GitHub shuts off access to Aurelia repository, citing trade sanctions • Hacker News Board

stickfigure wrote: post #4

firloop wrote: post #2

This is pure speculation, but it seems that GitHub's ownership by Microsoft causes them to be significantly more strict with the types of content that they are comfortable hosting. Expect this to continue as they expand up and down the stack; once their npm acquisition closes you'll see this there too. I think this should be a wake-up call to anyone staking their open source project on GitHub — if I let someone from…

This seems peculiar since Rob Eisenberg (author of that tweet and lead of Aurelia) works for Microsoft .

...and from what I understand, they actually use it on some of their sites.

Re: GitHub shuts off access to Aurelia repository, citing trade sanctions

#14

Post by khuey » Thu, Mar 19, 2020, 5:08 PM UTC

stickfigure wrote: post #4

firloop wrote: post #2

This is pure speculation, but it seems that GitHub's ownership by Microsoft causes them to be significantly more strict with the types of content that they are comfortable hosting. Expect this to continue as they expand up and down the stack; once their npm acquisition closes you'll see this there too. I think this should be a wake-up call to anyone staking their open source project on GitHub — if I let someone from…

This seems peculiar since Rob Eisenberg (author of that tweet and lead of Aurelia) works for Microsoft .

Sounds like a mistake.

Re: GitHub shuts off access to Aurelia repository, citing trade sanctions

#15

Post by enriquto » Thu, Mar 19, 2020, 5:13 PM UTC

chatmasta wrote: post #3

firloop wrote: post #2

This is pure speculation, but it seems that GitHub's ownership by Microsoft causes them to be significantly more strict with the types of content that they are comfortable hosting. Expect this to continue as they expand up and down the stack; once their npm acquisition closes you'll see this there too. I think this should be a wake-up call to anyone staking their open source project on GitHub — if I let someone from…

GitLab is fantastic, but GitHub has the most eyeballs and best discoverability features. As long as that remains true, GitHub will remain a better place to launch an open source product than alternatives.

You can use any old git repo as your main source, and "dump" every commit into github for visibility. Any issues and pull request into the github site are replied by an automatic answer to use some other site.

Re: GitHub shuts off access to Aurelia repository, citing trade sanctions

#16

Post by orclev » Thu, Mar 19, 2020, 5:15 PM UTC

ISL wrote: post #6

What is Aurelia? Why would it be sanctioned?

First a disclaimer, this is pure speculation on my part, but based on what others have said about github cracking down on sanctioned countries. I'm guessing they audited and found some accounts that belonged to people they suspected of being from sanctioned countries, and then went massively overboard and nuked any repo those users ever contributed to.

Re: GitHub shuts off access to Aurelia repository, citing trade sanctions

#17

Post by droopyEyelids » Thu, Mar 19, 2020, 5:19 PM UTC

Have black hat people figured out what triggers this yet?

Looks like a new attack, where you make a few contributions to a project, then start proxying your logins through Iran for a while till everything you touch shuts down.

Re: GitHub shuts off access to Aurelia repository, citing trade sanctions

#18

Post by antoncohen » Thu, Mar 19, 2020, 5:23 PM UTC

What frustrates me about these kind of things is how impersonal they are. How many orgs/users does GitHub sanction a day? Too many for it to be able to email the users and ask clarifying questions? Or even have a human dig in and double check what the algorithm says.

Basic human interaction would seemingly solve 99% of false account lockouts and takedowns. Even basic heuristics like this org has a repo with 11,000 stars, it isn't a new user that just signed up yesterday, we need to look into this deeper.

Re: GitHub shuts off access to Aurelia repository, citing trade sanctions

#19

Post by shadowgovt » Thu, Mar 19, 2020, 5:28 PM UTC

enriquto wrote: post #15

chatmasta wrote: post #3

Earlier quoted context omitted.

GitLab is fantastic, but GitHub has the most eyeballs and best discoverability features. As long as that remains true, GitHub will remain a better place to launch an open source product than alternatives.

You can use any old git repo as your main source, and "dump" every commit into github for visibility. Any issues and pull request into the github site are replied by an automatic answer to use some other site.

... which diminishes the likelihood volunteers will join your project, because now they have to go learn another site.

Re: GitHub shuts off access to Aurelia repository, citing trade sanctions

#20

Post by frankdenbow » Thu, Mar 19, 2020, 5:28 PM UTC

firloop wrote: post #2

This is pure speculation, but it seems that GitHub's ownership by Microsoft causes them to be significantly more strict with the types of content that they are comfortable hosting. Expect this to continue as they expand up and down the stack; once their npm acquisition closes you'll see this there too. I think this should be a wake-up call to anyone staking their open source project on GitHub — if I let someone from…

Microsoft lets Github run independently https://www.businessinsider.com/github-coo-microsoft-azure-e...