Newpipe: Handle Copycats (License fraud)

[theScrabi]

Hey guys, I happen to notice some new copycats which seemingly violate our License.

Once again, I'ts ok to copy NewPipe as long as you do not violate our GPL3 License. Please inform your self about GPL3 before forking!!!

I already mailed some of the copy kiddies, but they seem to not react on it (like always), so my question is how should we handle these copycats in the future?

List of copies/froks

Froks in Playstore

• Audio Rocket
• AT NewPipe

Other froks

• MyDownloader
• com.mp3music.newlife
• Play Video YT with Screen Off
• BigoTube

[ksyko]

Thats embarasing. How come they even stay on playstore.

https://support.google.com/googleplay/android-developer/contact/takedown

[theScrabi]

I've tried that, but google does not seem to respond? Maybe I'm doing something wrong here. Howerver, I know that it works sice there was already a fork that got kicket out.

[yasinalm]

don't worry, you don't need to to do anything. it is impossible(99.99%) a single app stays alive until 500 downloads. Play store takes care of it extremely very well as YT is his own too. they can earn 1-2$ but loose 25$ (account registration fee). So, it is not worth that much effort to do something. they punish themselves.

A few examples can be found but they won't live longer and the ads will be eventually ceased.

[theScrabi]

Sure? audiorocket sem tho have more than 400k downloads.

[ericswpark]

Unfortunately while copycats will always be there (I have some on my hands too) it's just easier for you to send a take-down notice to Google and let them deal with it.

That being said, Google hates your app so they might just not be taking it down in spite. Who cares, the average 99% of people in the world likes it anyway ;)

[TheAssassin]

This list has been mined out of 600 MiB of parsed email data. If you can spot some of them, please get in touch with us.

Edit: These are package names I parsed from the ones in the field that was added a few weeks after the introduction of the bug reporting. For this and other reasons, this list is not complete, there might be more.

co.at.newpipe
com
com.akkayaxm.mscPlayer
com.cubic3.MyDownloader
com.dl.video
com.facecampt.free.music.player
com.FloTemp
com.gawo.rohgf
com.green.music
com.halara.trap
com.hvlapps.freemusicplayer
com.mp3musicdownloader.mp3.music.downloader
com.mp3musicdownload.music
com.mp3musicdownload.musicmp3
com.mp3music.newlife
com.mpool.mytube
com.musicmp3downloader.ilovemp3
com.musicmp3.newmusic
com.musicmp3.new\nmusic
com.music.paradise
com.mwiz.pingmusic
com.tenlishir
com.youtube.audiorocket
com.youtubed.ydownloader
com.youtubelistening.youtubebackground
com.youtubelite.floattube
com.zbm.probasse
idev4mobile.karaoke
idev4mobile.videotube
inc.players.youlayer
musicstream.videostream.newpipe
org.bardo.newpipe
org.le.keep_video
org.schabi.newpipe
org.schabi.vbl2013
org.schabi.videodownloader
org.schabi.youdownload
org.schabi.youdownloader
org.testng01.tubeb44

[coffeemakr]

I've created a small script to check if they are on google play: https://gist.github.com/coffeemakr/8862e7903c4bea21b99c6a457268af71

The following packages are on google play:

• co.at.newpipe
• com.gawo.rohgf
• com.mpool.mytube
• com.mwiz.pingmusic
• com.tenlishir
• com.zbm.probasse
• idev4mobile.karaoke
• com.video.tubeplayerorg (not on the list)
• idev4mobile.videotube (mentioned by @Poussinou)

A copyright violation can be submitted with this form:
https://support.google.com/legal/contact/lr_dmca?&product=googleplay
The description on how to fill out the form can be found here: https://support.google.com/legal/troubleshooter/1114905#ts=1115643%2C1115789%2C1117010%2C1697925

[theScrabi]

I didn't expect it to be so much xD

[TheAssassin]

Beware that this is not even the whole list, only the ones we captured on a side-channel. But yes, it's quite an amount. Time to take half a day and send some DMCA takedown notices, @theScrabi.

[Zero3K]

How about adding some code that checks the display/package name of NewPipe and if it has been changed, let the user know (and possibly refuse to work)?

[TheAssassin]

Then you'd also notify the copycat and tell them "oh, I need to remove that piece of code". They're not that stupid, because they must obviously know how how to develop for Android to create realistic apps. This measure is rather pointless IMO.

[theScrabi]

The only thing we could do is making it harder for copycats to change the email address where the but reports are send to.

[Poussinou]

@theScrabi Did you feel the DCMA takedown notice, out of curiosity? It only takes a few minuts and Google reacts in a few days (I already tried with an other app) I can see that the apps haven't all been taken down.

I would like to add this one to the list made by coffemakr !

[TobiGr]

Just found this app on Google Play: com.newpipestudio.newpipe They even use our screenshots.

[Poussinou]

There are also this other one:
https://play.google.com/store/apps/details?id=com.newpipestudio.fildotube
https://play.google.com/store/apps/details?id=com.newpipestudio.pelismagnet
made by the same "developer"...

[theScrabi]

I found them to. hilarious xD.
Sometimes it's funny what kind of B* S* they are creating :P

[comradekingu]

Better icon tho, ayyyyy :)
Edit: Should we report all of them in a conduced effort? Seems my one complaint went on deaf ears.

