Ubisoft DMCA takedown of Slopsmith

Ubisoft DMCA takedown of Slopsmith refers to a Digital Millennium Copyright Act takedown notice that an authorized agent of Ubisoft Entertainment SA filed with GitHub on June 15, 2026 against Slopsmith, an open-source tool that reads and decrypts the encrypted song & note-chart files of Rocksmith 2014. The notice asserted an anti-circumvention theory under 17 U.S.C. § 1201 over four AES-based protection measures, but GitHub's published notice states it "did not find sufficient information to determine a valid anti-circumvention claim" and instead acted on "other valid copyright claim(s)." Because the reported network exceeded 100 repositories and Ubisoft alleged that all or most forks infringed equally, GitHub processed the takedown against the entire network of 131 repositories, so users who had forked the project lost their copies. Following the takedown, the project announced it would relaunch under the name feedBack, with a restructured codebase addressing the issues raised.

Background

Rocksmith 2014 delisting and Rocksmith+

The work at issue is "Rocksmith® 2014 Edition - Remastered - Learn & Play" (Steam AppID 221680), which Ubisoft's notice states was first released in October 2013 as Rocksmith 2014 and re-released in its remastered edition in October 2016. The 2016 Remastered edition shipped on more than one platform. Ubisoft's August 25, 2016 announcement stated it would be available "on Xbox One, PS4, PC, and Mac," and the pre-2024 Steam listing carried a macOS system-requirements tab specifying "OS: Mac OS X v10.7."

Ubisoft removed the one-time-purchase Rocksmith 2014 from sale on October 23, 2023 after its music licensing deals expired. The delisting locked out new buyers and Mac users, but existing owners kept their access. Ubisoft's Rocksmith 2014 Leaving Stores page told players who already owned the game or its downloadable content:

[Y]ou will still be able to install, download, re-download, play, and use those products. You should experience no change or interruption in your access.

Ubisoft pointed new players to its subscription service Rocksmith+, which launched on PC on September 6, 2022 at $14.99 per month, $39.99 for three months, & $99.99 for twelve months. These prices have since increased, however there are frequent discounted subscription offers. Rocksmith+ has no macOS or Linux client; Ubisoft lists its platforms as "iOS, Android, PC, or PlayStation." On December 19, 2024 Ubisoft released a "Learn & Play" edition of Rocksmith 2014 whose current Steam page lists Windows as its only operating system. That Steam page describes the change to the base catalog:

[W]e've replaced all licensed songs with a collection of tracks and exercises from our popular downloadable content bundles.

The same Steam page states:

the downloadable songs from the original Rocksmith 2014 Remastered are fully compatible with Learn & Play Edition.

The licensed base catalog is gone for new buyers; previously purchased DLC still loads. Ubisoft had earlier delisted the original 2011 Rocksmith on October 17, 2021, removing it from sale.

Well over half of all content ever released for Rocksmith 2014 — including on-disc base game content and the RS1 Compatibility Pack — is no longer available for purchase by any means, as the relevant licensing windows have closed. This figure continues to rise as further 10-year windows expire.

Rocksmith+ has been rated Overwhelmingly Negative on Steam. Frequently cited reasons include high subscription costs, unintuitive UI, and unsatisfactory customer service, particularly around refunds. Around the time of announcement, Rocksmith+ was advertised with the phrase "Even the world's premier music learning software needs to be fine-tuned for the millions of songs we plan to have down the road." That wording has since been removed by Ubisoft from all its properties. The largest number of songs ever observed in the Rocksmith+ client is 9,600; community tracking tools place the total of songs that have been available across all regions at just over 13,300, with the library relying heavily on AI-generated chord charts. Of those, approximately 4,300 have a human-authored Lead Guitar chart.

The Ubisoft San Francisco studio publicly responsible for the Rocksmith series was closed in 2024 following broader studio restructuring, and the Rocksmith+ development team was reduced in successive rounds of layoffs — most recently in the week before the DMCA notice was filed.

• 
  The Rocksmith 2014 Steam description states the title was "temporarily removed due to the expiration of our music licensing deals" and that Ubisoft replaced all licensed songs.
• 
  The current Steam page for Rocksmith 2014 Learn and Play lists "Windows Vista, Windows 8" as the only operating system, with no macOS tab.

CDLC and the decryption tools

Player-made custom songs for Rocksmith 2014, known as CDLC, are distributed through community hubs such as CustomsForge, whose guidelines require uploaders to confirm:

...that you have acquired the legal rights to the songs in the CDLC that you upload or download.

