News: 1729076415

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Open-sourcing of WinAmp goes badly as owners delete entire repo

(2024/10/16)


The owners of WinAmp have just deleted their entire repo one month after uploading the source code to GitHub. Lots of source code, and quite possibly, not all of it theirs.

The [1]deletion happened soon after The Register enquired about the seeming inclusion of Shoutcast DNAS code and some Microsoft and Intel codecs.

Yes, [2]WinAmp is still around: the audio player of choice for the [3]Napster generation . You know, folks who are in their 40s now and are starting to get middle-aged presbyopia. If they remove their new reading glasses, it might make some of the many skins in the [4]WinAmp Skin Museum look rather better.

[5]

Peer-to-peer downloads of MP3s are just a tad passé now, but don't panic: there's a [6]WinAmp web player as well, and [7]mobile apps . Better still, it fulfilled a long-felt want upon which The Register [8]reported over a decade ago .

[9]

[10]

Owners [11]Llama Group relaunched the venerable Windows media player back in 2023. And then a few months ago in May, the company [12]announced that later in 2024 it would release the source code, too. As promised, it did so in September – and that of quite a few other products as well. Whoops.

The source code release – prior to the deletion yesterday – has been a somewhat bumpy ride. The initial release had a custom license, the [13]Winamp Collaborative License (WCL) Version 1.0 , containing the clause:

No Forking: You may not create, maintain, or distribute a forked version of the software.

Some GitHub users quickly noted (in comments since deleted when the repo was) that this violates GitHub's terms of service. As [14]Hackaday noted , that meant it wasn't really open source. Original co-developer Justin Frankel was [15]extremely skeptical :

If I did have any desire, it would be extinguished by the license terms, lol. The terms are completely absurd in the way they are written.

The company responded (pre-deletion) by revising the WCL to create version 1.0.1, which permits forking but prevents distribution of modified versions.

Whether this could be enforced is hard to say. Also inside the uploaded source code was some GPL 2 source code, which renders the not-very-open WCL moot.

[16]

There were other goodies in there, too. Some have a shared heritage. For instance, Nullsoft, the [17]original authors of WinAmp , created other tools as well. One of those was early audio streaming service Shoutcast, which also [18]ended up part of AOL .

The WinAmp source code on GitHub additionally included a copy of the server code of [19]Shoutcast Distributed Network Audio Server (DNAS), too.

We don't think the company intended to share that – partly because it's no longer Llama Group's to publish. That was part of Radionomy, a part of the business it [20]sold off to Azerion in 2022. Although the company attempted to remove that, this is trickier than it sounds on Github and didn't work (according to a since-deleted comment).

[21]

There was also some Intel and Microsoft source code in there as well, noted prior to the deletion. It's fair to say that it was quite a mixed bag. Pandora would be proud. Of course, in the case of Pandora's jar, the problem was that once opened, it could not be closed again. Since the WinAmp license was changed to allow forking, the code was forked thousands of times. Never mind the llama, the cat is no longer in the remote geographical vicinity of the bag.

We have asked Winamp platform owner Llama Group for comment about the copyright issues and will update this article if it responds.

[22]AOL axes Nullsoft - whither Winamp, Shoutcast?

[23]Survey: 70 per cent of Gnutella users are ‘free riding’

[24]The GPL self-destruct mechanism that is killing Linux

[25]Indy devs to AOL: Save Winamp, or at least make it open source

Re-phrasing one of Oscar Wilde's utterances, PT Barnum said: "There's no such thing as bad publicity." If so, the open sourcing of WinAmp has brought plenty of fresh interest to an old Windows app.

While the release has been rather entertaining, the restrictive license means it's not much use to anyone. But it does serve as an example, both of how not to do this sort of thing, but also and more sadly, of why most companies tend not to do so. Any mass-market proprietary software project this old is likely to contain lots of parts from other companies, if only so that it could interoperate. Cleaning up a codebase for release is a huge and difficult task, and if you're about to give the code away, that probably means it's not worth anything to you any more. So why spend good money on paying your staff for the time it takes to clean it up?

