
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • Does this? (Score:4, Insightful)

    by maotx (765127) <maotx@nOspam.yahoo.com> on Saturday March 12 2005, @03:19PM (#11921463)
    Looks like they had their cherry popped ;)
    In all seriousness though, this looks like a perfect time to test the GPL in cou rt (if they make it that far.)

    Does their use of OSS without complying with GPL violate copyright laws or justlicensing laws?
    • Steal or Copy? (Score:3, Insightful)

      by Anonymous Coward
      exposing the speed claims of CherryOS, and that the company behind it (Maui X-Stream) is not only stealing code from the open source project PearPC but... *SNIP*


      Stealing code? I though they were wrongfully copying it, or did we completely throw away the concept of copying alltogether?
      • Re:Steal or Copy? (Score:4, Interesting)

        by Saeed al-Sahaf (665390) on Saturday March 12 2005, @03:26PM (#11921512) Homepage
        'spose it also depends on if they have or have not included the GPL thingy. Have they REALLY violated GPL? Or are people just pissed because they want to make money on freely avail. code?
        • Re:Steal or Copy? (Score:3, Informative)

          by NetNifty (796376)
          IIRC the GPL says you can charge whatever you want for the binary, but you have to release the source code which you used in it (ie make it available, at the very least by including the LICENCE.txt in the main directory of the software) and release it under the GPL licence. CherryOS has not done this.
      • by noidentity (188756) on Saturday March 12 2005, @03:36PM (#11921597)
        Didn't you hear? The PearPC developers don't have the code anymore because the CherryOS guys stole it. That's why they want the source of CherryOS released, so they can get it back!
      • They infringed the copyright and/or violated the GPL. I've said that copyright infringment isnt' stealing in many a P2P story, so I'll say it here too.
    • The sad truth... (Score:5, Insightful)

      by Saeed al-Sahaf (665390) on Saturday March 12 2005, @03:24PM (#11921497) Homepage
      The sad truth is that the GPL has no real teeth, because most of the people writing GPL'd code do not have the resources or time to do anything about "code theft".
      • "Troll"??? (Score:4, Informative)

        by Saeed al-Sahaf (665390) on Saturday March 12 2005, @03:32PM (#11921563) Homepage
        "Troll"??? It's not a troll. And it's not a condemnation of GPL either. It's a truthful statement that most FOSS developers can't afford to sue people.
      • Re:The sad truth... (Score:4, Informative)

        by serviscope_minor (664417) on Saturday March 12 2005, @03:32PM (#11921566)
        The sad truth is that the GPL has no real teeth, because most of the people writing GPL'd code do not have the resources or time to do anything about "code theft".
        --
        What's worth doing is worth doing for money...


        That does not mean the license has no teeth, just like many other civil laws: you have to have the money to go to court.

        Oh and regarding your .sig: does that apply to sex too?
      • by deanj (519759)
        Definately not a Troll.

        Look at the Linux phones out there. None of the phone manufacturing companies supplying the OS on those things have released ANY code for those phones.

        And that's Linux itself!

        Why isn't anyone doing anything about this?
        • Re:The sad truth... (Score:4, Informative)

          by jacksonj04 (800021) <nick@tn-uk.net> on Saturday March 12 2005, @04:03PM (#11921767) Homepage
          I would say it depends on how the phones work. If all they are is a basic kernel with the companies own proprietary binaries on top, then there's nothing the company has to distribute. The kernel is available, it's their own binaries which make it special.

          Remember - as long as it's not a modification of or using parts of GPL code, then you can do what you like with it.
          • Re:The sad truth... (Score:4, Informative)

            by Tim C (15259) on Saturday March 12 2005, @04:25PM (#11921927)
            No, they have to make the source of the kernel they use available to anyone who has the binary (ie an owner of the phone). Just saying "it's stock 2.4.2, get it from kernel.org" isn't good enough, they have to make it available themselves.

            You are correct that they don't have to give out the source to their own binaries, as long as they're not GPLed or derived from GPLed software.
              • Re:The sad truth... (Score:4, Informative)

                by shellbeach (610559) on Saturday March 12 2005, @08:54PM (#11923427)
                Actually, according to 3b ... they have to provide the source to any third party, not just people who have the binary.

                This is incorrect. Read section 3 in context ...

