Some good news: SourceForge removes blanket blocking

Posted on Sunday, February 7th, 2010 by leeschlesinger
Category: General

A couple of weeks ago, to ensure compliance with US law as we roll out improvements to SourceForge.net, we began programmatically blocking access to the site for users in certain countries against which the US government imposes sanctions. Today, we’re happy to announce site changes that we believe maintain compliance with the law but offer project administrators, developers, and users more freedom.

If this topic is news to you, please read the statement we made explaining what we did last month and why. In brief, we blocked all users from certain countries from downloading software using the site.

Our action provoked a strong, angry reaction from those it affected and from the community at large. But even before we heard your cries of outrage, we were looking for reasonable alternatives – and we believe that we’ve found one.

We have no way of knowing exactly which projects should trigger a block. But each project’s leadership is positioned to make such determination – so we’ve placed that power in their hands.

Beginning now, every project admin can click on Develop -> Project Admin -> Project Settings to find a new section called Export Control. By default, we’ve ticked the more restrictive setting. If you conclude that your project is *not* subject to export regulations, or any other related prohibitions, you may now tick the other check mark and click Update. After that, all users will be able to download your project files as they did before last month’s change.

We at SourceForge are fully committed to the ideals of free and open source software, including the principle of free exchange of information. We recognize that, for some people, the recent site changes called into question whether your support of us is justified. The changes that we deployed today are intended to empower our projects and reward your continued trust.

We recognize that this change isn’t the completely free access to everything for everyone that some would like. As a US-based web site, SourceForge remains committed to complying fully with all relevant US laws and regulations, including those affecting the distribution of software. But we are also working as diligently as possible to ensure that our compliance is coupled with the highest quality of service that we can offer to our diverse, global user base.



Reader Comments

martinjdavidson on February 7th, 2010

Oui, tres bon!
As it should have been.

vecalciskay on February 7th, 2010

Seems like the good solution, no objections… a big thanks for your effort. SUperbe!

algotechie on February 8th, 2010

A very elegant approach. Good job! Providing options where they should be is rarely a bad idea, while programming an application or anywhere else. Hats off to the team.

[...] here: SourceForge.net: Some good news: SourceForge removes blanket blocking Tags: across-as-smart, certain-countries, coverage, dadt, fox, latest, made-explaining, [...]

[...] SourceForge.net: Some good news: SourceForge removes blanket blocking Share and [...]

puyopuyo on February 8th, 2010

So it’s mean that non-US resident will have to know Us laws. What will be the responsabilities of non-US resident in case they don’t set correctly their project ?

reinerj on February 8th, 2010

So a normal project admin must have the knowledge about export compliance? Is this the way to shift responsibility and risk from SF to the OSS developers?

kintzias on February 8th, 2010

A first step in the right direction …
The final one has to be SourceForge’s movement outside the USA!!
There can’t be an OPEN-Source-Software plattform which is not open …

[...] maggiormente esaustive sono contenute nella pagina dedicata alla suddetta [...]

[...] SourceForge.net: Some good news: SourceForge removes blanket blocking [...]

[...] just a few weeks, SourceForge has backed off its policy of imposing a blanket ban on all users trying to access the site from countries on the [...]

[...] Read the original here: SourceForge.net: Some good news: SourceForge removes blanket blocking [...]

lordtoran on February 8th, 2010

Glückwunsch, prima Sache! Thank you so much for listening to the community’s voice. The projects I have been on all had a very low ratio of US-based contributors and also did not contain any code that would be subject to US export restrictions. So I’m totally fine with letting those eeeeeevil Cubans enjoy the software :mrgreen:

What remains to be cleared up is in which case the export restrictions would apply for projects that use export-restricted algorithms.

a) Always, since the hosting datacenters are located in the US.

or

b) Only if the project’s primary maintainer is a US citizen, making the project a “ware” exported by a US citizen.

or

c) Only if the code in question has been written by a US citizen.

