Slashdot Mirror


SourceForge Clarifies Denial of Site Access

Recently there were some complaints from certain users outside the US stating that they were no longer able to access SourceForge.net. SF.net (who shares a corporate overlord with Slashdot) has outlined the reasons for these bans, and until someone with sufficient power to alter US law or the lists governing who is allowed to access what data from where, there is unlikely to be a change in these bans. It is worth noting that SF.net is not alone in these difficulties, as the same problems have been reported from other repositories, like Google Code. "As one of the first companies to promote the adoption and distribution of free and open source software, and one that still puts open source at the center of its corporate ideals, restrictions on the free flow of information rub us the wrong way. However, in addition to participating in the open source community, we also live in the real world, and are governed by the laws of the country in which we are located. Our need to follow those laws supersedes any wishes we might have to make our community as inclusive as possible. The possible penalties for violating these restrictions include fines and imprisonment. Other hosting companies based in the US have similar legal and technical restrictions in place."

38 of 396 comments (clear)

  1. Can you say, 'Proxy Server'? I knew you could! by hedronist · · Score: 5, Insightful

    "The Internet interprets censorship as damage and routes around it." -- John Gilmore

  2. No Helium for Nazis by flyneye · · Score: 3, Funny

    With any luck this will force Bin Laden to have to use Windows O.S. and programs from downloads.com to do his twisted interpretation of Allahs will.
    There could be some justice in this yet.

    --
    *Repent!Quit Your Job!Slack Off!The World Ends Tomorrow and You May Die!
  3. Re:Failure of thought by NeoSkandranon · · Score: 3, Insightful

    The reality of the world is that picking up and moving a company overseas (from a US perspective at least) is not easy, nor cheap.

    --
    If you can't see the value in jet powered ants you should turn in your nerd card. - Dunbal (464142)
  4. Re:Failure of thought by qoncept · · Score: 5, Insightful

    Dollars and cents. It's easy to sit back and say SF should stand up for their ideals, but the cost to move their operations along with the risk probably (er, apparently) aren't worth it. It's not a great idea to use a multi million dollar asset as a pawn to reinforce your principles. Especially when it's publicly traded.

    --
    Whale
  5. Re:Time to move the servers? by Lordrashmi · · Score: 4, Informative

    If they want to have any corporate entity in the US they have to follow these laws, the actual physical location of the servers doesn't matter (according to the lawyers I worked with).

    It really is quite stupid, it just causes problems and doesn't help anything.

  6. Re:Failure of thought by achbed · · Score: 5, Informative

    Because they are based in the US, and they are owned by a company that is based in the US. US export laws apply to both the parent company as well as the child, and sanctions for violating the export laws are severe. Relocating to another country is a possibility, but they would have to start over. The company taking assets (or assets under corporate supervision) to another country would also fall under the same law. So, there's the chicken and the egg problem. Also, most of the countries on the US list are also on similar lists in the rest of the world due to treaties, etc. I'm sure there are some countries out there that would be happy to have you host there and export without limitation (and possibly break copyright laws too). But as the Pirate Bay is finding, those places are fewer and fewer these days.

    Oh, and if you're planning on staying in the US and not moving to the country you host in, you're still under the US export laws, as your location is in their jurisdiction. Even if you can find a lawyer to make the argument, plan on spending a ton of money on the defense. And if you have that much money to start with, you wouldn't be reading this :)

  7. Re:Failure of thought by Antidamage · · Score: 3, Insightful

    What exactly is the point of ideals if you don't stand up for them?

    At least with SF.net we know it's a popularity contest. Make enough noise and they'll do something about it.

  8. Re:Failure of thought by achbed · · Score: 3, Insightful

    I hope you're not living in the US, nor in a treaty signatory. Hosting location does not equal legal liability freedom.

  9. Relocate SourceForge to China by maroberts · · Score: 3, Funny

    I don't think it has any problems with connection to any of those countries....

    Maybe you can swap servers with Google...:-)

    --

    Donte Alistair Anderson Roberts - hi son!
    Karma: Chameleon

  10. Re:Failure of thought by ElSupreme · · Score: 3, Insightful

    Well according to them the US is limiting their ability to 'to make our community as inclusive as possible'. So that would seem that the US is not a 'country that affords them the gretest opportunity to succeed.'

    I realize it isn't just as simple as moving to Finland. But what you said makes less sense.

    --
    My addiction: Arguing with idiots. AKA Slashdot!
  11. Re:Failure of thought by Antidamage · · Score: 3, Insightful

    Yeah, I was looking for a better word than hatred but it does outline one of the main causes of bad international relations. Plus you're a douchesock.