[theScrabi]

I know that problem. Tho we should try to continue with reporting, because without punishment they might think it's ok what they do.

[Poussinou]

@TeamNewPipe @theScrabi

It looks like there is another one here ! Do not forget to report :)

[theScrabi]

Oe come on. Tho the icon looks nice. Can't we just steel that bock from him?

[Ostefanini]

Does play store will really help you in this war?
Play yt in background is something quite illegal for them...

[theScrabi]

Well I wouldn't raise, there attention to much.

[ghost]

I found the following ones in the Play Store atm. Is there nothing we can do about them?

• https://play.google.com/store/apps/details?id=co.at.newpipe
• https://play.google.com/store/apps/details?id=com.floattube.liteyoutube
• https://play.google.com/store/apps/details?id=com.youtubelite.audiorocket
• https://play.google.com/store/apps/details?id=com.newpipestudio.newpipe
• https://play.google.com/store/apps/details?id=com.youtubelite.videorocket
• https://play.google.com/store/apps/details?id=co.RosyBrown.newpipe
• https://play.google.com/store/apps/details?id=youtubedownloader.downloader.newtube
• https://play.google.com/store/apps/details?id=com.rain.audio.rocket
• https://play.google.com/store/apps/details?id=com.newpipestudio.fildotube
• https://play.google.com/store/apps/details?id=idev4mobile.karaoke
• https://play.google.com/store/apps/details?id=idev4mobile.videotube

[theScrabi]

Report them. Thats the most we can do.

[theScrabi]

That guy releasing Fildo even calls himself. "New Pipeplayer" and rebranded NewPipe 3 times. ... Funny.

[anantoghosh]

@theScrabi Tweeting to https://twitter.com/GooglePlay may help. Those guys are pretty responsive.

[comradekingu]

Just contact a news outlet about the nature of what is actually _on_ the Play store.
It writes itself.

[theScrabi]

Someone put this on reddit. Thaks :)

[Zykino]

Just as a side note : you may add the license to the github repository so everyone see it at the "usual place" and there is no "I don't know what I can do with GPL but it's open source".
Github have a nice presentation of the current license of a repository, It won't hurt to use :)

[theScrabi]

Well we have a license, I don't know why it's not recognized by github.

[Zykino]

Official doc: https://help.github.com/articles/licensing-a-repository/

[TheAssassin]

Tried to rename it, didn't work: https://github.com/TeamNewPipe/NewPipe/commit/eee3ccafc33981daa276cf88644b2edaeff68c69

@Zykino any ideas?

[TobiGr]

Did you already try to delete the existing license and then adding it as described here?

[TheAssassin]

I'll try so next.

[TheAssassin]

@TobiGr tried to, didn't work.

@theScrabi maybe you want to give it a try?

[Zykino]

@TheAssassin I'm owner only for old school project so didn't tested it.

[ghost]

@TheAssassin: When I create a new repo at GitHub with GPLv3.0, clone it, diff LICENSE from that new repo (which shows that fancy GitHub license thingy) with LICENSE from NewPipe, I get exactly 0 differences, so it's really weird…

[TobiGr]

Hm. Maybe we can ask the GitHub support team. They answer quite quickly and we don't waste time.

[ghost]

I've asked them and they said it's because there are multiple files
starting with the word license (including some Java files).

[TheAssassin]

Reverted the malicious commits.

@wb9688 they are technically right, there's these files:

NewPipe (dev)> find | ag license | 
./app/src/main/java/org/schabi/newpipe/about/License.java
./app/src/main/java/org/schabi/newpipe/about/LicenseFragment.java
./app/src/main/java/org/schabi/newpipe/about/LicenseFragmentHelper.java
./app/src/main/java/org/schabi/newpipe/about/StandardLicenses.java
./app/src/main/res/layout/fragment_licenses.xml
./LICENSE

However I don't understand why their detection logic even considers files called anything other than LICENSE{.md,.txt}. Their documentation implies those are the only permitted files. Also, it should be possible for them to detect it even if there's other files with similar names. They could even show a warning if there were multiple licenses and they wouldn't know which one's the right one, or show a list. This is really an issue with GitHub rather than our repository.

[ghost]

@TheAssassin: Yeah, I agree with you. Btw those last two don't start with
License (but contain it), so they didn't count. And what's ag?

[ghost]

@TheAssassin: Hmm… now GitHub support says it's because of the copyright file.

[comradekingu]

@wb9688 Usually the license is to be found in a file called COPYING

[TheAssassin]

@wb9688 the GitHub support replies sound like excuses, to be honest.

I suggest to publish the whole topic here: https://github.com/isaacs/github (or even https://github.com/isaacs/github/issues/887). This might help others to sort out similar problems. My suggestion would be to just show what's wrong when there's problems detecting the license. I'd like to see GitHub implement something like that.

[racuna]

Found this on Google Play "recommended for you":
https://play.google.com/store/apps/details?id=com.isong.up

[TheAssassin]

Thanks. We'll add it to the TODO list.

