News for hackers. Stuff that matters.

A comment on Gitlab considers not hiring SREs and Support Engineers in China and Russia. Parent comment

Re:Gitlab considers not hiring SREs and Support Engineers in... by sytse on Monday November 04, 2019 @03:45AM (#21439901)
It would be strange to not accept code from certain countries since we are an open core company that gets contributions from around the world. There are other ways to prevent supply chain attacks. A difference with data is that there are always multiple people involved before code is merged while data can be extracted by a single individual who has access.

Discriminating on origin is likely illegal.

[ Parent | on HN ]
Re:Gitlab considers not hiring SREs and Support Engineers in... by mike_d on Monday November 04, 2019 @04:22AM (#21440044)
> A difference with data is that there are always multiple people involved before code is merged while data can be extracted by a single individual who has access.

It sounds like you just need to harden your production perimeter. Jump boxes with two-man-rule access and terminal logging. Apply the same practices to data as you do code.

> Discriminating on origin is likely illegal.

You should ask your legal folks about the national security exceptions of Title VII. It sounds like your customer requirements are pushing you in that direction anyway.

[ Parent | on HN ]
Re:Gitlab considers not hiring SREs and Support Engineers in... by yyhhsj0521 on Monday November 04, 2019 @11:00AM (#21442811)
> open core company that gets contributions from around the world

The irony...

[ Parent | on HN ]