Yeah... The main thing I see here is that China (read; government , not the people, not being racist here) will take this code, they will make improvements on it, they will NOT give back. Basically like Microsoft, but now an entire country.
Chinese government hasn't exact had a good reputation when it comes to taking technology and not giving anything back
Not like I'd want contributions from the chinese state programmers.
Feels like an easy entry for state level supply chain attack.
With the obligatory "fuck everyone who disregards open source licenses", I am still slightly amused at this raising eyebrows while nearly no one is complaining about MS using github to train their copilot LLM, which will help circumvent licenses & copyrights by the bazillion.
nearly no one is complaining about MS using github to train their copilot LLM
What rock have you been living under??
I complain all the time. But that's not the subject of this post...
Yeah exactly, fuck llms that don't honor licenses
while nearly no one is complaining about MS using github to train their copilot LLM,
Lots of people complained about that. I've only seen this single thread complaining about this.
If we steal IP from China does the American government give us a business loan?
China has no IP
I love how this image is a pun
Solution: create a GitHub repo with Markdown articles outlining human rights abuses by the CCP and have a large number of GitHub users star and fork the repo.
You've heard of CamelCase and lowercase and intVariableName variable naming styles. Get ready for:
for (int Taiwan == 0; Taiwan < HongKong; Taiwan++) { int TianamenSquare == 0; ... }
That's the whole point of this: they will automatically filter that out, and this is an impotent, though well intended, gesture.
How will they filter it out? If they just don't mirror anything with 'forbidden' terms, we can poison repos to prevent them being mirrored. If they try to tamper with the repo histories then they'll end up breaking a load of stuff that relies on consistent git hashes.
It is not illegal is it?
If it is legal, then thank you China for the free backup.
I do believe it's illegal if they take a repository with a restrictive license (which includes any repository without a license), and then make it available on their own service. I think China just doesn't care.
If it's hosted in a public repo, anyone can clone it, that's very much part of most git flows.
What you can do with the software, how you can use it, that's another matter, based on the licence.
That of course assumes China will respect the copyright..
You can buy pirated software or pre-cracked consoles in stores there. They don't care.
Law do not exist by itself; it's the result of balance of power. How would you know that your State do not use illegally free software ? And if you know it, could you sue it ? Even if it's a classified administration ?
Apply laws Internationally is even worse. It usually depends of the imperialist relationship between States. For exemple, Facebook rules was illegal in France, but France changes it's laws rather than sue Facebook. A decade later, the whole European Union could forte RGPD upon the GAFAM.
China have nothing to fear in ignoring those licence, and we shouldn't rely on it to protect our work. However we could strengthen our common defenses, through FOSS for people in the US … and maybe trade unions elsewhere.
GitHub are not some bastion of righteousness - they are literally owned by Microsoft. And they work hard to stop people from getting too much Open Source from them, with rate limits and the like, so essentially gate keep.
I think CSDN probably want to gatekeep their clone even harder, but in general having archives of GitHub on the Internet is a good thing.
Yeah, though the Chinese government isn't doing this out of the goodness of their heart, this is what open source is about.
God damn it, Jiaan Yang!
I call my uncle, he’s very corrupt
I think the major issue is here is that they are “mirroring” with the same username without clear indicating they are mirrors and they are modifying all the github links in Readme to GitCode. But if you want to claim your project, they want to only comment using the issue section of a project which requires account; but then you have to have a Chinese phone number to register account, and you will automatically get a Huawei Cloud account when you registering it
Edit: also some background info about the company behind GitCode from my other comment: the company behind GitCode is funded and owned by CSDN (China Software Developer Network) and the actual infrastructure and service is provided by Huawei Cloud. On the website they have written this statement in the registration page.
CSDN is mostly a platform to share posts on software development, but it is known to have a lot of issues, including:
I don't understand why this is a bad thing? Open source code is designed to be shared/distributed, and an open-source license can't place any limits on who can use or share the code. Git was designed as a distributed, decentralized model partly for this reason (even though people ended up centralizing it on Github anyways)
They might end up using the code in a way that violates its license, but simply cloning it isn't a problem.
The code needs to maintain the copyrights and authors. They are "mirroring" usernames into their own domain, with mails that dont correspond to the original authors, stealing their contributions.
I’m seeing this misconception in a lot of places.
Just because something is on GitHub, doesn’t mean it’s open source. It doesn't automatically grant permission to share either.
I expect it's going likely to be used to train some Chinese AI model. The race to AGI is in progress. IMO: "ideas" (code included) should be freely usable by anyone, including the people I might disagree with. But I understand the fear it induces to think that an authoritarian government will get access to AGI before a democratic one. That said I'm not entirely convinced the US is a democratic government..
PS: I'm french, and my gov is soon to be controlled by fascist pigs if it's not already, so I'm not judging...
It's a bit odd, but isn't it equivalent to forking and putting up a fork elsewhere?
I guess I don't see the problem.
The vast majority of projects on GitHub is open-source and forkable, why would that need authorization?
It's... suspicious that China's doing it en masse, but there's nothing wrong in cloning or forking a repo last i heard.
It's not about authorization. They want to build a knowledge base for when the Great Firewall gets some more filters. Just like russias mirror of wikipedia which is heavily edited to discredit the west.
fun to think that my shitty program is now stored in an artic vault and stored in some Chinese servers
So many bugs I never fixed and yet here we are lol
Great! Now I know who to contact when I accidentally delete all the plaintext API keys and passwords I had stored in a public github repo.
Quick, someone tell Nintendo!
Put content that is illegal in China into your code, problem solved!
If it’s a public repo do they need permission?
Not saying this is good, but you can’t really argue that it’s not a natural consequence of open source.
I'm noticing this misconception in a lot of places.
Just because something is on GitHub, doesn't mean it's open source.
I love how every Chinese company is called "China"
This is a most excellent place for technology news and articles.