[theScrabi]

Lol what is this guy iSong up to: http://www.appisong.xyz/happy-new-year-contest.html

They even embedded push notification into the app, for what ever reason :/

[yeahtheboys]

Someone selling sourcecode. Is this allowed? :/

https://www.chupamobile.com/android-video/candytube-video-s-downloader-16258

[nico202]

@yeahtheboys If I understand the GPL correctly, yes. BUT they have to give credit AND if anybody buys/gets the binary from them, they HAVE TO give the source for free, too. And everybody buying it is free to give it away for free

edit: I'm wrong here, please see the following post from TheAssassin

[TheAssassin]

@nico202 let me correct a few bits:

If I understand the GPL correctly, yes. BUT they have to give credit

So far, so correct. But they don't just have to give credit, they need to release it under the same license as before. This is called copyleft principle, and that makes the GPL a copyleft license.

AND if anybody buys/gets the binary from them, they HAVE TO give the source for free, too.

Nope. If they sell the binary release, they must hand out the source code to people who request it, too, but they may demand a fee that must not be higher than the price for the binary release. The GPL FAQ have this topic covered, see https://www.gnu.org/licenses/gpl-faq.html.

And everybody buying it is free to give it away for free

That makes it free software, yes, rather than gratis.

[nico202]

@TheAssassin thanks for the clarification. The anchor on the faq link is #DoesTheGPLAllowDownloadFee.

The link @yeahtheboys is linking should then just say that the program is under GPLv3 and that it is based/is NewPipe, right?

[TheAssassin]

• com.roadstergmbh.roadster
• com.anklecheese.musice
• com.paginationincorporated.version
• info.statusinc.pleasereview
• idev4world.musicvideo
• com.glaveapps.freeapp
• young.valencia.martial
• vidprotech.vidprotechvideodownloader
• com.misplacedgmbh.astrodomus
• idev4world.musicvideo
• videoparadigmstudio.vidbestvideodownloaderandplayer
• com.anklecheese.musice
• com.misplacedgmbh.astrodomus
• com.paginationincorporated.version
• com.verox.vidbest
• com.glaveapps.freeapp
• info.statusinc.pleasereview
• com.anklecheese.musice

Those are really just the ones I picked by hand from a single run after some hours of downtime of the script (maybe 500 mails). It is really frightening to see this amount of license violations.

Especially the first one is annoying because they're spamming the mail account with a lot of mails. Maybe some community member wants to report them...? There's hundreds of mails every single day...

com.misplacedgmbh.astrodomus is interesting, too, looks like a Facebook video thingy. But the most ridiculous aspect is, they're warning(!) their customers from violating copyright laws by downloading videos of people to their devices...

[karyogamy]

@TheAssassin Are those spam coming from real users? If so, why don't we hand pick a blacklist of package names? We can then send auto-replies to those emails outlining that the app being reported is using stolen code and the report will largely be ignored since the their devs are too lazy to not even change the error email address, and they should inform the devs of those apps and/or use NewPipe instead.

[BrianBtheITguy]

This app claims to be approved by the NewPipe team for the fork, but is not listed at the top of this issue under "Froks (sic) in PlayStore"

Also there's this one...is MusiFloat something you've allowed?

[TheAssassin]

@BrianBtheITguy you got that wrong. This is a legal fork of the NewPipe source code, following the GPLv3 license. What he means is he's grateful NewPipe has been released as free software, so he could fork and modify it. But thanks for letting us know anyway. Let me analyze and summarize the situation.

As the reviews in the Play store confirm, this is just another cheap attempt to earn some money the easy way by putting ads into the app. A couple of users even claim those ad links would contain malware. Just another drop in the ocean...
Looks like someone even bought positive reviews to make it look legit...

The funniest aspect is probably, some German "computer magazine" (tbh, I don't regard them as very serious) posted that app as a "cool YouTube player" and highlighted the pop-up player: https://www.pcwelt.de/a/so-nutzen-sie-youtube-in-dauerschleife,3449646
I doubt they even read the README, and found out who's developing the actual app (considering that app author even posted a link to NewPipe...). But yeah, that'd require some serious journalistic work.

There's some contact information on the page. The dev is from Palo Alto, CA. The address points to a UPS office, according to OSM. Probably some student who's too lazy to develop something himself. I'd be interested in an analysis how much the source code was modified.

Entwickler
E-Mail an [email protected] senden
555 Bryant St, Palo Alto, CA 94301

I'd say, send them feedback this way. I wouldn't be surprised if that address wouldn't be read by the authors...

So far I don't see any violation in the license. This guy didn't even really understand how the GPL works, but that's another story. The repo contains exactly one commit, although the app is listed as "last updated Jan 1 2018". I don't see any advertisement implementation, but I didn't really look into the code.

If the code base should lack the advertisement, he's violating the GPL by not releasing the full source code.

Just to make this clear once again: The app has not been approved by anyone. It wouldn't need any approval. As the first post tells you, as long as you follow the terms of the GPLv3.

[theScrabi]

Technically it is ok what @hungtm288 does. However we didn't approve this, and I found it a little sad that people start forking, and use our work for their benefit. @hungtm288 could have talked to us about this, however he didn't.

[ghost]

@TheAssassin: And the license of the ad lib is probably not compatible with GPLv3 either.

[theScrabi]

We should really consider to release a lite (google complient) version on the PlayStore.

[theScrabi]

I wrote PC Welt with a little hint to our press kit ;D

[TheAssassin]

Technically it is ok what @hungtm288 does.

And the license of the ad lib is probably not compatible with GPLv3 either.

Right, @wb9688. But if the GPLv3 is not compatible with the other license, the author must not use that ad library. Furthermore, even if they were compatible, the author would have to publish the _entire new code base_. This has not been done. Therefore, it's a GPLv3 violation.

