# A $1 AI Just Cloned Real Software in Minutes — and Called It "Legally Distinct" **URL:** \ **Category:** News & Articles\ **Tags:** programming, hacking, tips-tricks, ai, news\ **Created:** [2 أغسطس 2026، 5:00م UTC](https://onehack.st/t/a-1-ai-just-cloned-real-software-in-minutes-and-called-it-legally-distinct/324370 "2026-08-02T17:00:15Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Parizaad](https://onehack.st/user_avatar/onehack.st/parizaad/32/174871_2.png) [@Parizaad](https://onehack.st/u/Parizaad)\ **Post date:** [2 أغسطس 2026، 5:00م UTC](https://onehack.st/t/a-1-ai-just-cloned-real-software-in-minutes-and-called-it-legally-distinct/324370/1 "2026-08-02T17:00:16Z")
# 🧬 A $1 Robot Just Cloned Real Software in Minutes — and Slapped a “Legally Distinct” Sticker On It _Two dudes built a tool that copies any free program, rewrites it from scratch, and hands you a version the lawyers can’t touch. They did it as a JOKE. The joke works._ **Cost to clone a full app: under $1. Time: minutes. Human coders needed: zero.** It’s called [malus.sh](https://www.techspot.com/news/111904-ai-can-clone-open-source-software-minutes-problem.html). Built by a security researcher and a UN software guy. Shown off at Europe’s biggest open-source conference. And it just kicked a hole in how software ownership actually works. ([TechSpot has the full breakdown](https://www.techspot.com/news/111904-ai-can-clone-open-source-software-minutes-problem.html).) ![Photocopier cloning gif](https://media.giphy.com/media/3oEjHV0z8S7WM4MwnK/giphy.gif) > **🧩 Dumb Mode Dictionary (read this first, takes 20 seconds)** > > | Fancy word | What it actually means | > | --- | --- | > | **Open-source software** | Free programs where anyone can read the recipe (the code). Think free tools built by volunteers. | > | **Clean room** | Two people in separate rooms. One describes the thing, the other builds it from the description — never seeing the original. That’s the legal loophole. | > | **AI agent** | A robot worker that reads and writes on its own. Give it a task, it goes. | > | **License** | The rulebook that comes with free code — sometimes it says “you must share back.” Cloning skips that rulebook. | > | **malus.sh** | The tool that does all this. “Malus” = Latin for apple tree… and also “evil.” Cute. | > **📰 What actually happened (the short version)** > > Look, here’s the thing. Two guys — [Dylan Ayrey](https://trufflesecurity.com/) (founder of Truffle Security) and Mike Nolan (software architect at the UN Development Program) — built a tool and showed it off at [FOSDEM 2026](https://fosdem.org/), the biggest free-software conference on Earth. > > You point it at any free program. It runs **two separate AI robots** : > > - Robot #1 studies the program and writes a plain-English description of what it does. > - Robot #2 never sees the original — it only reads the description and writes brand-new code. > > Boom. A working copy. Different code underneath, same job on top. And because Robot #2 never touched the original, the website brags it spits out _“legally distinct code with corporate-friendly licensing.”_ > > Real talk: they built it as **satire**. A prank to force a conversation nobody in the free-software world wanted to have. The prank… kinda works. > **⚙️ Why the 'two robots in separate rooms' trick matters** > > This “clean room” thing isn’t new. It’s how people legally copied stuff for decades — one team documents, a totally fresh team rebuilds from the doc. Courts have generally said that’s fair. ([Here’s the plain-English history](https://en.wikipedia.org/wiki/Clean_room_design).) > > The twist? That used to take **months and a room full of expensive engineers**. Now it’s two robots and a dollar. > > - No engineer ever reads the “share it back” rulebook. > - The copy looks nothing like the original line-for-line. > - So the free version’s “you must keep this free” clause? Sidestepped. > > That’s the whole play. The thing that protected volunteer coders — the license — only bites if you _copy the code_. Describe it and rebuild it, and there’s nothing to bite. > **📊 The receipts (numbers that'll make you sit up)** > > | Thing | Number | > | --- | --- | > | Cost to clone one program | **Under $1** | > | Time | **Minutes** | > | Humans in the loop | **0** | > | AI robots doing the work | **2** (describe → rebuild) | > | Where it debuted | **FOSDEM 2026** (huge open-source event) | > | Who built it | A security founder + a **UN** software architect | > | Their stated reason | A **joke / warning** , not a business | > **🗣️ What the timeline's saying** > > Free-software people are split down the middle, and it’s spicy: > > - **Panic camp:** “This makes every volunteer project stealable. Why give my work away free if a company clones it, strips the ‘share back’ rule, and sells it?” > - **Shrug camp:** “Copying an app’s _behavior_ was always legal. Menus and features aren’t owned. This just made it cheap.” ([This lawyer breakdown](https://www.marks-clerk.com/insights/latest-insights/102mp7s-can-ai-legally-clone-open-source-unpacking-clean-room-as-a-service/) leans this way.) > - **The builders themselves:** basically “yeah we did this on purpose to scare you into fixing the system.” > > And honestly? Both camps are right, which is exactly why it’s interesting. #### Cool. A Robot Can Now Xerox Any App for a Buck… Now What the Hell Do We Do? (⊙\_⊙) ![Robot factory assembly line gif](https://media.giphy.com/media/l0MYGb1LuZ3n7dRnO/giphy.gif) Look — everyone’s arguing about whether this is _ethical_. Wrong question. The question is: what door just swung open while the suits are busy clutching pearls? Here’s five plays. (I’ve