Live data from Hacker News

GitHub and Trade Controls

help.github.com

11–20 of 73 posts

Re: GitHub and Trade Controls

#11
Reminds me of a US based PC vendor(I think it was Dell or IBM) whose web site store has a check box like : I do not use this product for nuclear weapon development.

Re: GitHub and Trade Controls

#12
OT:

> On which countries and territories are U.S. government sanctions applied?

> Crimea, Cuba, Iran, North Korea, and Syria.

Crimea? Isn't that part of Russia now, so what is the point of sanctions against Crimea? To affect Crimean policy wouldn't they need to sanction Russia, not Crimea?

Re: GitHub and Trade Controls

#13
How feasible is for Github to create an EU organization, which is effectively mirror of github.com? So all commits, issues,... are cloned in both. But .eu usage is not governed by US law. Also, repos can be blacklisted from .com/.eu based on rules.

Re: GitHub and Trade Controls

#14
post #5

These rules are so stupid and actually hurts no one but the poor individual developer, a few years ago I used to live in Syria before the events. I had to find 3rd party mirrors or VPNs for the stupidest shit... like Nvidia graphics driver, adobe flash player, Java runtime and silly stuff like that, some ISPs had public download pages where you can find these general utilities most of it was outdated but does the job…

It's also a huge waste of time for companies in the US, and to companies all over the world that use US-based services like GitHub. > GitHub.com may not be used for purposes prohibited under applicable export control laws, including purposes related to the development, production, or use of nuclear, biological, or chemical weapons or long range missiles or unmanned aerial vehicles. Not only is this sentence an affron…

[deleted]

Re: GitHub and Trade Controls

#15

How feasible is for Github to create an EU organization, which is effectively mirror of github.com? So all commits, issues,... are cloned in both. But .eu usage is not governed by US law. Also, repos can be blacklisted from .com/.eu based on rules.

I would not be optimistic about that working as any kind of legal loophole to get around US export restrictions. I don't know any reason it would. (I am not a lawyer).

Re: GitHub and Trade Controls

#16
post #5

These rules are so stupid and actually hurts no one but the poor individual developer, a few years ago I used to live in Syria before the events. I had to find 3rd party mirrors or VPNs for the stupidest shit... like Nvidia graphics driver, adobe flash player, Java runtime and silly stuff like that, some ISPs had public download pages where you can find these general utilities most of it was outdated but does the job…

It's also a huge waste of time for companies in the US, and to companies all over the world that use US-based services like GitHub. > GitHub.com may not be used for purposes prohibited under applicable export control laws, including purposes related to the development, production, or use of nuclear, biological, or chemical weapons or long range missiles or unmanned aerial vehicles. Not only is this sentence an affron…

If you're trying to develop any technology which requires trade secrets or IP protection -> you should not be using a public SaaS.

Re: GitHub and Trade Controls

#17

How feasible is for Github to create an EU organization, which is effectively mirror of github.com? So all commits, issues,... are cloned in both. But .eu usage is not governed by US law. Also, repos can be blacklisted from .com/.eu based on rules.

I would not be optimistic about that working as any kind of legal loophole to get around US export restrictions. I don't know any reason it would. (I am not a lawyer).

Correct, GitHub would then become the exporter and be in violation of ITAR.

Re: GitHub and Trade Controls

#18
post #8
post #4

> Travel in these regions may impact your account status,... ?!?@!

I believe Slack did this too; if you've ever signed-in to Slack within a country that is currently restricted, your account was just deleted without warning.

Thats a good one! One more reason not to use Slack.

Re: GitHub and Trade Controls

#19
post #2

It's honestly about time. I've been sounding the alarm bells about ITAR, DFARS, EAR compliance for a while now! None of the software vendors I've talked to seem to understand that it is AGAINST THE LAW to upload customer supplied IP to their super-secure Cloud based product that they're trying to get me to switch too. "The lowest TCO, you'll get ROI in 6 months!" Ya, but are you compliant with NIST 800-171 requiremen…

This is like 95% of startups and companies who've raised under $100m USD.
Post reply on HN