[theScrabi]

@TheAssassin I just saw its not a legal copy. They never put the link to their source code somewhere. Here is the link. Please do something ;D

[TheAssassin]

There's the link. And that's not what makes it illegal. Please read my last comment (https://github.com/TeamNewPipe/NewPipe/issues/539#issuecomment-367284565).

[theScrabi]

Yes I red your commend. I just mixed something up, you where right. Sorry.

[theScrabi]

But well we might got him anyway. I compiled his sources. Also I disassembled the version on Playstore, and I found out that the compiled one does not match the on on PlayStore.

In the compiled version gms, ads and firebase are simply missing. Also these libs are nonfree/proprietary libraries that are linked, and packed up into the same .dex file. So like @TheAssassin said, and according to this paper we have a license fraud. @TheAssassin Is this a valid argument?

[TheAssassin]

Yep. That's what I was talking about.

[theScrabi]

Here are some new ones: https://play.google.com/store/apps/details?id=com.litetube.floatingtube.floattube

[theScrabi]

@Poussinou you asked me lately weather there are things to take down.
This app still needs to be removed from playstore, and is rather nasty right now:
https://play.google.com/store/apps/details?id=com.floattube.liteyoutube

[TobiGr]

I found these three:
https://play.google.com/store/apps/details?id=com.playtube.tubeplayer
https://play.google.com/store/apps/details?id=metromedia.youmusic.youvideo
https://play.google.com/store/apps/details?id=com.liteyoutube.videorocket

[ghost]

@TobiGr: The first one is gone and the second one doesn't look like NewPipe
in the screenshots.

[theScrabi]

The second one definitely is NewPipe even from the screenshots. They just changed some bits.

[ghost]

You're right, I hadn't looked further than the first few screenshots.

[TobiGr]

The first one is gone

Maybe someone has already took action and the people at GPlay were fast 😆 That app existed half an our ago 💁‍♂️

[TheAssassin]

@TobiGr you don't know whether they read this issue...

[Poussinou]

It takes a lot of time now to remove an app from the Play Store. I think the fake developer is following this issue...
Thanks for reporting 👍

[theScrabi]

fake developer is following this issue...

Guys, we may need a private thread at one of @TheAssassin.

[TheAssassin]

@theScrabi why should we have this conversation privately? It seems like discussing fakes publicly has a kind of preventive aspect.

If the fakers remove the apps themselves, that's a lot faster than having to beg Google. Sure, if they'd get their accounts locked or something by Google, they'd lose money, making fake apps of NewPipe expensive. But I have doubts that Google would remove any of these accounts, and even if they did, that'd take too much time.

[theScrabi]

why should we have this conversation privately?

@Poussinou:

I think the fake developer is following this issue...

I think he has a good point. There are definitely some copycats that read this.

It definitely not has a preventive aspect, if people learn from what we write here.

This in our readme.md has a preventive aspect:
WARNING: PUTTING NEWPIPE OR ANY FORK OF IT INTO GOOGLE PLAYSTORE VIOLATES THEIR TERMS OF CONDITIONS.

[TheAssassin]

"Violates their conditions" != "breaks copyright law", though.

[KeizerDev]

Why don't you guys just check if the apk in production mode is signed with the production key other wise just instant finish the app. Just add a check in it and your basically done. Most copycats don't know how to read code anyways

[TheAssassin]

By the way, we've been mentioned in PC Welt's post, they must've edited it.

NewPipe: Alternative zur Youtube-App
Es gibt massenhaft Apps, mit denen man Youtube-Videos anschauen kann. Empfehlenswert ist da beispielsweise die Android-App „NewPipe“ vom Entwickler Christian Schabesberger und seinen Team. Erhältlich ist es über die Plattform F-Droid, und zwar als APK-Datei zum Herunterladen . Eine solche APK lässt sich ganz einfach in Android installieren; vorher muss nur in den Geräte-Einstellungen im Bereich „Sicherheit“ hinter dem Punkt „Unbekannte Quellen“ ein Häkchen gesetzt werden.

[theScrabi]

Nice. Yes I wrote them a mail. :D

Why don't you guys just check if the apk in production mode is signed with the production key other wise just instant finish the app.

Yes, could be an idea to get rid of the small copies.

[Poussinou]

I prefer to keep this conversation public, even if I miss some fake developer's URL... More transparency is always better

[theScrabi]

All right.

[ArchangeGabriel]

I came here to report https://play.google.com/store/apps/details?id=com.liteyoutube.videorocket, but it seems that’s only the tip of the iceberg and that you are already fully aware of those copycats.

[theScrabi]

Here are some new ones that can be reported:

• https://play.google.com/store/apps/details?id=com.mithun
• https://play.google.com/store/apps/details?id=com.teampaleo.alphatube
• https://play.google.com/store/apps/details?id=org.maasss.mtube1
• https://play.google.com/store/apps/details?id=br.com.snapdark.tube.background
• https://play.google.com/store/apps/details?id=com.haftech.HDVideoDownloader
• https://play.google.com/store/apps/details?id=hd.movie.video.player
• https://play.google.com/store/apps/details?id=com.litetube.floattube
• https://play.google.com/store/apps/details?id=com.softmedya.streamyoutubeplayer
• https://play.google.com/store/apps/details?id=com.wpsapp.videodownloader
• https://play.google.com/store/apps/details?id=com.wetube.musictube.playtube

The steeped up their game, but still fail. However these are a lot right now, so we really should try to get NewPipe into PlayStore soon.

