Maria128: new article on ubisoft's june 2026 github takedown of slopsmith, the rocksmith 2014 tool; sourced to the takedown notice itself and the copyright statute, with the delisting background from the steam page

2026-06-16T23:21:21Z

new article on ubisoft's june 2026 github takedown of slopsmith, the rocksmith 2014 tool; sourced to the takedown notice itself and the copyright statute, with the delisting background from the steam page

New page

{{IncidentCargo
|Company=Ubisoft
|StartDate=2026-06-15
|EndDate=
|Status=Active
|ProductLine=Rocksmith
|Product=
|ArticleType=Product
|Type=Copyright,Anti-circumvention
|Description=Ubisoft's June 2026 DMCA notice removed 131 GitHub repositories of the open-source Rocksmith tool Slopsmith, including user forks.
}}

'''Ubisoft DMCA takedown of Slopsmith''' refers to a [[Digital Millennium Copyright Act]] takedown notice that an authorized agent of [[Ubisoft]] Entertainment SA filed with [[GitHub]] on June 15, 2026 against Slopsmith, an open-source tool that reads and decrypts the encrypted song and note-chart files of [[Rocksmith|Rocksmith 2014]].<ref name="dmca">{{Cite web |title=Ubisoft DMCA takedown notice (Rocksmith 2014 / Slopsmith) |url=https://github.com/github/dmca/blob/master/2026/06/2026-06-15-ubisoft.md |website=github/dmca |publisher=GitHub |date=2026-06-15 |access-date=2026-06-16}}</ref> The notice asserted an anti-circumvention theory under 17 U.S.C. § 1201 over four AES-based protection measures, but GitHub's published notice states it ''"did not find sufficient information to determine a valid anti-circumvention claim"'' and instead acted on ''"other valid copyright claim(s)."''<ref name="dmca" /> Because the reported network exceeded 100 repositories and Ubisoft alleged that all or most forks infringed equally, GitHub processed the takedown against the entire network of 131 repositories, so users who had forked the project lost their copies.<ref name="dmca" />

== Background ==

=== Rocksmith 2014 delisting and Rocksmith+ ===

The work at issue is ''"Rocksmith® 2014 Edition - Remastered - Learn & Play"'' (Steam AppID 221680), which Ubisoft's notice states was first released in October 2013 as Rocksmith 2014 and re-released in its remastered edition in October 2016.<ref name="dmca" /> Ubisoft removed the one-time-purchase Rocksmith 2014 from sale in 2023 after its music licensing deals expired.<ref name="steam">{{Cite web |title=Rocksmith 2014 Edition REMASTERED LEARN & PLAY on Steam |url=https://store.steampowered.com/app/221680/ |website=Steam |publisher=Valve |access-date=2026-06-16}}</ref> Ubisoft pointed players to its subscription service Rocksmith+, then on December 19, 2024 released a ''"Learn & Play"'' edition of Rocksmith 2014 that, in Ubisoft's words, ''"replaced all licensed songs"'' with a collection of tracks and exercises.<ref name="steam" />

[[File:Rocksmith 2014 Steam page licensing note.png|thumb|center|upright=2.0|The Rocksmith 2014 Steam description states the title was ''"temporarily removed due to the expiration of our music licensing deals"'' and that Ubisoft replaced all licensed songs.<ref name="steam" />]]

=== The Slopsmith tool ===

According to Ubisoft's notice, Slopsmith is an open-source project ''"designed to operate against the user's installation of Rocksmith 2014."''<ref name="dmca" /> It opens the game's encrypted ''.psarc'' archive containers, decrypts the ''.sng'' note-chart files, and converts them ''"into XML for the highway renderer"'' that draws the scrolling notes.<ref name="dmca" /> The notice also quotes the project's own module docstring, which states a bundled plugin will ''"Extract Rocksmith 2014 base game songs from songs.psarc into individual CDLC PSARCs."''<ref name="dmca" /> Player-made custom songs for Rocksmith 2014, known as CDLC, are distributed through community hubs such as CustomsForge, whose guidelines require uploaders to confirm they ''"have acquired the legal rights to the songs in the CDLC that you upload or download."''<ref name="customsforge">{{Cite web |title=Guidelines |url=https://customsforge.com/guidelines/ |website=CustomsForge |access-date=2026-06-16}}</ref>

== Takedown notice ==

The notice named four primary repositories: github.com/byrongamatos/slopsmith, byrongamatos/slopsmith-desktop, byrongamatos/Rocksmith2014.NET, & hestealin/slopsmith.<ref name="dmca" /> Ubisoft answered GitHub's licensing question ''"Is the work licensed under an open source license?"'' with ''"No,"'' and stated the requested remedy as ''"Reported content must be removed."''<ref name="dmca" />

=== The four asserted protection measures ===

Ubisoft described four technological protection measures it applies to Rocksmith 2014, each using a different AES-256 key embedded in the game client (the keys are redacted in the published notice). The first is PSARC archive encryption in CFB mode, which protects the outer container holding audio, note charts, manifests, and artwork. The second is SNG note-chart encryption on the PC build, in CTR mode. The third is the same SNG scheme on the Mac build, keyed differently. The fourth is EVAS profile encryption in ECB mode, which protects player progression and save data.<ref name="dmca" /> Ubisoft asserted that all four ''"effectively control access ... within the meaning of 17 U.S.C. § 1201(a)(3)(B),"'' and alleged that Slopsmith violated the anti-trafficking provisions at 17 U.S.C. § 1201(a)(2) and § 1201(b)(1).<ref name="dmca" />

