• 0 Posts
  • 127 Comments
Joined 7 months ago
cake
Cake day: September 22nd, 2025

help-circle



  • It’s a bit more complicated than that because MPL is itself a weak copyleft license that requires that the MPL licensed source code is always made available to recipients of a binary or derived work. The difference from GPL is that it does not require that all additional parts of the derived work are also licensed under MPL, (ie. not viral copyleft) meaning that the MPL licensed work can be linked with proprietary code without requiring that the proprietary code make its source available, but unlike BSD or MIT licenses it does not allow the MPL licensed code to be made proprietary.

    The complication comes when linking MPL code with GPL code, even though MPL is GPL-compatible, since this requires that the entire derived work must now be made available under the GPL, while the original MPL licensed parts become dual-licensed under both MPL and GPL.

    If Waterfox developers allowed this then it would prohibit the use of the whole derived work in proprietary projects (as they would now need to be GPL), so it would be removing rights that they have already given to downstream users of their code. Proprietary projects would therefore have to remove the GPL licensed additions (in this case it would be the UblockOrigin code) and link just the MPL licensed parts, which would mean using only part of the whole browser.

    Personally I agree with you: I prefer GPL licensed projects. But MPL is not a bad license and I can understand and respect that some developers would make that choice (especially since the project is already licensed under MPL as it’s a fork of Firefox).


  • eleijeep@piefed.socialtoLinux@lemmy.mlLearning Linux via AI
    link
    fedilink
    English
    arrow-up
    27
    ·
    9 days ago

    It’s easy to think it’s telling you useful information when it’s new to you and you don’t know enough to spot the mistakes.

    Last time I tried asking an LLM about a command line program it gave me a command line switch that didn’t even exist in that program. When searching for the switch I found that it was for a different program completely.

    Personally I would rather just read a book.


  • Not a very good article. The original write-up (not linked anywhere in the article) is here: https://blog.qualys.com/vulnerabilities-threat-research/2026/03/17/cve-2026-3888-important-snap-flaw-enables-local-privilege-escalation-to-root

    They also mention something else that’s interesting at the bottom of the write-up:

    Secondary Finding: Vulnerability in Ubuntu 25.10 uutils Coreutils

    In a proactive security effort prior to the release of Ubuntu Desktop 25.10, the Qualys Threat Research Unit assisted the Ubuntu Security Team in reviewing the uutils coreutils package (a Rust rewrite of standard GNU utilities).

    A race condition in the rm utility allowed an unprivileged local attacker to replace directory entries with symlinks during root-owned cron executions (specifically /etc/cron.daily/apport). Successful exploitation could lead to arbitrary file deletion as root or further privilege escalation by targeting snap sandbox directories.

    The vulnerability was reported and mitigated prior to the public release of Ubuntu 25.10. The default rm command in Ubuntu 25.10 was reverted to GNU coreutils to mitigate this risk immediately. Upstream fixes have since been applied to the uutils repository.











  • Because the title of the post is

    Can coding agents relicense open source …

    My response was no, because the output will always be in the public domain, which is the opposite of licensed.

    However your reply asked a different question:

    So you are agreeing using the LLM worked?

    This is a different question, because it’s asking not about the general case of “can a coding agent produce a clean-room reimplementation” but rather “did the chardet rewrite achieve the goals of the maintainer?”

    It’s clear from the information uncovered about the chardet rewrite that it cannot be considered a clean-room reimplementation, therefore there is an argument to be made of copyright infringement, regardless of whether anyone can own the copyright for it.

    But the title of the article is asking whether the general case is possible. In that case, an agent reimplementing a project that does not appear in its own training data and whose prompts do not contain any copyrighted source code, could in theory produce a clean-room reimplementation from functional descriptions alone, that would not violate the copyright of the author of the original project.

    However in that case, the rewrite would still not be licensable since nobody would own the copyright to it.

    I hope that clears up the point I was making and why it’s relevant to the post.