I mean, it seems a pretty open-and-shut case. The author literally admits he copied the code. From one of the comments he makes:
> @kuckir, to be clear about the lineage: PhotoSuite started from the Photopea build mirrored at https://github.com/ruanjiyang/Photopea-Offline, and the README credits Photopea as the primary inspiration and prior art. Over the past year it's been rewritten and rearchitected module by module, retargeted for desktop, restructured into ~330 source files, with a lot of features Photopea doesn't have. It's a rewrite of that lineage.
That Photopea-Offline is an unofficial rip of the actual app. Pretty sure using a pirated version doesn't suddenly grant you license rights to use & extend the code into another competing product...
to banning photopea, to when photopea responds with a 2nd account re: some duplicate code which is very hard to explain w/o being, well, duplicated to what you pasted above.
Absolutely. There’s a lot of this going around on twitter too with all the game reverse engineering with all the AI grifters claiming games are all open source now etc. Yeah right, I don’t think they understand the concept of open source or copyright!
Why not just apologize and have Claude rewrite any code that's similar? Whether you did it intentionally or not, you probably agree that you can't keep using his code and that it would pretty bad if someone did something similar to you.
seeing what has been happening in the game modding communitiy, with people doing full rust rewrites of games like modern warfare 2 [1][2], or mashups with cod, minecraft, and skate 3 [3][4], the only defence against reverse-engineering literally all software will be to serve it from the cloud, and even that will not be enough.
the future of software is oss. unless governments lock down access to these tools to prevent this kind of reverse engineering. which is a horrible future to envision.
I saw someone say that we're going to go back to a situation like the 70s where software is technically copyrightable but there's no reason to bother. Maybe Stallman's dream will finally come true.
I think GTA6 will be the real test for how capable these agents are. Some of these mods use well-known emulation methods, and some of these binaries have probably been ingested by the LLM numerous times.
I don't mean to discredit LLM capabilities, it's just that these examples are heavily favored by what's already documented online.
yeah for sure, and more modern games will probably be more difficult as well. but even so, games feel like one of the harder things to reverse engineer compared to most business software. yes there is the backend component, but that's mostly just crud.
I'm currently working on OpenBFME[0] and I can assure you, enough LLM power guessing at the code in the binaries is enough to get the code for anything
Wine-style PS5 emulation has advanced far enough that I would bet money on there being a pirated GTA6 PC release based on the PS5 version available within six months.
LLMs have changed the obstacle of doing something from (time, attention, expertise) to (time, attention, tokens).
I don't see what's unique about GTA6. It's just larger in scope if you wanted to decompile or greenfield a custom engine.
But at the end of the day you'll be able to unpack the assets yourself and immediately have the worldmap running in a browser in Three.js. And once you're there, you can vibe-code any game you want on top of it.
I just find it surprising that the author is complaining about "stolen code" while having been piggybacking (and earning money) from unattributed OSS code for years... https://github.com/photopea/photopea/issues/9042
Same thing happened with the release of a certain programming language release a few weeks ago (that seemed fully vibecoded, which is fine - but was making multiple grandiose claims which attracted pushback). Multiple sock puppet accounts defending the poster religiously with attitude that is more reserved for reddit than HN.
It happens more around things related to vibecoding, it seems that influencer culture, empowered by this new tooling is starting to distort tech communities.
More and more of this will be happening. Before AI coding - the fact that something like photopea or pixelr existed, meant that somebody had to commit years of focused work to even reach to the same level of quality before starting to provide value and attract users. That alone made copying a losing proposition. Nowadays it can happen in an evening, so everything successful will get copied and attacked and attempted to be displaced by noise and hype on certain internet circles alone. Like the cheap ridiculous clones of popular ios games and apps, except in an industrial scale!
I guess this is the new world we are entering, but can we at least keep the astroturfing and bad faith behavior away damnit?
Half of these are extremely permissive license attribution issues. Seems rather tame, no?
