Hacker News new | ask | show | jobs
by Aloha 4022 days ago
As much as I hate to use this on HN, could someone ELI5 this for me - I get what a C and D is, why is this relevant?
4 comments

A lawyer in India sent a cease and desist email to a developer (in, I'm assuming, India) for posting javascript that's being used as an injection attack (for a mobile network provider) against insecure http requests, under the guise of "service enhancement".

https://github.com/thejeshgn/airtel-3g-script-injection

"The said code is closed source software and our client is sole proprietor of the same. Therefore, no one can use the said code without obtaining license from our client against payment of fees and/or royalties and on commercial and legal terms acceptable to our client. Your aforementioned actions constitute a blatant violation of our client's copyrights and other proprietary rights in the said code."

The said code is closed source software

They can invoke the proprietary/copyright claims, but saying that JS is "closed source" just doesn't make sense when the source code is what gets distributed. IMHO it's the same situation with HTML and CSS.

(IANAL, etc.)

Unless you have the right to do so because you are the copyright holder or have a licence you can't distribute code no matter whether you have access to the code or not.
How does copyright work in India? Any fair use exemptions?
There are fair-use exemptions, but when it comes to computer software, these exemptions suddenly become zero. Making a disclosure and proving a security/privacy flaw becomes extremely difficult.
I don't think you can copyright code in india as abstract concepts are not patentable as per constitution.
Basically this company is injecting javascript into their responses. This guy noticed this and put up a github repo with details on what they are doing and the code they are injecting.

The company is asking him to take down the code, because it violates their copy right and he can't legally distribute without purchasing a license.

> ELI5

"Explain like I'm five" for anyone else who wasn't in the know on that slang (like me until a second ago)

And before the pedants get here: No, not like a literal five-year-old. It means "Explain like I'm a reasonably intelligent adult with no special domain knowledge" but that becomes a mouthful, even if you abbreviate it. Complaining about how this expression has been corrupted by virtue of being used how it's always been used is so original.
First off, I had to navigate to this link[0] before I could read the pdf properly. Archive.org seems to be going through a redesign.

What makes this C&D seem asinine to me is that one of his "infringing" artifacts is a screenshot[1] of Chrome viewing their website's source code.

[0] https://archive.org/stream/LEGALNOTICETOTHEJESHGNCEASEANDDES...

[1] https://github.com/thejeshgn/airtel-3g-script-injection/blob...

Thanks. I was initially confused about why archive.org's redesign announcement was named Re: Cease and Desist Notice – Infringement of Copyright, and then I was further confused when the HN comments appeared to be about something else entirely.