A CDLC file is an encrypted archive in the same PSARC format as Rocksmith 2014's own song content. By June 2026, the CustomsForge Ignition database listed approximately 76,000 community-made CDLC songs, every one built with tools implementing the same decryption Ubisoft cited in its notice.

The decryption capability Slopsmith reuses is not new. The AES tooling that reads, decrypts, & repacks the PSARC & SNG formats has circulated openly on GitHub since the game's first months. The Rocksmith Custom Song Toolkit, the long-standing community packer for these formats, was created on November 23, 2013, roughly twelve years before Slopsmith. A Python implementation, rs-utils, followed on February 2, 2014. The Slopsmith desktop binary bundles a fork of iminashi/Rocksmith2014.NET, an F# library for Rocksmith 2014 first published on July 19, 2020 that carries the same hardcoded keys. Ubisoft's own notice records that the project's profile-import code identifies the EVAS profile key in a comment as the "EVAS profile decryption key (well-known in the Rocksmith community)."

The community's use of these tools was openly discussed on Ubisoft's own Steam product forums from the earliest weeks after launch. A thread dated 26 December 2013 — two months after launch — contains multiple users directing each other to SmithyAnvil.com for custom DLC, with the RocksmithToolkit referenced by name. A separate thread from 26 November 2013 already has users discussing the legality and status of CDLC tools. These discussions took place on a platform Ubisoft, as the game's publisher, had full access to monitor.

The GitHub page for the Rocksmith Custom Song Toolkit carries the description "Custom song toolkit for Rocksmith and Rocksmith 2014" and a commit history reaching back more than a decade before Slopsmith.

This was not GitHub's first Rocksmith-related notice. GitHub processed an earlier one in October 2016, before the 2023 delisting and the 2026 Slopsmith filing.

The Slopsmith tool

According to Ubisoft's notice, Slopsmith is an open-source project "designed to operate against the user's installation of Rocksmith 2014." It opens the game's encrypted .psarc archive containers, decrypts the .sng note-chart files, and converts them "into XML for the highway renderer" that draws the scrolling notes. The notice also quotes the project's own module docstring, which states a bundled plugin will "Extract Rocksmith 2014 base game songs from songs.psarc into individual CDLC PSARCs."

The project's archived README describes Slopsmith as "A self-contained web application for browsing, playing, and practicing Rocksmith 2014 Custom DLC (CDLC)," running entirely in Docker with no local dependencies, which is the route by which it runs on Linux. Beyond the guitar note highway, the README documents a lane-based drum highway with MIDI drum-pad input, a scrolling piano highway for Keys arrangements, per-stem mute and volume controls for separated audio, & a profile importer. Its split-screen mode places "2-4 highway panels side-by-side for multi-arrangement practice," a local two-to-four-player layout rather than an online one.

The archived Slopsmith README documents a scrolling piano highway, a lane-based drum highway, and a split-screen mode placing "2-4 highway panels side-by-side for multi-arrangement practice."

The desktop build adds a tone engine that the README describes this way:

VST3/AU/LV2 plugin hosting, Neural Amp Modeler (NAM) for amp simulation, cabinet IR loading, and automatic tone switching that changes your signal chain as tones change during a song.

The project is licensed under the GNU Affero General Public License v3.0.

The README records about 1,000 stars, 99 forks, & 246 commits on the main branch. Slopsmith launched in April 2026, roughly two months before the June 15, 2026 takedown. It targeted both the PC and Mac builds of Rocksmith 2014: Ubisoft's notice describes a separate AES key for the Mac SNG format and states the tool switches between the PC and Mac keys at runtime.

Slopsmith ran on Linux via Docker, making it the only practical option for Linux users wishing to engage with their Rocksmith 2014 song libraries — a platform Ubisoft has never officially supported. It also provided a workable path for Mac users experiencing inconsistent macOS compatibility issues with the Learn & Play edition, or those who never owned RS2014 before the 2023 delisting and wished to use the existing archive of community-made CDLC. Slopsmith features prominently in the all-time top posts on r/rocksmith, with two of the five highest-ranked posts of all time (as of 17 June 2026) being the initial release and one-month update announcements.

The project's name was a deliberate reference to "AI slop" — the primary developer wrote the majority of the codebase using AI assistance, initially for personal use, sharing it publicly only after concluding others might find it useful. The "AI slop" reference had always been intended as a temporary joke; a rename to feedBack had been under community discussion for approximately a month prior to the DMCA notice, with the new name settled on just days before the notice was filed.

Takedown notice

The notice named four primary repositories: github.com/byrongamatos/slopsmith, byrongamatos/slopsmith-desktop, byrongamatos/Rocksmith2014.NET, & hestealin/slopsmith. Ubisoft answered GitHub's licensing question "Is the work licensed under an open source license?" with "No," and stated the requested remedy as "Reported content must be removed."

