Malus – Clean Room as a Service

(malus.sh)

433 points | by microflash 4 hours ago ago

149 comments

  • iepathos 8 minutes ago

    This is essentially 'License Laundering as a Service.' The 'Firewall' they describe is an illusion because the contamination happens at the training phase, not the inference phase. You can't claim independent creation when your 'independent developer' (the commercial LLM) already has the original implementation's patterns and edge cases baked into its weights.

    In order to really do this, they would need to train LLMs from scratch that had no exposure whatsoever to open source code which they may be asked to reproduce. Those models in turn would be terrible at coding given how much of the training corpus is open source code.

  • jerf an hour ago

    An interesting aspect of this, especially their blog post (https://malus.sh/blog.html ), is that it acknowledges a strain in our legal system I've been observing for decades, but don't think the legal system or people in general have dealt with, which is that generally costs matter.

    A favorite example of mine is speed limits. There is a difference between "putting up a sign that says 55 mph and walking away", "putting up a sign that says 55 mph and occasionally enforcing it with expensive humans when they get around to it", and "putting up a sign that says 55 mph and rigidly enforcing it to the exact mph through a robot". Nominally, the law is "don't go faster than 55 mph". Realistically, those are three completely different policies in every way that matters.

    We are all making a continual and ongoing grave error thinking that taking what were previously de jure policies that were de facto quite different in the real world, and thoughtlessly "upgrading" the de jure policies directly into de facto policies without realizing that that is in fact a huge change in policy. One that nobody voted for, one that no regulator even really thought about, one that we are just thoughtlessly putting into place because "well, the law is, 55 mph" without realizing that, no, in fact that never was the law before. That's what the law said, not what it was. In the past those could never really be the same thing. Now, more and more, they can.

    This is a big change!

    Cost of enforcement matters. The exact same nominal law that is very costly to enforce has completely different costs and benefits then that same law becoming all but free to rigidly enforce.

    And without very many people consciously realizing it, we have centuries of laws that were written with the subconscious realization that enforcement is difficult and expensive, and that the discretion of that enforcement is part of the power of the government. Blindly translating those centuries of laws into rigid, free enforcement is a terrible idea for everyone.

    Yet we still have almost no recognition that that is an issue. This could, perhaps surprisingly, be one of the first places we directly grapple with this in a legal case someday soon, that the legality of something may be at least partially influenced by the expense of the operation.

    • modeless an hour ago

      We should welcome more precise law enforcement. Imperfect enforcement is too easy for law enforcement officers to turn into selective enforcement. By choosing who to go after, law enforcement gets the unearned power to change the law however they want, enforcing unwritten rules of their choosing. Having law enforcement make the laws is bad.

      The big caveat, though, is that when enforcement becomes more accurate, the rules and penalties need to change. As you point out, a rigidly enforced law is very different from one that is less rigorously enforced. You are right that there is very little recognition of this. The law is difficult to change by design, but it may soon have to change faster than it has in the past, and it's not clear how or if that can happen. Historically, it seems like the only way rapid governmental change happens is by violent revolution, and I would rather not live in a time of violent revolution...

    • igor47 an hour ago

      Dean Ball made this exact point on the Ezra Klein show a few days ago. I always thought laws would get more just with perfect enforcement -- the people passing mandatory sentencing laws for minor drug offenses would think twice if their own children, and not just minorities and unfavourable groups, were subject to the same consequences (instead of rehab or community service).

      But if I've learned anything in 20 years of software eng, it's that migration plans matter. The perfect system is irrelevant if you can't figure out how to transition to it. AI is dangling a beautiful future in front of us, but the transition looks... Very challenging

      • eru 41 minutes ago

        Hmm, the problem is that judges and even police officers are generally saner than voters.

        Giving the former discretion was a way to sneakily contain the worst excesses of the latter.

        Alas, self-interest isn't really something voters seem to really take into account.

      • sensanaty 15 minutes ago

        This is of course assuming that politicians aren't largely duplicitious and actually believe in a word they say. I grew up in Indonesia, and the number of politicians who were extremely anti-porn getting caught watching porn in parliament is frankly staggering, yet alone the ones who are pro death penalty for drugs caught as being part of massive drug smuggling rings.

        • throwaway2037 a few seconds ago

          You raise an interesting point: One question that I think about developing countries: Most of them have higher perception of corruption compared to highly developed (OECD) nations. How do countries realistically reduce corruption? Korea went from an incredibly poor country in 1960 to a wealthy country in 2010. I am sure they dramatically reduced corruption over this time period... but how? Another example, in the 1960s/1970s, Hongkong dramatically increased the pay for civil servants (including police officers) to reduce corruption. (It worked, mostly.)

