Slashdot Mirror


SourceForge Clarifies Denial of Site Access

Recently there were some complaints from certain users outside the US stating that they were no longer able to access SourceForge.net. SF.net (who shares a corporate overlord with Slashdot) has outlined the reasons for these bans, and until someone with sufficient power to alter US law or the lists governing who is allowed to access what data from where, there is unlikely to be a change in these bans. It is worth noting that SF.net is not alone in these difficulties, as the same problems have been reported from other repositories, like Google Code. "As one of the first companies to promote the adoption and distribution of free and open source software, and one that still puts open source at the center of its corporate ideals, restrictions on the free flow of information rub us the wrong way. However, in addition to participating in the open source community, we also live in the real world, and are governed by the laws of the country in which we are located. Our need to follow those laws supersedes any wishes we might have to make our community as inclusive as possible. The possible penalties for violating these restrictions include fines and imprisonment. Other hosting companies based in the US have similar legal and technical restrictions in place."

20 of 396 comments (clear)

  1. Can you say, 'Proxy Server'? I knew you could! by hedronist · · Score: 5, Insightful

    "The Internet interprets censorship as damage and routes around it." -- John Gilmore

  2. Re:Failure of thought by qoncept · · Score: 5, Insightful

    Dollars and cents. It's easy to sit back and say SF should stand up for their ideals, but the cost to move their operations along with the risk probably (er, apparently) aren't worth it. It's not a great idea to use a multi million dollar asset as a pawn to reinforce your principles. Especially when it's publicly traded.

    --
    Whale
  3. Re:Time to move the servers? by Lordrashmi · · Score: 4, Informative

    If they want to have any corporate entity in the US they have to follow these laws, the actual physical location of the servers doesn't matter (according to the lawyers I worked with).

    It really is quite stupid, it just causes problems and doesn't help anything.

  4. Re:Failure of thought by achbed · · Score: 5, Informative

    Because they are based in the US, and they are owned by a company that is based in the US. US export laws apply to both the parent company as well as the child, and sanctions for violating the export laws are severe. Relocating to another country is a possibility, but they would have to start over. The company taking assets (or assets under corporate supervision) to another country would also fall under the same law. So, there's the chicken and the egg problem. Also, most of the countries on the US list are also on similar lists in the rest of the world due to treaties, etc. I'm sure there are some countries out there that would be happy to have you host there and export without limitation (and possibly break copyright laws too). But as the Pirate Bay is finding, those places are fewer and fewer these days.

    Oh, and if you're planning on staying in the US and not moving to the country you host in, you're still under the US export laws, as your location is in their jurisdiction. Even if you can find a lawyer to make the argument, plan on spending a ton of money on the defense. And if you have that much money to start with, you wouldn't be reading this :)

  5. Re:Anyone who can use SourceForge by daveime · · Score: 4, Funny

    Unfortunately, all of the good OSS proxies have their source code hosted on sourceforge.

    10 PRINT "CIRCULAR REFERENCE"
    20 GOTO 10

  6. You don't fight Internet censorship... by mdm-adph · · Score: 4, Insightful

    ...with more Internet censorship. This is ridiculous. Export laws are what they are, but if we're trying to help open up the Internet in these countries, banning them from accessing knowledge hosted on our servers isn't helping one bit.

    --
    It is by my will alone my thoughts acquire motion; it is by the juice of the coffee bean that the thoughts acquire speed
  7. Violation to freedoms of Free Software by neo00 · · Score: 5, Informative
    As a Syrian developer who contributed so several open source project, I call this action unnecessary and outrageous. Sorry, I can’t understand this decision which was taken silently and cowardly by sf.net . I understand that the US law prohibits US companies from exporting their products to the “axis of evil” countries. But what I don’t understand is how sf.net considers the projects they're hosting as US products? It doesn’t make any sense. SF.net DID NOT create these projects. It just HOSTS them. Most of these projects are got contributions from people around the world including people from these countries. Suddenly they can’t access their own work, because sf.net considers them American products! That’s stupid!
    Furthermore, it’s a direct violation of the freedoms of Free Software and section 5 of opensource definition:

    5. No Discrimination Against Persons or Groups”
    The license must not discriminate against any person or group of persons.
    Rationale: In order to get the maximum benefit from the process, the maximum diversity of persons and groups should be equally eligible to contribute to open sources. Therefore we forbid any open-source license from locking anybody out of the process.

    I hope sf.net reconsider their decision. And at least to stand positively to defend the basic principles of FLOSS.

    1. Re:Violation to freedoms of Free Software by fm6 · · Score: 5, Insightful

      It's highly appropriate that we should hear from somebody on the ground in Syria. One of the points of this law is to gain leverage against the Syrian government, which Washington considers unfriendly. It's a stupid, shortsighted strategy, that doesn't really accomplish anything, except hurt innocent people.

      On the other hand, it's a little inconsistent to call SourceForge "cowardly" for not standing up the government. (Note that the wording of any OS agreement they adhere to is irrelevant — no agreement to act illegally is valid.) Would you dare to flout Syrian law the same way? Not to judge your system of government, but you have to acknowledge the consequences would be pretty severe. U.S. law is less so, but they can still put SourceForge out of business and maybe put some of its people in jail.

      Sometimes you do have to go to jail for what you believe in. But this isn't one of them.

  8. It's time to stop playing at national security by MikeRT · · Score: 4, Insightful

    The US doesn't want to face up to the fact that the only way to keep very serious, proprietary technology out of the hands of hostile states is to severely punish those in the US who facilitate the transfer. So instead, it adopts security theater here much like it pretends that it is fighting child exploitation by posting cops all over chat rooms to entrap people who have a passive interest in jailbait at best instead of actually hunting for real, serious child molesters. This allows the national security hawks to believe that we're "being tough," when in fact if we were tough, we wouldn't give a shit about SF.net, but would instead be executing men like this (just read it before attacking me, it was the first Google search result) without a second thought.