[prabhakar18474]

Guys is it not possible to remotely update apk from github????if it is possible then convert update link into short link so that nobody can identify and start updating apk remotely every 6month I'm for sure you guys reach everywhere without publishing apk in play store

[TobiGr]

@z3ntu found these and posted them here

https://play.google.com/store/apps/details?id=com.floattube.liteyoutube seems to violate both GPL and Google Play. The source code in the github repo linked wasn't updated since November 2017 but the last update on Google Play was in March of 2018 (and the version codes are different too)

https://play.google.com/store/apps/details?id=com.mithun doesn't even link to source code (maybe in the app?)

https://play.google.com/store/apps/details?id=com.teampaleo.alphatube links to a github repo with just a (nearly empty) readme.md file

https://play.google.com/store/apps/details?id=com.litetube.floattube outdated source code

https://play.google.com/store/apps/details?id=com.litetube.videorocketbeta outdated source code (also the repo name is "MyFirstApplication" but it seems to contain newpipe sources

https://play.google.com/store/apps/details?id=br.com.snapdark.tube.background no source linked

https://play.google.com/store/apps/details?id=com.videofloat.floatvideo2018 doesn't even say it's forked from newpipe & doesn't link source

https://play.google.com/store/apps/details?id=com.haftech.HDVideoDownloader doesn't even say it's forked from newpipe & doesn't link source

https://play.google.com/store/apps/details?id=com.wpsapp.videodownloader doesn't even say it's forked from newpipe & doesn't link source (also funny, they say "Youtube is not supported due to their terms of service." but the app probably only supports youtube)

https://play.google.com/store/apps/details?id=com.tube.amharic also forked from newpipe - apparently "disable some function to follow Google policy."

https://play.google.com/store/apps/details?id=com.softmedya.streamyoutubeplayer doesn't even say it's forked from newpipe & doesn't link source

[deep-gaurav]

Hey guys, new here, but not new to newpipe, had been using for almost half an year now, Thanks for great app btw,

I started making this Music player app to learn android programming https://github.com/deep-gaurav/MusicPiped , which isn't fork of NewPipe but uses NewPipeExtractor, It doesn't count as a copycat does it? Or if it violates GPL v3 I'm not good at licenses, ?

[JuniorJPDJ]

@deep-gaurav it doesn't
GPL3 is violated when you sell/distribute your software without sources or when you use part of GPL code in non-GPL licensed code.
Your code is GPL licensed so everything seems to be ok.

[ghost]

@JuniorJPDJ: Yeah, but you can also license it under compatible licenses
like AGPL.

>

[deep-gaurav]

@JuniorJPDJ that's good then, thanks

[theScrabi]

@deep-gaurav no its not a copy, the extractor was ment to be used in different projects. SkyTube for example also uses the extractor. Good luck :)

[deep-gaurav]

@theScrabi thanks,
btw, is site like songspk welcome to be added in extractor, I plan to add them if they are, It's like place for all indian songs...

(I think i should not discuss this in this issue, I'll open one in Extractor repo, later)

[prabhakar18474]

I would like to buy newpipe source code

On Thu, Oct 4, 2018, 3:01 PM Christian Schabesberger <
[email protected]> wrote:

@deep-gaurav https://github.com/deep-gaurav no its not a copy, the
extractor was ment to be used in different projects. SkyTube for example
also uses the extractor. Good luck :)

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/TeamNewPipe/NewPipe/issues/539#issuecomment-426950173,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AlbANmtvPsP2zABteVzddz0EoujRp2LOks5uhdWGgaJpZM4NTw8o
.

[pboulerie]

aTube Catcher - http://www.atube.me - Android Version looks like a copycat :
http://files.dsnetwb.com/atubecatcher.apk
The interface really looks like NewPipe 's ...

[Poussinou]

Here we go with another one : https://play.google.com/store/apps/details?id=org.maasss.mtube2

And this one : https://play.google.com/store/apps/details?id=com.litetube.videorocketbeta

[Poussinou]

Another list :

• https://play.google.com/store/apps/details?id=com.onetv.mytube
• https://play.google.com/store/apps/details?id=com.alltube.mytube
• https://play.google.com/store/apps/details?id=com.judixe.floatapp
• https://play.google.com/store/apps/details?id=org.YourTUBE.lonodevutils
• https://play.google.com/store/apps/details?id=com.adboll.playerandfloating
• https://play.google.com/store/apps/details?id=com.sasoft.play.tube.videotube.musictube
• https://play.google.com/store/apps/details?id=tube.video.tubevideo.playtube
• https://play.google.com/store/apps/details?id=com.TeamMini.miniTube
• https://play.google.com/store/apps/details?id=com.mia.litetube
• https://play.google.com/store/apps/details?id=com.sh.tatube1
• https://play.google.com/store/apps/details?id=vn.awesome.gagtube

[gkeegan]

https://play.google.com/store/apps/details?id=play.tube.playtube.videotube.musictube.tubevideo

This one as well.

Edit: it has 5 million downloads :(

[infinitytec]

Wow. The Play store has a ton of them.