      • wat10000 27 minutes ago

        How many times have we seen politicians advocate for laws against something, then do a 180 when one of their kids does it? Even if you had that system, I don't think it would work the way you say. People are dumb and politicians are no exception.

    • seethishat 6 minutes ago

      The issue with strictly enforcing the speed limit on roads is that sometimes, people must speed. They must break the law. Wife giving birth, rushing a wounded person to the ER, speeding to avoid a collision, etc.

      If we wanted to strictly enforce speed limits, we would put governors on engines. However, doing that would cause a lot of harm to normal people. That's why we don't do it.

      Stop and think about what it means to be human. We use judgement and decide when we must break the laws. And that is OK and indeed... expected.

    • parpfish an hour ago

      I think this distinction also gets at some issue with things like privacy and facial recognition.

      There’s the old approach of hanging a wanted poster and asking people to “call us if you see this guy”. Then there’s the new approach matching faces in a comprehensive database and camera networks.

      The later is just the perfect, efficient implementation of the former. But it’s… different somehow.

    • cuu508 19 minutes ago

      > We are all making a continual and ongoing grave error

      > Blindly translating those centuries of laws into rigid, free enforcement is a terrible idea for everyone.

      I understand your point that changing the enforcement changes how the law is "felt" even though on the paper the law has not changed. And I think it makes sense to review and potentially revise the laws when enforcement methods change. But in the specific case of the 55 mph limit, would the consequences really be grave and terrible if the enforcement was enforced by a robot, but the law remained the same?

      • Ntrails 11 minutes ago

        Yeah, I'd have to go slower????

        Anyway. I come from the UK where we've had camera based enforcement for aeons. This of course actually results in people speeding and braking down to the limit as they approach the camera (which is of course announced loudly by their sat nav). The driving quality is frankly worse because of this, not better, and it certainly doesn't reduce incidence of speeding.

        Of course the inevitable car tracker (or average speed cameras) resolve this pretty well.

    • pfortuny 13 minutes ago

      Not exactly the same but at least in Spain, the cost of constructing a new building subject to all the regulations makes them completely unafforfable for low salaries.

      (There are other problems, I know, but the regulations are crazy).

    • JackYoustra an hour ago

      The answer to this is just changing the law as enforcement becomes different, instead of leaning on the rule of a few people to determine what the appropriate level of enforcement is.

      To do this, though, you're going to have to get rid of veto points! A bit hard in our disastrously constitutional system.

    • Pannoniae 26 minutes ago

      Yup :P

      As in their post:

      "The future of software is not open. It is not closed. It is liberated, freed from the constraints of licenses written for a world in which reproduction required effort, maintained by a generation of developers who believed that sharing code was its own reward and have been comprehensively proven right about the sharing and wrong about the reward."

      This applies to open-source but also very well to proprietary software too ;) Reversing your competitors' software has never been easier!

    • LeifCarrotson 11 minutes ago

      Absolutely! We're not all making that error, I've been venting about it for years.

      "Costs matter" is one way to say it, probably a lot easier to digest and more popular than the "Quantity has a quality all it's own" quote I've been using, which is generally attributed to Stalin which is a little bit of a problem.

      But it's absolutely true! Flock ALPRs are equivalent to a police officer with binoculars and a post-it for a wanted vehicle's make, model, and license plate, except we can put hundreds of them on the major intersections throughout a city 24/7 for $20k instead of multiplying the police budget by 20x.

      A warrant to gather gigabytes of data from an ISP or email provider is equivalent to a literal wiretap and tape recorder on a suspect's phone line, except the former costs pennies to implement and the later requires a human to actually move wires and then listen for the duration.

      Speed cameras are another excellent example.

      Technology that changes the cost of enforcement changes the character of the law. I don't think that no one realizes this. I think many in office, many implementing the changes, and many supporting or voting for those groups are acutely aware and greedy for the increased authoritarian control but blind to the human rights harms they're causing.

    • clickety_clack 26 minutes ago

      De jure, there is no difference between de facto and de jure. De facto there is.

  • rhoopr 2 hours ago

    > You have been so generous, so unreasonably, almost suspiciously generous, that you have made it possible for an entire global economy to run on software that nobody technically owns, maintained by people that nobody technically employs, governed by licenses that nobody technically reads. It is a miracle of human cooperation. It is also, from a fiduciary standpoint, completely insane.

    Funny but true.

    • killbot5000 2 hours ago

      It's funny that humans working together for mutual benefit via any other mechanism than regimented corporate slavery is considered insane.

      • boondongle 14 minutes ago

        The issue is how do you interact with other industries/trades who protect their profit making potential.

