https://github.com/orgs/organicmaps/discussions/9837 Skip to content Navigation Menu Toggle navigation Sign in organicmaps * Product + GitHub Copilot Write better code with AI + Security Find and fix vulnerabilities + Actions Automate any workflow + Codespaces Instant dev environments + Issues Plan and track work + Code Review Manage code changes + Discussions Collaborate outside of code + Code Search Find more, search less Explore + All features + Documentation + GitHub Skills + Blog * Solutions By company size + Enterprises + Small and medium teams + Startups By use case + DevSecOps + DevOps + CI/CD + View all use cases By industry + Healthcare + Financial services + Manufacturing + Government + View all industries View all solutions * Resources Topics + AI + DevOps + Security + Software Development + View all Explore + Learning Pathways + White papers, Ebooks, Webinars + Customer Stories + Partners + Executive Insights * Open Source + GitHub Sponsors Fund open source developers + The ReadME Project GitHub community articles Repositories + Topics + Trending + Collections * Enterprise + Enterprise platform AI-powered developer platform Available add-ons + Advanced Security Enterprise-grade security features + GitHub Copilot Enterprise-grade AI features + Premium Support Enterprise-grade 24/7 support * Pricing Search or jump to... Search code, repositories, users, issues, pull requests... Search [ ] Clear Search syntax tips Provide feedback We read every piece of feedback, and take your input very seriously. [ ] [ ] Include my email address so I can be contacted Cancel Submit feedback Saved searches Use saved searches to filter your results more quickly Name [ ] Query [ ] To see all available qualifiers, see our documentation. Cancel Create saved search Sign in Sign up Reseting focus You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} @organicmaps Organic Maps * Overview * Repositories * Discussions * Projects * Packages * People More * Overview * Repositories * Discussions * Projects * Packages * People Disclosure of the Metaserver CDN Source Code #9837 rtsisyk announced in Announcements Disclosure of the Metaserver CDN Source Code #9837 @rtsisyk rtsisyk Dec 6, 2024 * 7 comments * 4 replies Return to top Discussion options * {{title}} Something went wrong. Quote reply [179] rtsisyk Dec 6, 2024 Maintainer - Today I am announcing the public disclose of the source code of so-called "metaserver", that previously was available only to few people of the team. At Organic Maps, we prioritize transparency and open communication with our community and committed to making our source code publicly available, ensuring that users can fully engage with and contribute to the project. => https://github.com/organicmaps/meta (MIT License) What is the Metaserver? The purpose of so-called "metaserver" is to dynamically redirect users to the most suitable CDN servers containing requested map version based on their geographic location. For example, users in North America are routed to servers in the U.S., ensuring faster map downloads. Additionally, the metaserver enables dynamic server reconfiguration without requiring approval from the App Store or Google Play, which can take weeks. How does it work? The service is implemented as a Cloudflare Worker, which returns a JSON response containing a list of servers based on the GeoIP information of the requester. Essentially, this functionality could be replaced with a few static JSON files a series of rules in an Nginx configuration. The decision to use Cloudflare Workers seems controversial at this point. It was likely an unfortunate choice that should be revisited in the near future to prevent vendor lock-in and ensure the project remains independent of large tech corporations. Why Was It Closed? The original author of this component justified the decision to close it due to concerns about unauthorized forks. Indeed, we observed at least two forks that misused the content delivery network, funded by donations, for their private gain. However, it appears that the closed-source nature of the component did little to prevent this issue. Why Open Now? The component was contributed by Alexandr Borsuk (a.k.a. Alexander Zolotorev) back in 2021 under the MIT license, although the repository itself was not publicly accessible. Throughout November 2024, the issue of closed-source code was discussed several times in the Telegram chats with key contributors. On November 23, Mr. Borsuk quietly made a change, removing the MIT license while keeping his copyright. The change with the flagrant comment "No MIT yet, sorry." was discovered by me only today. A few non-significant commits were made on top of it. This subtle, almost unnoticed modification effectively privatized the open-source repository by this individual, preventing any further open-source collaboration. Furthermore, the next change of enabling the logs, clearly violates our commitment to privacy. To my knowledge, this decision was not discussed with any other contributors, including those who had previously contributed to the repository. commit 30e9911d4c8329068aca82fd6c0d896380ba99de Author: Alexander Borsuk <170263+biodranik@users.noreply.github.com> Date: Sat Nov 23 21:33:36 2024 +0100 Update LICENSE No MIT yet, sorry. Signed-off-by: Alexander Borsuk <170263+biodranik@users.noreply.github.com> image image link: https://github.com/organicmaps/meta/commit/ 30e9911d4c8329068aca82fd6c0d896380ba99de The commit following the license change enabled logging in Cloudflare... commit a6ff0eb05abfc891e6a3a32faa3cd307a40c6121 Author: Alexander Borsuk <170263+biodranik@users.noreply.github.com> Date: Sun Nov 24 21:28:02 2024 +0100 Observe server abusers when needed Signed-off-by: Alexander Borsuk <170263+biodranik@users.noreply.github.com> diff --git a/wrangler.toml b/wrangler.toml index bfcdcf6..bad7b47 100644 --- a/wrangler.toml +++ b/wrangler.toml @@ -23,3 +23,6 @@ route = 'meta.omaps.app/*' [env.prod.vars] DEBUG = false + +[observability.logs] +enabled = true image link: https://github.com/organicmaps/meta/commit/ a6ff0eb05abfc891e6a3a32faa3cd307a40c6121 Actions Taken 1. I am making the code from before November 23, 2024, publicly available again under MIT. As one of the authors who contributed to the code while it was under the MIT license, I have the full right to take this action. Proprietary changes after "No MIT yet, sorry" and "Observe server abusers when needed" has been removed or reverted. 