  12. Re:Anyone who can use SourceForge by daveime · · Score: 4, Funny

    Unfortunately, all of the good OSS proxies have their source code hosted on sourceforge.

    10 PRINT "CIRCULAR REFERENCE"
    20 GOTO 10

  13. You don't fight Internet censorship... by mdm-adph · · Score: 4, Insightful

    ...with more Internet censorship. This is ridiculous. Export laws are what they are, but if we're trying to help open up the Internet in these countries, banning them from accessing knowledge hosted on our servers isn't helping one bit.

    --
    It is by my will alone my thoughts acquire motion; it is by the juice of the coffee bean that the thoughts acquire speed
  14. Violation to freedoms of Free Software by neo00 · · Score: 5, Informative
    As a Syrian developer who contributed so several open source project, I call this action unnecessary and outrageous. Sorry, I can’t understand this decision which was taken silently and cowardly by sf.net . I understand that the US law prohibits US companies from exporting their products to the “axis of evil” countries. But what I don’t understand is how sf.net considers the projects they're hosting as US products? It doesn’t make any sense. SF.net DID NOT create these projects. It just HOSTS them. Most of these projects are got contributions from people around the world including people from these countries. Suddenly they can’t access their own work, because sf.net considers them American products! That’s stupid!
    Furthermore, it’s a direct violation of the freedoms of Free Software and section 5 of opensource definition:

    5. No Discrimination Against Persons or Groups”
    The license must not discriminate against any person or group of persons.
    Rationale: In order to get the maximum benefit from the process, the maximum diversity of persons and groups should be equally eligible to contribute to open sources. Therefore we forbid any open-source license from locking anybody out of the process.

    I hope sf.net reconsider their decision. And at least to stand positively to defend the basic principles of FLOSS.

    1. Re:Violation to freedoms of Free Software by achbed · · Score: 3, Insightful

      The issue is not the ownership or contributing membership of the individual projects. The issue is that by hosting, a copy of the software is being maintained under the control of whomever owns and/or controls the hosting servers. In the case of software hosted by a US company or person, that company or person is held responsible for ensuring that the content of that server follows applicable US and/or state law. This includes export laws. So, by you uploading something to their server, they are instantly liable for that. And for every transmission, that is one export, so charge counts, and thus fines add up fast. To ensure that they exist as a company tomorrow, they have to take this step (as crappy as it seems).

      Oh and to those of you suggesting to move the hosting servers, that does not remove you from legal liability. If the servers are under your control, and you live in the US, you still have to follow US export laws. So, just by setting up a mirror server in another country that's on the export list, you're violating the law.

    2. Re:Violation to freedoms of Free Software by marcansoft · · Score: 3, Insightful

      The freedoms of Free Software apply to licenses, not people or entities. This isn't a violation of any open source license as far as I'm aware. Roughly speaking, licenses will require either nothing in this regard (BSD doesn't force you to give away the code or binaries to anyone at all), or distribution of source code to people who receive binaries (GPL and the like). SourceForge isn't doing this, they're just refusing to distribute anything at all to these countries. This also has nothing to do with the software itself, just the act of hosting it. It's about the service, not the good. No one is preventing you from accessing your own work, just from accessing it through SourceForge's service (servers). Just have someone in a neutral country get it for you; this is perfectly legit and I bet even encouraged by SF.

      The licenses themselves cannot include these kinds of limitations (if a licence says you can't run the program if you're North Korean, then it isn't an open source license, and this is what Freedom 5 is all about), but they do not require that users have this kind of openness. In fact, it is unnecessary: since the license lets you redistribute the program, all it takes is a third party to proxy between a restrictive distributor and the destination that he wants to avoid.

      You can disagree with SF's take on the subject, but they aren't violating any licenses. If they did export to restricted countries, they would be violating local law. Given the availability of proxies and the like, it would be a questionably useful move. So the US government wants to annoy you; work around it and complain about the US government all you want (and rightly so), but don't blame the people who are just following the law.

    3. Re:Violation to freedoms of Free Software by fm6 · · Score: 5, Insightful

      It's highly appropriate that we should hear from somebody on the ground in Syria. One of the points of this law is to gain leverage against the Syrian government, which Washington considers unfriendly. It's a stupid, shortsighted strategy, that doesn't really accomplish anything, except hurt innocent people.

