751
all 28 comments
sorted by: hot top controversial new old
[-] solrize@lemmy.world 107 points 3 weeks ago

https://feddit.org/post/9959466/5697405

[why blocked?] "a contributor made a push from a sanctioned region is what i saw. not even a main dev, and they didn’t receive any warning is my understanding. i might be way off, i’m not a final source:

[-] Chocrates@lemmy.world 50 points 3 weeks ago

Not that I condone Microsoft, but if it is a sanctioned country (Russia, Iran, North Korea, etc.). Microsoft will be in shit with the US government if they let it there.

If the project has contributors from there, then I guess they need to move off GitHub like they did.

[-] spooky2092 73 points 3 weeks ago

So now we know how to instantly delist any project on GitHub.

[-] AustralianSimon@lemmy.world 38 points 3 weeks ago

Seems like a vulnerability to exploit

[-] InnerScientist@lemmy.world 28 points 3 weeks ago

Step 1: Get write access to the project you dislike.

[-] sxan@midwest.social 32 points 3 weeks ago

This is a really strong argument for not depending on non-federated, centrally controlled services. It doesn't matter which country or company is behind Your Favorite Service™, they can be legally mandated to by Oppressive Regime ("it could never happen in my country!"), or they could just be arbitrary assholes.

I don't care why Microsoft did it. I moved off Github when MS acquired them, although in this case it probably wouldn't have made a difference. Regardless, what it proves is that you can not rely on a monopoly.

[-] Chocrates@lemmy.world 4 points 3 weeks ago* (last edited 3 weeks ago)

I don't think federation saves us. If the server owners are in the states they still have to comply. I don't know for certain, but I think if there are us citizens using it, some laws might compel non us based servers as well.

The only way around it that I can think of is tor. That doesn't make it legal it would just be harder to stop.

All of this is assuming the US justice department would even care enough though.

https://www.dlapiper.com/en/insights/publications/2024/03/us-government-reminds-non-us-companies-to-comply-with-sanctions-and-export-controls

A non-US person that causes a US person to violate US sanctions or engage in conduct that evades US sanctions may itself become subject to US sanctions.

I don't know the text of the sanctions, but lemmy.world could be under US jurisdiction if they allow me to violate sanctions.

Seems pretty dumb to me that the US has been allowed to assert itself this much.

[-] mbirth@lemmy.ml 16 points 3 weeks ago

If I interpret this toot correctly, there wasn’t a direct commit from a sanctioned region, but one developer was in one of those regions for a short while quite some time ago. And he may have been flagged because of this.

[-] Chocrates@lemmy.world 2 points 3 weeks ago

That seems bullshit.

[-] FreeBird@lemmy.dbzer0.com 13 points 3 weeks ago
[-] hoshikarakitaridia@lemmy.world 11 points 3 weeks ago* (last edited 3 weeks ago)

I mean blocking specific countries is stupid anyway. Historically China has been playing games with the EU and the US on a geopolitical level. But: Chinese, European as well as American researchers have been at the core of research on current topics like AI, security, etc. Btw. ironically the scientific landscape is very collaborative and borders on a federated model, it's actually pretty neat how much researchers don't care about country of origin.

What I'm saying is introducing geopolitics into open source development or research is one of the most stupid things to do, because it punishes both your and the other country and only benefits uninvolved third parties. It's literally shooting yourself in the foot.

[-] irotsoma 10 points 3 weeks ago

Problem is that unless the person was paid for contributing, what goods or services are being exchanged with the project. I mean if Microsoft received money from that person for a subscription or something I might see them having to ban the user and refund the money. But what did the project receive that would violate sanctions? Volunteer work is usually not covered or else relief organizations and religious missionaries would be banned and the US historically loves sending those. What am I missing?

[-] Dultas@lemmy.world 2 points 3 weeks ago

If they can tell they're from a banned region why are they letting them push in the first place. Sounds like a convenient excuse.

[-] umbrella@lemmy.ml 2 points 3 weeks ago* (last edited 3 weeks ago)

its sad that this is what the country decided to do. FOSS has nothing to do with the wars waged by politicians, sometimes at the expense of the very people trying to collaborate together despite chauvinism.

i imagine it will sadly get worse as these types of conflicts escalate.

[-] tauren@lemm.ee 11 points 3 weeks ago

That's strange. A lot of people from Russia continue contributing on GitHub without any issues.

[-] surph_ninja@lemmy.world 9 points 3 weeks ago

This Russiaphobia is so completely out of fucking control.

[-] jagged_circle@feddit.nl 37 points 3 weeks ago* (last edited 3 weeks ago)

This is the benefit of using distributed tools like git.

[-] jonne@infosec.pub 8 points 3 weeks ago* (last edited 3 weeks ago)

Yeah, the code history is the easiest thing to migrate. The other stuff like issues relies on having a good exporting/importing tool on both sides.

[-] rice@lemmy.org 2 points 3 weeks ago

Yea tons of devs treat all of these platforms like the central host, but you can host it on all of them at once lol

[-] mac@lemm.ee 2 points 3 weeks ago

Wonder if there's a tool for compiling all issues from seperate sources to allow devs with repos hosted on several different platforms to respond easier.

Also feels like a way to get repeat issues more frequently

[-] rice@lemmy.org 1 points 3 weeks ago

Yea, would probably call for integrating the actual issues into git too lol

[-] Jumuta@sh.itjust.works 15 points 3 weeks ago

organic maps ftw!

[-] navi@lemmy.tespia.org 12 points 3 weeks ago

A bit of a different tone from when they announced that they were blocked. It was much more neutral (GitHub enforcing US law).

[-] MinFapper@startrek.website 10 points 3 weeks ago

It doesn't seem like a very "walled" garden if they were able to migrate all their data including issues and comments

[-] inbeesee@lemmy.world 4 points 3 weeks ago

Forgejo seems pretty good, I'll move my stuff there too

[-] tal@lemmy.today 1 points 3 weeks ago* (last edited 3 weeks ago)

Ooh, I didn't know that someone had developed a mechanism to move issues and PRs.

I remember commenting on the fact that while it's easy to move the source repo itself from location to location, as git makes that easy and self-contained, issues and PRs didn't enjoy that.

this post was submitted on 30 Mar 2025
751 points (100.0% liked)

Selfhosted

46213 readers
362 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS