Right - I see the other topic has been locked / author hasn’t returned to follow community rules.
Here’s the original topic https://news.ycombinator.com/item?id=49003386
and a measured (IMHO) response to it. (BTW, do your self a favour and change tabs with that site open :)
https://マリウス.com/i-regret-migrating-to-codeberg/
It’s a tough spot, Codeberg has found themselves in and I wish them luck. But beyond that, this is (yet) another reminder that in 2026, if you don’t self host it, the cloud is just someone else computer
If the hard legal reality of all LLM generated code having a high risk of breaking copyright is “feelings” for you, then sure 🙄
Not true, this does not occur frequently. This study and software LiCoEval from 2024 found 0.88% to 2.01% of code “strikingly similar to existing open-source implementations”. Afaik this is mostly textbook examples, snippets from stack overflow snippets or common github repositories, often replicated api examples and language boilerplate. How you prompt and refine also matters, and for generating novel code or business logic the LLM simply cannot use memorized snippets.
Presumably since then LLMs have worked to reduce that number of memorized code. Since LLMs cannot memorize all their training data, that number is limited. LiCoEval can find the often memorized examples and train to remove them, or suppress them, or they find other ways to reduce direct reproduction from memorization. For example it would be possible to do what malus.sh does with all the training data. Then it cannot memorize copyrighted code.
So for a model that came out 2026 this already small number might not be that relevant anymore.
Copyright can also apply to code rewritten in another programming language, if the overall structure and functionality is identical. Although tbh, that is a bit of a grey area, and in previous rulings there is some precedence that if the “translation” involves significant human effort then it can be considered to be sufficiently transformative. But promting an LLM to “rewrite this in Go” very likely doesn’t pass that relatively high bar.
The study you linked is interesting (and likely underestimates the issue*), but it also shows that it is possible to automate detection of copyright infringing code in LLM output, and even just 2% is more than enough to open a case for malicious litigation. Large companies can write that off as the cost of doing business, but for small individual open-source developers this is a significant risk.
‘*’ Because human programmers usually reuse existing licensed code as libraries, while LLMs are prone to rewrite them, and as explained above a rewrite is at an elevated risk of being considered copyright infringing.
You can also set a LLMs to completely rewriting code snippets from scratch to perform the same function, writing and fulfilling the same unit tests. Not just rewrite in a different language or changing variable names. Basically the transformative abilities of LLMs can make copyright obsolete.
That is wishful thinking. Copyright was originally designed to protect human creativity, and a lot of the laws and precedence cases involve human effort specifically to distinguish between plagiats and original works.
As long as courts don’t start to rule otherwise, LLM generated code is not considered to be copyrightable itself, thus it can not be original work as defined under copyright laws. This in turn lowers the threashold for such code to be considered a derivative regardless of if there is a clear pathway from one to the other. All it takes is someone to claim that it is derivative, and the burden of proof that it isn’t largly falls onto the person accused. And if the code is functionally identical and with no significant human involvement, that is very hard to proove.
IANAL of course.
There is simply no way that is true. First, the legal arguments are dodgy:
Second, there is no fucking way a western court is going to tell every big tech company they have to delete 99% of the code that was written since the start of the year, even if the law as written literally said verbatim, “use of any LLM output for any purpose is breach of copyright” because it doesn’t take a conspiracy theorist to realise that it’s politically impossible.
You may not like that, but it means that, again, Codeberg is doing this based on feels.
Well I left github because of “feels”, reddit too.
I think slop-code & crypto can go there if they want, what are your “feelings” about that?
I think your feelings are irrelevant to the admins’ and don’t change the fact that they aren’t being honest (with people, or quite possibly themselves)
They are honest and say what they are doing, go make your own free git hub with crypto and LLM?
It must be so nice that you can dismiss reasoned argument about why I don’t believe they’re being honest with a plain assertion.
Why? It doesn’t interest me. Nothing that I’ve said suggests I would be.
You are missing the point entirely. LLMs regularly generate code that is a near verbatim copy of existing copyrighted code, but with almost no way for the LLM using person to notice that. LLMs being sufficiently transformative might be an argument about the use of training material, making the resulting model not a copyright violation itself, and thus might protect the companies that produce and offer these models, but it says nothing about the actual output of a model.
It is only a question of time before some enterprising law firm decides to mass scan open-source projects and weaponize their findings similar to patent trolls or file-sharing legal threats. This has a long history in Germany where Codeberg is located, and even if a court rules that the host itself is only responsible for removing such copyright violating code, it will require significant effort to do so with constant legal fights as the attacking lawyers will try to figure out the identity of the person responsible so that they can blackmail them with cease and desist legal fees.
Politics will not care about some hobbyist open-source projects and large companies will spend a lot of effort to obfuscate their code to prevent this legal trolling to affect them.
People can upload code that violates copyright too. No llm required.
