diff --git a/2020/11/2020-11-05-dtag.md b/2020/11/2020-11-05-dtag.md new file mode 100644 index 000000000..eb33f8550 --- /dev/null +++ b/2020/11/2020-11-05-dtag.md @@ -0,0 +1,161 @@ +Hello! + +I am [private], the [private] at Deutsche Telekom IT Solutions Russia and a member of Deutsche Telekom AG (DTAG) Security department. I am authorized to act on the copyright owner's behalf. + +A few days ago our team accidentally discovered that 23 November 2019 the source code of commercial software were published under the https://github.com/dartiin account. I allege that all of the content at https://github.com/dartiin/carbazar, https://github.com/dartiin/mwc, https://github.com/dartiin/stax-v2, https://github.com/dartiin/ice-9, https://github.com/dartiin/stax, https://github.com/dartiin/XRide-e-scooters infringes. + +The owner of developed software is Deutsche Telekom AG (DTAG). Source codes in these six repositories were initially developed by Telekom Innovation Laboratories (also called T-Labs) or governed by T-Labs. T-Labs is the R&D unit of Deutsche Telekom AG (DTAG). + +This source code is proprietary and not published. + +DTAG did not authorized the user dartiin to upload and post those source code and documents to the public GitHub repositories. + +This source code is proprietary and not published, so we can’t provide a public link on it. Please tell us how could we better proof of owning these repositories, if proofs below are not enough. + + + +Repository https://github.com/dartiin/XRide-e-scooters/ - is a full set of repositories of XRide project, developed by T-Labs. See publications about this project + +https://iot-automotive.news/xride-first-of-its-kind-blockchain-based-e-mobility-project/ + +https://www.telekom.com/en/media/media-information/archive/xride-first-of-its-kind-blockchain-based-e-mobility-project-580934 + +https://jolocom.io/blog/xride/ + +https://www.telecomtv.com/content/blockchain/deutsche-telekom-going-places-with-blockchain-e-scooter-pilot-36311/ + + + +There are mentions of T-Labs infrastructure’s domain names in folders related to deployment configuration, where was launched XRide project + +Like here https://github.com/dartiin/XRide-e-scooters/blob/master/r2b-msa-contractor/infrastructure/chart/azure-values.yaml + +[private] + + + +Domain tlabs.cloud is registered by x-ion GmbH (https://www.x-ion.de/) (this could be checked with https://whois.nic.cloud/). T-Labs is a client of x-ion GmbH, this company provides T-Labs mentioned domain name and other part of infrastructure. + +Here is also mention of our domain https://github.com/dartiin/XRide-e-scooters/blob/master/r2b-lb/infrastructure/chart/dev-values.yaml: + + hosts: + +- [private] + + + +Here is mention of a private docker repository https://github.com/dartiin/XRide-e-scooters/blob/master/r2b-msa-facade/infrastructure/chart/dev-values.yaml + +image: + + repository: [private] + + + + + + + +Source code in repository https://github.com/dartiin/carbazar was created with “Impaq” company (now its’ Gfi Poland https://gfieast.com/en/). This company developed this source code with T-Labs. + +Here is mention of private maven repository [private] https://github.com/dartiin/carbazar/blob/master/eclet-verifier/pom.xml + + + + mesh-nexus + + Releases + + [private] + + + + + +In this file a link to private docker registry is mentioned with ‘dltstax’ and ‘impaq’ https://github.com/dartiin/carbazar/blob/master/carbazar-ui/Jenkinsfile + + + + sh "[private]" + + + + + +In repository https://github.com/dartiin/mwc could be seen hostname were service was deployed: https://github.com/dartiin/mwc/blob/master/mwc-inf-lb/infrastructure/chart/azure-values.yaml + + hosts: + + - [private] + + + +This domain is part of DTAG infrastructure. + + + +In repository https://github.com/dartiin/ice-9 also could be seen hostnames of DTAG infrastructure + +https://github.com/dartiin/ice-9/blob/master/go-ice/infrastructure/ansible/vars/dev.yml + +MonitoringAddress = "[private]" + + + +In README of repository https://github.com/dartiin/stax-v2/tree/master/staxd explains that it’s a part of Hashstax project. Here is publications about this project + +https://inform.tmforum.org/insights/2019/08/deutsche-telekoms-blockchain-innovations/ + +https://www.linkedin.com/pulse/t-labs-promotes-new-levels-trust-via-blockchain-2018-mikityuk + + + +In this repository is placed landing page of first version of Hashstax project https://github.com/dartiin/stax/blob/master/landing-page/index.html. Here is a mention of T-Labs page in LinkedIn as a contact. + + + +
+ + + +
+ + + +Also in the repo photos of the team originally working on the product https://github.com/dartiin/stax/tree/master/landing-page/images + + + + + +I am requesting that the listed repositories be taken down. The repository's URL’s are: https://github.com/dartiin/carbazar, https://github.com/dartiin/mwc, https://github.com/dartiin/stax-v2, https://github.com/dartiin/ice-9, https://github.com/dartiin/stax, https://github.com/dartiin/XRide-e-scooters. + +Repositories mentioned above must be removed. The user dartiin is not authorized to have copies of the DTAG source code and documents in that repositories. + +I do not have the user dartiin's contact information at this time. + +I have a good faith belief that use of the copyrighted materials described above on the infringing web pages is not authorized by the copyright owner, or its agent, or the law. I have taken fair use into consideration. + + + +I swear, under penalty of perjury, that the information in this notification is accurate and that I am authorized to act on behalf of the owner, of an exclusive right that is allegedly infringed. + + + +I have read and understand GitHub's Guide to Submitting a DMCA Takedown Notice. + +Best regards, + +Deutsche Telekom IT Solutions + +[private] + +[private] + +V.O. 13th line, 14 B, 199034, St. Petersburg, Russia + +Tel. [private] + +[private]