FFmpeg has issued a DMCA takedown on GitHub

(twitter.com)

241 points | by merlindru 3 hours ago

6 comments

  • merlindru 3 hours ago
    The repo in question incorporated FFmpeg code while claiming their code is Apache 2.0-licensed over 1.5 years ago[1]

    This is not allowed under the LGPL, which mandates dynamic linking against the library. They copy-pasted FFmpeg code into their repo instead.

    [1] https://x.com/HermanChen1982/status/1761230920563233137

    • a_void_sky 2 hours ago
      they waited for more than 1.5 years and they did not forgot
      • mystraline 2 hours ago
        They were given 1.5 YEARS of lead time. And FLOSS should treat commercial entities the same way they treat us.

        Seriously, if we copied in violation their code, how many hours would pass before a DMCA violation?

        FLOSS should be dictatorial in application of the license. After all, its basically free to use and remix as long as you follow the easy rules. I'm also on the same boat that Android phone creators should also be providing source fully, and should be confiscated on import for failure of copyright violations.

        But ive seen FLOSS devs be like "let's be nice". Tit for tat is the best game theory so far. Time to use it.

    • dzhiurgis 28 minutes ago
      What happens when you want to mix two libraries with different licences?
      • koolba 25 minutes ago
        If you own one of them, mix in LGPL code, and publish it, the result is entirely LGPL.

        If you don’t own it and cannot legally relicense part as LGPL, you’re not allowed to publish it.

        Just because you can merge someone else’s code does not mean you’re legally allowed to do so.

      • kelnos 17 minutes ago
        You determine if the licenses are compatible first. If they are, you're fine, as long as you fulfill the terms of both licenses.

        If they aren't compatible, then you can't use them together, so you have to find something else, or build the functionality yourself.

      • Hendrikto 23 minutes ago
        Some licenses, like LGPL, have provisions for this, some just forbid it.

        In the specific ffmpeg case, you are allowed to dynamically link against it from a project with an incompatible license.

    • ajross 2 hours ago
      That's not it. The LGPL doesn't require dynamic linking, just that any distributed artifacts be able to be used with derived versions of the LGPL code. Distributing buildable source under Apache 2.0 would surely qualify too.

      The problem here isn't a technical violation of the LGPL, it's that Rockchip doesn't own the copyright to FFMPEG and simply doesn't have the legal authority to release it under any license other than the LGPL. What they should have done is put their modified FFMPEG code into a forked project, clearly label it with an LGPL LICENSE file, and link against that.

      • FpUser 1 hour ago
        How does

        "Distributing buildable source under Apache 2.0 would surely qualify too"

        reconcile with

        "doesn't own the copyright to FFMPEG and simply doesn't have the legal authority to release it under any license other than the LGPL"

        • dtech 1 hour ago
          You can distribute your own code under Apache along with FFMpeg under LGPL in one download
        • 8note 1 hour ago
          if they licenced their own code under apache 2.0 as buildable with the lgpl ffmeg code, without relicensing ffmeg as apache itself
      • rvnx 1 hour ago
        Not the global best move, or even positive, now the OSS community we lose the OSS code of IloveRockchip, and FFmpeg wins practically nothing, except recognition on a single file (that devs from Rockchip actually acknowledged, though in a clumsy way) but loses in reputation and loses a commercial fork (and potential partner).

        There were opportunities to take advantage of this.

        • windexh8er 10 minutes ago
          Your original comment had this at the end...

          > - Rockchip's code is gone > - FFmpeg gets nothing back > - Community loses whatever improvements existed > - Rockchip becomes an adversary, not a partner

          This is all conjecture which is probably why you deleted it.

          Their code isn't gone (unless they're managing their code in all the wrong ways), FFmpeg sends a message to a for-profit violation of their code, the community gets to see the ignorance Rockchip puts into the open source partnership landscape and finally... If Rockchip becomes an adversary of one of the most popular and notable OSS that they take advantage of, again, for profit then fuck Rockchip. They're not anything here other than a violator of a license and they've had plenty of warning and time to fix.

        • Blackthorn 45 minutes ago
          How do you partner with someone who has so much contempt for you they ignore the license you've given them and, when called on it, simply ignore you?
        • superb_dev 1 hour ago
          We are not going to loose anything. If it’s got a strong enough community then someone will publish a fork with the problem fixed
        • PunchyHamster 1 hour ago
          They had ample warning and ignored the license. what you're even on about?
          • rvnx 43 minutes ago
            [flagged]
            • akerl_ 35 minutes ago
              The amount of armchair quarterbacking here is wild.
              • rvnx 29 minutes ago
                Then waiting to see how they addressed these points and what were the approaches taken and why ?

                Here spent time to think and document all the IRC chats, the Twitter thread, the attitude of the SoC manufacturer, etc.

                There has to be a backstory to suddenly come after 1.5 years for an issue that could have been solved in 10 minutes.

                • kelnos 12 minutes ago
                  Then why didn't Rockchip solve it in 10 minutes?
            • kelnos 13 minutes ago
              That's bullshit. The FFmpeg devs were well within their rights to even send a DMCA takedown notice, immediately, without asking nicely first.

              This is what big corporations do to the little guys, so we owe big corporations absolutely nothing more.

              They gave Rockchip a year and a half to fix it. It is the responsibility of Rockchip to take care of it once they were originally notified, and the FFmpeg dvelopers have no responsibility to babysit the Rockchip folks while they fulfill their legal obligations.

              • rvnx 3 minutes ago
                What I say, is that if they had sent the DMCA immediately that would have been fine. But waiting 2 years in silence, then suddenly DMCA without reminder, I don't get it (and we haven't heard the devs on that yet).
            • Blackthorn 33 minutes ago
              Deadline and reminders? They aren't teachers and Rockchip isn't a student, they are the victims here and Rockchip is the one at fault. Let's stop literally victim blaming them for how they responded.
              • rvnx 7 minutes ago
                To be clear: Rockchip is at fault, 100%. I would sue (and obv DMCA) any company who takes my code and refuses to attribute it.

                But there's a difference between "refuses" and "apologizes and admits confusion" and then forgets because lazy / or pretends to forget.

                Escalation can be gradual: reminder, warning, final warning, then nuclear.

                Or, you immediately escalate to [DMCA / court] and that's very fair, but suddenly like 2 years after silence (if, and only if that was the case, because maybe they spoke outside of Twitter/X).

                That way, others know you defend your territory and that compliance is rewarded.

                I think here it is a final warning stage (nuclear would be court, which could and should be an option).

  • firesteelrain 6 minutes ago
    Not familiar with Rockchip. Plenty of searches come up with cases of people incorporating ffmpeg into Rockchip projects. I still see the license files and headers. What is different with this DMCA takedown?

    https://github.com/nyanmisaka/ffmpeg-rockchip

  • nikitalita 2 hours ago
    someone post an archive link, I can't read that
  • ThePowerOfFuet 26 minutes ago
  • LargoLasskhyfv 1 hour ago
    Clash of cultures. https://en.wikipedia.org/wiki/Shanzhai#Regulation vs. the 鬼子 鬼佬 老外
  • dheera 14 minutes ago
    Time to create a decentralized, blockchain-based GitHub (GitCoin?) and have every commit be a transaction on the chain. Nothing would ever be takedownable.