appearances matter move to switzerland [LWN.net]

appearances matter move to switzerland

Posted Feb 6, 2025 12:06 UTC (Thu) by intelfx (subscriber, #130118)
In reply to: appearances matter move to switzerland by lunaryorn
Parent article: The Linux Foundation on global regulations and sanctions

> [...] and it does not need to come to a definite conclusion; it can already limit accounts on mere suspicion and require proof of identification (such as a valid credit card). Github also summarily blocks entire geographic regions.

Is that supposed to be a good thing?

> As such, Github exists as some kind of a walled garden where sanctioned entities are not present, and within with users can reasonably assume that other users legitimate or they'd not be on the platform in the first place.

GitHub does this to protect its own ass, not the one of other users. If what you (and others in this thread) say about strict personal liability for breach of sanctions is true, then it's very obvious that you cannot rely on GitHub's "walled gardenness" to make any decisions in this space, so you didn't really refute what GP was saying.

to post comments

GitHub and sanctions

Posted Feb 6, 2025 12:52 UTC (Thu) by farnz (subscriber, #17727) [Link]

Using GitHub provides you with a degree of protection, AIUI. You're safe if you genuinely believed that you weren't breaching sanctions - and you could argue that you believed that GitHub would be applying sanctions, therefore you assumed that you were not breaching sanctions by using GitHub.

Now, once the authorities have notified you, you'd have to stop working with sanctioned entities - but as a practical matter, the authorities get much more bang for their buck if they get the sanctioned entities blocked from all of GitHub than if they simply get your project to stop interacting with them.

appearances matter move to switzerland

Posted Feb 6, 2025 14:44 UTC (Thu) by lunaryorn (guest, #111088) [Link]

I didn't say anything about whether this was good or bad. I do have an opinion about the whole export control and sanctions thing, which - reading between the lines - probably isn't that far from yours, but I don't think my opinion is relevant. It is what it is, whether I like it or not.

Github certainly protects itself first and foremost, but in doing so, also provides reasonable protection to most individuals who casually contribute to open source projects. I for my part am quite sure that my personal activity on Github does not bear much of a risk, simply because none of my projects have any particular impact or reach, so I'm effectively off the grid: In the exceedingly unlikely case a sanctioned top terrorist used Github to contribute to one of my repositories there's a long long chain of people to be in trouble before anyone would come after me.

However, that's not the case for my employer, which would be held to a much much higher standard. If said top terrorist contributed to one of my employer's repositories my employer would definitely be in trouble, and if the repository was under my responsibility, so would I, unless I could meticulously prove that I followed my employer's regulations for export control and open source work to the very letter, and thus did all I could possibly to do avoid this situation. And as said in my previous comment, my employer does maintain quite extensive regulations around all this.