> 4.4. Paper.js (ext1790438722.js)
> Upstream Project: Paper.js (by Jürg Lehni & Jonathan Puckey)
> License: MIT License
> Specific Violations:
MIT Condition: The MIT License mandates: "The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software."
The entire ~200 KB Paper.js library is embedded in minified form with all author names, copyright notices, and license text stripped.
I question the seriousness of the author of "Photosuite". Who goes through the trouble of creating accounts to prove poorly, that they "didn't steal code".
I have no affiliation with anyone in this drama. I heard of Photopea before but never used it. I just opened it to check for attributions and did not find any at all. So if the - possibly fueled by lower motives - accusations about OSS license violations are indeed true, IMO Photopea lost any right to complain about people copying their product.
If your answer to "here is an example of 1:1 copying of my code and I can do the same for every line in your app" (Github comment 7, from the Photopea author) is to copy/paste a justification from an LLM (comment 8, from the Photosuite author), you've lost the argument.
The hard reality though is any site written in JavaScript is now part of an LLM's training set and can (and will be) be trivially rewritten into something new. Interesting times.
>“He who hath grown wise concerning old origins, lo, he will at last seek after the fountains of the future and new origins. […] For the earthquake—it choketh up many wells, it causeth much languishing: but it bringeth also to light inner powers and secrets. The earthquake discloseth new fountains.”
All I know for sure is that the author of Photopea is not AI and I remember when he first released it. No one was calling it a photoshop ripoff. People were calling it an actual open source alternative that functioned and didn't cost the heap of cash Adobe wanted. I recall the response to the announcement being quite positive.
Can confirm he is not AI and he also used to hang around here. Also before photopea, he tried to make a living once with a open source project, a flash replacement graphic libary for the web, called IvanK.
So that did not work out, but I used it a bit and interacted with him couple of times there, before moving on to easel and later pixi, after it became clear it would not take off and the other ones had more support.
Glad for him to found success with Photopea later, and he definitely has my sympathy here.
But I doubt this will work out much longer in the long run. It is just too easy cloning and improvimg projects with AI.
Indeed. As others have pointed out as well, it's not open source. I thought it was just minified JS that can be downloaded and run offline. I've never used it because I prefer to self-flagellate by using GIMP.
How bizarre. The thief has already deleted the thread. So obviously guilty just by the fact that it's clearly a browser app inside a desktop wrapper. That makes absolutely no sense as an architecture decision. And it uses all of Photopea's libraries. Before the thread was deleted, they had spawned a few sub‑agents to come in and bully the Photopea creator. But none of it was believable; it was clearly an angry thief lashing out.
That makes absolutely no sense as an architecture decision.
It makes a lot of sense architecturally. It's much simpler to update a webpage than force every user to update their app when something needs to change. Consequently a lot of apps, especially on mobile, use a system webview with a page loaded from a server and rendered to look like the app for anything that gets regular updates. The alternative is having lots of versions of the page and needing to manage all the different variations of payloads from them.
Backwards compatibility in an API isn't that hard, but when there's a simpler option (a webview) people will take it.
That's all wonderful until some dipshit decides to cut features because they were too much of a maintenance burden. At least with the desktop app you can push back and not update.
“ being more distrusting of browser-based apps than native binaries, especially with an undue focus on the risk of the app exfiltrating your data over the network”
Not a logical error. A notarized or app store app can be blocked from accessing the network so there is no data exfiltration happening. The malware risk is negligible thanks to Apple’s vetting.
“It's much simpler to update a webpage than force every user to update their app when something needs to change”
That much is true, but I consider this misfeature a clear disadvantage for the customers using the app, which are at the mercy of the developer.
The days of updates being something positive are long gone. Nowadays they’re a mix of UI redesigns requiring relearning stuff, spyware, unwanted bloat, bugs and a couple of actually useful things thrown in.