watched this exact pattern print money three times now.) > **🪟 The Patch Window Sprint** > > Right now, 99% of businesses don’t even know clean-room cloning got cheap. There’s a gap — maybe a few weeks — before the tools get slick and everyone piles in. > > The play: find one clunky, overpriced paid app that has a free cousin, and become the person who **sets up the free cousin for people** who’d never do it themselves. You’re not cloning anything shady — you’re just early to knowing what’s swap-able. > > 🧠 _Example:_ A 24-year-old in Manila spots a $40/month invoicing app that has a free open-source twin. He sets up the free one for small shops, charges a flat $60 setup fee, done in an afternoon. First 10 clients = $600. Uses [Ploomber](https://ploomber.io/) / a cheap VPS to host. > > > 📈 **Timeline:** First win in 5–7 days. Window closes in ~8 weeks once the tools go mainstream and everyone knows the swap. > **📡 The Description Broker** > > Here’s the sneaky-smart bit. The valuable part of malus.sh isn’t the robot — it’s **the plain-English description** Robot #1 writes. A crisp “here’s exactly what this app does, step by step” is gold on its own. > > The play: build clean, readable feature-breakdowns of popular tools and sell them to indie builders who want to make their _own_ version legally. You’re selling the map, not the treasure. > > 🧠 _Example:_ A dev in Lagos writes tight spec-sheets (“here’s how a Calendly-style booking flow works, feature by feature”) and sells them as $19 PDFs on [Gumroad](https://gumroad.com/) to solo founders. 40 sales month one = $760, zero code shipped. > > > 📈 **Timeline:** First sale in a week. Plateaus around month 3 unless you keep feeding fresh, in-demand apps. > **🛠️ Sell the Picks, Not the Gold** > > Everyone’s gonna rush to clone stuff. Most will fail at the boring parts — hosting it, keeping it running, making it not look like garbage. That’s YOUR lane. > > The play: don’t clone anything. Sell the **shovels** — setup templates, one-click hosting configs, “make your open-source clone look professional” starter kits. When there’s a gold rush, the guy selling jeans wins. > > 🧠 _Example:_ A 26-year-old in Kraków packages a “deploy any open-source app in 5 minutes” template pack for [Railway](https://railway.app/) / [Coolify](https://coolify.io/) and sells it for $29. 50 buyers = $1,450. He never clones a single app himself. > > > 📈 **Timeline:** First cash in 10 days. This one actually _grows_ as more people jump in — you’re feeding the miners. > **🕳️ The License Loophole Auditor (white-hat, sounds black-hat)** > > Flip the whole thing around. Companies are now TERRIFIED their free-software use is a legal mess. And this news just made every legal team sweat. > > The play: become the person who checks a small company’s tools and says “this one’s risky, this one’s safe, here’s the clean swap.” You’re the loophole-hunter — but for the _good guys_ paying you to stay safe. > > 🧠 _Example:_ A comp-sci student in Bengaluru offers “$150 open-source license health checks” to small startups using free [Snyk](https://snyk.io/) and [FOSSA](https://fossa.com/) scanners plus a one-page report. 8 checks in a month = $1,200, all from a laptop in a dorm. > > > 📈 **Timeline:** First client in 2 weeks (needs a bit of trust-building). Steady income — fear doesn’t go on sale. > **🧬 The Frankenstein Feature Shop** > > Cloning a whole app is boring and legally spicy. But nobody owns a _single feature idea_. The real move: cherry-pick the ONE great feature from five different tools and let people commission a mashup. > > The play: take orders for “I want X’s search + Y’s dashboard + Z’s export button” and use clean-room-style AI rebuilding to stitch a custom little tool. Middleman energy — you take the order, the robots do the grunt work. > > 🧠 _Example:_ A 23-year-old in São Paulo runs a “custom mini-tools” service on [Fiverr-adjacent Contra](https://contra.com/), fulfilling with AI coding assistants. Charges $80–200 per micro-tool. Six orders month one ≈ $900. > > > 📈 **Timeline:** First order in a week. Watch for burnout at ~10 weeks — cap your orders or it eats you alive. > **🛠️ Follow-Up Actions** > > | Want to… | Do this | > | --- | --- | > | See the tool that started it | Read the [TechSpot writeup](https://www.techspot.com/news/111904-ai-can-clone-open-source-software-minutes-problem.html) | > | Understand the legal trick | Skim [clean room design](https://en.wikipedia.org/wiki/Clean_room_design) on Wikipedia | > | Host a free-app swap | Try [Coolify](https://coolify.io/) (self-host, free) | > | Sell your first digital thing | Set up a [Gumroad](https://gumroad.com/) page (free to start) | > | Check license risk for cash | Learn [FOSSA](https://fossa.com/) basics | **⚡ Quick Hits** | You want… | Then do this | | --- | --- | | 🏃 Fast $$ this week | 🪟 Be the “free-app setup” person before everyone knows | | 🗺 Zero-code income | 📡 Sell feature-breakdown PDFs on [Gumroad](https://gumroad.com/) | | 📈 Something that grows | 🛠 Sell hosting templates on [Railway](https://railway.app/) | | 🛡 Steady + safe | 🕳 Charge for license health-checks | | 🧪 Creative builds | 🧬 Run a custom mini-tool mashup shop | _They built a copy machine for the whole software world and called it a joke. The people who read the joke as a map are the ones eating._ ---
**Author:** ![GrimXLock](https://onehack.st/user_avatar/onehack.st/grimxlock/32/174321_2.png) [@GrimXLock](https://onehack.st/u/GrimXLock)\ **Post date:** [8 أغسطس 2026، 3:02م UTC](https://onehack.st/t/a-1-ai-just-cloned-real-software-in-minutes-and-called-it-legally-distinct/324370/2 "2026-08-08T15:02:12Z")
Old news, this was posted already