GitCode, a git-hosting website operated Chongqing Open-Source Co-Creation Technology Co Ltd and with technical support from CSDN and Huawei Cloud.

It is being reported that many users’ repository are being cloned and re-hosted on GitCode without explicit authorization.

There is also a thread on Ycombinator (archived link)

  • Freuks@lemmy.ml
    link
    fedilink
    English
    arrow-up
    2
    ·
    3 days ago

    China cares of nothing, from patents to licences. Culture of steal and copy, rebrand and sell/use

    • rottingleaf@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      3 days ago

      I would argue that this culture would possibly be good to learn from them, first. It didn’t come to existence as some kind of social evolution, but was impressed by power.

      Second, at least they are behind Europeans in the culture of genocide.

    • KubeRoot@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      43
      arrow-down
      4
      ·
      7 days ago

      I do believe it’s illegal if they take a repository with a restrictive license (which includes any repository without a license), and then make it available on their own service. I think China just doesn’t care.

      • the_ocs@lemmy.world
        link
        fedilink
        English
        arrow-up
        25
        arrow-down
        5
        ·
        7 days ago

        If it’s hosted in a public repo, anyone can clone it, that’s very much part of most git flows.

        What you can do with the software, how you can use it, that’s another matter, based on the licence.

        That of course assumes China will respect the copyright…

        • KubeRoot@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          9
          arrow-down
          1
          ·
          7 days ago

          Sure, you can probably clone it - I’m not 100% sure, but I think laws protect that as long as it’s private use.

          You can also fork it on GitHub, that’s something you agree to in the GitHub ToS - though I think you’re not allowed to push any modifications if the license doesn’t allow it?

          Straight up taking the content from GitHub, uploading it to your own servers, and letting people grab a copy from there? That’s redistribution, and is something that needs to be permitted by the license. It doesn’t matter if it’s git or something else, in the end that’s just a way to host potentially copyrighted material.

          Though if you have some reference on why this is not the case, I’d love to see it - but I’m not gonna take a claim that “that’s very much a part of most git flows”.

      • Themadbeagle@lemm.ee
        link
        fedilink
        English
        arrow-up
        16
        arrow-down
        7
        ·
        7 days ago

        Illegal according to who?

        The US? Why would China care, they are their own country with their own laws.

        International courts? Who is enforcing those judgments?

          • irreticent@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            6 days ago

            It’s not about laws at this level but about whether it is worth to do vs possible repercussions

            Again, what repercussions? Who will enforce an ICC judgement against the CCP? Laws aside, what possible actions could be taken? I guess sanctions but that’s unlikely over something like this.

    • menas@lemmy.wtf
      link
      fedilink
      English
      arrow-up
      3
      ·
      6 days ago

      Law do not exist by itself; it’s the result of balance of power. How would you know that your State do not use illegally free software ? And if you know it, could you sue it ? Even if it’s a classified administration ?

      Apply laws Internationally is even worse. It usually depends of the imperialist relationship between States. For exemple, Facebook rules was illegal in France, but France changes it’s laws rather than sue Facebook. A decade later, the whole European Union could forte RGPD upon the GAFAM.

      China have nothing to fear in ignoring those licence, and we shouldn’t rely on it to protect our work. However we could strengthen our common defenses, through FOSS for people in the US … and maybe trade unions elsewhere.

  • phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    19
    arrow-down
    1
    ·
    6 days ago

    Yeah… The main thing I see here is that China (read; government , not the people, not being racist here) will take this code, they will make improvements on it, they will NOT give back. Basically like Microsoft, but now an entire country.

    Chinese government hasn’t exact had a good reputation when it comes to taking technology and not giving anything back

    • Appoxo@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      ·
      6 days ago

      Not like I’d want contributions from the chinese state programmers.
      Feels like an easy entry for state level supply chain attack.

      • phoenixz@lemmy.ca
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 days ago

        Who says they aren’t trying right now? I recall SSH had an attempt quite recently, I can guarantee that China is trying hard to include anything to out in back doors

  • phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    27
    arrow-down
    5
    ·
    7 days ago

    Yeah, though the Chinese government isn’t doing this out of the goodness of their heart, this is what open source is about.

  • l3m05@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    It is a new “internet” archive without copyright bla bla? ¯\_(ツ)_/¯

  • smb@lemmy.ml
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    10
    ·
    7 days ago

    that could come in veery handy once microsoft wants to pull some plugs. i guess we can be grateful for the backup that is 1. not 100% in m$ hands any more then and 2nd cannot be as easy destroyed as some backups at archive.org. i actually hoped for someone with enough money to create this type of security after m$ assimilated github and thought like “does nobody see the rising danger there?” but even if china’s great fork might be more reliable than m$ over time, maybe it’s better to have your own backups of all the things you actually may need in future.

    btw did microsoft manage to get rid of the hackers that settled into their network for … how long??

    i guess they’ll tell

  • uis@lemm.ee
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    4
    ·
    edit-2
    7 days ago

    I hate authoritarian regimes, but why hosting cloned repos is bad?