                Quoting from http://www.gnu.org/copyleft/gpl.html [gnu.org]:

                • 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following:

                  a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

                  b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or,

                  c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.)

                  [My emphasis]


                Thus you only have to comply with one of either (a), (b) or (c) and it is perfectly legitimate to sell GPL software and only provide the source with the purchased binary (thereby meeting the requirements of section a). Mind you, anyone who buys it can then quite happily make it available for free download if they want ...
          • by Ohreally_factor (593551) on Saturday March 12 2005, @07:19PM (#11922952) Journal
            Hey, you're not supposed to actually read or to even understand the GPL here. You're just supposed to bludgeon people with it when they disagree with you. You're not new here; you should be ashamed! =)

            The saddest truth is that I'll probably be modded funny (at best) or troll, instead of insightful. =)
      • Re:The sad truth... (Score:5, Informative)

        by dominator (61418) on Saturday March 12 2005, @04:28PM (#11921949) Homepage
        That's not true at all. I've hashed it out with a few corporations over wvWare [sf.net], my MSWord reading library. Usually the threat of action is enough to have the infringers quaking in their boots, and coax them into complaince. When it's not enough, you've got the FSF all-too willing to come to your aide:

        http://www.fsf.org/licensing/licenses/gpl-violatio n.html [fsf.org]

        Regarding these cases, Eben Moglen (the FSF's general legal counsel) once told me that the reason you've never seen a GPL violation case go to court is because it's always a slam-dunk case that will be decided in your favor; that it's always in the infringer's best interest to settle out of court. I don't know how self-serving that statement was, but it's worth pondering at least. It's been my experience, in any case.
          • Re:The sad truth... (Score:5, Informative)

            by Bruce Perens (3872) <bruce.perens@com> on Saturday March 12 2005, @06:42PM (#11922783) Homepage Journal
            FSF does not own copyrights on the Linux kernel, and I don't know of anyone who has come to FSF who does own such copyrights. But we now have the resources to pursue such matters outside of FSF. I would like to hear from kernel copyright holders who would help with that. If we let the unauthorized derivative works go on for too long, I'm afraid we will create an estoppel that would limit the effect of the GPL.

            Bruce

          • Re:The sad truth... (Score:5, Informative)

            by tomjen (839882) on Saturday March 12 2005, @04:54PM (#11922141)
            No you need assitance from the GNU foundation - they have the lawyers (two law professors if i am not mistaken) and they would like to fry that company - then everybody would fear and respect the GPL.
      • by iCEBaLM (34905) <icebalm@ i c e balm.com> on Saturday March 12 2005, @04:02PM (#11921751)
        PearPC can be used for more than just running MacOS X, you can run PPC Linux on it and various PPC BSD's, aswell as Darwin.

        I don't think Apples EULA statement about running it only on apple hardware is legal anyways, it sounds like illegal tieing, but what the hell do I know? IANAL.
      • by IWannaBeAnAC (653701) on Saturday March 12 2005, @05:26PM (#11922330)
        The legality of that EULA would be a much more interesting court case IMHO.

        It may be true that no GPL cases have come to court (although I'm not sure about that either). But there has been a very large number of infringement claims that never made it to court, becuase the guilty party gave in. In summary, to win against the GPL, you cannot argue that it is invalid: if it were invalid then normal copyright law would mean that any copying or distribution was illegal - so that approach would be the lawyer equivalent of shooting yourself in the foot. Instead you would need to convince the judge that it is both valid but allows more than it appears to allow. But that is a difficult case to argue ;)

  • Warez too! (Score:5, Informative)

    by sH4RD (749216) on Saturday March 12 2005, @03:22PM (#11921484) Homepage
    According to this thread [serverkompetenz.net] on PearPC.net, he is using a warez'd copy of several programs as well.
  • Mirror (Score:3, Informative)

    by Joey Patterson (547891) on Saturday March 12 2005, @03:24PM (#11921500)
    The DrunkenBlog site is very slow, so here's a MirrorDot mirror [mirrordot.org] of it.
      • Right back at you: (Score:4, Interesting)

        by koko775 (617640) on Saturday March 12 2005, @05:17PM (#11922278)
        This post probably won't be modded up, but for the sake of argument:

        Your points would be valid if they weren't so automatically cynical.