[theScrabi]

Yea huge bullshit.

[Redirion]

one possibility to filter out at least a good portion of the copycats would be an automatic detection if the app has been installed from playstore alongside with an automatic self reporting of the app to google.
https://stackoverflow.com/a/37540163/1257591

[Poussinou]

https://play.google.com/store/apps/details?id=you2mp3.player

This one has no ads, but no source code too

[infinitytec]

https://play.google.com/store/apps/details?id=you2mp3.player

This one has no ads, but no source code too

Still a violation as it does not include source.

[gkeegan]

Here is another:
https://play.google.com/store/apps/details?id=full.movie.video.player

@theScrabi I believe it would be best to add a file to the repository that has:

1. A breakdown of the GPL(icense), or a link to a site like this one
2. What is wrong with putting a fork of NewPipe on the Play Store according to the terms and conditions of the Play Store
3. A list of apps that use some source code from NewPipe in a legitimate manner (and what makes their usage okay)
4. A few reasons why it is best to refrain from adding ads to an app (such as data about how much bandwidth is wasted on ads, and how it is unethical to remove ads from YouTube, only to add ads to the app that utilizes YouTube)
5. What will happen if they put an app on the Play Store that violates the T&C (app gets taken down, and developer account removed (does that happen?))
6. A warning that this is merely a page of information and not a legal document, and if there are any questions about usage of the source code, then they should be directed to (contact info for someone in TeamNewPipe, Play Store terms and condition webpage, their lawyer)

If you wish for something like this to be added, I could make a PR with this information explained in more detail.

[niansa]

Found another: https://play.google.com/store/apps/details?id=com.sct.yourtv

[Poussinou]

https://play.google.com/store/apps/details?id=hd.video.status.downloader

[theScrabi]

https://play.google.com/store/apps/details?id=com.fds.hfdghgfgfh

[Poussinou]

• https://play.google.com/store/apps/details?id=com.sasoft.videotube.playtube.tubeplayer
• https://play.google.com/store/apps/details?id=org.ankit.xtube

[kubo6472]

https://play.google.com/store/apps/details?id=com.sct.yourtv
Still there. But reported

[theScrabi]

Last one is gone

[kubo6472]

Great Job. Hopefully most of them will be gone by the end of august if we'll look into it.

[chunky8666]

https://play.google.com/store/apps/details?id=com.playtube.videotube.tubevideo
https://play.google.com/store/apps/details?id=com.tube.download.video.dfdf
Newpipe copy

[theScrabi]

Violation of our license: Ucmate #2768

[Iamdeadlyz]

Someone is selling it on Lazada
https://www.lazada.com.ph/products/youtube-premium-no-ads-full-warranty-for-android-i474984516-s1239430949.html
https://www.lazada.com.ph/products/youtube-premium-i474954329-s1239248291.html
https://www.lazada.com.ph/products/youtube-premium-app-no-ads-extreme-video-quality-direct-download-videos-background-play-lifetime-application-usage-i419848280-s1031664819.html

[z3ntu]

The upside of all those clones: a ton of people are using NewPipe even if it's not intentional :wink:

[Stypox]

Reporting things on Lazada is explained here: https://pages.lazada.com.ph/wow/i/ph/LandingPage/IPR
But I think @theScrabi has to do this because he is the copyright owner. #2732 would be a solution

[B0pol]

I found an app on playstore : Video Tube from Play Tube, package name: com.playtube.videotube.tubevideo
Comments are saying it's full of ads

CTRL+F this github page with "playtube", you'll see it's not their first time

[Umeaboy]

My guess it's people working for some antipiracy companies making this mess. Why would it continue if it isn't fun?

[gkeegan]

@Umeaboy it is definitely just individuals seeking to make a profit by adding advertisements and tracking to NewPipe.

[theScrabi]

Someone is selling it on Lazada
https://www.lazada.com.ph/products/youtube-premium-no-ads-full-warranty-for-android-i474984516-s1239430949.html
https://www.lazada.com.ph/products/youtube-premium-i474954329-s1239248291.html
https://www.lazada.com.ph/products/youtube-premium-app-no-ads-extreme-video-quality-direct-download-videos-background-play-lifetime-application-usage-i419848280-s1031664819.html

@Iamdeadlyz @Stypox I've send them a take down notice.

[theScrabi]

I found an app on playstore : Video Tube from Play Tube, package name: com.playtube.videotube.tubevideo
Comments are saying it's full of ads

CTRL+F this github page with "playtube", you'll see it's not their first time

I've send a DMCA.

[xibr]

@theScrabi also this https://play.google.com/store/apps/details?id=play.tube.video.playtube.videotube.musictube

[Iamdeadlyz]

Glad to see that they are taken down @theScrabi

Another one
https://s.lazada.com.ph/s.ZQXsz

[theScrabi]

So google as well as lazada claim "they can not detect an issue" which is obviously bogus. They say need further prove. Apparently simple screen shots aren't enough. I am not sure if this is a phase as they are not interested in removing any apps, or if they really do want to see sort of a code "diff".

Could some one help to reverse engineer these apps to "find" the parts that got stolen:
https://www.lazada.com.ph/products/youtube-premium-i474954329-s1239248291.html

https://play.google.com/store/apps/details?id=com.playtube.videotube.tubevideo&hl=en

[gkeegan]

@theScrabi How do they intend to stop any infringement if there is no way to show the code of a closed source copy? Stupid.