    EDIT: https://lemmy.world/comment/10853810

    It appears to be scam-type(capitalism with beastly grin type) mirror. Not saying that hosting mirrors is bad in itself.

  • bionicjoey@lemmy.ca
    link
    fedilink
    English
    arrow-up
    378
    arrow-down
    10
    ·
    8 days ago

    Solution: create a GitHub repo with Markdown articles outlining human rights abuses by the CCP and have a large number of GitHub users star and fork the repo.

    • Colonel Panic@lemm.ee
      link
      fedilink
      English
      arrow-up
      170
      arrow-down
      2
      ·
      8 days ago

      You’ve heard of CamelCase and lowercase and intVariableName variable naming styles. Get ready for:

      for (int Taiwan == 0; Taiwan < HongKong; Taiwan++) { int TianamenSquare == 0; … }

    • Tramort@programming.dev
      link
      fedilink
      English
      arrow-up
      87
      arrow-down
      3
      ·
      8 days ago

      That’s the whole point of this: they will automatically filter that out, and this is an impotent, though well intended, gesture.

      • Morphit @feddit.uk
        link
        fedilink
        English
        arrow-up
        75
        arrow-down
        1
        ·
        8 days ago

        How will they filter it out? If they just don’t mirror anything with ‘forbidden’ terms, we can poison repos to prevent them being mirrored. If they try to tamper with the repo histories then they’ll end up breaking a load of stuff that relies on consistent git hashes.

        • jorp@lemmy.world
          link
          fedilink
          English
          arrow-up
          28
          ·
          8 days ago

          I feel like the effort to make such a repo and make it popular enough to be cloned and rehosted is a lot more effort than someone manually checking the results of an automated filter process.

          The “effort economy” is hugely in favor of the mirroring side

      • bionicjoey@lemmy.ca
        link
        fedilink
        English
        arrow-up
        25
        ·
        8 days ago

        Yeah I figured as much. It was mostly a joke. At the end of the day, if stuff is on GH, people can take it. It’s barely even stealing. Unless the license disagrees of course but then you were putting a lot of trust in society by making it public in the first place.

        • jaybone@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          1
          ·
          8 days ago

          That’s what I don’t get about this. Why does anyone care? Even this Chinese company, why do they care to clone it all? It’s already all hosted and publicly available.

          • irreticent@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            6 days ago

            Even this Chinese company, why do they care to clone it all? It’s already all hosted and publicly available.

            Until it isn’t. Perhaps they are preparing for a future war with the US and assume their access to all that code will be blocked. They want to copy it now while they have access.

          • bionicjoey@lemmy.ca
            link
            fedilink
            English
            arrow-up
            9
            ·
            8 days ago

            Apparently they aren’t respecting licenses. It’s possible to have source code publicly available on GH but have it not be truly FOSS. But that’s generally not a great idea since you’re effectively relying on the honour system for people not to take your code.

      • Azzu@lemm.ee
        link
        fedilink
        English
        arrow-up
        25
        arrow-down
        2
        ·
        8 days ago

        The real solution is to include a few tiananmenSquare variables in all the repositories. Either they exclude the entire repository or just the specific file, in either case the entire project may be unusable.

        • theneverfox@pawb.social
          link
          fedilink
          English
          arrow-up
          1
          ·
          7 days ago

          So… You’re saying instead of “main”, “app”, or “core”, we should change the convention to make tiananmenSquare the entry point for apps?

          Or maybe make it the filename for utils, so it’ll just break

          • Azzu@lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            6 days ago

            For example.

            But honestly I was more joking. The thing that makes most projects useful is the developers developing it, and they can’t clone that

        • BeigeAgenda@lemmy.ca
          link
          fedilink
          English
          arrow-up
          15
          arrow-down
          1
          ·
          8 days ago

          It’s a new coding paradigm, I will take some time getting used to looking for libraries in the uyghur/tianamen folder.

        • Tramort@programming.dev
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          2
          ·
          8 days ago

          China filters every byte of Internet traffic in and out of the country.

          It seems naive to think they can’t accomplish the same thing for a GitHub mirror.

          • Azzu@lemm.ee
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            1
            ·
            8 days ago

            They’re not supposed to, it’s just about blocking them from using the software :)

    • UnderpantsWeevil@lemmy.world
      link
      fedilink
      English
      arrow-up
      18
      arrow-down
      8
      ·
      8 days ago

      create a GitHub repo with Markdown articles outlining human rights abuses by the CCP

      Once you have logged “China killed 100 Zillion people! End CCP now!” in Chinese GitHub, everyone in China will realize that their lives are actually very bad and they need to do a Revolution immediately.

