Still (@still@infosec.exchange)
infosec.exchange
Attached: 3 images tldr: GitCode or China is attempting to mirror/clone the entire GitHub over to their own servers and there's nothing you can do about it, even if your license somehow disagrees with it. Apparently China now has their own GitHub/public Git repository hosting service called GitCode; it is owned and operated by CSDN under the company name "重庆开源共创科技有限公司". It is being reported that many users' repository are being cloned and re-hosted on GitCode without authorization - meaning your project may very well be on this service without you explicitly allowing.

GitCode, a git-hosting website operated Chongqing Open-Source Co-Creation Technology Co Ltd and with technical support from CSDN and Huawei Cloud.

It is being reported that many users’ repository are being cloned and re-hosted on GitCode without explicit authorization.

There is also a thread on Ycombinator (archived link)

  • maxinstuff@lemmy.worldEnglish
    0·
    7 days ago

    If it’s a public repo do they need permission?

    Not saying this is good, but you can’t really argue that it’s not a natural consequence of open source.

      • uis@lemm.eeEnglish
        0·
        7 days ago

        All major licenses allow it. GPL-family, BSD-family, MIT/X11, CC-family. Anything FSF-approved or OSI-approved.

        • dev_null@lemmy.mlEnglish
          0·
          7 days ago

          Most projects on GitHub don’t have a license, which means it’s not allowed.

    • Kayn@dormi.zoneEnglish
      0·
      7 days ago

      I’m noticing this misconception in a lot of places.

      Just because something is on GitHub, doesn’t mean it’s open source.

      • maxinstuff@lemmy.worldEnglish
        0·
        7 days ago

        I get what your saying, in that open source projects normally have a licence that applies to how it’s used - but this has always been open to abuse.

        Nothing has ever stopped things like this happening - see how industry has taken advantage of open source for decades (often productising things as their own in the process).

        • Kayn@dormi.zoneEnglish
          0·
          7 days ago

          The industry takes advantage of open source projects that have permissive licenses. This is an important distinction.

          If you didn’t release your code with a permissive license (or even with a license at all), you have rights that protect you and your code. The only issue is that copyright infringement can often be hard to prove if you didn’t plan ahead for it.