        Ok great - all software and networks are "free." How do you pay for Doctors and Plumbers and Electricians whose earnings are legally protected by the state but whose skill bases are also freely available to be used within the margin of error of a professional or a layman?

        Issues like this are great to have conversations about, but if people don't start broadening the scope very quickly, it just turns into the IT/CS worker's worth going to 0 in a world where others worth are protected. And history states, if only 1 group sees the threat, the remaining trades/industries will let it die.

      • eru 39 minutes ago

        The quote above didn't mention corporations at all.

        • saulpw 29 minutes ago

          "nobody technically employs" strongly implies that this is not a corporate organization.

        • jedberg 29 minutes ago

          " maintained by people that nobody technically employs"

      • designerarvid an hour ago

        Easily explained by the fact that writing some types of software and seeing people using it is fun. Some people take photos for free also.

        Doesn’t apply everywhere though.

        • tavavex 13 minutes ago

          What's this 'fun' you mention? As far as the incentives in our systems are concerned, anything that's not done in pursuit of monetary gain is certifiably insane. What really matters in life is using all the tricks, manipulation, abuse and loopholes to attain the biggest number in your asset counter. Anyone who doesn't follow the only thing that matters in life is alien, inhuman even. How do they not see it?

    • einpoklum 44 minutes ago

      It's not true (and also not funny):

      * Many of the people maintaining FOSS are paid to do so; and if we counted 'significance' of maintained FOSS, I would not be surprised if most FOSS of critical significance is maintained for-pay (although I'm not sure).

      * Publishing software without a restrictive license is not 'generous', it's the trivial and obvious thing to do. It is the restriction of copying and of source access that is convoluted, anti-social, and if you will, "insane".

      * Similarly, FOSS is not a "miracle" of human cooperation, and it what you get when it is difficult to sabotage human cooperation. The situation with physical objects - machines, consumables - is more of a nightmare than the FOSS situation is a miracle. (IIRC, an economist named Veblen wrote about the sabotaging role of pecuniary interests on collaborative industrial processes, about a century ago; but I'm not sure about the details.)

      * Many people read licenses, and for the short, paragraph-long licenses, I would even say that most developers read them.

      * It is not insane to use FOSS from a "fiduciary standpoint".

      • eru 35 minutes ago

        > * Many people read licenses, and for the short, paragraph-long licenses, I would even say that most developers read them.

        Well, it's one thing to read licenses as a human and another to read them as a lawyer.

        That's why it's useful to pick one of the standard licenses that lawyers have already combed over, even if it's a long one like the GPL.

    • aprdm 2 hours ago

      Isn't that the premise of Fallout ?

  • utopiah an hour ago

    Don't believe in hell but I were I hope they'd be a special place for them.

    It's like... revert patent troll? I'm not even sure I get it but the wording "liberation from open source license obligations." just wants to make me puke. I also doubt it's legit but I'm not a lawyer. I hope somebody at the FSF or Apache foundation or ... whomever who is though will clarify.

    "Our proprietary AI systems have never seen" how can they prove that? Independent audit? Whom? How often?

    Satire... yes but my blood pressure?!

    • zozbot234 39 minutes ago

      This is satire, but the very notion of open source license obligations is meaningless in context. FLOSS licenses do not require you to publish your purely internal changes to the code; any publication happens by your choice, and given that AI can now supposedly engineer a clean-room reimplementation of any published program whatsoever, publishing your software with a proprietary copyright isn't going to exactly save you either.

      • eru 34 minutes ago

        No, no, some open source licenses require you to publish internal changes. Eg some are explicitly written that you have to publish even when you 'only' use the changes on your own servers. (Not having to publish that was seen as a loophole for cloud companies to exploit.)

      • utopiah 34 minutes ago

        "given that AI can now supposedly engineer a clean-room reimplementation of any published program whatsoever"

        I'm missing something there, that's precisely what I'm arguing again. How can it do a clean-room reimplementation when the open source code is most likely in the training data? That only works if you would train on everything BUT the implementation you want. It's definitely feasible but wouldn't that be prohibitively expensive for most, if not all, projects?

      • nearlyepic 15 minutes ago

        Am I right in thinking that is not even "clean room" in the way people usually think of it, e.g. Compaq?

        The "clean room" aspect for that came in the way that the people writing the new implementation had no knowledge of the original source material, they were just given a specification to implement (see also Oracle v. Google).

        If you're feeding an LLM GPL'd code and it "creates" something "new" from it, that's not "clean room", right?

        At the end of the day the supposed reimplementation that the LLM generates isn't copyrightable either so maybe this is all moot.

        • fmbb a minute ago

          > If you're feeding an LLM GPL'd code and it "creates" something "new" from it, that's not "clean room", right?