[[File:Ubisoft Slopsmith DMCA notice four protection measures.png|thumb|center|upright=0.7|Ubisoft's notice describes four AES-based protection measures on Rocksmith 2014 and asserts they ''"effectively control access ... within the meaning of 17 U.S.C. § 1201(a)(3)(B)."''<ref name="dmca" />]]

=== README edits and the demand to remove entire repositories ===

Ubisoft flagged that the Slopsmith README had been edited between its audit and the filing to soften direct references to the game, replacing ''"official Rocksmith DLC"'' with ''"official song packs"'' and ''"CDLC"'' with ''"custom songs."''<ref name="dmca" /> The notice stated that the README at HEAD on May 25, 2026 still disclosed the underlying conduct and that the plugin module docstrings were unchanged.<ref name="dmca" /> For each named repository, Ubisoft confirmed that ''"The entire repository is infringing"'' rather than listing individual files.<ref name="dmca" />

== Scope and forks ==

GitHub did not limit the takedown to the four primary repositories. The notice records GitHub's reasoning verbatim.

<blockquote>''Because the reported network that contained the allegedly infringing content was larger than one hundred (100) repositories, and the submitter alleged that all or most of the forks were infringing to the same extent as the parent repository, GitHub processed the takedown notice against the entire network of 131 repositories, inclusive of the parent repository.''</blockquote><ref name="dmca" />

The notice itself lists more than 150 individual fork URLs across the ''/slopsmith'' and ''/slopsmith-desktop'' networks, most of them owned by individual GitHub users.<ref name="dmca" /> Under GitHub's policy, a fork is a distinct repository, so users who had clicked ''"fork"'' to keep a personal copy received takedown notices when the network was processed. Ubisoft attested that ''"all or most of the forks are infringing to the same extent as the parent repository."''<ref name="dmca" />

== GitHub's determination ==

GitHub published the notice with a preamble that separates Ubisoft's anti-circumvention theory from the copyright grounds on which the content was removed.

<blockquote>''While GitHub did not find sufficient information to determine a valid anti-circumvention claim, we determined that this takedown notice contains other valid copyright claim(s).''</blockquote><ref name="dmca" />

[[File:Ubisoft Slopsmith DMCA notice GitHub determination.png|thumb|center|upright=1.4|GitHub's published preamble states it ''"did not find sufficient information to determine a valid anti-circumvention claim"'' and processed the takedown against the ''"entire network of 131 repositories."''<ref name="dmca" />]]

GitHub did not act on the 17 U.S.C. § 1201 theory that occupies most of Ubisoft's notice, and it did not state which ''"other valid copyright claim(s)"'' carried the removal.<ref name="dmca" /> Before disabling the content, GitHub contacted owners of some or all of the affected repositories to give them a chance to make changes and provided instructions for submitting a DMCA counter-notice.<ref name="dmca" />

== Section 1201 context ==

The anti-circumvention provision Ubisoft invoked, 17 U.S.C. § 1201(a)(1)(A), states that ''"No person shall circumvent a technological measure that effectively controls access to a work protected under this title."''<ref name="usc1201">{{Cite web |title=17 U.S. Code § 1201 - Circumvention of copyright protection systems |url=https://www.law.cornell.edu/uscode/text/17/1201 |website=Legal Information Institute |publisher=Cornell Law School |access-date=2026-06-16}}</ref>

[[File:17 USC 1201 a1A circumvention text.png|thumb|center|upright=2.4|Section 1201(a)(1)(A) of Title 17 provides that ''"No person shall circumvent a technological measure that effectively controls access to a work protected under this title."''<ref name="usc1201" />]]

The statute defines circumventing such a measure at § 1201(a)(3)(A) as ''"to descramble a scrambled work, to decrypt an encrypted work, or otherwise to avoid, bypass, remove, deactivate, or impair a technological measure, without the authority of the copyright owner."''<ref name="usc1201" /> Separate provisions at § 1201(a)(2) and § 1201(b)(1), the two Ubisoft cited, bar trafficking in technology primarily designed to circumvent such measures.<ref name="usc1201" />

Section 1201 also directs the Librarian of Congress, on the recommendation of the Copyright Office, to grant temporary exemptions every three years for classes of works where the prohibition harms non-infringing uses.<ref name="usc1201" /> The most recent triennial exemptions were issued in October 2024.<ref name="fedreg2024">{{Cite web |title=Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies |url=https://www.federalregister.gov/documents/2024/10/28/2024-24563/exemption-to-prohibition-on-circumvention-of-copyright-protection-systems-for-access-control |website=Federal Register |publisher=Library of Congress, Copyright Office |date=2024-10-28 |access-date=2026-06-16}}</ref> GitHub processed an earlier Rocksmith-related DMCA notice in October 2016, before the 2023 delisting and the 2026 Slopsmith filing.<ref name="dmca2016">{{Cite web |title=2016-10-28-rocksmith |url=https://github.com/github/dmca/blob/master/2016/2016-10-28-rocksmith.md |website=github/dmca |publisher=GitHub |date=2016-10-28 |access-date=2026-06-16}}</ref>

== See also ==

* [[Ubisoft]]
* [[Rocksmith]]
* [[Digital Millennium Copyright Act]]
* [[GitHub]]

== References ==
{{reflist}}

[[Category:2026 incidents]]
[[Category:DMCA takedowns]]
[[Category:Ubisoft]]
[[Category:Right to repair]]

Ubisoft DMCA takedown of Slopsmith - Revision history

Maria128: new article on ubisoft's june 2026 github takedown of slopsmith, the rocksmith 2014 tool; sourced to the takedown notice itself and the copyright statute, with the delisting background from the steam page