        * Slashdot is okay with copyright infringement and P2P piracy. But it is not okay with copyright infringement of GPL code.
        No, Slashdot is for the freedom to do things without big corporations having the means or possible means down to breathe down everyone's back, or against laws that are contrary to fair use. Many slashdotters don't practice what they preach, but to treat all slashdotters as equally hypocritical is itself hypocritical, unless you yourself are hypocritical. In either case you are a hypocrite.
        * Slashdot is okay with pursuing legal action against CherryOS on behalf of PearPC authors. But it is not okay with the RIAA pursuing legal action against infringers to protect its own property (and let's not forget Slashdot was suggesting they do this in 2000 during the Napster lawsuit).
        Slashdot *would* be okay with the RIAA pursuing legal infringement if they weren't trying to sue for $150,000 per song (or something). Do you think that the PearPC would claim millions in damages to Maui X-Stream? Duh, no.
        * P2P copyright infringment is not theft. But taking GPL code is "stealing" it.
        P2P copyright infringement is not theft. Selling copyrighted materials is. Taking GPL code is not theft. Selling GPLed materials is.

        You take three extreme examples and apply stereotypes to all three. BTW, saying "but it applies to the majority" and then talking about "ridiculous double standards" is also a double standard. Congrats on hanging yourself with your own rope, hypocrite.
      • by wirelessbuzzers (552513) on Saturday March 12 2005, @05:24PM (#11922319)
        Of course, the pro-piracy opinions are largely self-serving, but there is an important difference here: Cherry OS is for profit. I expect that most of the pro-piracy posters on Slashdot are against selling bootlegged CDs or DVDs, and especially strongly against taking obscure works and selling them as your own.

        I think that Slashdot as a whole tends to be against making money without making a useful contribution to society, and against corporatism. So they're OK when someone patents a specific, useful, non-obvious idea and makes money from it, but not when a corporation which probably didn't invent the idea buys up an obvious patent and goes around suing people who are using the idea independently. Similarly, if someone copyrights a work and makes it available at a reasonable price, most Slashdotters would be fine with that, even if they would prefer that he give it away. But when the RIAA gets rich by selling crap music with ridiculous contracts to prevent the artists from making a buck, this is a bad thing.

        My personal views are pretty similar. I hate obvious patents, especially software and business method patents, and patent-whoring companies as well as copyright-whores like the RIAA (but their music is mostly crap, so I don't pirate it). I'm fine with copyrights on say Windows (although I wish it were better), and I think the copyrights on PearPC are legit also. Personally, I try to make my work public domain, because it's not good enough to sell and I don't want people to bother about credit, but if I do something saleworthy, I'll certainly sell it.
  • by SlashThat (859697) on Saturday March 12 2005, @03:24PM (#11921502)
    Who gets the compensation? Do they split it between the developers? How they decide who the developers are and what part each of them gets? What if PearPC is based on other open source projects? This is going to be interesting...
  • by karmaflux (148909) on Saturday March 12 2005, @03:24PM (#11921503) Homepage
    ...if after all that noise from SCO the first court case to test the GPL involves some little dorky scammer trying to sell code he didn't write.
  • by chrispyman (710460) on Saturday March 12 2005, @03:25PM (#11921507)
    Though the article is /.'ed, I have to wonder, why does CherryOS even bother? Everyone already knows that their project was a ripoff of PearPC and they've already lost the trust of everyone.
  • already slow... (Score:5, Informative)

    by Neophytus (642863) on Saturday March 12 2005, @03:25PM (#11921508)
  • by Mark19960 (539856) <(ten.tseuqeerf) (ta) (kraM)> on Saturday March 12 2005, @03:26PM (#11921514) Homepage Journal
    Im sure these two organizations would be glad to take this matter up.

    if I was a PearPC developer, I would.
    this is blatant theft.
  • by lxt (724570) on Saturday March 12 2005, @03:28PM (#11921534) Journal
    ...at the sheer cheek of putting up a "performance comparison table" on the CherryOS website between CherryOS and PearPC...

    I mean, even the name itself smacks of copyright infringement...
  • by serviscope_minor (664417) on Saturday March 12 2005, @03:29PM (#11921538)
    It is copyright infringement, just like the subject says.

    It does not matter who's copyright is being infringed or who is claiming it, it is STILL NOT THEFT.