      On the other hand, it's a little inconsistent to call SourceForge "cowardly" for not standing up the government. (Note that the wording of any OS agreement they adhere to is irrelevant — no agreement to act illegally is valid.) Would you dare to flout Syrian law the same way? Not to judge your system of government, but you have to acknowledge the consequences would be pretty severe. U.S. law is less so, but they can still put SourceForge out of business and maybe put some of its people in jail.

      Sometimes you do have to go to jail for what you believe in. But this isn't one of them.

  15. It's time to stop playing at national security by MikeRT · · Score: 4, Insightful

    The US doesn't want to face up to the fact that the only way to keep very serious, proprietary technology out of the hands of hostile states is to severely punish those in the US who facilitate the transfer. So instead, it adopts security theater here much like it pretends that it is fighting child exploitation by posting cops all over chat rooms to entrap people who have a passive interest in jailbait at best instead of actually hunting for real, serious child molesters. This allows the national security hawks to believe that we're "being tough," when in fact if we were tough, we wouldn't give a shit about SF.net, but would instead be executing men like this (just read it before attacking me, it was the first Google search result) without a second thought.

    This won't do **anything** except deter some students in these countries who don't know how to find a foreign proxy. It certainly won't stop foreign intelligence officers who try to get actual weapon systems and other serious munitions.

  16. Political Asylum by el_jake · · Score: 5, Funny

    You should seek political asylum in Europe the land of the Real Free. Not bound by legal enslavement or crooked intelligence agencies, yet.

    --
    In order to form an immaculate member of a flock of sheep one must, above all, be a sheep.
    1. Re:Political Asylum by greyhueofdoubt · · Score: 4, Insightful
      --
      No offense, but I've stopped responding to AC's.
  17. Re:Failure of thought by CannonballHead · · Score: 3, Funny

    They look good on paper. And powerpoint presentations.

  18. Sad but real by dtmos · · Score: 5, Informative

    The alternative is to end up like Prof. John Ross of the University of Tennessee, convicted of export control violations and sentenced to 4 years in prison -- at the age of 72.

    What few in the US recognize is that the rules are even more stringent than indicated by SourceForge. To be convicted of an export violation, one needs merely to discuss a controlled technology with a foreign national on one of the lists -- which means, in addition to many other individuals, entities, and countries, any citizen of China or Iran. Sending anything overseas is unnecessary to violate the law -- merely speaking to a group containing one such person in the audience (like at a private industry consortium meeting) is all that is needed. And the list of controlled technologies is incredibly long: See the Commerce Control List, especially Category 3 - Electronics, Category 4 - Computers, Category 5 (Part 1) - Telecommunications, Category 5 (Part 2) - Information Security, and Supplement No. 2 to Part 774 - General Technology and Software Notes.

    1. Re:Sad but real by Tanuki64 · · Score: 5, Insightful

      Good reason why I never will visit the USA. I'd probably have the same bad feeling I'd have in China. Or...on second thought...I'd feel more secure in China. If I'd get arrested there, I'd have at least the broad public on my side. If I'd get arrested in the USA I wonder how many would think this must be my own fault since he USA are a constitutional state and by definition the 'good'.

    2. Re:Sad but real by phantomfive · · Score: 4, Insightful

      I don't know what country you live in, but if it is a Western European country, chances are you have similar laws, so this isn't a problem of 'USA,' it is a problem of living in a world where countries still want to destroy other countries.

      --
      Qxe4
    3. Re:Sad but real by darkmeridian · · Score: 3, Informative

      You have a good point, but citing the case of John Reece Roth doesn't make a lot of sense. Prof. Roth was working on "plasma actuators" for use on US Air Force drones. They were considered military secrets. The terms of the contract he signed forbid the transfer of any sensitive data with foreign nationals. He was warned to keep these documents guarded. He documents acknowledging that the export limitations applied, and that he was aware that the law required him to secret the data. Yet he transferred the information to people he knew were Chinese nationals. It's a pretty open and shut case to me.

      --
      A NYC lawyer blogs. http://www.chuangblog.com/
  19. Re:Failure of thought by cetialphav · · Score: 5, Insightful

    Moving your entire company to another country is not the only way to stick up for your ideals. Another way is to fight to change the system. Many people with far less power than the sf.net overlords have been able to do this and succeed.

    Not everyone has the power to simply pick up their ball and run away every time they run into things they don't like. Sometimes you have to compromise and sometimes you have to try to work the system to improve it.

  20. Re:Failure of thought by QBasicer · · Score: 3, Insightful

    Since when was there a sea between the US and Canada?