    This won't do **anything** except deter some students in these countries who don't know how to find a foreign proxy. It certainly won't stop foreign intelligence officers who try to get actual weapon systems and other serious munitions.

  9. Political Asylum by el_jake · · Score: 5, Funny

    You should seek political asylum in Europe the land of the Real Free. Not bound by legal enslavement or crooked intelligence agencies, yet.

    --
    In order to form an immaculate member of a flock of sheep one must, above all, be a sheep.
    1. Re:Political Asylum by greyhueofdoubt · · Score: 4, Insightful
      --
      No offense, but I've stopped responding to AC's.
  10. Sad but real by dtmos · · Score: 5, Informative

    The alternative is to end up like Prof. John Ross of the University of Tennessee, convicted of export control violations and sentenced to 4 years in prison -- at the age of 72.

    What few in the US recognize is that the rules are even more stringent than indicated by SourceForge. To be convicted of an export violation, one needs merely to discuss a controlled technology with a foreign national on one of the lists -- which means, in addition to many other individuals, entities, and countries, any citizen of China or Iran. Sending anything overseas is unnecessary to violate the law -- merely speaking to a group containing one such person in the audience (like at a private industry consortium meeting) is all that is needed. And the list of controlled technologies is incredibly long: See the Commerce Control List, especially Category 3 - Electronics, Category 4 - Computers, Category 5 (Part 1) - Telecommunications, Category 5 (Part 2) - Information Security, and Supplement No. 2 to Part 774 - General Technology and Software Notes.

    1. Re:Sad but real by Tanuki64 · · Score: 5, Insightful

      Good reason why I never will visit the USA. I'd probably have the same bad feeling I'd have in China. Or...on second thought...I'd feel more secure in China. If I'd get arrested there, I'd have at least the broad public on my side. If I'd get arrested in the USA I wonder how many would think this must be my own fault since he USA are a constitutional state and by definition the 'good'.

    2. Re:Sad but real by phantomfive · · Score: 4, Insightful

      I don't know what country you live in, but if it is a Western European country, chances are you have similar laws, so this isn't a problem of 'USA,' it is a problem of living in a world where countries still want to destroy other countries.

      --
      Qxe4
  11. Re:Failure of thought by cetialphav · · Score: 5, Insightful

    Moving your entire company to another country is not the only way to stick up for your ideals. Another way is to fight to change the system. Many people with far less power than the sf.net overlords have been able to do this and succeed.

    Not everyone has the power to simply pick up their ball and run away every time they run into things they don't like. Sometimes you have to compromise and sometimes you have to try to work the system to improve it.

  12. Re:Failure of thought by sopssa · · Score: 4, Insightful

    There is not a single land without any restrictions, because every country has laws. However, there are countries that don't have trade embargo's or restrictions in distribution of software with cryptography (both which probably effected SF). In addition some countries value privacy and freedom of speech a lot more. Sweden being a perfect example.

  13. If you care, yank your projects by onionman · · Score: 4, Insightful

    If you are an open source coder (as I am), and you are involved with a project on sourceforge (as I was until a couple minutes ago), just ask the principal maintainer to move it to a different site. If they don't, stop contributing. Or, if you really don't care, then just go on with business as usual.

  14. don't waste your ideals on phantom threats by circletimessquare · · Score: 5, Insightful

    the wise thing for sourceforge to do is simply agree to whatever the usa demands. and then its business as usual. which is: everything is available with no restrictions to anyone remotely familiar with a proxy server

    enforcement is impossible, even for the usa within its own borders, so who fucking cares what the lawyers and bureaucrats and diplomats say? they've already been routed around

    i'm not saying you shouldn't get upset at the arrogance and the audacity of the american demands, i'm saying a bully making demands without any actual ability to follow through on his threats is nothing you have to pay any respect to, and therefore nothing you should waste much effort or emotion on

    you simply pay the asshole lip service, put a big smile on your face, say "yes" to whatever the asshole wants, and then its business as usual, which is: these laws mean nothing. all of the posturing and threats and demands mean nothing. there's NO ENFORCEMENT POSSIBLE

    they can't enforce any of it. its the internet age. this is not about exporting video game machines, which can be intercepted, its about the internet, which routes around everything

    people: stop getting upset at idiots trying to enforce legal understandings from a previous technological era and just ingore them and their petty demands without any muscle behind them. they can't stop technological change. they are defunct, they just don't know it

    don't waste your time getting upset at a paper tiger

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
  15. Re:Failure of thought by gd2shoe · · Score: 4, Insightful

    Not all speech is protected, and just because it's in paper form doesn't mean the 1st amendment will be applied by the courts. Protected speech is primarily political in nature. (like it or not)

    Our government has decided that certain algorithms are weapons, and thus claims control on exporting them. Within the States, it seems to be a fuzzy combination of 1st and 2nd amendments that protect us. (from my layman's understanding)

    Personally, I think such laws are outdated. The enemies of the US surely use proxy servers here to download whatever public code they wish. If proxy servers didn't exist, they'd find another way to smuggle the information across the Internet. I don't know who they think they're fooling.

    --
    I won't join Slashcott. OTOH, If Beta goes live, I just won't be back until it's fixed. Sorry Dice.
  16. Re:Failure of thought by Per+Wigren · · Score: 4, Insightful

    How ironic that to be free to the world they'd have to move away from the free world.

    USA != The free world.

    Most countries in Europe and many other countries are still pretty darn free, although American lobbyists are working hard to change that.

    --
    My other account has a 3-digit UID.