OSNews

you have not follow ReactOS at all if u have, you will found it was never talk about "leaked Windows source code", it was about how some devloper

use IDA and wich metof that should be use and how.

It seems, that your ReactOS guys don't like to remember of saome details from Janurary. Alex had write a nice 'Open letter' to the ReactOS

developers, which was posted by Hartmut to the mailing list. This mail was removed from the list archive. I attach this mail at the end of this

post. I ask again, Magnus are you one of the persons, which are hide by XXXX?

part 1 of the deleted mail from the list:
http://www.reactos.org/archives/public/ros-dev/2006-January/007472....

Hi,

I post here a mail which Alex has sent to the 'inner circle' of ReactOS.

- Hartmut

An Open Letter to All:

Hello, I would appreciate if you carefully read this email in its
entirety, out of respect for myself and my work and my existence as a
human being. Make sure to read till the end... I may have started out a
bit inflammatorially, and I apologize, I am much more humble onwards.

Over the course of the last few days, I have received messages from some
of you notifying me of some very disturbing news, which violate the
basic principles of a fair "trial" and free speech. I have heard, among
other things, that my account in the ML has been put on moderation to
avoid me saying certain things. I have heard that Hartmut has been
comissioned, all by himself, to review our(my?) code, being the absolute
and sole authority on what is "ok" and what is not "ok". Finally, I
heave heard of underground discussions involving almost all project
members but myself, in which accusations being made against me. I do not
know how much this is true, how much I have misunderstood, and how much
is gross exaggeration, but I am highly worried by these acts, which
seem, as one of you put it, "as if I am being set up". By silencing my
right to speak freely on the ML, and deliberating in a closed session
without my presence, and assigning the accuser as the reviewer, you are
not giving me a chance to defend myself and say my side of the story. In
this trial, you are acting both as jury, judge and accuser. This is
unfair to me.

Therefore, I have decided to email you all with my side of the story. I
fear there is a lot of misinformation going around, and I plan to fix
this. Since this email will remain private to developers, I will make no
attempt in hiding any part of the truth. This is not a "threat", as
XXXXX tried to point out on the ML. If you consider the truth a threat,
then that is worrysome to me. I would like to start out by something
that I have told some of you a long time ago...

This project has been the motivating source behind my life for the last
two years. It has been both my drug and my medcine, both my withdrawal
aid and my addictive substance. It has been the source of great joy,
sadness and experience, both technical, spiritual and social. This
project has given me the chance to work on something great that I truly
believe in, something which kept me going in times where I could've
easily taken my life. Poverty, starvation, breakups and diseases
afflicted me these last two years, but ReactOS kept me alive. Not only
through the technical and code-related activites in its development, but
also through the great friends which I have made. XXXXX, XXXXX, and
somewhat XXXXX and XXXXX stand out among some of the great friends which
I have made during this time. I don't think anythign will change the
great friendship that has developed between XXXXX and myself, and XXXXX
and I have always been there for each others, all while discussing
private life issues, coding and politics and public relations. Although
not in the same depth, I have also enjoyed friendships with all others
of you, and often spent time helping you out, while other times, you
were the ones doing the helping. The late night debugging sessions with
XXXXX were particularly fun, as well as the endless race/lock contention
discussions with XXXXX . In all this time, there have been fights,
misunderstandings, flames and harsh words, just like there have been
compliments and good teamwork.

In exchange for everything that ReactOS brought to me, I gave it
everything I had. From a technical point of view, all "ego" aside, I do
think that I am among the top contributors in this project. I don't mean
to undermine anyone by saying this, and I know that a good set of icons
can matter as much as an API implementation, but in terms of hours of
work, quantity and quality do mean something. From the CIA logs, in this
year, "ion" has done 837 commits. The project total is 7826. This is
second to XXXXX, which has been doing just as much work (if not more),
at 907 commits. These numbers speak for themselves in the quantity of
work that I have put in this project. Apart from actual coding, I have
also taken on the responsability of the IRC channel, in which I have
tried to be present at least 10 hours a day (at the keyboard). During
this time, I have guided and helped users and developers alike, and have
been almost an encylopedia of knowledge for anyone that has asked. These
past weeks, I had about 10 PMs an hour, even from first-time users. It
is almost as if it had become common knowledge that for any problem,
Alex should have the solution. Now certaintly, there have been certain
issues with this, and sometimes I got myself a bit carried away by all
this. Some complained about the jokes of "godhood" and "being all that",
and whenever users went on that line again, I tried to be modest and
respect the wishes of the developers that were offended. The reason I
wrote these last two paragraphs is because XXXXX made an assertion that
I have some wish to "hurt the project". As I have already told him my
love for ReactOS and how far I am willing to go for it, and he even
acknowledged it, I have trouble understanding why he might have said
something like this. Let there be no mistake, this project is my life's
work. I have paid a dear price for it, both financially (considering all
ReactOS-related purchases and trips, the total is about 2000$), and
socially. I have lost an entire year of school because ReactOS became so
important for me, that I stopped going to school and failed 3 classes,
just so I could write more code, help more people, and help the project
progress.