          I didn’t RTFA but I suppose that by clean room here they mean you feed the code to ”one” LLM and tell it to write a specification. Then you give the specification to ”another” LLM and tell it to implement the specification.

    • karel-3d 39 minutes ago

      It's a satire. The authors presented it at FOSDEM. They are people that worked previously for foss communities.

      • fladrif 18 minutes ago

        Satire is too dangerous to be presented outside of its community. This honestly should've been left within FOSDEM.

        It's great within the context of people who understand it, enlightening even. Sparks conversations and debates. But outside of it ignorance wields it like a bludgeon and dangerous to everyone around them. Look at all the satirical media around fascism, if you knew to criticize you could laugh, but for fascists it's a call to arms.

        • darkwater 5 minutes ago

          If people lack sense of humor or satire, even if pathologically, well, too bad for them. Why should the rest be denied of that satire? It's not harming anyone at all.

  • ks2048 2 hours ago

    "I used to feel guilty about not attributing open source maintainers. Then I remembered that guilt doesn't show up on quarterly reports. Thank you, MalusCorp." ◆ Chad Stockholder Engineering Director, Profit First LLC

    • lo_zamoyski an hour ago

      Certain views of OSS and its relation to commercial software always seemed to be fraught with highly voluntarist and moralizing attitudes and an intellectual naivete.

  • ameliaquining 3 hours ago

    Note for people who just briefly skimmed the site: This is satire.

    • Habgdnv an hour ago

      At least you think that this is satire, until the author receives a DMCA from one of the big corps saying that he leaked the transcript of their last meeting

    • kifler an hour ago

      Too late. Someone's senior executive management has probably already seen it and spinning up a new project to implement it.

    • chilipepperhott 2 hours ago

      Yeah, thank you. I was starting to get a little heated.

      • embedding-shape 2 hours ago

        Same, I got as far as "Finally, liberation from open source license obligations." until I went back to the comments.

        • frizlab an hour ago

          haha did the same. that being said I’m convinced some people do think AI reimplementation actually means cleanroom…

    • TimTheTinker an hour ago

      I don't know - if you upload a package.json with any dependencies that map to real npmjs.com packages, it does lead you to a Stripe payment page which appears to be real... and it appears you'd be sending real money.

      Maybe that's part of the joke, though :)

    • Lalabadie 2 hours ago

      The situation is a bit too Torment Nexus-y for my comfort, thank you very much

    • schmeichel 2 hours ago

      Thank you for pointing that out, I genuinely was scratching my head and questioning if this site was serious.

    • adampunk 2 hours ago

      For now

    • dcchambers 2 hours ago

      For now...

      • tgtweak 2 hours ago

        The best satire is that which becomes reality.

        • TehCorwiz 2 hours ago

          I would posit that the best satire is that which holds a clear enough mirror to society that people choose for it to not come to pass.

        • intrasight 34 minutes ago

          Best comment here!

    • lo_zamoyski an hour ago

      W.r.t. intent, yes. But w.r.t. content, we are long past a situation where it is unrealistic enough to function as satire.

      While such tactics would render certain OSS software licenses absurd, the tactic itself, as a means to get around them, is entirely sound. It just reveals the flawed presupposition of such licenses. And I'm not sure there is really any way to patch them up now.

      • kshacker 30 minutes ago

        It will be like Galaxy Quest - they saw the historical records, copied them and then ... still needed humans to help them :)

      • zozbot234 an hour ago

        It would also entirely obviate the need for those very same OSS licenses, if LLMs can simply do a clean-room reimplementation of any copywritten software whatsoever.

    • Robdel12 an hour ago

      It legit got me. An actual "whaaaaaatttt?" out loud and then I had to figure out why it was the top of HN haha.

    • jajuuka 2 hours ago

      I was wondering. I had heard chardet story and wouldn't be surprised to see others moving into that same space.

  • 0x500x79 17 minutes ago

    > If any of our liberated code is found to infringe on the original license, we'll provide a full refund and relocate our corporate headquarters to international waters.*

    I love it. Brilliant satire that foreshadows the future.

    • kypro 5 minutes ago

      The satire is A-grade.

      On a quick glance, or skim read, you could be excused for believing this is real, but they drop just enough nuggets throughout that by the end there is no ambiguity.

      Really helps illustrates how realistic this could be.

  • hmokiguess 2 hours ago

    The fact that it took me the comments sections to understand this is satire speaks a lot about the current status of where things are going.

    EDIT: Reading it again its quite obvious, I was just skimming at first, but still damn. Hilarious

    • frenchie4111 an hour ago

      lol - it's literally called malus but I guess that's only an obvious giveaway in retrospect

  • glenstein 41 minutes ago

    I first encountered the concept of "clean room" in the context of Sean Lahman's free baseball stats database. While technically baseball stats are free, their compiling and manner of presentation in any given format may be claimed as proprietary by any particular provider. And so there's an extensive volunteer effort from baseball fans to "clean room" source them from independent sources such that they are verifying the stats independently of their provenance as a legally permitted basis for building out the database.

    I even recall Baseball Mogul relied on the Lahman DB for a period of time. It does make me wonder if we'll see more of that.

  • tavavex 9 minutes ago

    This is extremely good satire. Question is, why hasn't anyone done this for real? There's enough people with the right knowledge and who would love to destroy open source for personal gain. Is it that this kind of service would be so open to litigation that it would need a lot of money upfront? Or is someone already working on this, and we're just living out the last good days of OSS?

    • imiric a minute ago

      > why hasn't anyone done this for real?

      WDYM? LLMs are essentially this.

  • 0xWTF 2 hours ago

    There are two teenagers who learned about Malus in the last hour and have started figuring out how to actually build it, right now. They will not cite their source in their IPO statements.

    • etchalon an hour ago

      The Torment Nexus must be built, because someone wants a lambo.

  • Pannoniae 2 hours ago

    This is satire but this is where things are heading. The impact on the OSS ecosystem is probably not a net positive overall, but don't forget that this also applies to commercial software as well.

    There will be many questions asked, like why buy some SaaS with way too many features when you can just reimplement the parts you need? Why buy some expensive software package when you can point the LLM into the binary with Ghidra or IDA or whatever then spend a few weeks to reverse it?

    • OkayPhysicist 2 hours ago

      This is going to bring back software patents.

      • intrasight 32 minutes ago

        I was discussing that very point yesterday with a colleague after telling him of recent events. I pointed out that leaning on copyright/copyleft for software has always been a risky move.

      • OJFord an hour ago

        Where did they go?

  • lxe 3 minutes ago

    Distinguished staff level trolling

  • throwaway2037 14 minutes ago

    I am blown away. Just 16 days ago, we were discussing this HN post: "FreeBSD doesn't have Wi-Fi driver for my old MacBook, so AI built one for me": https://news.ycombinator.com/item?id=47129361

    In this post that I wrote: https://news.ycombinator.com/item?id=47131572 ... I theorised about how a company could reuse a similar technique to re-implement an open source project to change its license. In short: (1) Use an LLM to write a "perfect" spec from an existing open source project. (2) Use a different LLM to implement a functionally identical project in same/different programming language then select any license that you wish. Honestly, this is a terrifying reality if you can pay some service to do it on your behalf.

  • mushufasa 3 hours ago

    "Change all your core software library dependencies to be unmaintained ripoff copies of those libraries." Sounds wise.....¡¡

    • roughly 2 hours ago

      Sounds like my CTO. Overuse of LLMs in c-suites is like overuse of weed by teenagers - it may not cause delusions, but it sure seems to make them worse.

      • jakeydus 2 hours ago

        Don't worry, I'm positive that we're only a few years out from realizing just how damaging both were/are.

  • izucken 28 minutes ago

    Some parties wouldn't be thrilled about their "source available" getting cleaned this way. So when this gets completed it would only "clean" real open source that can't afford legal trouble. Satirically structured LLM text is not a defence.

  • typeiierror an hour ago

    I know this is satire, but I have an adjacent problem I could use help with. In my company, we have some legacy apps that run, but we no longer have the source, any everyone that worked on them has probably left the planet.

    We need to replatform them at some point, and ideally I'd like to let some agents "use" the apps as a means to copy them / rebuild. Most of these are desktop apps, but some have browser interfaces. Has anyone tried something like this or can recommend a service that's worked for them?

    • ekidd 11 minutes ago

      I have actually very convincingly recreated a moderately complex 70s-era mainframe app by having an LLM reimplement it based on existing documentation and by accessing the textual user interface.

      The biggest trick is that you need to spend 75% of your time designing and building very good verification tools (which you can do with help from the LLM), and having the LLM carefully trace as many paths as possible through the original application. This will be considerably harder for desktop apps unless you have access to something like an accessibility API that can faithfully capture and operate a GUI.

      But in general, LLM performance is limited by how good your validation suite is, and whether you have scalable ways to convince yourself the software is correct.

    • nivethan an hour ago

      I've done a little bit of this and Claude is pretty great. Take the app and let Claude run wild with it. It does require you to be relatively familiar with the app as you may need to guide it in the right direction.

      I was able to get it to rebuild and hack together a .NET application that we don't have source for. This was done in a Linux VM and it gave me a version that I could build and run on Windows.

      We're past the point of legacy blackbox apps being a mystery. Happy to talk more, my e-mail is available on my profile.

