Are you using CSP on your website? You might be getting a patent infringement notice! Buckle up 😎 scotthelme.co.uk/i-turned-on-cs…
We're already working with the @EFF who will hopefully be able to support the cause here, but we need to know about other websites that have received this letter.
If you're legally and/or technically minded, perhaps you could take a look over the letter being sent out: drive.google.com/file/d/1p63IJ6…
There are more details in the longer "Patent Infringement Outline", including a few interesting... descriptions... of how a web browser and web server work! drive.google.com/file/d/12yXB1o…
I used my Crawler.Ninja project to look for sites using a CSP nonce and I came up with 1,400+ with a quick query. There are likely many more due to limitations in the crawler: drive.google.com/file/d/1fOnMs3…
You can also join the discussion on HN: news.ycombinator.com/item?id=282744…
Quite a few people have suggested this, so maybe we can ask @eastdakota if this would qualify for Project Jengo? I'm not aware of any action with the US patent yet, but the patent exists!
Prior art for a CSP Nonce back in 2005? 😇
https://twitter.com/sirdarckcat/status/1429834510129061909?s=20
Discussions at @mozilla back in Jan 2011:
https://twitter.com/sirdarckcat/status/1429834022109302784?s=20
Also early 2011:
https://twitter.com/sirdarckcat/status/1429833963598663681?s=20
I've now got a copy of the 'Scriptlock Integration Guide' which details how the product works and how to integrate it into your site. I'd be interested in some views on this: drive.google.com/file/d/1othVhW…
Well, it seems this issue isn't over after all, or at least the company haven't let it go... They did apologise and gave a nice story to @TheRegister, but it seems they're now targeting me:
https://twitter.com/TheRegister/status/1430853676151808009
The apology tweets have been deleted and none of the companies I've spoken to have received this apology letter yet either. Not only that, I've had a couple of complaints sent directly to me too!
The first one is for sharing a copy of the letter the company sent out. The complaint was made under the GDPR as the signature in the letter "constitutes personal biometric data" of Mr W. Coppock! I need to redact the signature or remove the letter: drive.google.com/file/d/1p63IJ6…
The second was a DMCA takedown notice served to Google for the Patent Infringement Outline PDF that I also shared. Google have removed the file: drive.google.com/file/d/12yXB1o…
The Patent Infringement Outline is still publicly available on the original link from their own website, however, so if you'd like to see it, you can still head over there: scriptlock.com/resources/pate…
Also, the Internet Archive have crawled and archived a copy of the PDF file here: web.archive.org/web/2021082405…
There are also 3 additional copies, just in case:
web.archive.org/web/2021082505…
web.archive.org/web/2021082614…
web.archive.org/web/2021082802…
web.archive.org/web/2021082505…
web.archive.org/web/2021082614…
web.archive.org/web/2021082802…
IANAL but "Fair Dealing" in the UK allows for "Criticism, review and reporting current events" and "Fair Use" in the US allows "criticism, comment, news reporting, teaching, scholarship, and research". It seems like the DMCA takedown was made in bad faith and I'll be fighting it.
Turns out he went after my tweets too but @Twitter didn't see an issue so they remain! 🤣
@Twitter There's a document here filed 20 Jul 2011 that contains the same signature and is a matter of public record, so I don't know why he's so bothered about this one 🤷♂️
…te.company-information.service.gov.uk/company/076508…
…te.company-information.service.gov.uk/company/076508…
• • •
Missing some Tweet in this thread? You can try to
force a refresh
