Still (@still@infosec.exchange)
infosec.exchange
Attached: 3 images tldr: GitCode or China is attempting to mirror/clone the entire GitHub over to their own servers and there's nothing you can do about it, even if your license somehow disagrees with it. Apparently China now has their own GitHub/public Git repository hosting service called GitCode; it is owned and operated by CSDN under the company name "重庆开源共创科技有限公司". It is being reported that many users' repository are being cloned and re-hosted on GitCode without authorization - meaning your project may very well be on this service without you explicitly allowing.

GitCode, a git-hosting website operated Chongqing Open-Source Co-Creation Technology Co Ltd and with technical support from CSDN and Huawei Cloud.

It is being reported that many users’ repository are being cloned and re-hosted on GitCode without explicit authorization.

There is also a thread on Ycombinator (archived link)

    • KubeRoot@discuss.tchncs.deEnglish
      434·
      4 months ago

      I do believe it’s illegal if they take a repository with a restrictive license (which includes any repository without a license), and then make it available on their own service. I think China just doesn’t care.

      • the_ocs@lemmy.worldEnglish
        255·
        4 months ago

        If it’s hosted in a public repo, anyone can clone it, that’s very much part of most git flows.

        What you can do with the software, how you can use it, that’s another matter, based on the licence.

        That of course assumes China will respect the copyright…

        • KubeRoot@discuss.tchncs.deEnglish
          91·
          4 months ago

          Sure, you can probably clone it - I’m not 100% sure, but I think laws protect that as long as it’s private use.

          You can also fork it on GitHub, that’s something you agree to in the GitHub ToS - though I think you’re not allowed to push any modifications if the license doesn’t allow it?

          Straight up taking the content from GitHub, uploading it to your own servers, and letting people grab a copy from there? That’s redistribution, and is something that needs to be permitted by the license. It doesn’t matter if it’s git or something else, in the end that’s just a way to host potentially copyrighted material.

          Though if you have some reference on why this is not the case, I’d love to see it - but I’m not gonna take a claim that “that’s very much a part of most git flows”.

      • Themadbeagle@lemm.eeEnglish
        167·
        4 months ago

        Illegal according to who?

        The US? Why would China care, they are their own country with their own laws.

        International courts? Who is enforcing those judgments?

          • irreticent@lemmy.worldEnglish
            2·
            4 months ago

            It’s not about laws at this level but about whether it is worth to do vs possible repercussions

            Again, what repercussions? Who will enforce an ICC judgement against the CCP? Laws aside, what possible actions could be taken? I guess sanctions but that’s unlikely over something like this.

    • menas@lemmy.wtfEnglish
      3·
      4 months ago

      Law do not exist by itself; it’s the result of balance of power. How would you know that your State do not use illegally free software ? And if you know it, could you sue it ? Even if it’s a classified administration ?

      Apply laws Internationally is even worse. It usually depends of the imperialist relationship between States. For exemple, Facebook rules was illegal in France, but France changes it’s laws rather than sue Facebook. A decade later, the whole European Union could forte RGPD upon the GAFAM.

      China have nothing to fear in ignoring those licence, and we shouldn’t rely on it to protect our work. However we could strengthen our common defenses, through FOSS for people in the US … and maybe trade unions elsewhere.