    • ensemblehq an hour ago

      Interested to keep updated on this point. As a consultant, I've worked on transformation of legacy applications so this would help me greatly as well. We've worked on pretty archaic systems where no one knows how the system works even if we have the source code.

    • Traubenfuchs an hour ago

      Well, what kind of desktop apps?

      Unless obfuscated C# desktop apps are pretty friendly to decompile.

  • logdahl 2 hours ago

    Haha, was extremely rage-baited by this. Thanks.

  • RandomGerm4n 2 hours ago

    This time it's satire, but I bet someone will offer exactly that for real in the next few days. The idea is unethical but far too lucrative from a business perspective.

    • Maxion an hour ago

      Often OSS is used not because you want the software, but the software and the upkeep. So even with such a service, you're now just taking code in-house that you have to maintain as well.

    • tetraca 2 hours ago

      The people that will take this as a good thing unironically will just have their personal Yes Man do that work internally.

  • neya 35 minutes ago

    You know the satire is so good that people actually confused this for something real:))

  • ivanjermakov 42 minutes ago

    First I thought this is about manufacturing. Like semiconductor fabs requirement for room cleanness.

  • danorama 16 minutes ago

    Poe's Law just smacked me upside the head on this one. Hard.

  • pringk02 35 minutes ago

    > per package = max( $0.01, size_kb × $0.01 )

    > order total = max( $0.50, sum of all packages )

    > $0.50 minimum applies per order (Stripe processing floor). No base fee.

    Not sure I can trust their output if this simple thing is fluffed

  • sam0x17 an hour ago

    Have fun when using this service is itself used in court as evidence for creating a malicious copy

  • comrade1234 an hour ago

    So they recreate the open source project by using an llm that was trained in the open source project's source code.

  • sigmar an hour ago

    >Our proprietary AI robots independently recreate any open source project from scratch.

    Fact that this is satire aside, why would a company like this limit this methodology to only open source? Since they can make a "dirty room" AI that uses computer-use models, plays with an app, observes how it looks from the outside (UI) and inside (with debug tools), creates a spec sheet of how the app functions, and then sends those specs to the "clean room" AI.

    • chii an hour ago

      > observes how it looks from the outside (UI) and inside (with debug tools), creates a spec sheet of how the app functions, and then sends those specs to the "clean room" AI.

      and tbh, i cannot see any issues if this is how it is done - you just have to prove that the clean room ai has never been exposed to the source code of the app you're trying to clone.

  • mapcars an hour ago

    Heh, why don't you do the opposite - recreate proprietary software with open source license

    • intrasight 29 minutes ago

      I expect that thousands of people are now doing just that. Most proprietary software is just a shiny UI in front of a crappy database schema.

  • forvelin 31 minutes ago

    they really had an entertaining presentation in fosdem 2026 about this. bit too noisy for my taste but regardless:

    https://fosdem.org/2026/schedule/event/SUVS7G-lets_end_open_...

    • aleksi 14 minutes ago

      I was on this talk expecting to hear about MongoDB abusing open source (as you could guess from my profile, that’s a topic dear to my heart). Instead, I saw the most entertaining talk in my life.

  • alsetmusic 2 hours ago

    This is brilliant satire. Wonderful response to the “rewrite” of chardet.

    ^ For those who haven’t been keeping up on the debacle.

  • gorgoiler 2 hours ago

    scanning… …fuming… …blood pressure risingsees a quote attributed to “Chad Stockholder Engineering Director, Profit First LLC” …oh phew, thank god for that. I actually believed this could be real for a moment!

  • fallingmeat 3 hours ago

    Love the product link in footer to "Emergency AGPL Removal"

  • bingemaker 33 minutes ago

    It will be nice to know how many legal personnel fell for this trip. Maybe a leaderboard :D

  • tripdout 2 hours ago

    The joke is that the models have already seen the source code of said packages regardless, right?

    • Guillaume86 40 minutes ago

      Yeah it's just a slightly more honest and simplified presentation of what LLMs providers do IMO.

  • ebiester 2 hours ago

    The frustrating thing is I also thought about this as a natural conclusion - but as a natural workflow that corporations will do when they see AGPL dependencies they want to use. (I also think there's a world where we start tightening our software bill of materials anyway.)

    I do not believe it will ever again make sense to build open source for business. the era of OSS as a business model will be very limited going forward. As sad and frustrating as it is, we did it to ourselves.

  • 999900000999 2 hours ago

    As a hypothetical.

    Let’s say instead it consolidated a few packages into 1. This might even be a good idea for security reasons.

    Then it offered a mandatory 15% revenue tip to the original projects.

    So far GPL enforcement usually comes down to “umm, try and sue us lol”.

