Live data from Hacker News

GitHub blocks entire company because one employee was in Iran

twitter.com

31–40 of 515 posts

Re: GitHub blocks entire company because one employee was in Iran

#33
post #11

What's the difference between a Chinese company and a US company? None. Both work for the state, although US ones operate under the guise of democracy. This sort of union between tech and politics is not going to take us anywhere.

No there are big differences. For example in China FAANG could easily be stopped from doing things they shouldn't while in the US it takes years and years of lobbying, talking to the media, making backroom deals, sitting on ones arse, changing the laws so it isn't unlawful anymore, etc.

Re: GitHub blocks entire company because one employee was in Iran

#34
So many dimensions come to play here.

1. There's the obvious legal aspect i.e. how these laws are framed and interpreted.

2. Then there's the geopolitical aspect. Is it fair to impose sanctions on Iran.

3. There's another aspect around GitHub policy that asks if an entire organization be banned for the location of one team member.

4. Finally, there's the aspect of relinquishing control. Your app development is on the cloud. IDEs are on the cloud. Deployments are on the cloud. App stores are on the cloud.

You have relinquished so much control, why be surprised if that stares you back in the face?

Ironically, Git is a decentralized version control system.

Re: GitHub blocks entire company because one employee was in Iran

#35

Earlier quoted context omitted.

You seem confused why GitHub did what they did. In the US there is something called "US Export Law", the law includes declarations that makes companies unable to sell services/goods to certain countries (which spoiler, Iran is part of that list). The law itself is not illegal, as the lawmakers have created and enacted that law. It's the opposite, the law is declaring what's illegal. So, if GitHub doesn't ban users fr…

What happens if a company has Office 365? Does MS block entire company emails?

Who knows, probably? For the rest of the "Does X block Y if Y is in Iran|Other embargoed country" questions, the answers are either A) Yes, you'll get banned or B) No, they haven't thought of that yet, but they'll add banning as soon as they figure it out, as the law requires it.

Re: GitHub blocks entire company because one employee was in Iran

#38

Since MS owns github does the same rule ban happen if a company uses office365-onöline/azure - and one employee opens email from Iran?

Tangentially related but one of my guys when to Cuba when we were using G-suite and he couldn't access gmail, it seemed to be ip-blocked.

Maybe Cuba has a very well known set of IP addresses and it's easy to block?

Re: GitHub blocks entire company because one employee was in Iran

#39

Earlier quoted context omitted.

> Although I agree the export embargo is fucking stupid, especially when it comes to online technology, I really want to see less criminal behavior from companies, not more. The law is not stupid, it's criminal. By following it, companies are precisely engaging in criminal behavior.

You seem confused why GitHub did what they did. In the US there is something called "US Export Law", the law includes declarations that makes companies unable to sell services/goods to certain countries (which spoiler, Iran is part of that list). The law itself is not illegal, as the lawmakers have created and enacted that law. It's the opposite, the law is declaring what's illegal. So, if GitHub doesn't ban users fr…

"the law includes declarations that makes companies unable to sell services/goods to certain countries" is not the same as "if GitHub doesn't ban users from Iran, they are breaking the law".

GitHub could comply with the law without completely banning users who access their service from Iran, e.g. by making their website unavailable for Iranian IPs or by making paid features unavailable.

Re: GitHub blocks entire company because one employee was in Iran

#40

If the Iranian employee logged into the Github account, isn't blocking the account exactly what the law says they should do? If all they did was apply a merge request in one of the repos then would reverting the merge and blocking the account would be enough to comply? Is there some alternative way to comply with US export restrictions? The real question here is why people even consider using US cloud companies when…

Would it not be sufficient to just block requests from Iran rather than shut down the account and the groups they are in? That way when they return home they can still access the site.
Post reply on HN