It's worse when none of the original staff are still involved. The aforementioned co-developer Frankel, who also created [26]file-sharing app Gnutella , left the company [27]over 20 years ago . His subsequent company Cockos develops the [28]Reaper digital audio workstation .

There are no easy answers. Perhaps some benefactor could fund legal indemnities for a group of programmers who could volunteer their services in identifying and removing legally tricky inclusions. It would be a great learning experience. It might even be a useful application for LLM bot-based "AI" tools. ®

Get our [29]Tech Resources



[1] https://github.com/WinampDesktop/

[2] https://winamp.com/

[3] https://www.theregister.com/2012/03/17/parker_fanning_on_napster/

[4] https://skins.webamp.org/

[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zw_jLjfmiQq7f-id6OBXGAAAAQ8&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[6] https://player.winamp.com/

[7] https://winamp.com/press/winamp-player-launch

[8] https://www.theregister.com/2013/11/26/petition_to_save_winamp/

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zw_jLjfmiQq7f-id6OBXGAAAAQ8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zw_jLjfmiQq7f-id6OBXGAAAAQ8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[11] https://www.llama-group.com/about/

[12] https://about.winamp.com/press/article/winamp-open-source-code

[13] https://github.com/WinampDesktop/winamp/blob/community/LICENSE.md

[14] https://hackaday.com/2024/09/24/winamp-releases-source-code-but-is-it-really-open/

[15] https://www.askjf.com/index.php?q=7357s

[16] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zw_jLjfmiQq7f-id6OBXGAAAAQ8&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[17] https://www.theregister.com/2004/11/11/aol_axes_nullsoft/

[18] https://www.theregister.com/2004/11/11/aol_axes_nullsoft/

[19] https://www.shoutcast.com/

[20] https://www.globenewswire.com/en/news-release/2022/11/22/2560464/0/en/Azerion-acquires-Radionomy-and-enters-audio-advertising-market.html

[21] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zw_jLjfmiQq7f-id6OBXGAAAAQ8&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[22] https://www.theregister.com/2004/11/11/aol_axes_nullsoft/

[23] https://www.theregister.com/2000/08/22/survey_70_per_cent/

[24] https://www.theregister.com/2012/11/09/opensource_festering_hacks/

[25] https://www.theregister.com/2013/11/26/petition_to_save_winamp/

[26] https://www.theregister.com/2000/08/22/survey_70_per_cent/

[27] https://joelhousman.com/blog/2003/06/03/justin-frankel-leaves-nullsoft-over-spat-with-aol

[28] https://www.reaper.fm/

[29] https://whitepapers.theregister.com/



Simplest solution

JulieM

The simplest solution would be a straightforward law mandating that end users be given access to the Source Code of any software they run on their machines and to which end, nothing in the Source Code is secret from the end user.

Re: Simplest solution

Jou (Mxyzptlk)

How many of the end users can read & understand source?

Re: Simplest solution

Doctor Syntax

Those who can't won't and very likely won't need to, those who can will.

Re: Simplest solution

NullDev

How many can accurately interpret a legal document? Yet most of us are shown one we must agree to before we can install a piece of software.

Re: Simplest solution

Ilgaz

If they weren't such private information vampires, this could be a good job for LLMs.

I remember someone advertised a free service which renders legal junk and shows whatever it means. It was either a service or software.

Re: Simplest solution

Ken Hagan

I take no position on the OP's suggestion, but I doubt whether that matters. If the code has to be made available, someone will be able to read it, and that would certainly "focus the minds" of the original authors.

Re: Simplest solution

JulieM

Maybe they can't themselves, but at least they will be able to pay someone else to do so on their behalf. Which will create jobs.

Re: Simplest solution

MSArm

Cloud cuckoo land calling,

Re: Simplest solution

Felonmarmer

"How many of the end users can read & understand source?"

More than zero, which is enough.

Re: Simplest solution

DJO

True, but the number of people who think they can read code and are able to misunderstand it is probably a far larger number.

