China is attempting to mirror the entire GitHub over to their own servers, users report

0x815@feddit.org to Technology@lemmy.world – 839 points –
Still (@still@infosec.exchange)
infosec.exchange

GitCode, a git-hosting website operated Chongqing Open-Source Co-Creation Technology Co Ltd and with technical support from CSDN and Huawei Cloud.

It is being reported that many users' repository are being cloned and re-hosted on GitCode without explicit authorization.

There is also a thread on Ycombinator (archived link)

289

You are viewing a single comment

The real solution is to include a few tiananmenSquare variables in all the repositories. Either they exclude the entire repository or just the specific file, in either case the entire project may be unusable.

It's a new coding paradigm, I will take some time getting used to looking for libraries in the uyghur/tianamen folder.

China filters every byte of Internet traffic in and out of the country.

It seems naive to think they can't accomplish the same thing for a GitHub mirror.

They're not supposed to, it's just about blocking them from using the software :)

So... You're saying instead of "main", "app", or "core", we should change the convention to make tiananmenSquare the entry point for apps?

Or maybe make it the filename for utils, so it'll just break

For example.

But honestly I was more joking. The thing that makes most projects useful is the developers developing it, and they can't clone that