Isn't this a pretty obvious case I mean the author is not even hiding it just check the readme. They found illegally extracted photopea code then used AI to copy it. How are there any doubts on this?
photosuite maintainers could just have ai adjust the code "In the style of X" and get around any argument if copy/piracy. The laws haven't caught up here. I can't imagine how anything could be enforced. Also there's cleanroom as a service :shrug: open source software effectively has no license for someone with tokens to spare.
I don't like it but thats the situation on the ground IMO
Finally you reflect on your actions. When will you quit using computers that you rely on to compensate for your total lack of skills?
Can't even be bothered to wlk to the library, so he lazily "googles".
We need much more of these type of direct call outs! Shed light on the AI grifters so the community knows what projects to avoid like the plague.
It's embarrassing to be honest. The eolix guy couldn't even respond to the very first piece of evidence by the Photopea creator, before spewing some clearly and poorly generated, LLM response. So of course he'd resort to issue-closing, title-changing, banning, bullying and then Whatabout-ism.
Beautiful rainbow of moral failures...
Goodluck with that "internal audit" buddy. The internet never forgets.
A side note: I wonder what pre-Microsoft Github would do in such cases. I don't think I've ever seen modern Github take action against any clone repo with legitimate copyright issues.
You’ve tried them out? I’m intrigued but haven’t had a chance to sit down and give them a shot. I’m particularly interested in how the vector one performs and how well it works.
Hey guys, I am the creator of Photopea, I just woke up! I did not expect that it will blow up like this.
Thank you all for your support! Many repositories like this one exist on GitHub, I tried to report in in the past, but I was completely ignored by Github / Microsoft. I feel pretty powerless here :( I tried to call them out on media - https://x.com/photopeacom/status/2106877355738140875
This "PhotoSuite" thing got me a bit angry, since the author presented it as an original work, when I clearly see that such a project can be made from my "pp.js" file in two hours using Claude. Also, I think the README.md did not mention Photopea before I wrote my first comment there.
Thousands of people shared "PhotoSuite" on social media and nobody minded the fact that they don't know who the creator is. The creator is still offering it on their website as their original work: https://www.photosuite.app/
We live in interesting times. AI can (or will be able to) de-obfuscate every bit of code that ever existed, convert binaries to readable C++ and so on. So, in theory, AI models will train on the source code that we consider "closed-source" now, and will be able to recreate this software if asked. But it wouldn't be possible if a real person did not spend thousands of hours of their life to write that software years sooner.
I have always been excided to see people make AI create something new, what didn't exist before. But so far, I mostly saw only "approximations" of expensive software, when AI tries to recreate each feature and each button according to what it thinks it should do, or "forks", when AI takes the full code of something and tries to "bend" it to hide the similarity with the original work.
Yes, and I totally support it! They start "from zero" and build everything piece by piece by testing the input / output of each feature. I just hope they use Photoshop / Photopea / Other software only from the users perspective and not by analyzing the code (source code or "binaries" - it probably does not matter to AI nowadays).
In this case, it was a clear copy-paste of my code, whith the variable names changed by the AI.
I use photopea every day. I can only imagine the complex emotions you're going through. I am not nearly as attached to my software, I imagine, just because of how "unimportant" it is.
I am still very attached to it though. For no good reason other than "it's mine", I think.
Isn't it a good thing software can't be closed? We have to use someone's tool though, and ego is inevitable, so idk? 100s of separate "open source" versions and people use what they think is the best?
Is it just about accountability? and having an author/human attached to the product to direct it? Choosing the person you have the most faith in?
Emulating a program's functions, menu structure and look in original code is very different than having AI decompile a binary to source and then representing it as your own work.
I heard from a guy that worked at Adobe in the 2010s that at one point they forgot how to make new buttons so they hooked up a browser window that was transparent and passed clicks through except for the point where the new button they were trying to do was where there was an html+css button that caught clicks
The photoshop like UI doesn't bug me. I'd want to know where the code came from. If it started with Photopea's code, an AI rewrite doesn't really change that.
