unskilled5117

u/unskilled5117@feddit.org
8 posts · 110 comments

Recent posts

Recent comments

Third sentence:

Flatpak serves as the primary application distribution method for image-based operating systems including Fedora Silverblue, openSUSE Aeon, SteamOS, and GNOME OS. It is the preferred format for major ecosystems such as GNOME, KDE, and elementary.

How does Microsoft know which GDID is accessing which websites?

The document adds that Microsoft records also showed the GDID accessing “multiple sites” from servers at Tzulo, a web hosting provider, to help pull off the hack.

The GDID is one thing, but how is the connection to activities made? Is the GDID sent while making requests to a server (in this case Tzulo), which records it? But then it wouldn’t be microsoft records showing that. But if it isn‘t, how do you know which GDID visits a website? If Microsoft is collecting which website is visited on device and sending it off to their servers then the GDID is the smallest thing to worry about.

Why is there never any more detail how the GDID is then used to collect information?

The complaint says Microsoft had records showing that on May 12, 2025, at 19:21 UTC, the GDID associated with Stokes’ computer “accessed, among other ngrok pages, 'https://dashboard[.]ngrok.com/signup,' the ngrok page to set up an ngrok account.”

How do the records show a GDID in connection to the website?

Regarding OnlyOffice‘s legal claims, this is the response by the FSF, which is the copyright holder to the GPL licenses . It is their opinion, that these specific license additions by OnlyOffice are not legal.

[…] In the main repository of the OnlyOffice DocumentServer, we have found that the README file (and similar README files located in other OnlyOffice repositories) clearly state that the software is made available under the AGPLv3 in the "License" section. However, OnlyOffice then includes additional terms in the LICENSE file (and in some other LICENSE files in other repositories), as well as in license notices of individual source files. In utils.js, for example, it states: "Pursuant to Section 7(b) of the License you must retain the original Product logo when distributing the program." This obligation to "retain the original Product logo" is not included in Sec. 7(b) of the (A)GPLv3, nor in any other parts, as an (A)GPL-compliant additional term, and is therefore considered a further restriction of the (A)GPLv3. 

The (A)GPLv3 makes it clear that it permits all licensees to remove any additional terms that are "further restrictions" under the (A)GPLv3. It states, "[i]f the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term." […]