    --
    x86, oh yes, I'm pro.
  21. Re:Failure of thought by sopssa · · Score: 4, Insightful

    There is not a single land without any restrictions, because every country has laws. However, there are countries that don't have trade embargo's or restrictions in distribution of software with cryptography (both which probably effected SF). In addition some countries value privacy and freedom of speech a lot more. Sweden being a perfect example.

  22. If you care, yank your projects by onionman · · Score: 4, Insightful

    If you are an open source coder (as I am), and you are involved with a project on sourceforge (as I was until a couple minutes ago), just ask the principal maintainer to move it to a different site. If they don't, stop contributing. Or, if you really don't care, then just go on with business as usual.

  23. GPL prohibits that, no? by Anonymous Coward · · Score: 3, Interesting

    12. No Surrender of Others' Freedom.

    If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program.

  24. don't waste your ideals on phantom threats by circletimessquare · · Score: 5, Insightful

    the wise thing for sourceforge to do is simply agree to whatever the usa demands. and then its business as usual. which is: everything is available with no restrictions to anyone remotely familiar with a proxy server

    enforcement is impossible, even for the usa within its own borders, so who fucking cares what the lawyers and bureaucrats and diplomats say? they've already been routed around

    i'm not saying you shouldn't get upset at the arrogance and the audacity of the american demands, i'm saying a bully making demands without any actual ability to follow through on his threats is nothing you have to pay any respect to, and therefore nothing you should waste much effort or emotion on

    you simply pay the asshole lip service, put a big smile on your face, say "yes" to whatever the asshole wants, and then its business as usual, which is: these laws mean nothing. all of the posturing and threats and demands mean nothing. there's NO ENFORCEMENT POSSIBLE

    they can't enforce any of it. its the internet age. this is not about exporting video game machines, which can be intercepted, its about the internet, which routes around everything

    people: stop getting upset at idiots trying to enforce legal understandings from a previous technological era and just ingore them and their petty demands without any muscle behind them. they can't stop technological change. they are defunct, they just don't know it

    don't waste your time getting upset at a paper tiger

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  25. Re:Failure of thought by Zerth · · Score: 3, Insightful

    The US has shown before that they'll arrest employees of foreign companies that are in the US for things the parent company did in other countries. E.g. Skylarov/Elcomsoft.

  26. Re:Time to move the servers? by Demonantis · · Score: 3, Interesting

    It doesn't even matter if they want to be a corporate entity. I worked for an international company that came into close contact with US export laws all the time. You can't ship a product to one country in transit to another country so if they did move they would still have to enforce an export control on the data that was exported. Secondly, US export law also has this wicked "taint" rule to it. If a US corporation(or citizen, I think) provides technical knowledge towards the product then that product can come under US export laws. It made it really hard to tell the US what we were doing as we did not want to deal with US export law when possible.
    The physical location has no bearing on what the US can do to you if you want to deal with them. Just tell that to the "prince" of pot.

  27. Re:Failure of thought by couchslug · · Score: 3, Insightful

    "What exactly is the point of ideals if you don't stand up for them?"

    Host the content yourself if you are so ready to expect sacrifice of others.

    --
    "This post is an artistic work of fiction and falsehood. Only a fool would take anything posted here as fact."
  28. Seas between US and Canada by Thundersnatch · · Score: 3, Funny

    These sure look like seas to me...

  29. Re:Failure of thought by Anne+Thwacks · · Score: 3, Insightful
    Since when was there a sea between the US and Canada?

    The "Gulf of Misunderstanding" has definitely been there as long as I can remember.

    --
    Sent from my ASR33 using ASCII
  30. Re:Failure of thought by gd2shoe · · Score: 4, Insightful

    Not all speech is protected, and just because it's in paper form doesn't mean the 1st amendment will be applied by the courts. Protected speech is primarily political in nature. (like it or not)

    Our government has decided that certain algorithms are weapons, and thus claims control on exporting them. Within the States, it seems to be a fuzzy combination of 1st and 2nd amendments that protect us. (from my layman's understanding)

    Personally, I think such laws are outdated. The enemies of the US surely use proxy servers here to download whatever public code they wish. If proxy servers didn't exist, they'd find another way to smuggle the information across the Internet. I don't know who they think they're fooling.

    --
    I won't join Slashcott. OTOH, If Beta goes live, I just won't be back until it's fixed. Sorry Dice.
  31. Re:Failure of thought by Per+Wigren · · Score: 4, Insightful

    How ironic that to be free to the world they'd have to move away from the free world.

    USA != The free world.

    Most countries in Europe and many other countries are still pretty darn free, although American lobbyists are working hard to change that.

    --
    My other account has a 3-digit UID.