51–60 of 144 posts
It would be nice of Github if they could publish a transparency repo with all the partners and all the regex along with this initiative. I see a lot of people in this thread worried that "China gets their data" and this transparency repo could alleviate some of that.
Earlier quoted context omitted.
I cannot see the issue because the regex are pre-approved by GitHub. And even then, the service will only return the string, not who wrote it. Unless GitHub approves /Jonh Doe said:.*/ there is no issue whatsoever.
> I cannot see the issue because the regex are pre-approved by GitHub. GitHub is a private company with one dual obligation, to prolong its existence and keep increasing its profit margin. It is not any sort of arbiter for morality - morality being an externality to its central obligation - so it cannot be relief upon to “do the right thing”. So it is not in any position of authority that would enable it to “approve”…
Microsoft's mission in life is to do whatever its directors want, insofar as its shareholders don't get /too/ annoyed about this, and to not break the law. They have no actual "obligations" or "fiduciary duties" to keep increasing profits or anything like that.
Brilliant title for the article. Even though I'm a paid github customer, I had no idea they had a program called "secret scanning" and that it's actually beneficial. So I obviously assumed they're letting China scan my private repos. They really need to work on wording.
Seems unbelievable how they'd fumble the title when they could just as easily have called it "secrets scanning" and it would be OK.
Though perhaps that’s just my own bias on the subtle differences in the meanings of those words.
It would be nice of Github if they could publish a transparency repo with all the partners and all the regex along with this initiative. I see a lot of people in this thread worried that "China gets their data" and this transparency repo could alleviate some of that.
Why do people worry about China so much? There is barely any cooperation between Chinese intelligence and the rest of the world. If I was forced to pick one government to share my secrets with, it would be the Chinese, because there's nothing they can do about it. My own government and its allies is infinitely more dangerous to me than such a foreign one.
Just a reminder that Git is a decentralized protocol and Github is merely a (poor) implementation of it. Microsoft-Github have been increasingly introducing antifeatures, just one of which is sending repository contents to China automatically. For the last few years I've been running Git off my own servers with a cgit [0] frontend, and couldn't be happier. [0] https://git.zx2c4.com/cgit/about/
It would be nice of Github if they could publish a transparency repo with all the partners and all the regex along with this initiative. I see a lot of people in this thread worried that "China gets their data" and this transparency repo could alleviate some of that.
Why do people worry about China so much? There is barely any cooperation between Chinese intelligence and the rest of the world. If I was forced to pick one government to share my secrets with, it would be the Chinese, because there's nothing they can do about it. My own government and its allies is infinitely more dangerous to me than such a foreign one.
Unless you live or visit there. Wasn’t there reports of China having concentration camps?
Earlier quoted context omitted.
> because there's nothing they can do about it Are you talking about the China that bought huge areas in ports around the world? The same one that has secret police stations as well?
So, basically... nothing? You should go into China to get a real threat. On the other hand, there is global cooperation with intelligence agencies of USA and many European countries.
China spying on Uyghurs in Sweden: https://www.rferl.org/a/Sweden_Jails_Uyghur_Chinese_Man_For_...
China controls dissidents abroad through relatives back home: https://www.reuters.com/article/us-china-uighurs-idUSKBN0UD1...
China's secret police stations in Europe: https://www.spiegel.de/international/world/beijing-s-long-ar...
>On the other hand, there is global cooperation with intelligence agencies of USA and many European countries.
Two wrongs don't make a right.
Just a reminder that Git is a decentralized protocol and Github is merely a (poor) implementation of it. Microsoft-Github have been increasingly introducing antifeatures, just one of which is sending repository contents to China automatically. For the last few years I've been running Git off my own servers with a cgit [0] frontend, and couldn't be happier. [0] https://git.zx2c4.com/cgit/about/
They should scan for Bitcoin seeds too.
It would be nice of Github if they could publish a transparency repo with all the partners and all the regex along with this initiative. I see a lot of people in this thread worried that "China gets their data" and this transparency repo could alleviate some of that.
Why do people worry about China so much? There is barely any cooperation between Chinese intelligence and the rest of the world. If I was forced to pick one government to share my secrets with, it would be the Chinese, because there's nothing they can do about it. My own government and its allies is infinitely more dangerous to me than such a foreign one.
What makes you so sure about that?
I worry about China because there’s no internal checks to prevent them from doing anything.
Western governments and allies have a long culture of court systems and thinking about balancing constituent needs. That is eroding and becoming more dangerous to the extent western leaders are envious of dictatorial powers and trying to emulate Chinese totalitarianism, but there is a lot of institutional and cultural bulwark against it.
Any powerful totalitarian country should worry people. People underestimate the level of covert aggression in all facets of foreign involvement in regimes with no internal accountability.