Re: Simplest solution

Elongated Muskrat

40-something former users of Winamp? Probably most of us.

Re: Simplest solution

doublelayer

Cloud-hosted software as a service has entered the room.

Cloud-hosted software as a service has taken over the room.

Maybe everything you ever run is open source. Not everything I run is. Sometimes, the way to get people to write the code you want to run is to pay them for it, and I don't have the funds to finance the development process myself, but I can easily afford to buy licenses for stuff I want. I prefer to run that stuff on my own computer, but if they're required to hand me the source code in that case, they'll restrict it to running on their servers or whatever environment it takes to prevent me from accessing that code.

Proprietary software is not automatically evil.

LOL

may_i

[runs off to github to search for winamp]

Response: Whoa there! You have exceeded a secondary rate limit.

ROFL!

Re: LOL

Alan J. Wylie

It seems to have been like this for a while. [1]discussion at GitHub Community

The github-actions bot has responded.

[1] https://github.com/orgs/community/discussions/141073

Doctor Syntax

If so much 3rd party code was in the repository did they even have full rights to distribute the binary?

JulieM

Probably not. But as long as they weren't making the Source Code available, no-one was any the wiser.

Liam Proven

[Author here]

> If so much 3rd party code was in the repository

Hang on. I think you're making a big assumption here which for me ruins the joke. (It was a joke, right?)

"In the repository" -- *what* repository? What makes you think that they had a repository? Source repos are an element of a version control system. What makes you think they had one of those?

I think they probably had a big ol' Zip file, or a backup disk, or tape, or something like that, and some rookie staff member who doesn't know how Git works was told "put the source code on Github" and they tried.

Look, Microsoft *owns* GitHub, and when some staffer uploaded the rediscovered MS-DOS 4 source code:

https://www.theregister.com/2024/04/26/ms_dos_4_open_source/

... they screwed it up and did rookie mistakes like mixing up CR/LF versus LF line endings.

Git is horribly complicated, more than it needs to be for 99% of its users. Github adds an extra layer. It doesn't just need training: it needs deep knowledge and understanding. Most people using it do not have that.

Me included, and I did daily for over 4 years.

I strongly suspect a 20th century freeware proprietary Windows app had nothing like that. Maybe a shared network drive on an in-house server.

Brewster's Angle Grinder

As a mercurial user, git's faffing around with the line endings of "text" files (and the need to declare things as binary) really pisses me off, and corrupts data that is used for test cases. It's a return to the dark ages. Every modern text editor can (and does) automatically adapt.

K555

And the server was called 'server' and browsed to via it's netBIOS name.

And the shared drive was called 'shared' and it's permissions where set to 'everyone'.

graemep

Regardless of whether it was a repo or not, they were apparently distributing GPL licensed code as a proprietary binary. Otherwise why would the code have been in the zip file or whatever?

Agreed about the complexity of Git and Github. For personal projects I sometimes use Fossil, but Git and Github are what everyone knows. I mostly use local tools as far as possible even when using Github so keeping it (or at least trying to keep it) to being just a place to host a repo.

Liam Proven

> Otherwise why would the code have been in the zip file or whatever?

Um. Look, I try to avoid saying "have you read the article?" -- but: have you?

Do you think every copy of WinAmp included the Shoutcast _server_ in it? Hint: no, it didn't.

The whole point of the article is that what they shared _was not just the source of WinAmp_. That is what the article is about: that they mistakenly shared lots of other stuff that wasn't in fact part of the source code they were in fact _trying_ to share.

Alan J. Wylie

Taking a company's source code and preparing it for release to the wild is not a simple process. I've been there, done that for [1]OpenSTA

back in 2001.

IIRC, it involved checking the copyright of everything, removing author's names (some no longer worked for Cyrano, we didn't want people being bothered by support requests) and not least, removing any jokes or bad language from the comments.

[1] https://opensta.sourceforge.io/

CVS?

chasil

CVS has been available since the '80s, and is the most approachable of any such tool.

If Winamp was going to use anything, they would have tried CVS first.