2. The copyright notice has been updated to include "Copyright 2024 Organic Maps Contributors" to accurately reflect the current situation. 3. Contributors and the community are invited to perform a thorough and independent review to verify that the code functions as expected without introducing any undocumented functionality. 4. This post issues an open call to replace the proprietary Cloudflare technology with an open-source alternative, though this may take some time. 6.. Log collection has been disabled, as it was previously. --------------------------------------------------------------------- I, personally, apologize to the community for this matter. All necessary measures have been taken to resolve this issue. Organic Maps remains fully committed to privacy, transparency, and open-source values, which is why we are openly disclosing this issue. Regards, Roman. Beta Was this translation helpful? Give feedback. 12 You must be logged in to vote [?] 22 5 1 All reactions * [?] 22 * 5 * 1 Replies: 7 comments * 4 replies * Oldest * Newest * Top Comment options * {{title}} Something went wrong. Quote reply [140] RicoElectrico Dec 6, 2024 Collaborator - Something doesn't seem right? The two Alexanders are apparently a different person? https://tracxn.com/d/companies/mapswithme/ __z_UdJbmARcKZWF2k8I8I6LhezhZ-PPLegSR8HKLL0AA/ founders-and-board-of-directors Beta Was this translation helpful? Give feedback. 1 You must be logged in to vote All reactions 1 reply @rtsisyk Comment options * {{title}} Something went wrong. Quote reply rtsisyk Dec 6, 2024 Maintainer Author - Something doesn't seem right? The two Alexanders are apparently a different person? https://tracxn.com/d/companies/mapswithme/ __z_UdJbmARcKZWF2k8I8I6LhezhZ-PPLegSR8HKLL0AA/ founders-and-board-of-directors The same person as far as I know: https://github.com/organicmaps/organicmaps/pull/515/files# diff-ade7d2f0db76f7dc0eef2e96386859ee766b144d13448e2e177a049ffbbdc02aL3-L9 Beta Was this translation helpful? Give feedback. 1 All reactions * 1 Comment options * {{title}} Something went wrong. Quote reply [179] rtsisyk Dec 6, 2024 Maintainer Author - Apparently F-Droid's NonFreeNet was somehow legit. This change opens the way to remove that label. Beta Was this translation helpful? Give feedback. 2 You must be logged in to vote All reactions 3 replies @pastk Comment options * {{title}} Something went wrong. Quote reply pastk Dec 6, 2024 Maintainer - It had been changed awhile ago to a more precise TetheredNet AF already. TetheredNet doesn't imply the server is non-free, just non-changeable by a user. Beta Was this translation helpful? Give feedback. All reactions @pastk Comment options * {{title}} Something went wrong. Quote reply pastk Dec 6, 2024 Maintainer - This is how it looks in the F-Droid Client at the moment image Beta Was this translation helpful? Give feedback. 2 All reactions * 2 @rtsisyk Comment options * {{title}} Something went wrong. Quote reply rtsisyk Dec 6, 2024 Maintainer Author - It had been changed awhile ago to a more precise TetheredNet AF already. TetheredNet doesn't imply the server is non-free, just non-changeable by a user. OK. At least this formerly closed component is not a concern anymore. Beta Was this translation helpful? Give feedback. 2 All reactions * 2 Comment options * {{title}} Something went wrong. Quote reply [184] pastk Dec 6, 2024 Maintainer - Many thanks! There should be no hidden closed parts in an open project! Especially in a privacy-focused project. Beta Was this translation helpful? Give feedback. 2 You must be logged in to vote 5 All reactions * 5 0 replies Comment options * {{title}} Something went wrong. Quote reply [179] rtsisyk Dec 6, 2024 Maintainer Author - I can see a butch of emails that my GitHub permissions have been revoked. Well, this is a funny attempt to cover-up the published information. image Beta Was this translation helpful? Give feedback. 2 You must be logged in to vote 4 All reactions * 4 0 replies Comment options * {{title}} Something went wrong. Quote reply [179] rtsisyk Dec 6, 2024 Maintainer Author - image Nice to know that we have the OWNER here who OWNS the CODE. Beta Was this translation helpful? Give feedback. 3 You must be logged in to vote All reactions 0 replies Comment options * {{title}} Something went wrong. Quote reply [179] rtsisyk Dec 6, 2024 Maintainer Author - The https://github.com/organicmaps/meta repo is not available anymore as of 7pm GMT... image Beta Was this translation helpful? Give feedback. 4 You must be logged in to vote 2 All reactions * 2 0 replies Comment options * {{title}} Something went wrong. Quote reply [179] rtsisyk Dec 6, 2024 Maintainer Author - Here's my local copy... Open-source forever! organicmaps-meta.tar.gz Beta Was this translation helpful? Give feedback. 21 You must be logged in to vote [?] 19 All reactions * [?] 19 0 replies Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment Category Announcements Labels None yet 3 participants @rtsisyk @RicoElectrico @pastk Heading Bold Italic Quote Code Link --------------------------------------------------------------------- Numbered list Unordered list Task list --------------------------------------------------------------------- Attach files Mention Reference Menu * Heading * Bold * Italic * Quote * Code * Link * * Numbered list * Unordered list * Task list * * Attach files * Mention * Reference Select a reply Loading Create a new saved reply 1 reacted with thumbs up emoji 1 reacted with thumbs down emoji 1 reacted with laugh emoji 1 reacted with hooray emoji 1 reacted with confused emoji [?] 1 reacted with heart emoji 1 reacted with rocket emoji 1 reacted with eyes emoji Footer (c) 2024 GitHub, Inc. Footer navigation * Terms * Privacy * Security * Status * Docs * Contact * Manage cookies * Do not share my personal information You can't perform that action at this time.