I think the bigger question is why they were using microsoft products in the first place. USA has been very hostile to the ICC under trump, but its not exactly a huge shift, bush was also incredibly hostile. It seems borderline incompetent to use a microsoft cloud offering given the political situation. Not to mention given the type of work they do, seems like hosting stuff off site at all is a bad plan.
The same reason most organizations use it -- inertia and because it's been the standard for so long, it's the best at what it does. The startup I used to work at was exclusively on OSX + GoogleDocs, when we were small, but as we grew (and especially when the Finance team grew) more and more employees found a need for the MS Office Suite as well as apps that only run on Windows, so they started rolling out Windows VM'…
ICC ditches Microsoft 365 for openDesk
111–120 of 229 posts
Re: ICC ditches Microsoft 365 for openDesk
#112Earlier quoted context omitted.
I don’t understand why this is the case though. Could MS create a new EU based company in which it just owns shares ? Or is the US cloud act so wide that they can demand data from all the companies a us based company has equity in?
I'd be surprised if this isn't already the case. The extent to which you can do business in the EU without legal presence is limited. It is not a huge amount of protection though. I mean we've already established that selling to 'terrorists' can be sanctioned even when selling through an intermediary. So what's stopping the US from ordering Microsoft to stop selling licenses to the ICC? And then we've not touched on…
They simply don't separate the infrastructure this way AFAIK.
Re: ICC ditches Microsoft 365 for openDesk
#113Related: "IMPOSING SANCTIONS ON THE INTERNATIONAL CRIMINAL COURT" (white house, feb 2025) https://www.whitehouse.gov/presidential-actions/2025/02/impo... Microsoft admits in French court it can't keep EU data safe from US authorities (jul 2025) https://news.ycombinator.com/item?id=45822902
I don’t understand why this is the case though. Could MS create a new EU based company in which it just owns shares ? Or is the US cloud act so wide that they can demand data from all the companies a us based company has equity in?
That would be a seperate company, plus if its licensing tech from MS then it's still vulnerable to supply chain attacks.
Re: ICC ditches Microsoft 365 for openDesk
#114Hei hei, I'm working for the XWiki and CryptPad projects, which are integrated in openDesk. Here are a couple links / infos that can be interesting to understand the context of openDesk. The openDesk project comes initially from an initiative of the Ministry of Interior of Germany in 2021, to build the alternative to Office 365. The project was progressively transferred in 2025 to a state-owned organization, the ZenD…
>CryptPad was selected to join the German "Sovereign Workplace" project, now called openDesk.
https://blog.cryptpad.org/2025/01/28/CryptPad-Funding-Status...
Many more details in this blog post from XWiki: https://xwiki.com/en/Blog/XWiki-CryptPad-knowledge-managemen...
Re: ICC ditches Microsoft 365 for openDesk
#115Earlier quoted context omitted.
I'd be surprised if this isn't already the case. The extent to which you can do business in the EU without legal presence is limited. It is not a huge amount of protection though. I mean we've already established that selling to 'terrorists' can be sanctioned even when selling through an intermediary. So what's stopping the US from ordering Microsoft to stop selling licenses to the ICC? And then we've not touched on…
It's not about having a subsidiary, it's about the technical structure of 365 meaning Microsoft US has access to Microsoft EU servers and thus US employees can be compelled to follow US court orders. They simply don't separate the infrastructure this way AFAIK.
So no reason to deal with any European citizen or court. You just threaten the US IT guy to give you the EU credentials.
Re: ICC ditches Microsoft 365 for openDesk
#116But what really surprised me are statements like this in the README:
” Nextcloud Enterprise: openDesk uses the Nextcloud Enterprise to the build Nextcloud container image for oD EE. The Nextcloud EE codebase might contain EE exclusive (longterm support) security patches, plus the Guard app, that is not publicly available, while it is AGPL-3.0 licensed.
And
COOL Controller container image and Helm chart: Source code and chart are using Mozilla Public License Version 2.0, but the source code is not public. It is provided to customers upon request. ”
This, according with other paragraphs describing percentages of free and non-free code in certain components really makes me wonder…
Re: ICC ditches Microsoft 365 for openDesk
#117Earlier quoted context omitted.
MSFT already operates in Europe via subsidiaries for a whole host of reasons. But hiving certain assets off in a subsidiary is very rarely effective to avoid laws and regulations that apply to the parent. The parent controls the subsidiary so a court or regulator having jurisdiction over the parent could order it to get what it needs from the subsidiary. This is particularly so in the US, which is kind of known for e…
So let’s say I am eu citizen I own a data center company in Brussels. I sell 1 stock to MS USA. Can they at any point demand all my data ?
Re: ICC ditches Microsoft 365 for openDesk
#118No Excel replacement? :/
From openDesk website: > Create, edit and share documents, spreadsheets and presentations with full support for all major file formats
Re: ICC ditches Microsoft 365 for openDesk
#119Earlier quoted context omitted.
>Microsoft admits in French court it can't keep EU data safe from US authorities Snowden leaked that fact before Microsoft made the admission. But it's good that it's coming from them officially nonetheless.
Theres a difference between as an intelligence organisation having access to data, and "someone in power is angry because they watched a TV advert, I want to see what they know" but, your over all picture is still, sadly correct.
Re: ICC ditches Microsoft 365 for openDesk
#120So, reading the documentation in the [repo]( https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/... ) it’s immediately made clear that you should use the Enterprise Edition for production use. (Since the German state is behind this, why not focus on totally free software for production use?) But what really surprised me are statements like this in the README: ” Nextcloud Enterprise: openDesk uses the Nextclo…
GPL family mandates source code access to people who can access to the software itself. So as long as ICC gets the source code of the NextCloud EE and the Guard app, the GPL is fulfilled.
This is how RedHat operates, and is not a violation of GPL.
Also, this is how you can build a business around GPL. You only have to provide source code to people who buys your software, or you can sell support to it.
Another example: Rock Solid curl [0].