The four asserted protection measures

Ubisoft described four technological protection measures it applies to Rocksmith 2014, each using a different AES-256 key embedded in the game client (the keys are redacted in the published notice). The first is PSARC archive encryption in CFB mode, which protects the outer container holding audio, note charts, manifests, & artwork. The second is SNG note-chart encryption on the PC build, in CTR mode. The third is the same SNG scheme on the Mac build, keyed differently. The fourth is EVAS profile encryption in ECB mode, which protects player progression & save data. Ubisoft asserted that all four "effectively control access ... within the meaning of 17 U.S.C. § 1201(a)(3)(B)," and alleged that Slopsmith violated the anti-trafficking provisions at 17 U.S.C. § 1201(a)(2) and § 1201(b)(1).

Ubisoft's notice describes four AES-based protection measures on Rocksmith 2014 and asserts they "effectively control access ... within the meaning of 17 U.S.C. § 1201(a)(3)(B)."

README edits and the demand to remove entire repositories

Ubisoft flagged that the Slopsmith README had been edited between its audit and the filing to soften direct references to the game, replacing "official Rocksmith DLC" with "official song packs" and "CDLC" with "custom songs." The notice stated that the README at HEAD on May 25, 2026 still disclosed the underlying conduct and that the plugin module docstrings were unchanged. For each named repository, Ubisoft confirmed that "The entire repository is infringing" rather than listing individual files.

Scope and forks

GitHub did not limit the takedown to the four primary repositories. The notice records GitHub's reasoning verbatim.

Because the reported network that contained the allegedly infringing content was larger than one hundred (100) repositories, and the submitter alleged that all or most of the forks were infringing to the same extent as the parent repository, GitHub processed the takedown notice against the entire network of 131 repositories, inclusive of the parent repository.

The notice itself lists more than 150 individual fork URLs across the /slopsmith and /slopsmith-desktop networks, most of them owned by individual GitHub users. Under GitHub's policy, a fork is a distinct repository, so users who had clicked "fork" to keep a personal copy received takedown notices when the network was processed. Ubisoft attested that "all or most of the forks are infringing to the same extent as the parent repository." The notice acted only on the repositories hosted at GitHub; it did not reach copies that users had already cloned or downloaded to their own machines before the June 15, 2026 filing.

GitHub's determination

GitHub published the notice with a preamble that separates Ubisoft's anti-circumvention theory from the copyright grounds on which the content was removed.

While GitHub did not find sufficient information to determine a valid anti-circumvention claim, we determined that this takedown notice contains other valid copyright claim(s).

GitHub's published preamble states it "did not find sufficient information to determine a valid anti-circumvention claim" and processed the takedown against the "entire network of 131 repositories."

GitHub did not act on the 17 U.S.C. § 1201 theory in Ubisoft's notice, and it did not state which "other valid copyright claim(s)" carried the removal. Before disabling the content, GitHub contacted owners of some or all of the affected repositories to give them a chance to make changes, and provided instructions for submitting a DMCA counter-notice.

Section 1201 context

The anti-circumvention provision Ubisoft invoked, 17 U.S.C. § 1201(a)(1)(A), states that "No person shall circumvent a technological measure that effectively controls access to a work protected under this title."

Section 1201(a)(1)(A) of Title 17 provides that "No person shall circumvent a technological measure that effectively controls access to a work protected under this title."

The statute defines circumventing such a measure at § 1201(a)(3)(A) as "to descramble a scrambled work, to decrypt an encrypted work, or otherwise to avoid, bypass, remove, deactivate, or impair a technological measure, without the authority of the copyright owner." Separate provisions at § 1201(a)(2) and § 1201(b)(1), the two Ubisoft cited, prohibit trafficking in any technology that is "primarily designed or produced for the purpose of circumventing" such measures.

Section 1201 also directs the Librarian of Congress, on the recommendation of the Copyright Office, to grant temporary exemptions every three years for classes of works where the prohibition harms non-infringing uses. The most recent triennial exemptions were issued in October 2024.

Current status

As of 17 June 2026, the project is continuing development under the name feedBack. The code referenced in the §1201 claim has been removed. The project is not publicly available pending clarification of the copyright issues identified in GitHub's determination; GitHub has been contacted by email seeking that clarification. The rename to feedBack is proceeding on an accelerated timeline relative to the original roadmap, with the downtime being used to restructure the codebase.

See also

• Ubisoft
• Rocksmith
• Digital Millennium Copyright Act
• GitHub