microsoft / msix-packaging

MSIX SDK
MIT License
964 stars 163 forks source link

[BUG] "Microsoft Coporation" = simple typo or Microsoft copyrights have been hijacked? #521

Closed R-Adrian closed 2 years ago

R-Adrian commented 2 years ago

Project Multiple MSIX-related projects

Describe the bug Lots of Microsoft code these days has its copyright assigned not to Microsoft Corporation anymore but to "Microsoft Coporation". Is this a copyright troll or just a typo??

To Reproduce Steps to reproduce the behavior: multiple choice: (take your pick - all are currently valid)

a) https://github.com/search?q=Coporation+org%3Amicrosoft&type=code

b) https://download.microsoft.com/download/2/1/1/2119da3d-32e5-4122-bbb9-2e889b847897/Administrative%20Templates%20(.admx)%20for%20Windows%2010%20November%202021%20Update%20V2.msi

c) https://www.virustotal.com/gui/file/1163fdc3ba6958acb56e9d25ee91871c79b310afd5a903e98209935630be6455/details Title: Installation Database, Subject: Windows 10 November 2021 Update V2 installer, Author: Microsoft Coporation, Keywords: Installer, Comments: Administrative Templates (.admx) for Windows 10 November 2021 Update V2

Expected behavior i don't suddenly find myself staring at a nasty Microsoft impersonator program when looking in appwiz.cpl at the list of programs installed on my servers.

Actual behavior i had a small WTF moment finding this "Coporation" impersonating Microsoft on my server and i started digging into why ... and i ended up at the steaming pile of typos from the GitHub search linked at point "a" in my list of steps to reproduce from above.

Screenshots If applicable, add screenshots to help explain your problem. image

Platform all

Additional context

if this typo is also present in the official legal paperwork ... you might want to ask some legal experts how to proceed about claiming those copyrights back. Brown stuff might be hitting the proverbial fan.

R-Adrian commented 2 years ago

update: this seems to be a "tradition" more than 5 years old...

https://github.com/search?q=Corportation+org%3Amicrosoft&type=code

Code from 2016 has its author listed as another legal entity name: "Microsoft Corportation" ... ROFL.

i tested the ADMX files for Windows 10 1607 LTSC and a similar author assignment was being done even back then:

https://download.microsoft.com/download/0/C/0/0C098953-38C6-4DF7-A2B6-DE10A57A1C55/Windows%2010%20and%20Windows%20Server%202016%20ADMX.msi

The code signing certificate for Microsoft Corporation has been used to sign code that has its authorship assignment set to a different legal entity name: "Microsoft Corportation" (??!!)

image

florelis commented 2 years ago

It is a simple typo. I submitted a PR to fix the instance in this repo. I'm also trying to open issues against the instances in other repos I find (both public and private).