441

Ventoy source code contains some unknown BLOBs, still no word on the issue from the dev after months (github.com)

submitted 2 months ago by SatyrSack@lemmy.one to c/opensource@lemmy.ml

121 comments fedilink hide all child comments

I had no idea this issue had been identified. While I find this tool very useful, the project is seeming rather questionable to me now.

you are viewing a single comment's thread
view the rest of the comments

[-] Feathercrown@lemmy.world 53 points 2 months ago

God I hate people who use github comments for their own benefit. "Just fork it bro" is never helpful.

[-] sem@lemmy.ml 27 points 2 months ago

For me the problem is more in GPL violation: they distribute blobs under GPL3, user made a request of the source code by creating an issue, but they ignored that request. It is not only about "you have to fix it" versus "just fork it" imo.

[-] Neon@lemmy.world 8 points 2 months ago

Licence doesn't apply to the creator.

He already owns the copyright, he doesn't need a licence, he doesn't need to adhere to the gpl

[-] drspod@lemmy.ml 31 points 2 months ago

The binaries in question are various GNU and FOSS tools from elsewhere, not part of the Ventoy project itself. So no, the Ventoy author does not own the copyright of the tools in question.

[-] Neon@lemmy.world 2 points 1 month ago* (last edited 1 month ago)

Even then, he's still allowed to provide binary blobs. He doesn't have to provide it as source code. If that was the case, we'd all have to build from source and package managers like apt, dnf and flatpak wouldn't exist.

All he has to do is make the source code available, i.e. just link back to the original Github Repo.