this post was submitted on 26 Jun 2024
1 points (100.0% liked)

Technology

59587 readers
5236 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

GitCode, a git-hosting website operated Chongqing Open-Source Co-Creation Technology Co Ltd and with technical support from CSDN and Huawei Cloud.

It is being reported that many users' repository are being cloned and re-hosted on GitCode without explicit authorization.

There is also a thread on Ycombinator (archived link)

(page 3) 50 comments
sorted by: hot top controversial new old
[–] dan@upvote.au 0 points 5 months ago* (last edited 5 months ago) (5 children)

I don't understand why this is a bad thing? Open source code is designed to be shared/distributed, and an open-source license can't place any limits on who can use or share the code. Git was designed as a distributed, decentralized model partly for this reason (even though people ended up centralizing it on Github anyways)

They might end up using the code in a way that violates its license, but simply cloning it isn't a problem.

[–] slacktoid@lemmy.ml 0 points 4 months ago

But china bad and scary.

[–] BlueMagma@sh.itjust.works 0 points 4 months ago (1 children)

I expect it's going likely to be used to train some Chinese AI model. The race to AGI is in progress. IMO: "ideas" (code included) should be freely usable by anyone, including the people I might disagree with. But I understand the fear it induces to think that an authoritarian government will get access to AGI before a democratic one. That said I'm not entirely convinced the US is a democratic government..

PS: I'm french, and my gov is soon to be controlled by fascist pigs if it's not already, so I'm not judging...

[–] dan@upvote.au 0 points 4 months ago (1 children)

I expect it’s going likely to be used to train some Chinese AI model.

Even if they do that, the license for open source software doesn't disallow it from being done.

[–] sugar_in_your_tea@sh.itjust.works 0 points 4 months ago (1 children)

It certainly can. Most licences require derivative works to be under the same or similar licence, and an AI based on FOSS would likely not respect those terms. It's the same issue as AI training on music, images, and text, it's a likely violation of copyright and thus a violation of open source licensing terms.

Training on it is probably fine, but generating code from the model is likely a whole host of licence violations.

[–] dan@upvote.au 0 points 4 months ago (1 children)

Most licences require derivative works to be under the same or similar licence

Some, but probably not most. This is mostly an issue with "viral" licenses like GPL, which restrict the license of derivative works. Permissive licenses like the MIT license are very common and don't restrict this.

MIT does say that "all copies or substantial portions of the Software" need to come with the license attached, but code generated by an AI is arguably not a "substantial portion" of the software.

[–] sugar_in_your_tea@sh.itjust.works 0 points 4 months ago (3 children)

code generated by an AI is arguably not a “substantial portion” of the software

How do you verify that though?

And does the model need to include all of the licenses? Surely the "all copies or substantial portions" would apply to LLMs, since they literally include the source in the model as a derivative work. That's fine if it's for personal use (fair use laws apply), but if you're going to distribute it (e.g. as a centralized LLM), then you need to be very careful about how licenses are used, applied, and distributed.

So I absolutely do believe that building a broadly used model is a violation of copyright, and that's true whether it's under an open source license or not.

load more comments (3 replies)
[–] barryamelton@lemmy.ml 0 points 4 months ago (2 children)

The code needs to maintain the copyrights and authors. They are "mirroring" usernames into their own domain, with mails that dont correspond to the original authors, stealing their contributions.

[–] dan@upvote.au 0 points 4 months ago

with mails that dont correspond to the original authors,

Oh! I didn't realise this. Do you have an example?

load more comments (1 replies)
[–] ZILtoid1991@lemmy.world 0 points 4 months ago (4 children)

I personally don't care if someone "steals" my code (Here's my profile if you want to do so: https://github.com/ZILtoid1991 ), however it can mean some mixture of two things:

  1. China is getting ready for war, which will mean the US will try its best to block technology, including open source projects.
  2. China is planning to block GitHub due to it being able to host information the Chinese government might not like.

Of course it could mean totally unrelated stuff too (e.g. just your typical anti-China and/or anti-communist paranoia sells political points).

load more comments (4 replies)
[–] HKayn@dormi.zone 0 points 4 months ago (4 children)

I’m seeing this misconception in a lot of places.

Just because something is on GitHub, doesn’t mean it’s open source. It doesn't automatically grant permission to share either.

load more comments (4 replies)
[–] zephyr@lemmy.world 0 points 4 months ago

And I was just asking yesterday what would you feel if someone evil used your FOSS software: https://lemmy.world/post/16898871

[–] JTskulk@lemmy.world 0 points 4 months ago (3 children)

I hope they copy the web interface too. I stopped using GitHub for my dumb little projects when Microsoft bought them and I can't be bothered to learn git. I will gladly host my future projects there if it's good.

[–] smiletolerantly@awful.systems 0 points 4 months ago (4 children)

What use is Github / a Github clone to you without knowing git?

[–] cmhe@lemmy.world 0 points 4 months ago

Generally, I tend to think more in the direction of that there is some misunderstanding happening, then people being stupid. Maybe that is just the optimist in me.

What exactly is meant when people say they don't know git. Do they mean the repository data format? Do they mean the network protocol? Do they mean the command line utility? Or just how to work with git as a developer, which is similar to other vcs?

I think if you use some git gui, you can get very far, without needing to understand "git", which I would argue most people, that use it daily, don't, at least not fully.

load more comments (3 replies)
[–] AnxiousOtter@lemmy.world 0 points 4 months ago

I can't be bothered to learn git.

How to become unemployable as an engineer 101.

load more comments (1 replies)
[–] callmepk@lemmy.world 0 points 4 months ago (1 children)

I think the major issue is here is that they are “mirroring” with the same username without clear indicating they are mirrors and they are modifying all the github links in Readme to GitCode. But if you want to claim your project, they want to only comment using the issue section of a project which requires account; but then you have to have a Chinese phone number to register account, and you will automatically get a Huawei Cloud account when you registering it

load more comments (1 replies)
[–] Muffi@programming.dev 0 points 4 months ago (1 children)

Great! Now I know who to contact when I accidentally delete all the plaintext API keys and passwords I had stored in a public github repo.

load more comments (1 replies)
[–] zipzoopaboop@lemmynsfw.com 0 points 4 months ago

I'm surprised this wasnt done already

load more comments
view more: ‹ prev next ›