      • Kusimulkku@lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 days ago

        And here I was thinking that might prevent them mirroring the repo but whatever

    • Asherah@lemmy.world
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      26
      ·
      8 days ago

      Maybe we should consider the same for the US government instead of being afraid of the big Chinese boogeyman across the sea? Because I guarantee you the US has just as many, if not more. But China bad. 🙄

      • bionicjoey@lemmy.ca
        link
        fedilink
        English
        arrow-up
        20
        arrow-down
        2
        ·
        edit-2
        8 days ago

        I was making a joke about abusing Chinese censorship in order to stop them cloning GitHub repos (assuming that was something you wanted to do). The joke being that the CCP suppresses information about their human rights abuses. That is not true of the US. You could absolutely make a GitHub repo detailing the crimes of the US government. Nobody will stop you.

      • x4740N@lemm.ee
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        2
        ·
        7 days ago

        50 Cent Army Repellant:

        六四

        1989 Tiananmen Square Massacre

      • bionicjoey@lemmy.ca
        link
        fedilink
        English
        arrow-up
        73
        arrow-down
        3
        ·
        edit-2
        8 days ago

        Tankie whataboutism strikes again.

        Two things can be bad at the same time. Wild, I know.

        Edit: also, the point of my joke wasn’t the human rights abuses. It is that these things are censored in China. So your comment is even more irrelevant. One could very easily create a repo outlining American crimes and put it on GitHub. But doing so in China with CCP crimes will have you sent to a Gulag

              • bionicjoey@lemmy.ca
                link
                fedilink
                English
                arrow-up
                44
                arrow-down
                1
                ·
                edit-2
                8 days ago

                Lmao it’s literally the name of a logical fallacy. How is the term itself fallacious?

                Also I harbour no racism or ill will toward the Chinese people. My girlfriend is Chinese and I care about her a lot and love learning about her culture. I just don’t abide the human rights atrocities (or censorship thereof) committed by any government.

  • 0x0@programming.dev
    link
    fedilink
    English
    arrow-up
    131
    arrow-down
    6
    ·
    8 days ago

    The vast majority of projects on GitHub is open-source and forkable, why would that need authorization?

    It’s… suspicious that China’s doing it en masse, but there’s nothing wrong in cloning or forking a repo last i heard.

    • passepartout@feddit.org
      link
      fedilink
      English
      arrow-up
      110
      arrow-down
      5
      ·
      8 days ago

      It’s not about authorization. They want to build a knowledge base for when the Great Firewall gets some more filters. Just like russias mirror of wikipedia which is heavily edited to discredit the west.

      • FaceDeer@fedia.io
        link
        fedilink
        arrow-up
        44
        arrow-down
        4
        ·
        8 days ago

        And under copyleft licensing, they’re allowed to do that. Both to GitHub repositories and Wikipedia.

        • Kusimulkku@lemm.ee
          link
          fedilink
          English
          arrow-up
          2
          ·
          6 days ago

          Hopefully they follow the rest of the stipulations of the licenses, such as the common one about keeping the license as such and contributing the changes back.

        • passepartout@feddit.org
          link
          fedilink
          English
          arrow-up
          42
          arrow-down
          4
          ·
          8 days ago

          Of course they are, it’s not like there is some kind of international jurisdiction anyway. What is bothersome is why they do it.

          • acockworkorange@mander.xyz
            link
            fedilink
            English
            arrow-up
            2
            ·
            6 days ago

            Even if there was jurisdiction, anyone in the world is entitled to do it by the very licenses these works are released under.

      • 31337@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        1
        ·
        8 days ago

        This seems like the most plausible explanation. Only other thing I can think of is they want to develop their own CoPilot (which I’m guessing isn’t available in China due to the U.S. AI restrictions?), and they’re just using their existing infrastructure to gather training data.

      • rottingleaf@lemmy.zip
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        20
        ·
        8 days ago

        Just like russias mirror of wikipedia which is heavily edited to discredit the west.

        How come I live in Russia and have never seen such?

        I know only of quite a few troll\counterculture projects, some, like Lurkmore, are already, well, dead, some, like Traditsiya, are not.

        That, of course, if you don’t mean that Russian Wikipedia in itself has problems. Which would be true.

        • passepartout@feddit.org
          link
          fedilink
          English
          arrow-up
          33
          arrow-down
          2
          ·
          8 days ago

          It’s called Ruwiki.

          It was launched in June 24, 2023 as a fork of the Russian Wikipedia, and has been described by some media groups as “Putin-friendly” and “Kremlin-compliant”.

    • ifsocialismwasabear@lemmy.ml
      link
      fedilink
      English
      arrow-up
      17
      arrow-down
      4
      ·
      8 days ago

      Firewalls are already being built in america’s internet with the ban of tiktok

      As an european i do not see problem with having copies of free software in places not controlled by the monopoly microsoft is morphing to.