3 ms·

I don't understand what I am reading, I feel I am missing some context... Is it about being afraid the Chinese and Russian state will spy on user data if some e

by Iv 7y ago

I don't understand what I am reading, I feel I am missing some context... Is it about being afraid the Chinese and Russian state will spy on user data if some employees are located in those countries? Or were there updates to their laws that made it mandatory to open databases to the state if an employee is located in these countries?

mr_tristan 7y ago
It's actually in the discussion: > There is an unacceptably high risk that these nations may apply pressure to individuals living within their borders with sensitive data access (based their role at GitLab). It is our concern. And it is the stated concerns of several customers. The discussion is actually pretty significant, as they sort out how they might manage the _customer demand_ that is creating these hiring blocks, and in turn, how that is reported and tracked. I don't see this as a purely "done deal", it's a company having very important discussions in the open that most would just default to "restricted". All this transparency is a great source for others to learn from.
- Iv 7y ago
  After activating JS I could see the discussion, sorry. Going a bit deeper, it seems to be a specific demand by a potential client. Can make sense for activists, journalists, humanitarians. Makes sense for gitlab to push back too though.
  - fastball 7y ago
    Why does it make sense for Gitlab to push back on a reasonable request from customers?
dwd 7y ago
Probably in relation to this: https://www.chinalawblog.com/2019/09/chinas-new-cybersecurity-program-no-place-to-hide.html https://www.chinalawblog.com/2019/09/chinas-new-cybersecurit... Whether it's real or not or even likely to be effective, there's a chilling effect and businesses are obviously concerned to be raising the issue of Chinese-based employees with GitLab.
- rurban 7y ago
  Oh, China is finally following US policies on full takes. Not entirely unexpected. The difference is that China observes their borders, whilst the USA does full takes everywhere they can, which is everywhere in the west.
  - jhanschoo 7y ago
    What is a full take, what do you mean by US policies on full takes, and can I also have a source on US performing full takes everywhere in the west? Thanks!
    - pinkfoot 7y ago
      The USA Cloud Act of 2018. Every US company must hand over any customer data held anywhere, by any subsidiary or joint venture, on earth at the request of the US government.

by Iv 7y ago

mr_tristan 7y ago

It's actually in the discussion: > There is an unacceptably high risk that these nations may apply pressure to individuals living within their borders with sensitive data access (based their role at GitLab). It is our concern. And it is the stated concerns of several customers. The discussion is actually pretty significant, as they sort out how they might manage the _customer demand_ that is creating these hiring blocks, and in turn, how that is reported and tracked. I don't see this as a purely "done deal", it's a company having very important discussions in the open that most would just default to "restricted". All this transparency is a great source for others to learn from.

Iv 7y ago
After activating JS I could see the discussion, sorry. Going a bit deeper, it seems to be a specific demand by a potential client. Can make sense for activists, journalists, humanitarians. Makes sense for gitlab to push back too though.
- fastball 7y ago
  Why does it make sense for Gitlab to push back on a reasonable request from customers?

dwd 7y ago

Probably in relation to this: https://www.chinalawblog.com/2019/09/chinas-new-cybersecurity-program-no-place-to-hide.html https://www.chinalawblog.com/2019/09/chinas-new-cybersecurit... Whether it's real or not or even likely to be effective, there's a chilling effect and businesses are obviously concerned to be raising the issue of Chinese-based employees with GitLab.

rurban 7y ago
Oh, China is finally following US policies on full takes. Not entirely unexpected. The difference is that China observes their borders, whilst the USA does full takes everywhere they can, which is everywhere in the west.
- jhanschoo 7y ago
  What is a full take, what do you mean by US policies on full takes, and can I also have a source on US performing full takes everywhere in the west? Thanks!
  - pinkfoot 7y ago
    The USA Cloud Act of 2018. Every US company must hand over any customer data held anywhere, by any subsidiary or joint venture, on earth at the request of the US government.