Re: CVS?

Liam Proven

> CVS?

I doubt it.

Look, TBH, if they were that clueful in the first place, then this wouldn't have happened.

Damn Shame

tracker1

In the end, I wish this had gone better. The no touch license made anything out of the gesture a non starter for pretty much anyone who could do anything with the project.

The third party source references made the personality even more murky. In the end, there's not much that can be done.

I wish there was a rough modern equivalent player that didn't suck. I didn't know that there is any such beast. It least not with anything that resemble the community and ubiquity of winamp at its peak.

For that matter, I'd like a good Linux version.

Re: Damn Shame

Rol

I loved Winamp in the day, but my music library got far too big for it.

I'm using Gmusicbrowser on my Linux system now and it does everything I need it for, and doesn't freak out when presented with 1/4 million tracks, unlike many others I have tried along the way.

Re: Damn Shame

Nursing A Semi

Have you tried Wacup? https://getwacup.com/

Re: Damn Shame

Liam Proven

> I wish there was a rough modern equivalent player that didn't suck.

Foobar2000 is my audio player of choice on Windows, macOS and Android these days.

https://www.foobar2000.org/

By one of the co-authors of WinAmp, I believe.

Sadly, there is no Linux version and it's not FOSS.

which permits forking but prevents distribution of modified versions

heyrick

So, then, what's the point?

Are they afraid somebody might take their baby and make a better version than they ever did?

Re: which permits forking but prevents distribution of modified versions

frankvw

Developers are still being forked. But then, Llamas are known for spitting in your face.

Which is what this amounts to: being expected to do the work but then hand it over without being allowed to distribute their own work was never going to get a lot of devs on board.

Re: which permits forking but prevents distribution of modified versions

Liam Proven

> So, then, what's the point?

The point is you don't get taken down or banned from GitHub.

A bit academic in hindsight, but there you go.

When I wrote this, the repo and the code was still there, making it easy to find the (literally) thousands of forks.

> Are they afraid somebody might take their baby and make a better version than they ever did?

Yes, I think exactly that.

Now, of course, legions of copies of the code are out there and perhaps new versions and ports will appear after all. With the names and serial numbers filed off.

Re: which permits forking but prevents distribution of modified versions

biddibiddibiddibiddi

I was trying to figure out what the difference is between a fork and a "modified version" and all I can think of is that they have to remove every reference to the name Winamp and then it becomes a fork. But I'm not a programmer of FOSS expert. It does seem like it doesn't matter one whit what their WCL said. They showed that they included GPL2 code so now anybody can do whatever they want with it according to the GPL2 terms (though the other code that Llama legitimately had no right to distribute is probably still off-limits).

If this did get forked/converted to FOSS, it would just end up like most other software of that nature: used by a few technologically-literate people, made ugly and hard to use in the name of giving users complete control and customizability so it can never get anywhere in mainstream use.

Re: which permits forking but prevents distribution of modified versions

doublelayer

If that GPL2 code was linked, yes, maybe. If it was something else, that does not automatically apply GPL2 to the rest of it. It just indicates that they can't apply their proprietary license to those bits. For example, if that was a separate binary which they called to decode something, quite common in media players, their code is not covered by the GPL, explicitly or implicitly. If that code was included in the repo by mistake and isn't required to use it, not covered. Only if they took a GPLed library and included it directly in the application is the code of that application covered as well. Given that code for unrelated projects was coming through, the presence of that code in the repository is not enough to conclude that it covers the whole. You have to read the code to determine what part if any it touches.

Re: which permits forking but prevents distribution of modified versions

Elongated Muskrat

I'd suggest that if the compiled binary for the application (ignoring other projects and material included in the repo that doesn't compile into it) contains anything that is compiled from GPL's source code that is included in the repo, then that GPL license applies to the whole. IANAL though, and I only get one lifetime to play with, so I'm not going to spend it reading and analysing the GPL license terms for fun.

