Redistribution permissions and copyright infringements

[fabiscafe]

🐛 For reporting bugs

chaotic aur distributes google-chrome microsoft-edge-{beta,dev} and spotify who are prohibited to redistribute by 3rd party without granted rights to do so. I couldnt find any text for permission

The terms are here:

• microsoft-edge: https://docs.microsoft.com/en-us/legal/microsoft-edge/microsoft-edge-devtools-license-terms; inside Edge edge://terms, right before the download at https://www.microsoftedgeinsider.com/en-us/download/?platform=linux-deb
• Spotify: https://www.spotify.com/us/legal/end-user-agreement/
• Google Chrome: https://policies.google.com/terms#toc-software, Inside Chrome about Google Chrome:

Google Chrome and Chrome OS Additional Terms of Service
Last modified: 01 January, 2021

By using Chrome or Chrome OS, you agree to the Google Terms of Service located at https://policies.google.com/terms and these Google Chrome and Chrome OS Additional Terms of Service.
...

What is expected to happen?

A permission-to-redistribute-text should be visible somewhere, if not available those packages should be dropped.

[juxuanu]

About Spotify:
Flathub redistributes the snap of Spotify: https://github.com/flathub/com.spotify.Client/blob/8b1304407df83ed959131956903541974504fe60/com.spotify.Client.json#L258
If they do, why wouldn't they in Chaotic?

[BrainwreckedTech]

May want to point out the individual clauses that you believe are being violated, so the devs don't have to wade through oceans of text.

Microsoft Edge:

3. SCOPE OF LICENSE. The software is licensed, not sold. Microsoft reserves all other rights. Unless applicable law gives you more rights despite this limitation, you will not (and have no right to):
   ...
   e. share, publish, distribute, or lend the software, provide the software as a stand-alone hosted solution for others to use, or transfer the software or this agreement to any third-party.

[BrainwreckedTech]

Google:

You may not copy, modify, distribute, sell, or lease any part of our services or software. Also, you may not reverse engineer or attempt to extract any of our source code unless you have our written permission or applicable law lets you do so.

[BrainwreckedTech]

I can't find anything in the Spotify link concerning software distribution. The distribution covered in the ToS concerns IP rights of the conent distributed by Spotify, not the software itself.

[PedroHLC]

Well, I've been thinking about this, and my final decision is:

• I'll forward any infringement pointed here to the mirrors that got a third-party group involved (Garuda, FossHost, ...), I hope they'll blacklist these packages as well as any future one;
• I don't control the mirrors that are provided by natural persons, but I'll gently ask them to respect any cease and desist letter and DMCA notes coming from the original content owner;
• Cease and desist letters / DMCA can be sent to: dmca@chaotic.cx and root@pedrohlc.com. And/or posted in this discussion. We're hoping to see emails from company domains, public proofed identities (GPG or public known emails), or publicly available documents;
• My routers (*-mirror.chaotic.cx) have no knowledge of what content mirrors have, it just redirects everything that begins with /chaotic-aur/, indifferent of a 404 waiting for you or not, and will keep doing so;
• Ours database will keep these packages registered even if none of our mirrors hosts them anymore, as long as the package name does not infringe IP rights;
• I hope to receive help from our users and other community members pointing us out what projects have copyright infringements;
• We're interested in adding members to the staff, that are available to request packages permissions, so they can speak for us while doing so.
• With this, I'm also now allowing mirrors to blacklist packages that infringe their local laws.

I don't know when I'll have time to flexibilize the blacklist feature, hopefully, this week, but you can keep suggesting more packages to the list.