Why then, would I try to hurt any of the people behind this project, or
the project itself?

part 3 of the deleted mail:

So I thought, what the heck, I'm only reversing some functions to better
understand Dave Probert's PDFs and Windows Internals, I'm not doing
anythign as bad as that! But there was more! Some time ago while
rewriting parts of the Object Manager, I stumbled upon our Security
Descriptor cache implementation, written by XXXXX. I was surprised at
how well it was implemented, compared to how different the other parts
of the Object Manager were. One quick look at IDA confirmed why. The
entire file/functions were reversed, clearly transalted from ASM to C.
However, all the functions and private variables were renamed. But they
were still used in the same way, called with the same parameters, and
did the same things. Additionnally, since this is hashing, which
involves masks and bit manipulation, it's really hard to magically
create the same hashing implementation as Windows, without having looked
at Windows's assembly. I saw know problem with this, and I thought XXXXX
was cool to follow my methods. The code which he had written was
perfect, down to the hashing implementation. But it was clearly
reversed. I had no problem with this. Then, recently, XXXXX came to talk
to me about his cmlib, and I took a look at the previous registry code
which read the hives. The actual hive data structures are documented in
the PDBs if you know how to look, but ours had different names, and some
stuff was marked as "unknown". Evidently, someone had taken the time to
reverse-engineer the windows NT hive format. Some of the intenral hive
functions closely matched Windows's, but did things such as
Foo->Unknown0 = 0xBA. If this was truly a "Clean-room implementation", I
fail to see why anyone would have written such code. When you
implementing something by yourself, you usually don't name your members
Unknown0, and you don't give them cyptic HEX numbers. Is this for
compatibility maybe? Someone possibly reversed some driver or 3rd party
tool? (XXXXX often brings this up as an excuse). No, impossible. No
drivers access these structures, nor any 3rd-party tools. In fact, not
even the NT Kernel itself uses them outside of very specific Hv* code.
While looking at WinDBG and the checked build, Unknown0 was documented
with its proper name, and 0xBA became a bit mask of certain flags ORed
together. As XXXXX was working on cmlib, he had to change much of the
previous code, and I discussed with him his dubious usage of such member
names and accused him of reversing. He told me, quite simply, that some
of the parts I complained about were the previous code. Whose? XXXXX.
Because of the Ob SD Hash code I had seen earlier, this came as no
surprise to me. It was further proof that, much like me, XXXX was a
reverse engineer. I then spent 4 hours reviewing XXXXX code, in which I
used IDA to verify some things. When the arguments got heated, so did
he, and he had no trouble accepting my modifications as seen because of
IDA, nor using it to verify some things himself. Yet another person was
working much in the same fashion as me, using IDA for implementation
and/or verification.

But were these all the people that motivated me to continue working in
much the same way as them? There were more. As I mentionned much
earlier, XXXXX and I often did debugging sessions together to try to get
his USB drivers working, and to get windows's USB drivers workin in ROS.
One big problem XXXXX was having is that interrupts werent' working
fine, and he had no idea what was wrong with our HAL. I jokingly
suggested for him to look at the NT4 source code. Haha, he said; he
already had! Since he was now part of the "little gang", I had no
trouble being openly honest with him about my adventures with the NT4
source code too, and how I was trying to recompile it so get it working
on XBOX, for my own internal private usage. We then talked about another
big leak: the XBOX 1 kernel source code, a subset of win2k. In one later
discussion, XXXXX pointed out to me that "he had tried everything to
find the problem: NT4 HAL, XBOX USB Stack, Linux USB stack, IDA, etc". I
did not mind that our USB stack was not only 100% linux based, but that
some information had also been gleaned from highly illegal MS
intelectual property. This is because I knew that 99.999% of the code
was from Cromwell, and just like I hadn't used my NT4 source-code access
to help ROS, XXXXX probably wans't either. But knowing all these people
doing all these things, much as myself, covinced me there was no problem
in my continuned reverse-engineering.

