Chinese vendor apologizes for claiming Microsoft open source code was its own product
(2023/08/31)
- Reference: 1693458904
- News link: https://www.theregister.co.uk/2023/08/31/digital_guangdong_opensouce_ripoff_apology/
- Source link:
Chinese consultancy Digital Guandong has apologized after publishing a product based on open source code from Microsoft without properly disclosing that fact.
The firm's [1]apology concerns a product called CEC-IDE, which appears in [2]Microsoft's Visual Studio Marketplace and [3]on GitHub and is billed as offering the chance to "Differentiate your VSCode with Chinese characteristics."
One way the tool differentiates is by allowing coders to look up a database of "sensitive words" listed in [4]this file . Plenty of the words and terms listed are Not Safe For Work. Others, like "Hong Kong independence" and "Xi Jinping intimidated Taiwan" are Not Safe For China.
[5]
The launch of CEC-IDE saw Chinese media express excitement. This [6]report is typical, hailing "The new self-developed super powerful CEC-IDE" that "breaks the foreign monopoly."
[7]
[8]
CEC-IDE was therefore quite the triumph for Digital Guandong – a state-backed corporation founded to develop and deliver high-quality digital infrastructure for the public sector.
Plenty of netizens downloaded the tool and started to test it.
[9]
Which was when some noticed an anomaly: looking up the product's properties produced the text "Copyright © Microsoft 2022. All rights reserved."
[10]Beijing-backed gang looted IP around the world for years, claims Cybereason
[11]FBI: Who was going around hijacking Barracuda email boxes? China, probably
[12]China's openKylin 1.0 arrives. Our verdict? Not a bad-looking, er, Ubuntu remix
[13]Huawei replaces ERP with homebrew effort, claims it’s perfect and shows company will thrive despite sanctions
That giveaway – plus many similarities with Microsoft's Visual Studio Code – led to speculation that Digital Guandong's work was not its own. That theory was very plausible given that Visual Studio Code is made available under the [14]MIT license – described as "A short and simple permissive license with conditions only requiring preservation of copyright and license notices. Licensed works, modifications, and larger works may be distributed under different terms and without source code."
Digital Guandong was therefore within its rights to release CEC-IDE – but made overblown claims about its origins.
The Chinese developer's [15]apology admits that CEC-IDE uses open source VSCode "with a small amount of modification and some functions added," and explains the mess resulted from inadvertent omission of the MIT license document.
The apology also praises open source software and hails it as beloved of all programmers everywhere – including at Digital Guandong.
[16]
Where they clearly love it so much, they sometimes hide its presence. ®
Get our [17]Tech Resources
[1] https://www.digitalgd.com.cn/news/12846/
[2] https://marketplace.visualstudio.com/items?itemName=qcqx.cec-ide
[3] https://github.com/qxchuckle/vsc-cec-ide
[4] https://github.com/cjh0613/tencent-sensitive-words/blob/main/sensitive_words.txt
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[6] https://juejin.cn/post/7270971101014474793
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2022/05/05/cybereason_china_operation_cuckoobees/
[11] https://www.theregister.com/2023/08/25/fbi_china_barracuda/
[12] https://www.theregister.com/2023/07/07/openkylin_is_ubuntu/
[13] https://www.theregister.com/2023/04/21/huawei_develops_own_erp/
[14] https://github.com/microsoft/vscode/blob/main/LICENSE.txt
[15] https://www.digitalgd.com.cn/news/12846/
[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[17] https://whitepapers.theregister.com/
The firm's [1]apology concerns a product called CEC-IDE, which appears in [2]Microsoft's Visual Studio Marketplace and [3]on GitHub and is billed as offering the chance to "Differentiate your VSCode with Chinese characteristics."
One way the tool differentiates is by allowing coders to look up a database of "sensitive words" listed in [4]this file . Plenty of the words and terms listed are Not Safe For Work. Others, like "Hong Kong independence" and "Xi Jinping intimidated Taiwan" are Not Safe For China.
[5]
The launch of CEC-IDE saw Chinese media express excitement. This [6]report is typical, hailing "The new self-developed super powerful CEC-IDE" that "breaks the foreign monopoly."
[7]
[8]
CEC-IDE was therefore quite the triumph for Digital Guandong – a state-backed corporation founded to develop and deliver high-quality digital infrastructure for the public sector.
Plenty of netizens downloaded the tool and started to test it.
[9]
Which was when some noticed an anomaly: looking up the product's properties produced the text "Copyright © Microsoft 2022. All rights reserved."
[10]Beijing-backed gang looted IP around the world for years, claims Cybereason
[11]FBI: Who was going around hijacking Barracuda email boxes? China, probably
[12]China's openKylin 1.0 arrives. Our verdict? Not a bad-looking, er, Ubuntu remix
[13]Huawei replaces ERP with homebrew effort, claims it’s perfect and shows company will thrive despite sanctions
That giveaway – plus many similarities with Microsoft's Visual Studio Code – led to speculation that Digital Guandong's work was not its own. That theory was very plausible given that Visual Studio Code is made available under the [14]MIT license – described as "A short and simple permissive license with conditions only requiring preservation of copyright and license notices. Licensed works, modifications, and larger works may be distributed under different terms and without source code."
Digital Guandong was therefore within its rights to release CEC-IDE – but made overblown claims about its origins.
The Chinese developer's [15]apology admits that CEC-IDE uses open source VSCode "with a small amount of modification and some functions added," and explains the mess resulted from inadvertent omission of the MIT license document.
The apology also praises open source software and hails it as beloved of all programmers everywhere – including at Digital Guandong.
[16]
Where they clearly love it so much, they sometimes hide its presence. ®
Get our [17]Tech Resources
[1] https://www.digitalgd.com.cn/news/12846/
[2] https://marketplace.visualstudio.com/items?itemName=qcqx.cec-ide
[3] https://github.com/qxchuckle/vsc-cec-ide
[4] https://github.com/cjh0613/tencent-sensitive-words/blob/main/sensitive_words.txt
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[6] https://juejin.cn/post/7270971101014474793
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://www.theregister.com/2022/05/05/cybereason_china_operation_cuckoobees/
[11] https://www.theregister.com/2023/08/25/fbi_china_barracuda/
[12] https://www.theregister.com/2023/07/07/openkylin_is_ubuntu/
[13] https://www.theregister.com/2023/04/21/huawei_develops_own_erp/
[14] https://github.com/microsoft/vscode/blob/main/LICENSE.txt
[15] https://www.digitalgd.com.cn/news/12846/
[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZPBkw0lE8pEjAHplsiAkJgAAA4M&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[17] https://whitepapers.theregister.com/
Re: "with a small amount of modification and some functions added"
Doctor Syntax
A good programmer would have dealt with the copyright notices?
45RPM
The remarkable part of this story isn’t that they did the wrong thing in the first place, but that they apologised for it when caught. I say kudos for that at least.
In this febrile global climate, apologising for doing the wrong thing is becoming an increasingly scarce trait - and it betrays a lack of moral fibre.
Doctor Syntax
Maybe it could be forked by adding a start up popup displaying a random entry from the FONT (File Of Naughty Things).
"with a small amount of modification and some functions added"
Yeah, you included censorship and obfuscated the origin of the software. So basically the developer took the code of an Open Source product, plugged in Big Beijing and sold it off as his own work. Without bothering to check copyright notices included in the code.
That's what I call a bad programmer.