[...] SourceForge.net: Some good news: SourceForge removes blanket blocking [...]

lord-zk on February 8th, 2010

Thanks SourceForge
good job :smile:

[...] countries from accessing the site’s vast assortment of open-source software projects. In a blog post yesterday, SourceForge announced that it would discontinue its blanket ban of users, which was done [...]

tuxman666 on February 8th, 2010

I am not an U.S. citizen, so I give a fuck on U.S. laws. We Germans are allowed to export anything to anywhere. Also our encryption mechanisms. So it’s all right for me. :mrgreen:

nawwark on February 8th, 2010

I’m very happy to hear this. SF.net has done the right thing now. Thank you SF :)

[...] countries from accessing the site’s vast assortment of open-source software projects. In a blog post yesterday, SourceForge announced that it would discontinue its blanket ban of users, which was done [...]

[...] lässt, ob sie Benutzer aus “Schurkenstaaten” blocken wollen, oder nicht. Somit kann jedes Projekt für sich entscheiden, ob es gegen die US-Exportbeschränkungen verstößt und ob es somit den Zugang [...]

davidwr on February 8th, 2010

This is an acceptable solution for this problem. However, it doesn’t solve the greater problem of being forced to go against your ideals by your government.

Periodically, every company that can move should re-evaluate if it should remain where it is or move its resources and corporate identity to another country. Sourceforge is no exception. Consider relocating.

jasonkull on February 8th, 2010

A very simple and elegant solution to the issue. I applaud those responsible for implementing it.

hemos on February 8th, 2010

In response to tuxman66, while you are technically correct, German export laws are actually pretty lax but the authorization regime is actually pretty tight.

See the German example

mse1 on February 8th, 2010

That means US government will now sue opensource project admins if we click the wrong “Export Controls” option? US open source hosting is too dangerous, sorry. We stick to BerliOS.

[...] countries from accessing the site’s vast assortment of open-source software projects. In a blog post yesterday, SourceForge announced that it would discontinue its blanket ban of users, which was done [...]

floppusmaximus on February 8th, 2010

As an American, I’m disgusted and outraged at the whole situation. I thought we as a country had left this particular brand of idiocy behind us years ago.

I’m also rather annoyed that, as a developer and project administrator on SourceForge, I was not notified that there was going to be any change in policy, I was not notified that the change had taken place, and I would still be unaware of the situation if I hadn’t seen today’s Slashdot article. There was nothing about this in last Wednesday’s newsletter - surely this would have been worth mentioning?

I hope that I’m just being overly impatient here, and SF will shortly be sending out a bulletin to all project administrators, to let them know about the changes that have been made, why they have been made, and what our options are as developers.

I’ve been a SF user for years, I greatly appreciate the service you’ve provided, and I do sympathize with the nasty situation you’re in. Nevertheless, I expect this means I will need to look elsewhere for project hosting in the future.

tuxman666 on February 8th, 2010

hemos: I’ll still “export” (does exporting bytes count anyway?) to North Korea. :lol:

johann_p on February 8th, 2010

Are there any good and truely free alternatives to SourceForge?
Obviously, moving out of the “Land of the free” is necessary to ensure true freedom.

[...] greater autonomy for projects hosted on the site. On their official blog, SourceForge directors explained: Our action provoked a strong, angry reaction from those it affected and from the community at [...]

andrewsteinborn on February 8th, 2010

Thanks!

[...] In response to a passionate response from their user community, SourceForge has decided to change their export policy to allow project leaders to set access controls on a project-by-project basis.   In reading the [...]

[...] just a few weeks, SourceForge has backed off its policy of imposing a blanket ban on all users trying to access the site from countries on the [...]

[...] Some good news: SourceForge removes blanket blocking [...]

donho on February 8th, 2010

I’m very surprised that a lot of people swallow such crap :
It’s not a solution, it’s just a “walk around”.
The violation of open source community right is still committed, even it’s partially.

