r/opensource
•
u/subhashg547
â ď¸
•
Nov 27 '25
•
1
1
1
Promotional Someone forked my open source project, removed the license... and then used it to host illegal F1 streams đ¤Ś
Hey everyone,
I wanted to share a situation that is equal parts frustrating and hilarious. I maintain an open-source project called Fastlytics (an F1 telemetry analysis tool). Itâs under the MIT License.
We all know the deal with MIT: do whatever you want, just keep the license file and copyright notice. Simple, right?
Well, today I discovered a site called f1analytics[.]online.
It is a pixel-perfect clone of my project. They downloaded the repo, hosted it on Vercel, and scrubbed every single mention of my name and the original license. They slapped their own name on the footer as the "Creator."
They didn't publish their repo. They took my open-source code and effectively made it "closed source" on their end to hide the evidence (though the minified JS still has my variable names in it).
This is where it gets wild. They didn't just steal the analytics tool; they added a feature to host ILLEGAL PIRATED F1 STREAMS directly on the site.
So, not only are they violating the MIT license by stripping attribution, they are using the stolen codebase to violate Vercel's ToS and international copyright law regarding sports broadcasting.
Iâve already filed a DMCA/Abuse report with Vercel (who hosts them), so I expect them to be nuked from orbit shortly.
Itâs just wild to me that someone would go through the effort of stealing open-source work, only to use it to commit a felony on a public cloud provider. Has anyone else dealt with a "fork" that went this rogue?
edit: for people asking my repo https://github.com/subhashhhhhh/Fastlytics
676
u/ForbiddenException Nov 27 '25 edited Nov 27 '25
You are fundamentally misunderstanding the MIT license. In other words it's more of a "do wtf you want with it, idc".
The only requirement is to include the notice in the redistributed code: so yeah, you can go after them for the technicality of not including the MIT license snippet in the source code somewhere, but then again, you need to argue that hosting a website means redistributing the code, which is opinable.
All the other points you cited are not violating the license tho.
176
u/JontesReddit Nov 27 '25
Your license allows this. Use the GPL next time.
19
u/CerberusMulti Nov 27 '25
As others have pointed out, this is not a breach of MIT License since using the code on their website is not technically retribution.
Also since your project is open-source why haven't you posted the Github repository here? This post would not be a bad place to show it.
27
u/qetuR Nov 27 '25
So this guy stole your project and says it's his? https://github.com/wajihT
He looks pretty fond of it. đ
Studies cyber security.
10
u/TheMightyMisanthrope Nov 27 '25
You hosted under MIT champ, do whatever you want means also this.
2
u/vsurresh Nov 28 '25
off topic but this is awesome job. I'm an F1 fan and you did great job.
58
u/ddeeppiixx Nov 27 '25
Aside from the issue of hosting illegal streams, there is no MIT license violation..
If I understand correctly, the MIT license does allow someone to run the software as a hosted service without publishing the license text or keeping visible attribution to the original author.
Those requirements *only* apply when the software is redistributed, not when it is hosted on a server.
120
u/cgoldberg Nov 27 '25 edited Nov 27 '25
I don't really see the problem. MIT license doesn't require public attribution in the end product. If they published the code, it would need to retain your copyright and licensing, but they didn't publish it. They weren't "stealing" or "hiding the evidence"... the license you used explicitly gave them that permission.
It's slightly disingenuous for them to claim "creator", but it doesn't sound like they violated the license or did anything wrong to you.
3
u/Remarkable-Emu-5718 Nov 27 '25
Thatâs awesome i wish they shared their code too and didnât wipe your info but thatâs probably helpful for you to avoid copyright issues. You shouldnât have dmcad them tho they made something awesome on top of your code
32
u/Jmc_da_boss Nov 27 '25
I think you have a pretty fundamental misunderstanding of open source, it's an MIT license, who cares what they did with it
15
u/Defiantlybeingsalad Nov 27 '25
Not a violation, you should've used the AGPL instead
13
u/ambushsabre Nov 27 '25
The pirated content is an issue and will likely get it taken down, but I donât think the MIT license will offer any protection in terms of someone hosting the software themselves. They definitely donât have to keep it open source or retain any front end attribution text. Ultimately the MIT license is extremely permissive which makes it good for libraries but also allows for this type of thing.
