Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitLab is now running on GCP

twitter.com

Post reply on HN
Print view View original

111–120 of 163 posts

Re: GitLab is now running on GCP

#111

Post by lbotos »

JetSpiegel wrote: post #103
pfg wrote: post #9

Earlier quoted context omitted.

The GCP move was decided upon months before Microsoft acquired GitHub[1]. [1]: https://venturebeat.com/2018/04/06/why-and-how-gitlab-abando...

No doubt, but the Microsoft acquisition must have pushed the priority of the move through the roof.

Negative. I work at GitLab. I can assure you that GitHub getting acquired did not have any bearing on the speed at which we made this migration happen. It's been in the works for a long time, and in none of the meetings I've attended has anyone said "Github now is owned by Microsoft, we need to get on GCP FASTER."

Re: GitLab is now running on GCP

#112

Post by manquer »

yzmtf2008 wrote: post #93
miracle2k wrote: post #14

Earlier quoted context omitted.

Exactly right. Much more attention needs to be brought to this subject. Imagining Google Cloud having as much market share as AWS is downright nightmarish. It would break large parts of the internet in those countries. I regularly travel to Iran, and can attest to a large number of random breakages (for example: the documentation of the date-fns library, because it loads data from Firebase). Google as an infrastructu…

Google as an infrastructure provider simply has no business being involved in where my content is available. No, Google has no business in it, but export control does.

Microsoft and AWS don't seem to have any problems complying with the law

Re: GitLab is now running on GCP

#114

Post by dane-pgp »

mavhc wrote: post #81
CryoLogic wrote: post #79

Earlier quoted context omitted.

There are hundreds of instances of Google censoring websites, YouTube channels and plus accounts that promoted political philosophies that did not agree with the company culture. I think by that metric Google is very pro censorship when it comes to their own social media platforms

Name 5

Is your point that Google haven't censored more than 5 times, or that Google mostly censors people who aren't famous/memorable and therefore it's hard to name 5?

https://www.reddit.com/r/conspiracy/comments/816mzt/big_alph...

Perhaps you're saying that, if provided with a list of 5 examples, you would defend why Google chose to censor in those specific cases. Unfortunately I don't know enough about the details of all these cases to be able to pick 5 particularly controversial examples, but I still feel uneasy about the amount of power Google has to silence opinions it disagrees with.

Re: GitLab is now running on GCP

#115

Post by freeone3000 »

vbezhenar wrote: post #85
otterlicious wrote: post #40

Earlier quoted context omitted.

> cannot allow downloads of free software from your website (like Oracle JRE) The Oracle JRE contains strong cryptography which is illegal to export to certain sanctioned countries. It being free doesn't change anything about that. That one is actually legitimate.

Last time I checked, you couldn't even use strong cryptography in Java without tiny additional download. So forbidding JRE downloading seems a bit excessive.

As of 8, they integrated that portion into main tree because it was ridiculous and a bit of a pain for the 98% of the world who wasn't under US sanction to have to do that. It's "legitimate" again - so all the Iranians that want Java have to download it from the source tree.

Re: GitLab is now running on GCP

#116

Post by MapleWalnut »

conradk wrote: post #51
koolba wrote: post #8

Earlier quoted context omitted.

You can have it both ways by leveraging the free / hobby tier of Heroku with bringing your own data store. Nothing binds you to their resource providers. Just add an environment variable for your own database or Redis provider.

Then you lose some security though, because I think Heroku uses large IPs ranges [1]. There seems to be no way to allow database access from a private IP address, other than using expensive proxying addons. That means you probably have to open up your database to 0.0.0.0/0, which is not good at all. [1] https://stackoverflow.com/questions/15512360/get-a-finite-li...

Heroku has "private spaces" which will give you a fixed set of outbound IPs, AWS VPC peering, and a firewall via Trusted IP Ranges.

Heroku is surprisingly nice as an enterprise customer.

https://devcenter.heroku.com/articles/private-spaces#stable-...

Re: GitLab is now running on GCP

#117

Post by freeone3000 »

smnrchrds wrote: post #44
otterlicious wrote: post #40

Earlier quoted context omitted.

> cannot allow downloads of free software from your website (like Oracle JRE) The Oracle JRE contains strong cryptography which is illegal to export to certain sanctioned countries. It being free doesn't change anything about that. That one is actually legitimate.

It's not just JRE. You cannot download any software from Oracle, period. Plus, is it really illegal to export cryptography software? If that is the case, why are Java downloads the only ones restricted? Shouldn't, for example, Visual Studio and .Net also be blocked? I don't think it is for any valid legal reason. Just that they cannot make money from these countries, so they can't be bothered to let them access their…

Yes[1], export is controlled. Oracle Java contains an implementation of cryptographic primitives, similar in scope and purpose to OpenSSL.

Microsoft does not sell products to any sanctioned countries[2].

Note that [1] has a giant loophole for open source software, which requires notice but not permission - so builds of .NET Core, OpenJDK, OpenSSL itself, and so on, can be exported no problem. Also, programs built WITH the primitives are "mass market", so are exemptable that way.

[1]: https://www.bis.doc.gov/index.php/policy-guidance/encryption [2]: https://www.microsoft.com/en-us/exporting/faq.aspx

Re: GitLab is now running on GCP

#118

Post by dane-pgp »

Adverblessly wrote: post #58
smnrchrds wrote: post #19

Earlier quoted context omitted.

The legal requirements are lower. They are not allowed to sell hosting to persons from sanctioned countries for example, and all companies follow that rule. But interpreting the law to mean you cannot show hosted sites to visitors from those countries (like Google) or that you cannot allow downloads of free software from your website (like Oracle JRE) is an over-reaction only some companies do. The real reason is tha…

> The real reason is that since they cannot extract money from these countries because of the sanctions, they don't care about their existence, or how much trouble people from those countries would face due to their decisions. That doesn't make sense to me, letting people from those countries access resources on GCP does make Google money, since presumably Google will be paid by the website owner (which doesn't live…

Ironically you might have inadvertently provided the answer to your own question. If Google make money from a website owner (in the EU, for example), and that website owner makes money (using their website) from someone in a restricted country, then an imaginative prosecutor could argue that Google are guilty of knowingly facilitating some sort of "money laundering", from the restricted country to Google themselves.

This is not much more far-fetched than the idea that a site like The Pirate Bay is guilty of "conspiring" with its users to infringe copyright.

Re: GitLab is now running on GCP

#119

Post by ac4tw »

yzmtf2008 wrote: post #95
CryoLogic wrote: post #94

Earlier quoted context omitted.

Even if they are wrong they should not be censored. Clearly state what is allowed and what is not. Do not pick sides and change rules on a case by case basis. Do what you say you are going to do. That's how businesses used to earn trust. Now integrity in business is a thing of the past. I'd rather have a bunch of crazy people expressing themselves on the web than being selectively removed due to a couple's persons op…

Nah, I'd rather not have the bunch of crazy people expressing themselves on the website that I use. Youtube is not all of web. Youtube has no obligation to give you a platform to express whatever you want. If you want to say Sandy Hooks is fake, go to your own corner, like 127.0.0.1.

It seems like a good solution to CryoLogic and your discussion might be for services to allow you to choose what you would like censored. For instance 'yzmtf2008' could simply say, don't show me content like this.

Obviously there are some challenges in the 'like this' part, but it seems like it might scale better and be less prone to centralized censorship problems than the current mechanism.

The sad part is that 'yzmtf2008' will exist inside of a vacuum and will miss out on things that appear crazy and may actually be true, but perhaps the upside is that this person may be more productive in other areas of life by defocusing on distractions.

Post reply on HN