    How much human intervention is needed for it to be a real innovation and not llm generated. Can I someone to watch Claude do its thing and press enter 3 times ?

    • kvgr an hour ago

      If the AI could do good refactor of OS project, remove unused code/features and make the code more efficient. Than we really would be out of jobs :D

  • v9v 41 minutes ago

    Thought this was about semiconductor cleanrooms at first. Any startups doing that?

  • boje 2 hours ago

    Today's satire is tomorrow's reality, if the last 50 or so years is anything to go by.

  • amiga386 2 hours ago

    I did try to upload a requirements.txt with "chardet < 7.0" in it ("Copyright (C) 2024 Dan Blanchard"? I don't think so buddy, it's mine now), but despite claiming otherwise, the satirical site only takes package.json so I uploaded the one from https://github.com/prokopschield/require-gpl/

    It does actually generate a price (which is suspiciously like a fixed rate of $1 per megabyte), and does actually lead you to Stripe. What happens if someone actually pays? Are they going to be refunding everything, or are they actually going to file the serial numbers off for you?

  • rgilton 2 hours ago

    It's interesting that the focus is just on open source licenses. If one can strip licenses from source code using LLMs, then surely a Microsoft employee could do the same with the Windows source code!

  • torginus 2 hours ago

    I have to admit It took me an unconfortably long amount of time to realize this was fake-

  • phpnode 2 hours ago

    This is satire, but I actually have built something that can do this extremely well as an unintentional side effect. I will not be building my business around this capability however

  • observationist 3 hours ago

    Not sure their attempted point lands the way they think it will. I view this as an unmitigated good. Open source every damn thing. Open the floodgates. Break the system.

    I'd cheer for a company like this.

    It seems to dance just on the other side of what's legal, though.

    • amiga386 2 hours ago

      > I view this as an unmitigated good.

      Then I don't think you've thought it through.

      This entire software ecosystem depends on volunteering and cooperation. It demands respect of the people doing the work. Adhering to their licensing terms is the payment they demand for the work they do.

      If you steal their social currency, they may just walk away for good, and nobody will pick up the slack for you. And if you're a whole society of greedy little thieves, the future of software will be everyone preciously guarding and hiding their changes to the last open versions of software from some decades ago.

      You should read Bruce Perens' testimony in the Jacobsen v. Katzer case that explained all this (and determined that licensing terms are enforceable, and you can't just say "his is open mine is open what's the difference?")

      https://web.archive.org/web/20100331083827/http://perens.com...

      • observationist an hour ago

        I mean in the context of AI - we're already seeing the conflagration of SAAS, and software jobs are going kaput. It's my deeply considered opinion that the faster this happens, the better, because it'll force a reckoning with impending AI job loss across the board.

        We need to deal with the issues now. The worst possible outcome is a gradual drip-drip-drip of incremental job losses, people shuffling from job to job, taking financial hits, some companies pretending everything is fine, other companies embracing full-bore zero employee work. The longer it goes on, the more wealth and power gets siphoned up by corporations and individuals who already have significant wealth, the bigger the inequality, and the bigger the social turmoil.

        Software, graphics design, music, and video (even studio level movies) should cope with this now. It's not going to stop, AI isn't going to get worse, there's not going to be some special human only domain carved out. The sooner we cope with this the better, because it'll set the foundation for the rest of the job loss barreling down on us like the Chicxulub asteroid.

        • amiga386 an hour ago

          It sounds like you'd advocate for accelerationism (by which I mean "to worsen capitalism to promote revolution against it")

          The end result could well be the people bringing out the guillotines for tech executives, or even the Butlerian Jihad.

          But I'm not sure everyone would agree we need to race to those dystopian futures. They might prefer a more conservative future where they nip the scamming / copyright infringement at scale / "disruption" in the bud.

          The trouble seems to revolve mainly around money. Give enough of it to someone, or even promise it, and so many people just lose their minds and their moral backbone. Politicians in charge of regulating these shenanigans especially so, I'm not sure they had moral backbones to begin with.

          • observationist 33 minutes ago

            It's not naked accelerationism, I just don't want to see years and years of suffering and exploitation and chaos giving a permanent advantage to those already in a position to take that advantage. One significant industry is all it will take; light a fire under the ass of congress and the general public, get people motivated to start taking sensible steps to move towards UBI or some sort of Coasean scheme with nationalized shares distributed to people, or whatever. Doing anything is extraordinarily more effective than doing nothing as this plays out.

    • DrammBA an hour ago

      > I view this as an unmitigated good. Open source every damn thing.

      Agree, I said this in another comment, AI-generated anything should be public domain. Public data in, public domain out.

      This train wreck in slow motion of AI slowly eroding the open web is no good, let's rip the bandaid.