    I'll bet I'll be modded down now, since this sort of thing is only accepable on an anti *AA thread.
    • Actually, this is almost theft. If you make a LEGO fort and offer the plans to people for free, that's all well and good. But if I come along, get the free copy of your LEGO plans, change the title, violate the license it was originally licensed under, claim I made it all myself, and charge people for it.. I am a theif and I stole something from you. I've stolen your hard work and claimed it as my own.

      If I download a song by *insert popular music person here* and claim that I performed the song and cha
      • by Ralph Yarro (704772) on Saturday March 12 2005, @03:39PM (#11921608) Homepage
        But if I come along, get the free copy of your LEGO plans, change the title, violate the license it was originally licensed under, claim I made it all myself, and charge people for it.. I am a theif and I stole something from you. I've stolen your hard work and claimed it as my own.

        No, you're not. If while he was distracted you grabbed hold of the plans he'd written down and walked off with them without permission then that would be theft. Claiming his work as your own would be fraud. Duplicating his work and distributing it without permission would be copyright infringement.
  • by Mr Ambersand (862402) on Saturday March 12 2005, @03:31PM (#11921557)
    I doubt that the FSF or the EFF are willing or able to get involved; but that doesn't mean that users and people who have a vested interest in keeping the integrity of the GNU license can't raise the funds needed to sue the CherryOS fools.

  • GPL coders (Score:4, Insightful)

    by Mantus (65568) on Saturday March 12 2005, @03:32PM (#11921560)
    It seems like every couple of months or so we hear about some company violating the GPL. When are the OSS programmers going to do something about it? IMO it's not even close to enough for a violating company to say "Oops, we're sorry, here is the code" It's called commertial copyright infringement and the true copyright holders aught to sue the companies for every dime they can get. Companies violate the GPL because they feel its good for their bottom line. Someone should prove it isn't.
  • by Anonymous Coward on Saturday March 12 2005, @03:35PM (#11921591)
    Now PearPC is going to have to write it all over again! If only the CherryOS people knew how much damage their code theft has done!

    Can we just call it breach of license and stop being all dramatic about it?
  • by episodic (791532) on Saturday March 12 2005, @03:36PM (#11921594) Homepage Journal
    If persons are going to take GPL'd software and claim it as their own, then the work of many talented programmers can be passed off like cheap tracings of the Sunday comics. Pull together. Agree on this - blatent copying for no reason can't be allowed. Lest when those that take GPL'd software use it and fark it up, the first thing reported is that the software had an 'open source' base, further alienating the mainstream computer users.
  • by Fox_1 (128616) on Saturday March 12 2005, @03:44PM (#11921629) Homepage
    in like less then a month random people have compiled more evidence supporting the idea that CherryOS is a complete and blatent ripoff of PearPC, then I ever saw come from the well funded SCO Group supporting their idea that Linux infringed on some of their code.
  • by TheGuano (851573) on Saturday March 12 2005, @03:49PM (#11921664)
    I just don't understand. A regular rumor/hype/unsubstantiated-claim is made and the general tendency is not to give them the benefit of the doubt - they get flamed and hen-pecked to hell before they even have a chance to prove their claims. Then CherryPC comes along, which is SO MANY WAYS is such an obvious rip-off that IT'S ALMOST AMUSING, and people act so damned civilized, presenting balanced views, structured evidence, etc. Why bother with the niceties in this case? Just call Hawaii5-0 and bust a cap in his ass already.
  • by cr0y (670718) on Saturday March 12 2005, @03:49PM (#11921667) Homepage
    ....legally take apart cherry (ie, decompile, hex edit, reverse engineer) the cherry exe to compare it to pear? IF they did this and found it to be the same, could pear counter-sue for reverse engineering? Would it hold up in court?
  • Anonymous? (Score:3, Interesting)

    by Leo McGarry (843676) on Saturday March 12 2005, @03:54PM (#11921700)
    An anonymous reader writes ...

    Gee. I wonder who that could be [slashdot.org].
  • by MooseGuy529 (578473) <i58ht6b02 AT sneakemail DOT com> on Saturday March 12 2005, @04:03PM (#11921766) Homepage Journal

    On the Trial Download page [mxsinc.com], there are 5 checkboxes you "have" to agree to. If you don't check them, and click Download, it still lets you download with agreeing!

