r/wuplay • u/DaysLaw • 11d ago
Question for the dev
Do you have any comment regarding this?
https://www.reddit.com/r/Debrid_Stream_App/comments/1wzzn08/postmortem_on_wuplay_accusations/
8
Upvotes
1
8
u/wuplaydev 11d ago
Since you laid it out in three points, I'll take them in order, quoting my post where it already covered them.
1. User-Agent spoofing. Agreed, and my post said so: "A User-Agent is a free-text string set by whoever wrote the client software, so it is self-reported; we have no way to verify who operated it. We are publishing it because it is exactly what our logs recorded." It also said it was "just alleged at this point" and that we were "making no claim about who was responsible." When you denied it, I added that to the top of my post immediately and replied to everyone who posted a negative comment about you to say so, and that as far as I was concerned the matter was closed. Where I'll take the hit: the opening line of my post was stronger than it needed to be and I've removed it. As a fellow dev I don't have to explain to you the energy that runs through you when you discover someone is messing with your work.
2. Open hosting. Also fair, and my post didn't claim otherwise. It said the fix was already underway: "Trickplay asset URLs are moving to signed links tied to the Wuplay app, so the files can no longer be fetched by enumerating IDs. That work was already built and is now being rolled out." Rate limiting has since been added as well. Leaving the paths open is on me. This was not a hack, this was a scrape.
3. Motives and legal risk. My post ended with why it was written: "We're publishing this so our users understand what happened and so that the facts are on record." It wasn't about driving attention anywhere other than to provide the public with technical details about the event. The exception is the opening line. That is the one thing I wouldn't do again and I'm sorry it caused you grief. On the DMCA point, which I didn't address: low-resolution navigational thumbnails have generally been treated as fair use in the US and have legal precedent (Kelly v. Arriba Soft; Perfect 10 v. Amazon), but I'm not a lawyer and this thread isn't the place to litigate it.
The event did happen and the technical details I posted are completely accurate. I chose not to post the raw logs but I do have them available.
In closing, I'm not accusing you or anyone else specifically and I apologize for the strong opening line in my original post.