Still (@still@infosec.exchange)
infosec.exchange
Attached: 3 images tldr: GitCode or China is attempting to mirror/clone the entire GitHub over to their own servers and there's nothing you can do about it, even if your license somehow disagrees with it. Apparently China now has their own GitHub/public Git repository hosting service called GitCode; it is owned and operated by CSDN under the company name "重庆开源共创科技有限公司". It is being reported that many users' repository are being cloned and re-hosted on GitCode without authorization - meaning your project may very well be on this service without you explicitly allowing.

GitCode, a git-hosting website operated Chongqing Open-Source Co-Creation Technology Co Ltd and with technical support from CSDN and Huawei Cloud.

It is being reported that many users’ repository are being cloned and re-hosted on GitCode without explicit authorization.

There is also a thread on Ycombinator (archived link)

  • Phoenixz@lemmy.caEnglish
    0·
    5 months ago

    Yeah… The main thing I see here is that China (read; government , not the people, not being racist here) will take this code, they will make improvements on it, they will NOT give back. Basically like Microsoft, but now an entire country.

    Chinese government hasn’t exact had a good reputation when it comes to taking technology and not giving anything back

    • Appoxo@lemmy.dbzer0.comEnglish
      0·
      5 months ago

      Not like I’d want contributions from the chinese state programmers.
      Feels like an easy entry for state level supply chain attack.

      • Phoenixz@lemmy.caEnglish
        1·
        5 months ago

        Who says they aren’t trying right now? I recall SSH had an attempt quite recently, I can guarantee that China is trying hard to include anything to out in back doors