Microsoft forked MIT licensed repo and changed the copyright [fixed]
I was asked to run out Intune on Android [0], which is a Mobile Device Manager from Microsoft, (aka MDM) [1].<p>We needed an always-on VPN.  Intune supports several, but all insist you run some proprietary server software.  If you don't understand why that would make someone feel uncomfortable, PulseSecure [2] was one of those options.  There is open source GPL software that replaces the proprietary back ends called OpenConnect [3], but that violates their client licensing.<p>Then I discovered Microsoft has their own VPN called mstunnel.  That's when I felt like I had fallen down the rabbit hole.  I dismissed mstunnel initially because since it is a Microsoft Product, it would run only on Windows, right?  Turns out it only runs on Linux.  I thought you installed the mstunnel client on Android, because among other things it existed - but nope it was superceded by this thing called "Defender for EndPoint".<p>The server came as a Docker install, but we didn't have the required version of Docker so I unpacked it and ran it in a chroot.  That all worked in the end, but in the process of unpacking it I discovered what it was under the hood.  It had two things - an "agent" written in dotnet whose sole function as far as I could tell was verify with Microsoft's servers you have paid for it and ... a copy of free as in beer OpenConnect.<p>Nothing wrong with that really.  In fact it's the reverse - it being OpenConnect under the hood gave me a lot of confidence I wasn't dealing with another PulseSecure.  The only fly in the ointment is OpenConnect is GPL.  They are completely free to use it the way they did - in fact I suspect the OpenConnect authors would be very happy to see the project used in that way.  But you do have to comply with the licence. There was no attribution whatsoever, let alone instructions on a copy of the source as the licence requires.<p>I'm sure it's just an oversight, just like the subject of this article.  Maybe it's another mess for Jeff to fix.  I don't know you from a bar of soap Jeff, but keep up the good work.<p>[0] Intune provides a uniform MDM like experience across many platforms - including Windows.  If you need to control Windows like that you probably don't have much choice, you have to use a Microsoft product.  Maybe it works very well on Windows, but it's an ugly, buggy thing on Android, and the UI is a confusing mess.  If you only need an MDM for Android I can heartily recommend headwind (<a href="https://h-mdm.com/" rel="nofollow">https://h-mdm.com/</a>), which we rolled out before Intune because it took literally months to get the licences (in fact, we still don't have them).  Headwind is open source, is cheaper than Intune and has free tier, and frankly was a joy to work with - once you discovered their doco was all in the FAQ's.<p>[1] For the uninitiated, all Android devices (and iOS) allow a company to take control of a device by installing an MDM, something  that can happen only immediately after a factory reset.  Thereafter Android displays "your company can see everything you do on this device".<p>[2] <a href="https://threatpost.com/pulse-secure-critical-zero-day-active-exploit/165523/" rel="nofollow">https://threatpost.com/pulse-secure-critical-zero-day-active...</a><p>[3] <a href="https://www.infradead.org/openconnect/" rel="nofollow">https://www.infradead.org/openconnect/</a>