# A Robot Cloned GPL Software in 90 Seconds and Slapped a "Legally Distinct" Sticker On It **URL:** \ **Category:** News & Articles\ **Tags:** programming, hacking, tips-tricks, ai, news\ **Created:** [July 13, 2026, 2:51pm UTC](https://onehack.st/t/a-robot-cloned-gpl-software-in-90-seconds-and-slapped-a-legally-distinct-sticker-on-it/323860 "2026-07-13T14:51:13Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![Parizaad](https://onehack.st/user_avatar/onehack.st/parizaad/32/174871_2.png) [@Parizaad](https://onehack.st/u/Parizaad)\ **Post date:** [July 13, 2026, 2:51pm UTC](https://onehack.st/t/a-robot-cloned-gpl-software-in-90-seconds-and-slapped-a-legally-distinct-sticker-on-it/323860/1 "2026-07-13T14:51:13Z")
# 🧬 A Robot Cloned GPL Software in 90 Seconds and Slapped a “Legally Distinct” Sticker On It _so somebody built a machine that takes free software, launders it through an AI, and hands you back a version the original creator can’t legally touch. it’s satire. it also works._ **A tool called [MALUS](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/) rebuilds any open-source project for pennies — spitting out “legally distinct code with corporate-friendly licensing” in the time it takes to microwave a burrito.** Built by a security founder and a UN software architect. Half joke, fully functional. And the whole “you can’t do that” rulebook the open-source world runs on? Suddenly looks like a screen door on a submarine. ![DNA cloning machine](https://media.giphy.com/media/l0HlBO7eyXzSZkJri/giphy.gif) no cap, this is the “we did it for the memes but the memes are load-bearing now” timeline. let me break down what actually happened. > **🧩 Dumb Mode Dictionary (read this first, everything else clicks)** > > | Fancy Term | What It Actually Means | > | --- | --- | > | **Open source** | Software where anyone can see and use the recipe for free | > | **GPL / copyleft** | A rule that says “use my free code? cool — but YOUR version has to stay free too.” It’s a chain. | > | **Clean room** | You describe what a thing does to someone locked in a room who’s never seen the original. They rebuild it from scratch. No copying = no copyright problem. | > | **Legally distinct** | “Looks the same, does the same, but technically I wrote it fresh so you can’t sue me” | > | **MALUS / malus.sh** | The AI tool at the center of this. You point it at free software, it hands you a private copy with the chain snapped off | > | **Proprietary** | The opposite of free — locked up, sell-it-for-money, don’t-touch-my-code software | > **📰 What went down** > > Two dudes — [Dylan Ayrey](https://trufflesecurity.com/) (founder of a security company called Truffle Security) and Mike Nolan (a software architect who works with the UN’s development program) — built a website called **[malus.sh](https://www.techspot.com/news/111904-ai-can-clone-open-source-software-minutes-problem.html)**. > > Here’s the pitch: you give it a free/open-source project. It aims an AI at the code, studies what the software _does_, and then rebuilds an “analogous” version — without ever copy-pasting the original. Because the AI technically wrote fresh code, MALUS claims the result dodges the GPL “keep it free” chain entirely. > > - Cost: **cents.** > - Time: **minutes.** > - Result: a private, sellable version of software someone gave away for free. > > > The site literally advertises “legally distinct code with corporate-friendly licensing.” That’s not me being cheeky — that’s the marketing copy. > **🕰️ Why this is a big deal (a tiny history lesson, i promise it's short)** > > Back in **1982** , a company called Phoenix wanted to copy IBM’s secret startup code (the BIOS) without getting sued. So they did the [clean-room trick](https://en.wikipedia.org/wiki/Clean_room_design): one team studied IBM’s code and wrote a description, a second team (who NEVER saw IBM’s code) built a fresh version from that description. Boom — legal clone. It birthed the entire PC-clone industry (that’s why you can buy a laptop that isn’t an IBM). > > But it took **months** and **hundreds of thousands of dollars** and two separate teams of expensive engineers. > > MALUS just turned that whole opera into a button. Months → minutes. Six figures → pocket change. That’s the actual headline here. The _technique_ is 44 years old. The _price crash_ is the news. > > _they took the nuclear option and put it in a gumball machine._ > **⚖️ The catch nobody can answer yet** > > Real talk — this is NOT settled. Here’s the honest version: > > - **It’s satire.