5 ms·
The future of this is that international companies need to pick a single jurisdiction, keep their servers and employees there, fight extradition requests, and l
by stickfigure 2y ago
The future of this is that international companies need to pick a single jurisdiction, keep their servers and employees there, fight extradition requests, and leave it up to other countries to try to block their own citizens from access.
I always thought Gibson's concept of "data havens" was kind of silly; data doesn't care where it lives, why would it matter where it's physically located? But apparently he was a bit more prescient than I originally gave him credit for.
- sroussey 2y agoMany jurisdictions, including EU, China, and others, require data on their citizens to be hosted locally.
- acedTrex 2y agoThen it would be up to those countries to block traffic to said social media companies. This is what china already does.
- tankenmate 2y agoNot just block traffic, but also any payments.
- throwawayk7h 2y agowhat would happen if a US company, with US servers, ignored those requirements?
- Teocali 2y agoIt would blocked in the EU. Also the company could be asked to forbid EU customer to access the product. Wouldn’t be a big threat but it would prevent the company to do any futur business in Europe. Tech savvy customer could still access the product but that is not a market as big as every EU potential customer.
- HPsquared 2y agoI propose "Net Curtain" as the name for EU's version of the Great Firewall.
- Buttons840 2y agoCopper Curtain
- marcosdumay 2y agoEither Silicon or Optical Fiber Curtain.
- zo1 2y agoA reference to "The Iron Curtain"?
- HPsquared 2y agoIndeed. Like the Iron Curtain, but more porous and networky.
- troupo 2y agoYou truly believe the US wouldn't do the same? BTW what's your take on US requiring US-based companies to provide data on foreign citizens if subpoenaed?
- miki123211 2y agoBut that only applies to companies that the EU has any kind of control over. If you're in a hypothetical country that the EU has no relevant treaties with, the EU has no power over you. They might claim that EU laws are extraterritorial and affect everybody who dares to appear on the internet without blocking EU citizens, but that claim can't be enforced in such a country.
- deleted 2y ago[deleted]
- octopoc 2y agoAt what scale do I need to worry about this? If I make an app and don’t want to comply but I live in the US, do I open myself up to extradition if I have users in the EU?
- sammy2255 2y agoYou don’t worry. The best the EU can do is try (and likely fail) to block access to your application
- sroussey 2y agoFor an app, get you kicked off the App Store.
- Teocali 2y agoThey will block you through DNS. For 99% of the users base, it’s generally enough.
- miki123211 2y agoThe EU doesn't even have a continent-wide DNS-blocking system. Most countries have their own, but they're mostly for copyright infringement, not GDPR violations. Even that isn't universal, Poland's system only affects unregistered gambling websites for example, and I've seen quite a few ISPs that don't even bother enforcing it, even though they're legally supposed to do so. There's nothing (except talking to your government) that the EU could realistically do at this time to block a website, and I genuinely don't know how receptive the US would be to these arguments. The largest "hook" the EU has is that most companies that provide services to you, whether that'd be payment processors, hosting services or ad networks, (still) want to maintain good relations with them and don't want to burn bridges, and I don't believe it's beneath the European commission to put pressure on those to make your life difficult.
- wredue 2y agoAnd that’s the way it *should* be. When Steven Harper unilaterally attempted to empower private data to be offshored, it would have been an absolute nightmare. North American security is bad enough as it is. Imagine handing all your health, credit card, government information over to a Nigerian prince just for free.
- gcbirzan 2y agoI'm not sure about Chinese law, or any other law, but GDPR for sure does not require that. The fact that the US is not an option doesn't mean you cannot store data in any other country, just that the safe harbour and then the privacy shield were considered inadequate. For example, storing personal data in the UK is just fine.
- M2Ys4U 2y agoThe EU does not require data to be hosted locally, though.
- Teocali 2y agoAs far as I know, they do. That’s part of their consumer data protection act (didn’t remember the exact name). Do you have any source for that ? it would n’a quite helpful, honestly.
- com 2y agoThe EU GDPR has requirements for processing (including storage) of personal data (much larger scope than US PII, but still nowhere near all data) in jurisdictions with legal adequacy for data protection. It’s not quite data sovereignty like India’s regulations around payment transaction data but it does theoretically limit where you can store EU personal data. You can find the current GDPR adequacy list at the EU’s EDPB site. https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en https://commission.europa.eu/law/law-topic/data-protection/i...