Would looking at the icons be possible by decompiling the app? Then check file hashes of the icons (like for trending and the like) they have vs the ones in NewPipe.

[kubo6472]

Wouldn't #2732 speed up this process, as they have to act? Or am I misunderstanding?

Von meinem Samsung Galaxy Smartphone gesendet.

-------- Ursprüngliche Nachricht --------
Von: Keegan [e-mail]
Datum: 07.02.20 17:46 (GMT+01:00)
An: TeamNewPipe/NewPipe [e-mail]
Cc: Jakub Doboš [e-mail], Comment [e-mail]
Betreff: Re: [TeamNewPipe/NewPipe] Handle Copycats (License fraud) (#539)

@theScrabihttps://github.com/theScrabi How do they intend to stop any infringement if there is no way to show the code of a closed source copy? Stupid.

Would looking at the icons be possible by decompiling the app? Then check file hashes of the icons (like for trending and the like) they have vs the ones in NewPipe.

—
You are receiving this because you commented.
Reply to this email directly, view it on GitHubhttps://github.com/TeamNewPipe/NewPipe/issues/539?email_source=notifications&email_token=AGHPNRVELLPBMDYDXVULPWDRBWF4LA5CNFSM4DKPB4UKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOELDWP7I#issuecomment-583493629, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AGHPNRRLRJV3WSRETA5EU6DRBWF4LANCNFSM4DKPB4UA.

[B0pol]

Look on comments with medias on lazada, 1 star two weeks ago, the crash reporter shows package "org.schabi.newpipe", could not decrypt video url signature, and version 0.17.4

The package name is the same, the crash reporter is the same, the ui is the same (look in comments with media)
BUT two screenshots from 2 weeks ago or more recent shows the YouTube interface, so the owner have switched to another app (vanced?) due to the decryption bug.

[gkeegan]

@B0pol that would probably be sufficient proof for removal, so long as an apk of that version is obtainable.

[rstular]

I've looked into the Play Tube - Video Tube app.
The developers used a large chunk of NewPipeExtractor in their app, with minor modifications, which mostly consist of:

• Removing some exception handling
• Renaming some function and variable names (looks more like a compile-time optimization)

Practically the whole NewPipeExtractor codebase (with the exception of /extractor/comments directory) is being reused in the Play Tube app, without any major modifications. There were some minor ones though, which mostly consist of:
When/if possible, I will also try to run MOSS over the code to further demonstrate the degree to which the code was reused.

The decompiled code I've managed to generate (using jadx) is available here:

• NewPipe0_18_03_NPE.zip (contains NewPipeExtractor code from NewPipe 0.18.3 apk)
• PlayTube_NPE.zip(contains NewPipeExtractor code from the app in question)

Hopefully, this will be enough evidence to prove the rightful ownership of the code.
If you have any further questions, please let me know.

Best regards

[rstular]

@theScrabi As for the Lazada listing, it could be taken down via the Alibaba IPP portal, if someone is willing to go through their identity verification process.
Edit: Just read that "they cannot detect the issue", it's a bit trickier then, since the seller only distributes download links through the store. If someone could obtain the APK, the ownership of the code could be easily proven, but as of now, there's not much that can be done.

[rstular]

Also, another closed source app, which uses the extractor
playtube.videotube.playing

[theScrabi]

@B0pol @rstular very nice. Thank you :D

I am currently busy writing my bachelor thesis, but once I find time to answer them I'll keep u up to date.

[TobiGr]

@rstular Using the extractor is completely legal as long as you say that you do so

[rstular]

@TobiGr And as long as you use GPL for your project, if I understand GPL correctly?
Regardless, neither developer disclosed the use of NewPipe extractor, nor used the GPL license for the apps in question.

[theScrabi]

Yes when NewPipe extractor is used the app has to be made open. Otherwise the extractor license had to be MIT or apache.

[TobiGr]

Oh yes. You are right

[TheAssassin]

@rstular we cannot provide legal advice. Please contact a lawyer if you are unsure.

Not legal advice: yes, the GNU GPL version 3 requires projects using such a depencency to be licensed under the same license terms.

[Max1Truc]

Hey @theScrabi , I didn't read the full discussion so sorry if I waste your time... but NewPipe isn't available on the Play Store because it violates some Google legal advices on Youtube or something like that, right ? So maybe NewPipe copycats could be deleted on the Google Play Store by explaining that they violate Google's Terms of Use or any other thing...

[JensMy]

Why do you care so much about them, this app is so mind blowing great and those Loosers just copy your work because theywere not able to create such a nice application.. Maybe you should text them and offer them some coding lessons but since your app is free and I hope there were great donations made to you their profit will be small... On the other side is if you report them to gplay store, they may get an eye on your project and it will be punished....

[gkeegan]

People care about it since it is stealing the work of others and trying to profit off it.

I don't think YouTube will do anything specific to NewPipe, especially since projects like youtube-dl have been around for a long time.

[kubo6472]

We are reporting them all the time. But when someone copies just part of the code or just the extractor code, then Play Store treats them not as a copycat, and they need proof.
It's against the license. We care about all of this, so that the "copy devs" learn, they're doing something disallowed, and also people get confused easily and make them money, for literally copying someone else's work. Maybe those people are not doing it in the plan of stealing someone else's work, but just helping them do something with it in the future, poke around in the code. And to them: You are doing something very wrong, and you'll probably and hopefully get it sooner rather than later.

