Please help get the word out about what has happened with Copperhead. They're tricking people into buying an insecure product misrepresented as hardened. It isn't even updated to Android 9 and lacks full security updates. Pixels don't receive full security updates via Android 8.
Conversation
It's also completely disgusting that they've stolen tens of thousands of dollars worth of donations sent to support open source development work. Some individuals contributed thousands of dollars, and James Donaldson won't even fulfill their requests to return the stolen money.
1
3
4
The company is misrepresenting itself as being the developer of the previous hardening work. It wasn't written for the company or by the company. They don't even have a commercial license. It's an attempt to hijack the past reputation of the real projects to line their pockets.
1
2
4
They've gone out of their way to silence me by taking advantage of bias towards corporations on platforms like Reddit and Twitter. They're even spiteful enough to upload empty repositories to break redirects to the real ones at github.com/AndroidHardeni and github.com/AndroidHardeni.
1
2
7
There are many people still following unaware that the account has been hijacked and is no longer tied to the real developers and open source projects which are still ongoing. Despite what happened, there has been lots of progress since the company became hostile.
1
2
5
For example, github.com/AndroidHardeni is far superior to the previous implementation and is MIT licensed. github.com/AndroidHardeni and github.com/AndroidHardeni have made substantial progress and will become MIT licensed in the near future once there's non-profit funding in place.
1
2
7
There's going to be an overhauled release of the PDF Viewer app soon and progress towards reviving the rest of the OS hardening work beyond the new next generation hardened allocator. It's extremely difficult with the scarce resources being wasted defending against Copperhead.
1
1
6
Individuals and companies supporting Copperhead are enabling them to cause immense harm to the actual privacy and security hardening work. If you give them money, you're funding their unethical actions and their product isn't even legitimate or legal. They don't own the code.
1
2
7
They're attempting to bully me into giving them a 10 year exclusive commercial license for my code: twitter.com/DanielMicay/st. At the moment, their usage is not legal. Companies buying licenses from them DO NOT HAVE A COMMERCIAL LICENSE as Copperhead cannot provide one to them.
Quote Tweet
You can see @_copperj continuing his pathological lying about what happened on his feed. He's lying about how I was compensated and the extent of that compensation along with what he claims to have offered to me. He's hardly saying anything that's true. Since he made it public:
Show this thread
