GitHub and Trade Controls
help.github.com
GitHub and Trade Controls
1–10 of 73 posts
Re: GitHub and Trade Controls
#2It's honestly about time.
I've been sounding the alarm bells about ITAR, DFARS, EAR compliance for a while now! None of the software vendors I've talked to seem to understand that it is AGAINST THE LAW to upload customer supplied IP to their super-secure Cloud based product that they're trying to get me to switch too. "The lowest TCO, you'll get ROI in 6 months!"
Ya, but are you compliant with NIST 800-171 requirements?
"Ohhh, uhhh... I don't know. I'll ask the engineering team but I'm sure we're fine!"
Ya, ok.
Re: GitHub and Trade Controls
#3It's honestly about time. I've been sounding the alarm bells about ITAR, DFARS, EAR compliance for a while now! None of the software vendors I've talked to seem to understand that it is AGAINST THE LAW to upload customer supplied IP to their super-secure Cloud based product that they're trying to get me to switch too. "The lowest TCO, you'll get ROI in 6 months!" Ya, but are you compliant with NIST 800-171 requiremen…
I suspect this is one of the things that Microsoft has more experience with, and we might be seeing their influence here.
Re: GitHub and Trade Controls
#4> Travel in these regions may impact your account status,...
?!?@!
Re: GitHub and Trade Controls
#5These rules are so stupid and actually hurts no one but the poor individual developer, a few years ago I used to live in Syria before the events.
I had to find 3rd party mirrors or VPNs for the stupidest shit... like Nvidia graphics driver, adobe flash player, Java runtime and silly stuff like that, some ISPs had public download pages where you can find these general utilities most of it was outdated but does the job.
I guess the US is afraid that terrorists may develop weapons using Adobe flash player xD
Re: GitHub and Trade Controls
#6I find it awesome that they actually have a defined and documented Appeals Process.
Re: GitHub and Trade Controls
#7> Travel in these regions may impact your account status,... ?!?@!
TLDR, you can visit these countries with the right visas and paperwork and nobody cares if you're a tourist. If you visit for several months out of the year and clearly have a business relationship with these sanctioned countries, then you have problems.
Re: GitHub and Trade Controls
#8> Travel in these regions may impact your account status,... ?!?@!
I believe Slack did this too; if you've ever signed-in to Slack within a country that is currently restricted, your account was just deleted without warning.
Re: GitHub and Trade Controls
#9These rules are so stupid and actually hurts no one but the poor individual developer, a few years ago I used to live in Syria before the events. I had to find 3rd party mirrors or VPNs for the stupidest shit... like Nvidia graphics driver, adobe flash player, Java runtime and silly stuff like that, some ISPs had public download pages where you can find these general utilities most of it was outdated but does the job…
It's also a huge waste of time for companies in the US, and to companies all over the world that use US-based services like GitHub.
> GitHub.com may not be used for purposes prohibited under applicable export control laws, including purposes related to the development, production, or use of nuclear, biological, or chemical weapons or long range missiles or unmanned aerial vehicles.
Not only is this sentence an affront to the English language, but I hope you aren't trying to develop any drone software on GitHub...
Re: GitHub and Trade Controls
#10That's a good reminder that, given the slight deterioration of the USA strategic/diplomatic stability in the past few years, using any US-based services without a strictly non-US backup is like playing poker.
And it happens we're a lot to play poker here.