Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fido Ported to Unix #73

Open
ElliotKillick opened this issue Jun 17, 2023 · 4 comments
Open

Fido Ported to Unix #73

ElliotKillick opened this issue Jun 17, 2023 · 4 comments

Comments

@ElliotKillick
Copy link

Hi Pete,

Great job reverse engineering Microsoft's API! I was looking to do the same thing some time ago but didn't attempt due to assuming that it would require Selenium (with JS execution) or something along those lines.

Fido has recently been ported over to Unix using just POSIX sh, coreutils, and curl for the purpose of my open source Qubes OS project:
https://github.com/ElliotKillick/qvm-create-windows-qube/blob/master/windows/isos/mido.sh

I saw you recently dropped PowerShell Core support meaning Fido can no longer be run on Linux, macOS, or any system but Windows now. To get the non-Windows users out of your hair for good, it could be a good idea to add a link to Mido in your README? It's up to you but I would greatly appreciate it as well.

Thank you!

@alexsch01
Copy link

To be fair, I believe Fido still supports PowerShell Core running on Windows

@pbatard
Copy link
Owner

pbatard commented Jun 23, 2023

Yes, but OP is right that any platform other than Windows will produce an error, by design.

I do like what the mido script does, and I don't exactly mind advertising for it, but I see that it uses archive.org to link to Windows 7 ISOs, and I'm not too sure where that falls in terms of copyright, because one could argue that, if someone uploads content that is infringing copyright, which archive.org then mirrors, and the original is taken down, you may end up with archive.org still serving the infringing content, so having something hosted on archive.org still does not mean it is okay to serve it, which is why I make sure to only serve content that is actively provided by Microsoft, and Microsoft only, in Fido...

@ElliotKillick
Copy link
Author

Haven't really considered the legal aspect of archive.org redistributing software but I guess it could be legally troublesome. Recently, they lost a court case against book publishers due to a service they provided where people could scan copyrighted books and upload them for anyone to read (archive.org says they're appealing the decision). However, (and I'm by no means a lawyer) I think the argument is very different with software because a vendor could suddenly stop providing some code that you need to operate (even while Windows 7 was in support, I saw this happen with some critical MSUs that MS stopped providing but could still be found on archive.org). Also, I believe it's different because this download has always been publicly available for indexing by bots until MS pulled it (unlike books where someone would have had to buy and scan it first). We will probably see a case like this get tried in the legal system at one point (and I hope archive.org wins) but until a verdict is reached I think it's fine to keep the Windows 7 ISO download link. Thoughts?

@ElliotKillick
Copy link
Author

To be clear: I agree with the publishers in the above case, what archive.org did was a blatant copyright violation and I'm surprised they thought they could get away with that.

if someone uploads content that is infringing copyright

Right. And by extension, I would also agree that archive.org pages like these:
https://archive.org/download/digital_river
https://archive.org/details/windows-10-20-h-2_202203

are almost certainly in strict violation of copyright because someone did have to upload them to be hosted on archive.org (again, I'm not a lawyer).

However, the Windows 7 link in Mido is from web.archive.org and looks like this:
https://web.archive.org/web/20221228154140/https://download.microsoft.com/download/5/1/9/5195A765-3A41-4A72-87D8-200D897CBE21/7601.24214.180801-1700.win7sp1_ldr_escrow_CLIENT_ULTIMATE_x64FRE_en-us.iso

It was directly scraped from the existing Microsoft link by a bot (no human upload) just as any other data would be. Mass data scraping of all kinds by bots is a very common practice these days especially for big tech companies like Google (they scape and then redistribute copyrighted content through Google Web Cache) and Microsoft too (recently as training data for their public Bing/GitHub Copilot AIs). It's also worth noting that web.archive.org sources a lot of its crawl data containing copyrighted content from Amazon Alexa redistributing it to them ever since 1996. So, it does indeed appear that this latter form is a lot more legally permissible and huges companies have been benefiting immensely by doing it for a long time...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants