> ## Content Index
> Fetch the complete content index at: https://tokyobrainie.ghost.io/llms.txt
> Use this file to discover other available public pages before exploring further.

# Column 008｜オープンソースの庭に、盗品を埋めるな——ARTEX、ユングの言い訳、葉隠の一刀｜Open Source Is Not an Alibi
- URL: https://tokyobrainie.ghost.io/column-403bc361-dd00c7e4-en/
- Published: 2026-10-24T03:00:00.000Z
- Updated: 2026-10-24T03:00:00.000Z
- Description: Do Not Bury Stolen Goods in the Commons I take open source personally. Someone discovers; someone repairs; someone else builds on both. Knowledge shared can carry us
- Author: TokyoBrainie
- Tags: Column, English, #Import 2026-11-11 08:54

[English](https://tokyobrainie.ghost.io/column-403bc361-dd00c7e4-en/) · [简体中文](https://tokyobrainie.ghost.io/column-403bc361-dd00c7e4-zh-hans/) · [日本語](https://tokyobrainie.ghost.io/column-403bc361-dd00c7e4-ja/)

## Do Not Bury Stolen Goods in the Commons

I take open source personally. Someone discovers; someone repairs; someone else builds on both. Knowledge shared can carry us beyond the limits of a single mind. That is an ideal worth defending.

So when someone tramples that garden, steals other people's data and calls it technical achievement, I get angry. Do not hide stolen goods in a well the community dug together.

### What the reporting establishes

Nikkei's October 24 report describes malicious ARTEX modifications continuing after its developer stopped public distribution. My account relies on the supplied article images; I have not audited every derivative or its license.\[1\] Microsoft's October 21 report independently describes Storm-0940 using ARTEX in attacks. Microsoft assesses the actor as China state-aligned; that attribution is not a judgment about Chinese people.\[2\]

Withdrawal cannot reliably erase copies already distributed. Capabilities can outlive their creator's intentions. That observation supports neither a blanket ban on publication nor blanket immunity for developers.

### A name worth protecting

Hacker has a cultural meaning rooted in understanding, ingenuity and creative experimentation. Stallman's “On Hacking” discusses playful cleverness.\[3\] News reporting also uses hacker for intruders. I choose cracker for those committing unauthorized intrusion or theft. This is an editorial choice about cultural respect, not a claim that vocabulary alone prevents crime.

Understanding a lock and stealing the household's possessions do not deserve the same applause.

### Freedom does not manufacture virtue

GNU was announced in 1983\. Collaborative sharing predates the open-source label, adopted in 1998 alongside the emergence of OSI. Free software's emphasis on freedom and open source's practical advocacy are related but distinct traditions.\[4\]\[5\] OSI's definition addresses modification and redistribution, not merely readable code.\[6\] A research-only description therefore needs separate scrutiny; I am not certifying every ARTEX release as definition-compliant.

**Permission to modify code is not permission to enter someone else's system.**

My explanation for abuse is structural: profit, domination, recognition or state objectives meet cheap copying and automation. Divided tasks make it easier to say “I only did a small part.” Delegating execution invites “the machine did it.” These are analytical possibilities, not a diagnosis of particular attackers.

Freedom needs responsibility because it cannot automatically supply good intentions.

### Jung hears the excuse

Jung's shadow and projection offer a lens for examining aspects of ourselves we resist recognizing.\[7\] The following dialogue is my fiction, not his words or a clinical assessment.

> **Imaginary cracker:** “The world is unfair. I merely exposed a weakness.”  
> **Jung character:** “Then why did exposure become taking someone else's data? Has the language of justice concealed your own desire?”

Claims about corporate power or unjust societies can merit scrutiny. They still do not produce the victim's consent. I invited Jung to explain the excuse, not to issue an acquittal. A psychological explanation does not transfer the cost to innocent people.

Letting the Jung character dismantle an excuse here does not mean I have come to like Jung. I still resist the use of his name and concepts to steer people's feelings and behaviour, and narratives that obscure individual choices and responsibility. You do not win my approval merely by playing the explanatory role.

Mr Jung, out in the first round.

### A Nabeshima answer

For readers unfamiliar with it, **Hagakure**, often translated as “Hidden by the Leaves,” is an early eighteenth-century work associated with the Nabeshima domain of Saga, in present-day southwestern Japan. Tashiro Tsuramoto recorded Yamamoto Tsunetomo's conversations; the work was completed in 1716.\[8\] It addresses samurai conduct in an age of peace rather than recording a succession of battlefield victories.\[9\]

Later Saga forces adopted Western technology and used modern weapons in the Boshin War.\[10\] That does not establish what every combatant read, or prove that Hagakure caused their actions. What interests me is the obligation to turn knowledge into actual service.

This next speech is also a modern invention, not a quotation from the book:

> **Imaginary Nabeshima retainer:** “You borrow a blade forged by other people's labor, wound those less able to defend themselves and leave the repair to others. Where is the resolve in that? Do not call a desire hiding behind convenient tools valor.”

The sword falls on the excuse. Nobody's body is its target.

My reading imports neither feudal obedience nor a celebration of death. It chooses responsibility, discipline and service. It also turns the question back on me: if righteous denunciation is all I offer, am I merely enjoying my own costume?

### Our code must survive contact with recovery

The work is authorized testing, responsible reporting, repair, preserved evidence and recovery for victims. Developers should provide safer defaults and respond to abuse. Operators should validate permissions and recovery. Model providers should assess patterns of misuse across a workflow. Each should name its responsibilities and limits.

As an investor, I will not equate more attacks with guaranteed cybersecurity profits. Contracts, staffing costs, insurance and liability, retention and demonstrated recovery matter. Fear can create demand without assuring margins.

Return shared knowledge to the work of protecting others. That is the ideal I defend. I will neither surrender the garden to crackers nor burn it down and announce victory.

**Open the source. Own the consequences. Close the port reserved for excuses.**

---

[Original Notion archive](https://app.notion.com/p/403bc361ccd281e28a89fcf2dd00c7e4?pvs=204&ref=tokyobrainie.ghost.io)