News for hackers. Stuff that matters.

A comment on GitHub blocks entire company because one employee was in Iran. Parent comment

Re:GitHub blocks entire company because one employee was in ... by raziel2p on Tuesday January 05, 2021 @09:59AM (#25646166)
If you read this literally, you could get away with leaking state secrets as long as you're visiting a relative while doing it.

Github cannot be expected to reliably differentiate between the coworker who just checked the status of a PR on a webapp versus the employee who opened a crucial piece of encryption code to leak it to the Iranian military or whatever.

[ Parent | on HN ]
Re:GitHub blocks entire company because one employee was in ... by mcguire on Tuesday January 05, 2021 @12:06PM (#25647674)
This is an economic sanction against Iran; it has nothing to do with state, or corporate, secrets.
[ Parent | on HN ]
Re:GitHub blocks entire company because one employee was in ... by x86_64Ubuntu on Tuesday January 05, 2021 @10:04AM (#25646221)
If that's the case, then the problem isn't Github, but of the organization having Iranian intelligence assets on staff. And the whole idea of the government regulating encryption and it being weaponized is overdone.
[ Parent | on HN ]
Re:GitHub blocks entire company because one employee was in ... by koheripbal on Tuesday January 05, 2021 @10:03AM (#25646213)
The above is not law. The law is more detailed. This is a FAQ that should be interpreted in a reasonable fashion, not with an extreme use-case.
[ Parent | on HN ]
Re:GitHub blocks entire company because one employee was in ... by saagarjha on Tuesday January 05, 2021 @11:17AM (#25647009)
A spy could also just clone the repo and travel to Iran, too.
[ Parent | on HN ]
Re:GitHub blocks entire company because one employee was in ... by Siira on Tuesday January 05, 2021 @10:16AM (#25646345)
Spies can send information from anywhere in the world to anywhere else, so I don’t see how they being in a specific location at all matters.
[ Parent | on HN ]
Re:GitHub blocks entire company because one employee was in ... by hoppla on Tuesday January 05, 2021 @11:51AM (#25647421)
I do not see why a geoip filter do not suffice. GitHub should not be the one to interpret the whole complex picture.
[ Parent | on HN ]