[theScrabi]

Here is another one. Did we have it already? Top video downloader - https://play.google.com/store/apps/details?id=com.miniapps.fbvideodownloader

[TheAssassin]

Should we make a wall of shame?

[theScrabi]

@kubo6472 i agree. Our code is open for two reasons: Use it, change it, earn money with it, what ever you do I don't care. BUT who changes the code needs to give back his changes either by contributing or by opening up his code and he needs to acknowledge our work. This is why I decided on GPL3.

[B0pol]

3804: @pokemetti found "Tubemate Video Downloader For All", developped by "tubemate video downloader", package vddl.video.downloader on Samsung Galaxy Store, email [email protected], icon . @pokemetti said it contains ads.

I've searched a bit, it looks like they made a combo! They even plagiarised "TubeMate" for the icon and name: website http://www.tubemate.net/, developer "Devian Studio", icon , package devian.tubemate.v3. This app — created in 2010 — is a webview (_or browser?_) with a download icon and some other features, for video websites (I've seen at least youtube and vimeo), it's not a NewPipe copy at all.

[B0pol]

I found an app on playstore : Video Tube from Play Tube, package name: com.playtube.videotube.tubevideo
Comments are saying it's full of ads
CTRL+F this github page with "playtube", you'll see it's not their first time

I've send a DMCA.

They "created" """another""" app, Play Tube & Video Tube, package play.tube.video.playtube.videotube.musictube.

[kubo6472]

I found an app on playstore : Video Tube from Play Tube, package name: com.playtube.videotube.tubevideo
Comments are saying it's full of ads
CTRL+F this github page with "playtube", you'll see it's not their first time

I've send a DMCA.

They "created" """another""" app, Play Tube & Video Tube, package play.tube.video.playtube.videotube.musictube.

I've uninstalled that app (to check) right this moment.

Also here: marking the app with 5 milion downloads "Early Access" just to hide reviews:
https://user-images.githubusercontent.com/26146502/85269959-e76d5a00-b478-11ea-9e89-69ce35f1bc64.jpg
Can't share the link
https://user-images.githubusercontent.com/26146502/85269985-f18f5880-b478-11ea-8372-6e65fd476f77.jpg
5€ per Week?!
https://user-images.githubusercontent.com/26146502/85269992-f6540c80-b478-11ea-9b80-af270b3ea7ec.jpg
Also the package is probably called "Tube" it plays only popups. Not sure if there's no code being used from the NewPipe projects, but shows up second when searching for such.

[B0pol]

Uh, you downloaded another app. The one I linked has 1 million downloads and definitely looks like NewPipe, ofc without about page for credits / license neither in the app, nor in the playstore description. Some screenshots:

[kubo6472]

@B0pol
https://user-images.githubusercontent.com/26146502/85272200-24871b80-b47c-11ea-96c1-259475d4ace1.jpg
I was talking about two apps there. First sentence was responding to you that I was testing the app you were talking about, the moment I read your reply. The next thing was about the second app.
I am unclear, I know.

[rstular]

I've verified that play.tube.video.playtube.videotube.musictube package contains NewPipe extractor (decompiled source is attached - directory sources/org/schabi/newpipe/).

Additionally, the app downloaded by @kubo6472 com.mercandalli.android.apps.youtube is using NewPipe as well, though it is (from the decompiled source) not as obvious as the first one due to heavy obfuscation they used. The usage of NewPipe can be most easily seen from the original filenames, which managed survived the obfuscation (I presume through metadata that for some reason remained unobfuscated).

Original NewPipe filenames present in the compiled apk

[deep-gaurav]

This might be an unpopular opinion and I do not know if it's possible but since musicpiped is still up on play store.
Has it been considered to add a version of newpipe on playstore.
From my experience with musicpiped on play store, Google is fine with it if there is no form of monetization like ads or any direct link to websites like paypal for donation.

Having an official newpipe app on playstore might mean a permanent solution to this problem as there will be no need to use copycats.

[TheAssassin]

This might be an unpopular opinion and I do not know if it's possible but since musicpiped is still up on play store.

It's not "unpopular", don't know where you got this impression from. In this thread, it's pretty much off topic, though.

Has it been considered to add a version of newpipe on playstore.

This answer has been answered tens to hundreds of times already. Please use the GitHub. It's annoying to have to cite oneself over and over again.

Please stop asking this question. Thanks.

[B0pol]

@deep-gaurav: From README, paragraph 2

PUTTING NEWPIPE OR ANY FORK OF IT INTO GOOGLE PLAYSTORE VIOLATES THEIR TERMS OF CONDITIONS.

If you violate the ToS, you can be banned for this, and you have to pay once again $25 to be able to publish on Play Store

[deep-gaurav]

If you violate the ToS, you can be banned for this, and you have to pay once again $25 to be able to publish on Play Store

I.e to say if it violates ToS and since MusicPiped has been on play store for over an year, which once was banned because of donation link in app, and removing it did remove the ban of app, and it's been fuctioning ever since, So I believe it may not be against ToS, I'm not a lawyer so I can not say for certain.

[puppykickr]

I believe that Play Store would say that NewPipe violates their TOS because of the capability to download, and because of the ad-blocking.