China is attempting to mirror the entire GitHub over to their own servers, users report

0x815@feddit.org to Technology@lemmy.world – 829 points –
Still (@still@infosec.exchange)
infosec.exchange

GitCode, a git-hosting website operated Chongqing Open-Source Co-Creation Technology Co Ltd and with technical support from CSDN and Huawei Cloud.

It is being reported that many users' repository are being cloned and re-hosted on GitCode without explicit authorization.

There is also a thread on Ycombinator (archived link)

288

You are viewing a single comment

It's a bit odd, but isn't it equivalent to forking and putting up a fork elsewhere?

I guess I don't see the problem.

It depends on the software license.

Does it though? You can still put up a fork somewhere else as long as you uphold the license right? Unless I guess in the case where the license explicitly disallows forks, but I don't think that's very common (can you even do that?).

Forks are derivative works (quite obviously) so yes you can forbid them via license terms. Whether or not that's still open source, take it up with OSI. I vaguely recall that at least once upon a time there was some project that required modification to the code to be published as separate patches and it was generally accepted to be open source don't ask me which.

Most GitHub repos don't have a license, meaning you are not licensed to do anything with them. Rehosting them would be the same as rehosting an image you don't have a license for.

It will be funny to see folks who spent the last ten years posting "It's not stealing, it's copying" memes suddenly find religion because Evil Foreign People got involved.

I'm quite scared of how AI apparently pushes people in favour of significantly stricter copyrights. This is not a good trend.

This isn't people being influenced by AI. This is Microsoft's Godzilla battling the RIAA/MPAA's King Kong.

The trend, to date, has been consolidation of media properties under fewer and more hegemonic distributors. And now we're seeing a couple of economic Titans battle over the position of "Last Legitimate Music Vendor".

Ya, I kind of like the idea of code being put somewhere else just in case. It sucks it's China, but I hate to see anything centralized in one company, especially if it's a big public, good like Github and all it's code.

The only issue I see is that they make a new Chinese equivalent for GitHub where they can censor code easier (or was GitHub already blocked?), but they already censor everything anyway so there's probably effectively no change.