So if that is the concern have a rule about not violating copyright (which they may already have). And there is likely already a process for handling that.
This is the problem I have with the situation: the solution chosen (banning llm code) doesn’t really address the concerns they’ve raised directly. It’s just apologetics to make it sound like it’s reason-based rather than “we don’t like it”.
It’s their platform, they can do what they want, but let’s not pretend it’s not code-puritanism.
Yes, they can upload copyrighted stuff, but people typically don’t do so on large scale and when they knowingly do it these days they typically try to hide their tracks well enough that law firms know it will not be a lucrative business to try and blackmail them.
And one of Codeberg’s main points is the unknown copyright status, you just failed to understand it.
Yeah - it’s well known that scripts to automate doing bad things did not exist before llms.
People have tried using forges to host explicitly illegal material all the time. Not just “this may be a copyright issue perhaps maybe”.
The copyright complaint is a fig leaf to hide their shame.
They also outright banned cryptocurrency code with no “copyright fig leaf” apologia.
It’s code puritanism plain and simple. “We don’t like these things so we’re banning them.”
You are still not understanding the issue.
LLMs cause a lot of people to unknowingly violate copyright, and those people then become easy targets for malicious copyright litigation. And Codeberg is caught in the middle of that and doesn’t want to be involved in the resulting mass legal cases because they are just a small volunteer organisation without a legal team.
And Codeberg’s explanation is very clear that is isn’t a blanket ban on LLM generated code for “purity” reasons. It is a risk mitigation strategy against projects that are mostly LLM generated.
I’d buy that. As a mediocre musician, one can even subconsciously ‘sample’ a copyrighted piece. I mean, there are only so many chords and combinations, melodies, etc, so duplicates, and even exact duplicates are bound to happen whether intentional or not. If you upload your track to say SoundCloud on the professional plan with which you intend to generate revenue, the track is heavily scrutinized, and often rejected for this very reason. You actually have to prove it’s OC by various means. They don’t want any pieces parts of any litigation that may even mildly involve them. So, I can see that.
This hasn’t happened. It’s a fantasy.
Maybe you don’t understand copyright?
What hasn’t happened? Sure, this isn’t wide spread yet, but it also took malicious law firms a while before they realized going after p2p torrent users is a lucrative business.
And I seem to have a much better grasp at copyright than you do.
You’re right I wasn’t really thinking about the possibility of verbatim reproduction. I guess we’ll see about that.
Codeberg will need efficient procedures to handle IP trolls anyway, getting a bunch more takedown requests ought not to make a big difference. And if somehow it does start to be a problem… that would be the time to blanket ban or take similar drastic action. If it’s possible to detect now, it will be possible to detect then.
Politics will absolutely care about having a precedent which leaves big tech exposed. Any case against little fish will be jumped on by Zuck and Bezos before you can say “datacenter”.
No, these malicious law firms intentionally go after the small fish, who are much more likely to be intimidated and give in to a settlement payment before it even reaches the courts.
And for Codeberg it makes absolutly sense to minimize the issue for them now before it becomes an even bigger issue.
k
https://malus.sh/
AIs already pillaged all the code in the world. This is fighting a lost fight. We won’t manage to force big AI firms that literally props a country to stay afloat to make their AI “forget” or “untrained”.
Regulators let the pillaging happen so now AI does know how to code. They dont imitate they truly code.
But IMO the real fight is about things like malus that are the real dangerous and malevolent actor here. They will take your open source code and resell it to big businesses.
You are linking to a parody project 🤦
And you are also misunderstanding my point. Yes the cat is out of the bag and companies will absolutely copyright wash their codebases like that, but they have big legal teams to defend against copyright trolls and generally do not publish most of their code base for anyone to see.
Small hobbyist open-source projects that make up near 100% of the projects hosted on Codeberg on the other hand are easy marks for malicious litigation, just like home users torrenting movies were in the 1990ties and early 2000.
Lol Malus is not a parody.
You can verify it yourself but they do make money doing exactly what they say.
They play on that “parody/malevolent” idea but they do have customers and confirmed they make money on that.
It is still a parody project 🤷
How much money are you willing to put in to test that?
5 Zimbabwean dollars.
So then why are you asking other people to on your behalf?
Hmm, maybe the bits of my post that you didn’t quote contain the answer.
First though you need to understand I’m mainly saying I don’t buy their justification.
No, you made a large assumption that this holds up in court completely, predicated on the idea that anything but would be disastorus.
I don’t buy that premise, and neither does codeberg. So again, why should they put money up in that assumption?
I made three claims and you talked about a single one, and not in a substantive way.
This conversation doesn’t seem to be going anywhere interesting or useful, so goodbye.
And all 3 hinge on the premise of courts will do ‘sane’ things, without any kind of justification for them. So yeah, all 3 are moot if you remove that assumption.
So how much money should be risked on that bet?