[squid-users] Lusca/Squid Cache license violation

From: Joaquim Pedro França Simão <osmano807_at_gmail.com>
Date: Sun, 22 Jul 2012 14:03:11 -0300

Hi, I'm here to inform a license violation of the `Squid Cache`_ web
proxy and `Lusca Web/Proxy Cache`_.

The name of the product violating the license is `Speedr Media
Cache`_. It's commercialized by `BrByte Sistemas`_ (Oliveira Alves E
Amorim LTDA).
Speedr violates the GPL license of Lusca, in specific,
LUSCA_HEAD-r14535.

Speedr is a Proxy appliance that uses a plugin system to cache sites
like Youtube (it's similar to storeurl_rewrite, but without external helpers).

It was somewhat difficult to make this analysis, because the Speedr is
distributed inside an encrypted disk.

The source code is completely missing.

Lucas Rebeiro, the author of the analysis, tried to inform them of the
violation, but I think they bought him.
I'm not the autor of the analysis.

The analysis of Speedr version 0.8.0 is here:
<https://lucasribeiroc.wordpress.com/2012/05/16/analise-do-speedr-0-8-0beta/>.
Lucas Ribeiro also made an analysis of the version 0.9, but it was
deleted.

Unfortunately, the analysis is in Portuguese. I'll translate the
principal points:

- Speedr has 3831 strings in common with Squid 2.7.7-4 available at
  FreeBSD Ports. <http://pastebin.com/Pc8wvNpx>
- Speedr has 75 file names in common with
  Squid. <http://pastebin.com/g78HH88Z>
- Also, Speedr was compiled with these flags, extracted from the
  binary::

         '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin'
         '--datadir=/usr/local/etc/squid'
         '--libexecdir=/usr/local/libexec/squid'
         '--localstatedir=/usr/local/squid'
         '--sysconfdir=/usr/local/etc/squid'
         '--enable-removal-policies=lru heap'
         '--disable-linux-netfilter' '--disable-linux-tproxy'
         '--disable-epoll' '--enable-auth=basic ntlm digest'
         '--enable-basic-auth-helpers=DB NCSA PAM MSNT SMB YP'
         '--enable-digest-auth-helpers=password'
         '--enable-external-acl-helpers=ip_user session unix_group
         wbinfo_group' '--enable-ntlm-auth-helpers=SMB'
         '--with-pthreads' '--enable-storeio=aufs null coss'
         '--enable-snmp' '--enable-icmp' '--disable-wccp'
         '--disable-ident-lookups' '--with-large-files'
         '--enable-large-cache-files' '--enable-stacktraces'
         '--enable-err-languages=Armenian Azerbaijani Bulgarian
         Catalan Czech Danish Dutch English Estonian Finnish French
         German Greek Hebrew Hungarian Italian Japanese Korean
         Lithuanian Polish Portuguese Romanian Russian-1251
         Russian-koi8-r Serbian Simplify_Chinese Slovak Spanish
         Swedish Traditional_Chinese Turkish'
         '--enable-default-err-language=English' '--prefix=/usr/local'
         '--mandir=/usr/local/man' '--infodir=/usr/local/info/'
         '--build=amd64-portbld-freebsd7.2'
         'build_alias=amd64-portbld-freebsd7.2' 'CC=cc' 'CFLAGS=-O2
         -fno-strict-aliasing -pipe -g' 'LDFLAGS=' 'CPPFLAGS='

- Speedr has some strings in the binary clearly from Squid, like
  squidaio_* functions. <http://pastebin.com/LPSSKMV1>

The extracted binaries (as instructed on the original analysis) are:

- Speedr 0.8: http://www.4shared.com/file/pg5jmw3n/speedr.html
- Speedr 0.9: http://www.4shared.com/archive/XDRKmmVT/speedr090beta-rc194-gpl.html

BrByte contact information::

        BrByte Sistemas
        (67) 3231-4114
        Rua Cáceres Nº 623 - Centro
        Corumbá - Mato Grosso do Sul - Brazil
        CEP: 79304-040

.. _`Squid Cache`: http://www.squid-cache.org/
.. _`Lusca Web/Proxy Cache`: http://www.lusca.org/
.. _`Speedr Media Cache`: http://www.speedr.com.br/?locale=en
.. _`BrByte Sistemas`: http://www.brbyte.net.br/

-- 
osmano807
Joaquim Pedro
Received on Sun Jul 22 2012 - 17:03:39 MDT

This archive was generated by hypermail 2.2.0 : Mon Jul 23 2012 - 12:00:02 MDT