105 comments
[ 0.17 ms ] story [ 26.3 ms ] thread> @kuckir, to be clear about the lineage: PhotoSuite started from the Photopea build mirrored at https://github.com/ruanjiyang/Photopea-Offline, and the README credits Photopea as the primary inspiration and prior art. Over the past year it's been rewritten and rearchitected module by module, retargeted for desktop, restructured into ~330 source files, with a lot of features Photopea doesn't have. It's a rewrite of that lineage.
That Photopea-Offline is an unofficial rip of the actual app. Pretty sure using a pirated version doesn't suddenly grant you license rights to use & extend the code into another competing product...
> That's a bold accusation. Would you care proving which bits of the code are "stolen"?
https://github.com/eolix/photosuite/issues/77#issuecomment-5...
to banning photopea, to when photopea responds with a 2nd account re: some duplicate code which is very hard to explain w/o being, well, duplicated to what you pasted above.
I suspect we're dealing with a child here with a cloud code subscription who isn't quite familiar with US copyright law or software licenses yet.
He's the definition of the word "bootlicker".
"But he admitted to killing him, he's innocent!"
the future of software is oss. unless governments lock down access to these tools to prevent this kind of reverse engineering. which is a horrible future to envision.
[1] https://github.com/vladtrc/iw4L
[2] https://www.youtube.com/watch?v=9UbADrcEW5w
[3] https://github.com/chasmlol/2010-rust-rewrite-mashup
[4] https://www.reddit.com/r/bevy/comments/1wuag9d/skate_3_was_r...
I don't mean to discredit LLM capabilities, it's just that these examples are heavily favored by what's already documented online.
[0] https://github.com/Open-BFME/
btw this is the actual solution, not that whole stop killing games movement. not regulation.
I don't see what's unique about GTA6. It's just larger in scope if you wanted to decompile or greenfield a custom engine.
But at the end of the day you'll be able to unpack the assets yourself and immediately have the worldmap running in a browser in Three.js. And once you're there, you can vibe-code any game you want on top of it.
Or rather created it and eolix is your other alias?
It happens more around things related to vibecoding, it seems that influencer culture, empowered by this new tooling is starting to distort tech communities.
More and more of this will be happening. Before AI coding - the fact that something like photopea or pixelr existed, meant that somebody had to commit years of focused work to even reach to the same level of quality before starting to provide value and attract users. That alone made copying a losing proposition. Nowadays it can happen in an evening, so everything successful will get copied and attacked and attempted to be displaced by noise and hype on certain internet circles alone. Like the cheap ridiculous clones of popular ios games and apps, except in an industrial scale!
I guess this is the new world we are entering, but can we at least keep the astroturfing and bad faith behavior away damnit?
> 4.4. Paper.js (ext1790438722.js)
> Upstream Project: Paper.js (by Jürg Lehni & Jonathan Puckey)
> License: MIT License
> Specific Violations: MIT Condition: The MIT License mandates: "The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software." The entire ~200 KB Paper.js library is embedded in minified form with all author names, copyright notices, and license text stripped.
I question the seriousness of the author of "Photosuite". Who goes through the trouble of creating accounts to prove poorly, that they "didn't steal code".
The hard reality though is any site written in JavaScript is now part of an LLM's training set and can (and will be) be trivially rewritten into something new. Interesting times.
>“He who hath grown wise concerning old origins, lo, he will at last seek after the fountains of the future and new origins. […] For the earthquake—it choketh up many wells, it causeth much languishing: but it bringeth also to light inner powers and secrets. The earthquake discloseth new fountains.”
— Nietzsche, Thus Spake Zarathustra
> the reader emits the model's shape rather than the file's
Oh hello Claude
> the writer derives its field count from Object.keys().length while skipping the sentinel
So that did not work out, but I used it a bit and interacted with him couple of times there, before moving on to easel and later pixi, after it became clear it would not take off and the other ones had more support.
Glad for him to found success with Photopea later, and he definitely has my sympathy here.
But I doubt this will work out much longer in the long run. It is just too easy cloning and improvimg projects with AI.