XXXXX, XXXXX, XXXXX and myself had leaked windows code and looked at it.
XXXXX, XXXXX, XXXXX, XXXXX and XXXXX had IDA and used it for reverse
engineering. 9 developers, and these are only some cases. XXXXX too,
sometimes used IDA to verify some flags (I once helped him understand a
weird DEVICE_EXTENSION structure), and XXXXX, although against
reverse-engineering, also used IDA to verify some implementations,
although he said he never used it to actually reverse-engineer, and I
believe him, although, once you have seen the taint, it's hard to really
psycologically prove how much you were, or were not influenced by it.
With more then 2/3rds of the entire developer team having broken the law
and/or our IP policy, I continued my work in the same way.

And now, the recent scandal. After writing the system call code more
then a year ago (based on reversed-engineered Windows code), I had a
longsstanding TODO on my blog to "use macros". I started doing so, and
then suddently "a friend" of Hartmut magically pointed him to some piece
of code that was stringly similar to ours. In an act which many have
found childish, he removed his name from our source code and said it was
"dishonorable" that I had "copied" those lines. This came as a shock to
me. First of, for the fact that no "copying" was involved, only
reverse-engineering. As you can test yourselves, copying code from IDA
will result in *much* different results from the code which I have
written. I have optimized some paths, removed some code which does not
apply to ROS, as well as made everything into macros, constants and
comments. By simply looking at the source code and comparing it with
IDA's disassembly, it would be very hard to say that it has been copied
and pasted. Reversed engineered, used, understood, learnt from, yes, but
not copied. The changes which I had done were no more different then the
code which was already in SVN for over 12 months now. They were no
different from the tens of thousands of lines of code that I had
commited until now. What was the meaning of this sudden friend which
"discovered copied code". And what was up with Hartmut's reaction, a man
which I held deep respect for, which sounded like a 12 year olds. In
trying to defend myself, XXXXX accused me of things such as "Pushing
XXXXX (XXXXX) away because I reformatted hsi code". Yes, that had
happened, and XXXXX had complained. That same day I restored his
formatting. XXXXX then complained about the fact I rewrote code in INTEL
instead of AT&T syntax. Then he complained that I broke KDBG, each time
there was a bug in KDBG. He never praised me for the many bugfixes I did
to his tool. He would come in our IRC channel, talk about smoking weed
and drinking, and how he didn't feel like working, and tell me that I
hated him. I feel sorry that XXXXX chose him as an example; XXXXX
clearly had hostility about me and would always use it when something
liek this happened, to try to rally support. And such hostility is
normal when dealing with many people, and of course I can understand him
for wanting to use every dirty trick in the book to undermine me. Just
like XXXXX does not like me, and he was eager to jump to the conclusion
that I should be kicked out. Once again, I understand this. If you don't
like someone, you cannot possibly be partial: you want him out. But
because many are silent, it is easy for 3 or 4 voices which I have
pissed off to give the impression of a majority. I would get private
emails from developers saying "I don't agree with what is going on, this
is wrong", but the only voices being heard are against me. So now I am
adding my own.

The truth is, I have trouble determining if Hartmut was truly worried
about the so-called "copied" code, or if he had simply grown tired of
me, the conflicts around me, the fact I wrote so much code, and maybe
even the fact I had become so popular. With XXXXX behind him, which also
did not like me much, and XXXXX who said it himself, that publically, he
would not defend me if I was reverse engineering, it would be a great
way to take me down. One of you confirmed this when you emailed me a
couple of days ago telling me "Alex, I think you are being set up by
some of the others".