Re: which permits forking but prevents distribution of modified versions

Elongated Muskrat

In any git-based source control system (such as GitHub), and indeed pretty much any other source control system (how is Subversion doing these days? Anybody?), the word "fork" has a very specific and well-defined meaning. That will be almost certainly be the one they mean.

Re: which permits forking but prevents distribution of modified versions

Liam Proven

> They showed that they included GPL2 code

Er, no.

They included GPL2 code in the stuff they uploaded; that does NOT prove that WinAmp contained GPL2 code.

They accidentally included the source code of their proprietary audio streaming server as well. It is I think reasonably safe to conclude that did not form part of WinAmp.

I see an opportunity...

Paul Uszak

> Any mass-market proprietary software project this old is likely to contain lots of parts from other companies, if only so that it could interoperate.

Llama Group SA is valued (today) at €15M. There must still be companies out there that have some of their code inside WinAmp. With documented source available as evidence, law suites should be a doddle for carving up the 15 million. Maybe even have a bash at Maxximum S.A. (> €1B) which is the majority holder of Llama Group .

Webamp. Org

Natewrench

Webamp is winamp for web browser

Martin Summers

Has anyone ever considered why one would wish to whip a llamas ass?

andy 103

https://www.youtube.com/watch?v=HaF-nRS_CWM

For those who don't understand that reference. Absolute gold. Take me back!

Elongated Muskrat

I've always assumed that was a Jeff Minter reference, given that he has a thing for camelids.

Maybe ask Jeff?

[1]https://www.polygon.com/23613576/jeff-minter-profile-akka-arrh-atari-llamasoft-arcade

[1] https://www.polygon.com/23613576/jeff-minter-profile-akka-arrh-atari-llamasoft-arcade

Anonymous Coward

Aside from the hilarious debacle they've landed themselves in, this is a great future example of why "if they won't make a Linux port, just open source it and someone will." Very few companies own and have distribution rights to 100% of their sources.

biddibiddibiddibiddi

Apparently one Winamp is worth one-tenth of one US penny. I'm not even sure if there is such a thing as a Winamp (only this site lists it) but they apparently were trying to do NFTs at one point. Seems like an appropriate price though for one copy of the software.

https://www.coingecko.com/en/coins/winamp/usd

OS/2

Ilgaz

This is the exact reason why IBM can't open the OS/2 code. I am not sure if they are unhappy about it.

This is what we come here for

DoctorPaul

"Never mind the llama, the cat is no longer in the remote geographical vicinity of the bag."

Re: This is what we come here for

Liam Proven

> This is what we come here for

:-) Thank you very much. Now grinning widely here.

It might even be a useful application for LLM bot-based "AI" tools.

Elongated Muskrat

I can foresee absolutely no problem with feeding someone else's proprietary and copyrighted code into an "AI" LLM, trusting that it will remove anything problematic, and not use any of the copyrighted material for its own training model. None whatsoever.

Re: It might even be a useful application for LLM bot-based "AI" tools.

Liam Proven

> I can foresee absolutely no problem with feeding someone else's proprietary and copyrighted code into an "AI" LLM, trusting that it will remove anything problematic, and not use any of the copyrighted material for its own training model.

Excellent plan. I endorse this.

Let's do it with Windows 95 and see what comes out the end.

Unless of course the answer to that is "Windows ME".

karlkarl

I think it is a very bad idea to give the Winamp folk a hard time for releasing their source-code in any kind of context. This bad rap will likely scare off future companies from doing the same. If people don't like something, perhaps just file a polite bug request in future. Don't turn this political. Don't turn this into a witch hunt.

The fact they had some GPL 2.0 code in there and witheld the source code is naughty, yes but lets be honest, I imagine 25%+ of proprietary code does similar and from much larger money-grabbing companies.

Liam Proven

> I think it is a very bad idea to give the Winamp folk a hard time for releasing their source-code in any kind of context.

A fair point.

I did not mean to give them a hard time as such, merely to point out that they fairly heroically fluffed up the job.

But you are not wrong.

/* And you'll never guess what the dog had */
/* in its mouth... */
-- Larry Wall in stab.c from the perl source code