The fact that Sourceforge hosts the projects from worldwide, they should be considered as an international unit but not just an US company.
Therefore a real (and radical) solution is to relocate.
An more expensive solution, surely. At least it’s not ironic for both Sourceforge and hosted projects

I sincerely hope SF will consider the relocating solution. SourceForge for me is rather a symbol of Open Source Community than just an American company.

Don

[...] [...]

[...] just a few weeks, SourceForge has backed off its policy of imposing a blanket ban on all users trying to access the site from countries on the [...]

hasenj on February 9th, 2010

This doesn’t cut it, sorry. I’m not even gonna say “nice try”.

Can I have an option in my project that prevents US military personal from accessing it?

[...] المتحدة الأمريكية و ليس بمقدوره عمل شيء, و لكن اليوم جاءت الأخبارة السارة أخيراً بأن هذا الحظر تمت إزالته, و لكن جزئياً [...]

tim4dev on February 9th, 2010

Cool.
:grin:

[...] ایرانی ها سرویس نمی دهد. اما هفتم فوریه ۲۰۱۰، سورس فورج در مطلبی راه حلی برای تحریمی ها ارایه کرد تا آنها هم بتوانند از [...]

[...] SourceForge hat auf auf die Kritik reagiert. Zukünftig liegt es in der Hand der Projekte, ihren Code auch Nutzern aus den boykottierten [...]

[...] SourceForge.net: Some good news: SourceForge removes blanket blocking [...]

dsosnoski on February 9th, 2010

What a spineless bunch of bureaucrats you are! It is shameful to have you identify yourselves with the open source community, and I have nothing but contempt for you and your site.

firebrand_kh on February 9th, 2010

I also agree that this is not a real solution… but it’s good to hear that you thought about it.

government on February 10th, 2010

Thanks for sharing the wonderful article.

hosseinhgp on February 10th, 2010

Thanks :wink:

[...] here for more [...]

fisharebest on February 10th, 2010

I’m the project admin of the 17th most active project on SF. We’ve been here for many years, but are now leaving. Our application uses a PHP library function, md5(), to encrypt user passwords. We have users in Cuba, Syria and Iran.

Very sad, but if you don’t stand up for free speech, don’t expect anyone to stand up for you.

Can anyone recommend a F/OSS hosting provider outside the US?

astei on February 12th, 2010

@fisharebest http://tuxfamily.org

Otherwise, this is a good move.

ftyers on February 12th, 2010

“Users residing in countries on the United States Office of Foreign Assets Control sanction list, including Cuba, Iran, North Korea, Sudan and Syria, may not post Content to, or access Content available through, SourceForge.net. ”

http://sourceforge.net/apps/trac/sitelegal/wiki/Terms_of_Use

ftyers on February 13th, 2010

The terms of use still forbid users from these countries from using SourceForge:

“Users residing in countries on the United States Office of Foreign Assets Control sanction list, including Cuba, Iran, North Korea, Sudan and Syria, may not post Content to, or access Content available through, SourceForge.net. ”

https://sourceforge.net/apps/trac/sitelegal/wiki/Terms_of_Use

bones_0 on February 16th, 2010

How the heck should I guarantee that none of the underlying software needed for my project isn’t using encryption? Everything is based on PHP, something based on MySQL (which *is* using encryption), works with apache (which can do SSL) etc. Honestly - I don’t want to sign such a thing! :mad:

bones_0 on February 17th, 2010

@fisharebest: I brought up that topic at symlink.ch and got pointed to http://www.origo.ethz.ch/ which is in Switzerland. Didn’t check the exact details yet but I guess I will go there (since I am Swiss anyway). But personally I don’t think there is something like a “free country” anyway - it’s probably the best to mirror projects in differend countries (and different websites/organisations).

brunoribas on February 19th, 2010

I’m leaving SF, not sure where to go for now, but i recommend that everyone goes out SF if they do not plan to move the main server to another country.

jonasno on March 2nd, 2010

Well since you don’t like these laws and don’t want to implement them then why not move your servers outside US, simple !