** The creators built it partly to troll and to make a point about how fragile copyleft is in the AI age. > - **It also genuinely works and genuinely charges money.** Both things are true. > - **It has never been tested in court.** “The AI wrote it fresh so it’s fine” is a _theory_. A judge could absolutely say “nice try, that’s still copying” and torch the whole thing. > > So if you’re reading this thinking “sick, i’ll go clone Photoshop” — pump the brakes, champ. The legal ground is quicksand. The _interesting_ part isn’t stealing software. It’s what this whole circus reveals about where value is moving. Which is the fun part 👇 > > [Full breakdown at 404 Media](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/) · [TechSpot’s writeup](https://www.techspot.com/news/111904-ai-can-clone-open-source-software-minutes-problem.html) · [Futurism’s take](https://futurism.com/artificial-intelligence/malus-clones-software-copyright) > **🗣️ What the timeline's saying** > > - **Open-source maintainers:** full-on (╬ Ò﹏Ó). “we gave this away for free and now robots are relaundering it to sell back? diabolical.” > - **The ‘legally distinct’ meme crowd:** having a field day. Everyone’s clean-rooming everything as a bit now. > - **Lawyers:** quietly sweating, because “clean room” law assumed a _human_ in the room. Nobody wrote rules for a machine that reads all the code and forgets it on command. > - **Startup bros:** already DM-ing each other “wait can we do this with [expensive competitor]” > > the vibe is basically that one spider-man pointing-at-spider-man meme, except every spider-man is a codebase. #### Cool. A Machine Snaps the “Keep It Free” Chain for Pennies… Now What the Hell Do We Do? ( ͡° ͜ʖ ͡°) ![cloning laboratory machine](https://media.giphy.com/media/3o6ZtaO9BZHcOjmErm/giphy.gif) okay here’s where we stop gawking and start thinking. the point of all this isn’t “go pirate software” — that’s the boring, get-sued version. the point is: **when the impossible-expensive thing becomes cheap, the money moves to whoever spots it first.** here are 5 angles nobody’s fully run yet. test the edge before you call it impossible. > **🪟 The Patch-Window Prospector** > > Every time a giant free project changes its license to something _stricter_ (this happens constantly — companies do it to squeeze money out), there’s a 2-4 week panic window where small businesses that relied on the old free version freak out. You be the calm person in the storm — the one who already mapped which free alternatives (or clean-rebuilt options) cover their exact use case. > > 🧠 _Example:_ A 24-year-old dev in **Manila** watches license-change announcements on [GitHub’s trending page](https://github.com/trending) and a subreddit like [r/opensource](https://www.reddit.com/r/opensource/). When a popular tool goes “paid,” he publishes a same-day “here are your 3 free swaps + migration steps” guide and offers a $150 flat “move-me-over” service to panicking small shops. Sells 8 in a week. > > > 📈 **Timeline:** First client in ~5 days after any big license drama. The window closes in 3-4 weeks once everyone’s migrated — so you chase the _next_ license change. This never fully dries up; companies re-license something every few months. > **🧭 The Dependency Detective** > > Businesses have NO idea how much free/copyleft code is buried in the software they sell — and that buried code can be a legal landmine. You become the person who scans a company’s product and hands them a plain-English map: “here’s what’s inside, here’s what’s risky, here’s what’s fine.” > > 🧠 _Example:_ A self-taught 27-year-old in **Nairobi** uses free scanners like [FOSSA’s free tier](https://fossa.com/) or the open-source [ScanCode Toolkit](https://github.com/nexB/scancode-toolkit) to audit a startup’s codebase, then writes a 2-page “your license risk” report a non-tech founder can actually read. Charges $300 per report. Word spreads because founders are terrified of exactly this. > > > 📈 **Timeline:** First paid audit within 2 weeks of building a sample report. Stays