- cccbbbaaa 2y agoThe law you're thinking about is GDPR. It does allow to host data outside of the EU if the rights of the data subjects are not weakened. Source: GDPR articles 44, 45, and 46.
- TZubiri 2y agoBecause someone can pull the plug or drive an axe through it, that's why we care.
- krapp 2y agoThe premise that "data" and "cyberspace" somehow transcend the physical and legal universe was always naive on the part of cypherpunks.
- redleader55 2y agoInitially the internet was a chaotic place where anything was accepted. This stopped around the early to mid 90s. Then the pendulum swinged the other way and governments started imposing more and more restrictions - from copyright, to actual information filters and now trying to dictate international companies what their citizen are allowed to see. Like any pendulum, it will likely swing the other direction soon.
- JohnBooty 2y agoI'm not sure it's a pendulum. Some (many? most?) things don't swing back. Many changes are effectively irreversible. It's not like fat-->skinny-->fat-->skinny ties, where there's zero friction for the pendulum. The only way the net is going back to the old ways is if the governments of the world stop caring (good luck with that) or if end-user decentralization tools make a quantum leap in adoption, but even then I think you're more likely to see governments cracking down on that rather than just not caring.
- concordDance 2y agoSome things are pendulums, some things are ratchets. Generally, expansions of government power don't get reversed.
- deleted 2y ago[deleted]
- x0x0 2y agoThat's fine until you want to conduct business, such as accepting advertising, hiring employees, or even taking direct to consumer subscription payments, in a country.
- praptak 2y agoCountries can do more than just try to block network traffic. No legal presence in our jurisdiction, no business in our country. It's much easier to block local advertisers' money going to such companies.
- Zak 2y agoIs it? Ad networks are often multilayered and opaque.
- kllrnohj 2y agoAd networks are also sure as hell not going to cover for anyone, either. If a client is causing them legal issues they're just going to drop them.
- vitorgrs 2y agoI was thinking exactly at this. I think a block of ads would hurt even more X than a total-block of X. If you block X, you block obviously ads, but you also block local traffic to the website. If you just block ads, and the traffic continues, you are actually losing even more money. Sure, Musk could just implement crypto on X, but I think it would still be very effective.
- crazygringo 2y agoThat philosophy will often fail if you need to handle payments or advertising or sale, etc. once you reach a certain scale. Because consumers and advertising partners want to pay in the local currency, using local means of payment, which are often only available with a business bank account available only to locally registered businesses. And then things like salespeople on the ground who can visit advertisers' offices, go to conventions, etc. If you want to actually be a viable business in a particular country at a large scale, it often becomes impossible to avoid having to incorporate there and hire people locally, even if your actual product is entirely digital.
- praptak 2y agoIt also doesn't help if your customers can neither legally pay you nor account your invoices as costs for the tax purposes.
- numpad0 2y agoYeah, so that means, China is doing it right with Weibo and Douyin. It's Twitter and Instagram respectively but built top to bottom for full Chinese ideological, legal, and financial conformance. I used to think that's weird, but it could be where we're headed.
- Almondsetat 2y agoThe future is actually the opposite: platforms putting servers in every country the operate in and having slightly different rules according to each country
- stickfigure 2y agoThis, I am quite certain, is not the longterm endgame. For small countries with mostly-similar regulatory regimes, sure. For large countries with authoritarian leadership like China, they're not going to tolerate companies publishing "nation of Taiwan" stories anywhere.
- emporas 2y agoThe future could be the opposite of the opposite also. Governments which want to operate in the physical realm as well as the web realm, could pay fees to the private company, so as the government of said country and it's citizens not be banned from the platform. The fees could be rephrased as taxes.
- quitit 2y agoI don't disagree with keeping staff within safe regions. There are some issues surrounding that, as some regions require local representation. Modern services, including Twitter, have the ability to geofence content/compliance policy to specific regions. Search, Social Media, Maps and News are examples of typical services which engage such techniques. So there's not a lot of reason why Twitter couldn't comply here, since they already have already demonstrated this capability. Twitter's non-compliance will likely just end up with a ban.
- asadotzler 2y agoOnly if you don't care about doing any business in those countries, which, I'll enlighten you, you do.
- anotherape 2y agoI doubt that even what you said is enough hence the cookie banners everywhere and back in the day US blocking for gambling sites etc.