As long as US continues with these stupid laws they will lose money and business (and make US economy even weaker )

So take your business elsewhere !
Many have done this due to stupid US laws.

I would recommend Sweden, US can’t touch you there no matter how much they try.

[...] Two weeks later, SourceForge posted another entry on their blog, announcing a change in their decisi… Now, they have removed the block and added a feature that allows project owners to ban access to the sanctioned countries: Beginning now, every project admin can click on Develop -> Project Admin -> Project Settings to find a new section called Export Control. By default, we’ve ticked the more restrictive setting. If you conclude that your project is *not* subject to export regulations, or any other related prohibitions, you may now tick the other check mark and click Update. After that, all users will be able to download your project files as they did before last month’s change. [...]

elsharif on March 14th, 2010

I just don’t like this thing here “By default, we’ve ticked the more restrictive setting” it’s as “The accused guilty until proven innocent” and the other thing sf.net should have sent this info to all developers to allow or disallow these restrictions.

leeschlesinger on March 14th, 2010

elsharif, we had to adopt the more restrictive setting for legal reasons, and we did send this info to all the site users in our last monthly mailing.

[...] A few weeks after its initial announcement, Sourceforge lifted the blanket ban on users in embargoed countries. It has now delegated responsibility for deciding if a project [...]

[...] : چند هفته پس از اعلام اولیه آن، Sourceforge ممنوعیت گذاشته‌شده بر کاربران کشورهای تحریم‌شده را برداشت. اکنون مسئولیت [...]

[...] SourceForge.net: Some good news: SourceForge removes blanket blocking [...]

oldlamer on April 15th, 2010

And what should I do if my project DOES use open-source encryption code and I want my users in, say, Iran, will be able to download latest versions? Change the hosting? :evil:

[...] countries from accessing the site’s vast assortment of open-source software projects. In a blog post yesterday, SourceForge announced that it would discontinue its blanket ban of users, which was done [...]

[...] SourceForge.net: Some good news: SourceForge removes blanket blocking [...]

[...] Korea and Syria, much to the dismay of open-source enthusiasts. Though in the end, SourceForge removed the blanket block – placing responsibility on project managers to choose their level of restriction – the fact [...]

[...] Korea and Syria, much to the dismay of open-source enthusiasts. Though in the end, SourceForge removed the blanket block – placing responsibility on project managers to choose their level of restriction – the fact [...]

[...] Korea and Syria, much to the dismay of open-source enthusiasts. Though in the end, SourceForge removed the blanket block – placing responsibility on project managers to choose their level of restriction – the fact [...]

[...] Korea and Syria, much to the dismay of open-source enthusiasts. Though in the end, SourceForge removed the blanket block – placing responsibility on project managers to choose their level of restriction – the fact [...]

[...] Korea and Syria, much to the dismay of open-source enthusiasts. Though in the end, SourceForge removed the blanket block – placing responsibility on project managers to choose their level of restriction – the fact [...]

danielel on July 1st, 2010

Hey sourceforge! You definitely need a third-party hosting server in the old Europe: it looks like most of free/open source developers here don’t give a damn of your stupid nazi U.S. export laws. Your action is clearly violating the freedom ‘0′ in GPL licenses for non-US software. Please change this attitude or we will be starting a campaign to migrate our software elsewhere soon.

mask3d2010 on July 28th, 2010

How the heck should I guarantee that none of the underlying software needed for my project isn’t using encryption?

[...] wurden laut dem offiziellen Sourceforge Blog Änderungen durchgeführt, die es den Administratoren der jeweiligen Projekte auf Projektbasis [...]



Both comments and pings are currently closed.