That's a dangerous word. Did you mean adding more features?
It’s like mentioning your nephew is pretty good at the piano, when people are discussing if John Williams was copying Holst.
A rip off would be using the actual Photoshop source code.
Photopea is not, and has never been open source, AFAIK.
Archived at: https://web.archive.org/web/20261006025310/https://github.co...
https://github.com/eolix/photosuite/issues/77
I'll do a code audit (and you should too, before casting stones). The code is there.
> There are people on both sides of the fence, and I want out.
Victim card. How classy. You are using every trick in the book, one by one
It makes a lot of sense architecturally. It's much simpler to update a webpage than force every user to update their app when something needs to change. Consequently a lot of apps, especially on mobile, use a system webview with a page loaded from a server and rendered to look like the app for anything that gets regular updates. The alternative is having lots of versions of the page and needing to manage all the different variations of payloads from them.
Backwards compatibility in an API isn't that hard, but when there's a simpler option (a webview) people will take it.
This kind of thinking is what brought us the trend of painful Electron apps like Teams.
Not a logical error. A notarized or app store app can be blocked from accessing the network so there is no data exfiltration happening. The malware risk is negligible thanks to Apple’s vetting.
That much is true, but I consider this misfeature a clear disadvantage for the customers using the app, which are at the mercy of the developer. The days of updates being something positive are long gone. Nowadays they’re a mix of UI redesigns requiring relearning stuff, spyware, unwanted bloat, bugs and a couple of actually useful things thrown in.
I don't like it but thats the situation on the ground IMO
It's embarrassing to be honest. The eolix guy couldn't even respond to the very first piece of evidence by the Photopea creator, before spewing some clearly and poorly generated, LLM response. So of course he'd resort to issue-closing, title-changing, banning, bullying and then Whatabout-ism.
Beautiful rainbow of moral failures...
Goodluck with that "internal audit" buddy. The internet never forgets.
A side note: I wonder what pre-Microsoft Github would do in such cases. I don't think I've ever seen modern Github take action against any clone repo with legitimate copyright issues.
Maybe they weren't very good when you wrote your comment, but now they are awesome.
Thank you all for your support! Many repositories like this one exist on GitHub, I tried to report in in the past, but I was completely ignored by Github / Microsoft. I feel pretty powerless here :( I tried to call them out on media - https://x.com/photopeacom/status/2106877355738140875
This "PhotoSuite" thing got me a bit angry, since the author presented it as an original work, when I clearly see that such a project can be made from my "pp.js" file in two hours using Claude. Also, I think the README.md did not mention Photopea before I wrote my first comment there.
Thousands of people shared "PhotoSuite" on social media and nobody minded the fact that they don't know who the creator is. The creator is still offering it on their website as their original work: https://www.photosuite.app/
We live in interesting times. AI can (or will be able to) de-obfuscate every bit of code that ever existed, convert binaries to readable C++ and so on. So, in theory, AI models will train on the source code that we consider "closed-source" now, and will be able to recreate this software if asked. But it wouldn't be possible if a real person did not spend thousands of hours of their life to write that software years sooner.
I have always been excided to see people make AI create something new, what didn't exist before. But so far, I mostly saw only "approximations" of expensive software, when AI tries to recreate each feature and each button according to what it thinks it should do, or "forks", when AI takes the full code of something and tries to "bend" it to hide the similarity with the original work.
Genuine question: isn't this what photopea did to photoshop?
In this case, it was a clear copy-paste of my code, whith the variable names changed by the AI.
I am still very attached to it though. For no good reason other than "it's mine", I think.
Isn't it a good thing software can't be closed? We have to use someone's tool though, and ego is inevitable, so idk? 100s of separate "open source" versions and people use what they think is the best?
Is it just about accountability? and having an author/human attached to the product to direct it? Choosing the person you have the most faith in?
/rambling
Emulating a program's functions, look
Emulating a program's functions, menu structure and look in original code is very different than having AI decompile a binary to source and then representing it as your own work.