  • Google Bomb (Score:3, Interesting)

    by Kalak (260968) on Saturday March 12 2005, @04:04PM (#11921772) Homepage Journal
    Blatently Stolen from a PearPC page that I've lost the URL for (claim credit for the idea if you like), is to link
    <a href="http://pearpc.sf.net">CherryOS</a>
    CherryOS [sf.net]
  • by KrackHouse (628313) on Saturday March 12 2005, @05:10PM (#11922227) Homepage
    From their website:
    "Jim Kartes is the president of Maui-X Stream... He later worked as a news and documentary cameraman for CBS News in New York." (emphasis mine)

    I guess we should have seen the writing on the wall.
  • by Amich (542141) on Saturday March 12 2005, @06:51PM (#11922816)
    It's obvious this sort of thing is an outrage, and we should stand up and do something better than preaching to the choir on Slashdot.

    This story made me decide to donate to the PearPC project http://sourceforge.net/donate/index.php?group_id=1 08675 [sourceforge.net] . I'm sure if enough donations piled up, PearPC's authors would go after CherryOS in court.
      • by mrchaotica (681592) on Saturday March 12 2005, @04:02PM (#11921749)
        It's more than that. It's the difference between the goals of the RIAA vs. the Free Software movement.

        The Free Software movement's goal is to increase the availability of software. Free Software advocates want to give control to the end-users. The GPL is designed to prevent people from hoarding it and reducing the availability. It basically uses copyright law against itself*, because if there were no copyright then all software would be Free.

        In contrast, the RIAA's goal is to decrease the availability of music. They want to control it themselves. Their use of copyright is designed to augment their ability to control and hoard the music.

        Even though both organizations use copyright as a tool, they use it for opposite goals. And that's why we believe copyright infringment is moral in one case and not in the other.

        *when I say the GPL uses copyright against itself, I mean the modern (e.g. RIAA's) interpretation of copyright. Originally, the goals of copyright were more aligned with the goals of the GPL, to increase and spread knowledge. It could be argued that the modern interpretation is a corruption of copyright, and the GPL is a device to try to restore its original meaning.
      • Re:Stealing code? (Score:3, Insightful)

        by m50d (797211)
        This goes beyond mere redistribution though, they're claiming to have written the code. Which I think fits into the conventional definition of stealing. You couldn't say "He stole my theory" if someone sold a copy of a paper you'd written, but if they claimed to have written the paper, saying "He stole my theory" would probably be acceptable. So I think calling the code stolen in this case makes sense.
    • Re:Hypocrisy.. (Score:5, Informative)

      by polyp2000 (444682) on Saturday March 12 2005, @05:27PM (#11922333) Homepage Journal
      Thats bollocks!
      PearPC - While able to run OSX - it is simply an emulation of PPC hardware. There are plenty of operating systems that PearPC can run eg: linux, bsd , beos etc. It is upto the person running the emulator whether they violate apples licensing agreement.

      Cherry OS however - albeit the same thing as PearPC are explicitly advertising their (stolen) product for the purpose of running OSX. They are much more likely to find themselves on the end of an apple lawsuit than the PearPC developers.
    • by csirac (574795) on Saturday March 12 2005, @11:34PM (#11924121) Homepage
      I think we need a better form & delivery of licensing, not to mention what the license reads.

      This has nothing to do with licenses, since they are not following the terms of the license (GNU GPL [gnu.org]) offered to them by the copyright holders.

      This is copyright infringment, plain and simple.

      1) They copied copyrighted works and claim it as their own, in some cases without even removing the orignal author's name and GNU GPL license notice.
      2) The only way they can legally use the copyrighted works is by honouring the license under which they authors have released it with
      3) They have not honoured the terms of the GNU GPL (Unless they are simultaneously denying the use of GNU GPL'd code and are also providing downloads to said source code).
      4) Now we fall back to good old-fashioned copyright law. If you don't have permission, you can't copy it.

      Considering the complete lack of evidence of there being even a sliver of their own code in the PPC emulation, apart from doing a "search and replace" for "PearPC"->"CherryOS", then this does in fact need to be taken very seriously.

      Ok, so if they follow the gpl, so what?

      So what? They wouldn't be breaching international copyright law, that's what.

      Contributors to PearPC don't want to work 40hrs a week at their real job and come home to find their pride and joy/hobby being ripped off to profit some wanker who just slapped together a nice VB frontend over a couple of weekends.