    • slopinthebag 22 minutes ago

      Open source is good, washing open source licences is very bad.

      I publish under AGPL and if someone ever took my project and washed it to MIT I would probably just take all my code offline forever. Fuck that.

  • keeda 32 minutes ago

    The name was too much of a giveaway. I just hope that somebody who inevitably builds this for real is self-aware enough to name themselves so transparently.

    About the only reason nobody would actually build this is there's no money in it. Who'd pay for a CRaaS version when they're not even paying for the original open source version?

    I do think somebody will eventually vibe-code it for the lulz.

  • spudlyo 2 hours ago

    malus, mala, malum ADJ

    bad, evil, wicked; ugly; unlucky;

    It's an interesting word in Latin, because depending on the phonetic length of the vowel and gender it vary greatly in meaning. The word 'malus' (short a, masculine adjective) means wicked, the word 'mālus' (long ā, feminine noun) means apple tree, and 'mālus' (long ā, masculine noun) means the mast of a ship.

    • mikepurvis 2 hours ago

      Homonym of "malice" too. Honestly kind of a brilliant name.

  • bronlund 2 hours ago

    If this site actually connects to Stripe, it's much more than just satire. It's a honeypot :D

  • noemit 4 hours ago

    is the motto, "Don't be good?"

  • slopinthebag 20 minutes ago

    The irony of course is that this service already exists. It's called Claude Code (or Codex, etc...) and it costs $200 / month.

  • duiker101 2 hours ago

    Let's not give anyone ideas!

  • agile-gift0262 2 hours ago

    if it were true that indeed was legal to rewrite and relicense open source code, would that also be true for non-open source code? as in, could someone do a similar rewrite of their employers proprietary code and release it publicly?

  • cloverich an hour ago

    1. Best part of this (satirical) post is, the service they offer isn't really needed. LLM's can do this already for small projects, and soon likely will for large ones too. You don't need a company to do this, we all have the LLM tooling to do it. Critical we're all spending time thinking about what that means in a thoughtful way.

    2. For the sake of argument assume 1 is completely true and feasible now and / or in the near term. If LLM generated code is also non copyrightable... but even if it is... if you can just make a copyleft version via the same manner... what will the licenses even mean any longer?

  • CodeCompost 37 minutes ago

    I know this is satire but we're in the process of rewriting the .NET Mediatr library because ... it's nothing but a simple design pattern packaged as a paid nuget package. We don't even need LLMs to reprogram it.

    So the need is real, at least for enshittified libraries.

  • yomismoaqui 2 hours ago

    I bet someone has already made this service for real.

    • OJFord 40 minutes ago

      A lot of people, including perhaps the creator of this, feel that LLMs themselves are this service.

    • slopinthebag 21 minutes ago

      It exists! It's called Claude Code.

  • scblock 3 hours ago

    Presumably this is a joke, based on the "Success Reports" and the footer, among other things.

    "This service is provided "as is" without warranty. MalusCorp is not responsible for any legal consequences, moral implications, or late-night guilt spirals resulting from use of our services."

  • n0r0n1n 31 minutes ago

    Can we stop with the AI slop here? Last chance then I have to look elsewhere for real content.

  • Goofy_Coyote 2 hours ago

    It took me too long to understand it’s satire. BP went through stratosphere before I noticed.

    Let’s hope one of these fake AI grifters doesn’t take this as a serious idea, raised a couple hundred million, and do real damage.

    (I’m not against AI, I just don’t like nonsense either in tech, or people)

  • sourcegrift an hour ago

    Amazon getting all excited hoping it's real.

  • moralestapia 2 hours ago

    Oof, this is unironically amazing!

  • ramon156 an hour ago

    blegh, i like the motivation but why again and again do you need to write the content of the page with Slop-LLM-GPT? Your motive and points are valid, why waste it on a word filter that cannot capture it?

  • dakolli 2 hours ago

    I love these satirical sites that take a jab at how LLMs are (genuinely) ruining software.

    See: https://deploycel.org/

  • ge96 2 hours ago

    turd.png classy

  • petterroea an hour ago

    Now this is a conversation piece

  • hirako2000 3 hours ago

    In this climate, it almost feels like it's not satire.

  • bensyverson 3 hours ago

    Oh no… VCs will see this and take it seriously

    • akovaski 2 hours ago

      I think we've already seen this with "AI writes a web-browser" type PR. I guess we can still look forward to when they make license evasion an explicit part of their marketing. Then I can wryly laugh when somebody robo-whitewashes leaked commercial software, knowing that they'll get sued anyways.

  • ceayo 2 hours ago

    yay capitalism. thank god it is a joke!

    > Those maintainers worked for free—why should they get credit?

    ROFL