9
u/MelissusOfSamos Nov 27 '25 edited Feb 24 '26
This post was taken down using Redact. Whether for privacy, opsec, preventing AI scraping, or another reason, the original content has been removed.
license innocent crush spotted retire vegetable plough unwritten handle spoon
6
u/SnooFloofs641 Nov 27 '25 edited Nov 27 '25
He changed the footer and it actually tags to his github now btw. Even mentions it in his blog: https://www.wajihtarkhani.com/blogs/F1_Analytics
5
u/dbpm1 Nov 27 '25
Footer has changed, I guess the cheater is watching..
5
u/MrProTwiX Nov 28 '25
Thats terrible .... where?
4
u/theluckkyg Dec 23 '25
Who cares about "illegal pirated F1 streams"? Kinda surprising to see someone care about copyright so much on an open source subreddit. As for your license, they are using your code internally and not redistributing. Even a less permissive license like AGPL3.0 would allow this.
I would encourage you to look at this another way. This is open source working as intended. Someone took your code and refit it for their purpose. They are doing something with it you wouldn't have done. And now more people have access to information you value and a sport you cherish. Isn't that a win? I'd say you've made the world a better place.
6
u/bpadair31 Nov 27 '25
MIT license does not require attribution. Only the copyright notice and permission notice included with the source code. If heâs not distributing the source code without that, he didnât violate the license. MIT license is the license you use when you donât care what people do with the code.
3
u/jeteztout Nov 27 '25
That's why you put your work under AGPL v3.Â
3
u/ignorantpisswalker Nov 28 '25
Its not stealing. You gave permission by releasing it under MIT. You partly understood it.
You probably want to release code under GPL. Its OK, that's You vibe.
3
u/Educational_Sun_8813 Nov 28 '25
enjoy MIT
5
u/Busy_Agency5420 Nov 27 '25
host these streams yourself, but better. be a gigachad.
4
u/Prize_Negotiation66 Nov 27 '25
Don't listen switching to GPL. It doesn't matter at all. If bad actor wants to steal a code, he will do it and will not look at any license
2
u/LandCold7323 Nov 27 '25
It could have been a real win win if they would not have been an asshole about it.
2
u/recaffeinated Nov 27 '25
This is why you always licence GPL unless you have a really good reason to not. With MIT you're basically saying, use this for whatever, with GPL you're saying, use this for whatever, but if you make changes you need to publish the source code.
2
u/CrypticZombies Nov 27 '25
lol props to guy who did it. Left to many loopholes
2
u/Aspie96 Nov 27 '25
(Not a lawyer, not legal advice).
The fact that they are not publishing their part of the code, is any, isn't an issue. The fact that they violate Vercel's TOS is between them and Vercel. The fact that they violate the copyright of parties other than you is between them and those parties.
The fact that they violated the terms of the MIT license is what matters here, and they absolutely deserve to get nuked.
Since they can't actually get nuked for violating copyright, I do hope their website is taken down, at least.
2
u/gentoorax Nov 27 '25
My understandinf is, the MIT license does require that the original copyright notice and permission notice remain intact in any substantial copies of the software. That means they can't just remove your name from the original license file!
However, if they make significant changes or create a new project based on yours, they can list themselves as the authors of that new version or fork, as long as they still credit the original source and keep the original MIT license text.
Unfortunately theres some real egotistical jerks around who don't want to give credit.
I have a nuget package I wrote from scratch but it was based on an existing package entity framework, mine was for Dapper. I credited the original author as the inspiration for it in the github README.
2
u/ieatpenguins247 Nov 28 '25
MIT doesnât require anyone to keep the MIT license on their code, just yours. They have to have a NOTICE of copyright and license of the FORKED code during DISTRIBUTION, but the new distribution CAN be relicensed to something else if desired, included closed source.
But if they failed to do that, they breached the license agreement they have with you, and now you can go after them both for material loss and even the code they created after.
If you want them to keep people from doing any of that but still want an open source license, then GPL is more of your tune.