Now, this may sound paranoid, and perhaps Hartmut and XXXXX are truly
worried about the goodwill of the project. If that is the case, then
unfortuntaely this email must be devastating to them. Not only is their
XXXXX someone who has seen leaked windows 2000 source code, but so have
3 other developers, including myself. And not only does Alex reverse,
but so do many other developers which I have named. If this is truly not
a personal vendetta about me, then certaintly, they will want to take
action against all of the developers that I have mentionned, including
our coordinator and leader. And, if they want to go ahead with the plan
of reverting and reverse-engineered code, this means that much of the
kernel would now disappear or be reverted to its state almost 2 years
ago. Almost every file in ex and much of ke and ps, as well as ob
has been written by myself, and if I am tainted and a reverse-engineer,
then all that code must go to the toilet. So must the branch containing
the user-mode networking rewrite, and so must the current mswsock
library. And so must much of AFD, which uses structures which have been
reverse engineered by me while working with XXXXX. And this only covers
my code. The USB stack would have to be removed, or at least the windows
wrapper layer, since XXXXX is tainted. The current registry code and
hive reader should be removed, and XXXXX cmlib not accepted, because
they too were created in part thanks to reverse-engineering. Same goes
for the object manager security descriptor hashing code. And since XXXXX
has clearly already reverse-engineed these two parts of the kernel, then
there is a strong possibility that the current setupapi/umpnpmgr stuff
which is his, is also possibly reverse-engineed and might need to be
removed.

Doing so, and publically stating these facts would destroy ReactOS and
the reputation of some of its developers. I do not want this, because
like I've started earlier, I love this project and I want us to succeed.
We have all done (well, most of us) certain things which range from
illegal to violating our development policy, but we chose to keep silent
about it, knowing that in our hearts, we were not truly "tainted", and
simply using every tool at our disposal in order to get ReactOS working.
I did not copy any code, I reversed engineered, and I did not find this
to be wrong. Just like I do not find it wrong for others to reverse
engineer. Just like I did not find it wrong for XXXXX, XXXXX, XXXXX and
I to look at leaked source code. But if this is now wrong, then all must
be punished in the same level, and the consequences must happen equally.
If only I am attaked, and if only my code is removed, then this will
only prove that this whole thing is nothing but a vendetta against me,
to remove me from the project. Because I do not see how it can be
justified to kick out Alex for reverse engineering, but keep XXXXX and
XXXXX for looking at leaked code, or to keep XXXXX when he has done the
same as Alex.

Now that the truth is out, I want us to solve this between ourselves in
a peaceful manner, without tarnishing the reputation of this project. I
swear an oath that I will keep everything I have said here between
ourselves only, because I love ReactOS. Now I can only hope that we will
find a proper solution to our impasse, which is mainly this:

1) I have been publically accused of reverse engineering, and some devs
want to do something about this, either rewriting the code and/or
kicking me out.
2) A great number of other devs here have done the same, and some even
worse.
3) Kicking only me out means that all this was a personal vendetta,
since the other developers's actions are being silently ignored.
4) Kicking everyone out, which would be fair if we choose to prosecure
violations, would destroy the project.
5) Rewriting my code means rewriting almost 40% of the kernel and
mswssock, and, once again, it would be unfair to keep other's reversed
code in.
6) Rewriting every reversed code means rewriting even more of the kernel
and potentially other libraries.

Judging by a previous conversation with XXXXX, I suspect that what he
wants is this:

1) Kick Alex out and rewrite the accused 100 byte code.
2) Keep everything else silent.

part 5 of the deleted mail:

But this is wrong, and you know it. It is a cheap way to do "public
punishemnt" to look good on PR, but also not pay the price of -truly-
prosecuting me, which would remove most of ReactOS's recent kernel code
in the last 2 years. And, it protects the other developers and lets them
continue working in the same "illegal" manner as I have. And, if Hartmut
and XXXXX and truly honest about their intentions and they care about
these actions not being done, then they would certaintly not want this
to happen; unless of course, they just wanted me out.

As I said, I will not speak of this to anyone else outside the project.
I think it is an internal matter. I just wanted everyone to know the
truth, which some of us have been hiding from each others. I am not
making accusations, and I agree and understand what everyone did, as I
have stated numerous times. But it is unfair for you to punish me, take
way my life's work, only to protect yourselves.

Please, let us work together, not behind each other's backs. Let us find
a solution as friends, not enemies.

Best regards,
Alex Ionescu