viable for years — the more AI-cloned code floats around, the more paranoid buyers get. > **📚 The Vocabulary Landgrab** > > Whenever a weird new thing gets a name — “Clean Room as a Service,” “license laundering,” “legally distinct code” — the FIRST person to build the plain-English cheat sheet for it becomes the default search result. Free traffic forever, because everyone Googling the term lands on YOU. > > 🧠 _Example:_ A 22-year-old in **Lahore** builds a dead-simple one-page site: “Clean Room AI Cloning, Explained Without the Legalese” — every term defined, every myth busted, updated as court cases drop. Slaps a couple of relevant [affiliate links to legal-doc tools](https://en.wikipedia.org/wiki/Software_license) and an email signup on it. Becomes the #1 link within 2 months because nobody else bothered. > > > 📈 **Timeline:** Traffic trickles for the first 6-8 weeks, then snowballs as the topic heats up in the news. Plateaus only if a big outlet out-writes you — so keep it updated. > **🛡️ The Fingerprint Guy (help the DEFENDERS)** > > Flip the whole thing. Open-source creators HATE this and would pay to prove someone cloned their work. Fresh code with all the same quirks, bugs, and structure leaves a “fingerprint.” Be the person who catches the launderers. > > 🧠 _Example:_ A CS student in **Kraków** uses free code-similarity tools like [MOSS](https://theory.stanford.edu/~aiken/moss/) (the plagiarism detector professors use on students) and [JPlag](https://github.com/jplag/JPlag) to compare a suspicious “distinct” product against the original open-source project, then hands the maintainer a side-by-side “this is 84% structurally identical” report. Offers it as a $200 “clone check” to project owners and small companies. > > > 📈 **Timeline:** First gig within ~10 days of posting sample comparisons in dev communities. Grows steadily — this is an arms race, and defenders always need fresh eyes. > **⛏️ Sell Shovels, Not Gold (the boring-money play)** > > Everyone’s gonna chase the flashy “clone the software” dream and most will faceplant on the legal stuff. The steady cash is in the _boring picks-and-shovels_: the prompts, the checklists, the templates that make the whole workflow less of a legal minefield. > > 🧠 _Example:_ A 29-year-old in **São Paulo** builds a $19 “Open-Source License Survival Kit” — a Notion pack with a license-comparison chart, a “can I use this commercially?” flowchart, ready-to-send lawyer questions, and links to free tools. Sells it on [Gumroad](https://gumroad.com/) to indie devs and small agencies who don’t want to think about this stuff. 200 sales in the first month = $3,800, near-zero ongoing work. > > > 📈 **Timeline:** First sales within a week of launch if you drop it in the right dev Discords. Passive after that — refresh the kit whenever a major law/case changes, maybe 2-3 times a year. > **🛠️ Follow-Up Actions** > > | Move | Where to start | Cost | > | --- | --- | --- | > | Understand the trick | [Clean room design (Wikipedia)](https://en.wikipedia.org/wiki/Clean_room_design) | Free | > | Watch for license drama | [GitHub Trending](https://github.com/trending) + [r/opensource](https://www.reddit.com/r/opensource/) | Free | > | Scan code for hidden licenses | [ScanCode Toolkit](https://github.com/nexB/scancode-toolkit) | Free | > | Catch clones | [MOSS](https://theory.stanford.edu/~aiken/moss/) / [JPlag](https://github.com/jplag/JPlag) | Free | > | Sell a simple product | [Gumroad](https://gumroad.com/) | Free to start | **⚡ Quick Hits** | You Want To… | Do This | | --- | --- | | 🧠 Get why this matters | Read the [404 Media report](https://www.404media.co/this-ai-tool-rips-off-open-source-software-without-violating-copyright/) — 5 min, worth it | | 🕰 See where the trick came from | [The 1982 IBM clone story](https://en.wikipedia.org/wiki/Phoenix_Technologies) | | 🛡 Protect your own free project | Add a strong [copyleft license](https://en.wikipedia.org/wiki/GNU_General_Public_License) + document your quirks | | 💰 Pick a hustle | Start with the **Dependency Detective** — lowest skill floor, real demand | | ⚖ Not get sued | Remember: “legally distinct” is a _theory_, not a green light | _they didn’t hack the code. they hacked the definition of “copying” — and honestly that’s the scarier flex._