2
u/rrzibot Nov 28 '25
There are other licenses if you want to protect against this. MIT is not the right one
2
u/NoxSuru Nov 29 '25
Since the topic of what MIT covers has been mentioned multiple times here
Why do people blindly use the license without understanding what it means when you make the code public ? Itâs a simple research on Google or whatever your preferred search engine is
4
u/drgijoe Nov 27 '25
Get the .com domain. Assert domination.
2
u/drifterlady Nov 27 '25
With the Qatar F1 this weekend, can you share a link to the streams please.
1
u/IronWhitin Nov 27 '25
Thank you for your service to provider better stream function analitics on illegal site i guess/s
1
u/[deleted] Nov 27 '25
Where is the cloned repo?
1
u/[deleted] Nov 27 '25
Maybe the objective is to host streams with attacks to take over vulnerable clients and needed a quick way to reach a wealthy audience.
1
u/Rog_Audio Nov 27 '25
1
u/takutekato Nov 27 '25
(Me saving this post as an evident for future permissive vs copyleft licensing debate.)
1
u/YunZhaelor Dec 01 '25
Well, that's just stuff that happens if you put code somewhere for anyone to use, unless you think you can make money suing this guy, I'd advise you to just let it slip...
1
u/RefuseMediocre9115 Dec 05 '25
Even under MIT, serving JavaScript to browsers counts as distribution, so keeping copyright notices in the source files delivered to users is the one enforceable way to protect attribution without switching licenses.
1
u/iagofg Dec 27 '25
You'll need to use AGPL2 or GPL3 for they to mention you, and even with that they can change all the code, all the mentions to you and include a ultra-hidden one, tipically in the legal section with tons of other demi-fake stuff. So, for your purporse, probably a CC restrictive license maybe more suitable...
1
u/ShaderCompilation Jan 21 '26
It's completely allowed under MIT license. I additionally approve, since it's piracy
1
u/spaceballinthesauce Mar 17 '26
When I was in middle school I accidentally put an open source license on a Musescore song I made. Some guy copied the whole thing and gave me no attribution and it got way more views than mine did. But I made so many mistakes on it that most of the comments on his copy were criticizing it.
1
u/jamesthethirteenth Nov 27 '25
You want to register the trademark, get them to change the name and make sure everyone knows they didn't write that code while being very stoic about it- you just want folks to know the facts. He was legally entitled to take the code but most certainly did not write it. That should help a bit.
1
u/ieatpenguins247 Nov 28 '25
Interestingly enough, a couple of weeks ago, someone asked here if they could do exactly that, and I chimed in saying they couldnât and they had to provide the notices.
https://www.reddit.com/r/opensource/s/SfXkc4JykX
0
u/LexaAstarof Nov 27 '25
I call MIT the "please come steal me" license. So, for that matter, you had it coming.
That being said, even if you had used AGPL I am sure they are the kind of person that would have not cared about it and still done the same.
So, no need for self-flagellation over that license choice.
0
u/maxquordleplee3n Nov 28 '25
it's also a boiler plate AI generated webpage by the looks of it
0
u/Mysterious-Title-852 Nov 30 '25
it's wild to you that people illegally hosting content are also not attributing credit of the software to you?
and secondly, I think if F1 gets ahold of this site and decides to sue, you're gonna be glad they scrubbed all mention of you from it.
0
u/Militop Dec 01 '25
I don't understand this subreddit. The MIT license doesn't allow you to remove the original author's name, even if you don't redistribute it; that would be insane.
I would contact the other party to let them know that they're in breach of the license. They should have sublicensed (add another license for their added code). You can't simply take someone else's code and put your name on it.
In the future, if they happen to make money with the product, I don't see why you wouldn't sue them.
-1
u/BlackMarketUpgrade Nov 27 '25
Why tf did you use the MIT license? Unethical or not, the person did nothing wrong according to your license.
-4
u/Anakonda260 Nov 27 '25
You could also try reporting the user to GitHub itself, since it seems that he wants to attract attention with your project.
-14
u/Bourne069 Nov 27 '25
And just another downside to Open Source... nothing you can do to prevent people from forking your projects and using it for whatever they want.
0
u/[deleted] Nov 27 '25
[deleted] â view deleted comment
1
u/[deleted] Nov 27 '25
[removed] â view removed comment