• Grandwolf319@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    20
    ·
    edit-2
    3 days ago

    Fuck Microsoft but aren’t there data residency laws that say French data must be stored in Europe?

    So that way, when push comes to shove, no country has their data hosted on enemy servers?

    I’m not saying companies follow this, but I always thought they made these laws as part of GDPR.

    • Wolf@lemmy.today
      link
      fedilink
      English
      arrow-up
      28
      ·
      3 days ago

      Fuck Microsoft but aren’t there data residency laws that say French data must be stored in Europe?

      The problem with U.S. companies operating in Europe is the CLOUD Act. It doesn’t matter where the physical servers are located, if the U.S. Government wants access to the data, U.S. Based companies are required by law to allow it.

      • calcopiritus@lemmy.world
        link
        fedilink
        English
        arrow-up
        20
        ·
        2 days ago

        If they wanted to, they would do like they do with taxes. “Oh. It is not our data, that data is owned by Microsoft company of the virgin islands, which is totally a different company from Microsoft USA”

        • Wolf@lemmy.today
          link
          fedilink
          English
          arrow-up
          17
          ·
          edit-2
          2 days ago

          Sure, but you have to remember that U.S. based corporations and Microsoft in particular are formed from pure evil out of the deepest darkest pits of hell and they love nothing more than sucking the asshole of the U.S. Government, who turns a blind eye to their monopoly and lets them get away with the most foul and disgusting business practices their little black hearts can think of.

          They happily facilitate the U.S. Government to spy on U.S. Citizens when there isn’t even some heinous law that allows them to legally do so. If they don’t even give a single shit about their friends, family and neighbors- what are the odds they would go out of their way to protect Europeans, what with their love of ‘consumer protections’ and ‘anti monopoly’ laws?

        • Caedarai@reddthat.com
          link
          fedilink
          English
          arrow-up
          7
          ·
          2 days ago

          An important point of the CLOUD is that subsidiaries are essentially also covered, unlike what happens with taxes/income.

    • Renohren@lemmy.today
      link
      fedilink
      English
      arrow-up
      18
      ·
      edit-2
      1 day ago

      I work for a french public owned company in transport. The whole company uses Microsoft 365, “sysadmin is an idiot and I don’t trust his password system” [ editing done] etc… Oh yeah, no one thought about cleaning up the system so copilot’s here all right, just sipping in the corner.

      We are truly f***d .Doesn’t matter whom attacks, the US, China, Russia, indépendants. They can paralyse this transportation network in a snap. And I know it’s far from a lone example.

      The french public services are hopeless as far as computing and basic security is concerned. There are a few times when they struck genius and got productive, secure services out, but day to day companies that are the infrastructure of the country itself are hopeless.

      • Dasus@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        1
        ·
        3 days ago

        They can paralyse this regional transportation network in a snap

        Not to be like overtly careful or avoid discussion of the subject, but maybe don’t make that easier for people by giving somewhat specialised tips like your first paragraph.

        I’m not saying the Russians on Lemmy will pick up on that specifically but I don’t think you being that specific brought any more to the comment than having said “our admin is an idiot and I don’t trust his password system at all”.

        I’m being way too prudish and cautious — for now.

        But I’ve definitely started being more vague about some things, just as practice for when this shit gets worse. I’d like to say “if”, but I don’t believe that rn.

        Especially when nowadays technically someone could genuinely just have an LLM crawl for anything like that and then check out who those people are. I don’t underestimate Russian spycraft. Their military, yeah. Their spycraft and sabotage? Less so.

        • dickalan@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          3 days ago

          Yeah, this is information that’s going to be permanently in my brain now is that the French communication network is crazy easy to paralyze

    • viking@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      Those laws exists, but from the article, US laws supersedes those regulations, and apparently they rather comply there than in the EU. Guess they did the math and figured the consequences in the EU are easier to stomach.

    • RvTV95XBeo@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      9
      ·
      3 days ago

      Yes BUT, the US government can fine them whatever they want / threaten contracts / revoke their ability to do business in the US.

      Ultimately their ability to function in the US is largely dependent on them doing whatever the fuck the government wants. If forced to choose between the US and EU, they’re almost always going to choose US.

      • Auli@lemmy.ca
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 days ago

        Isn’t this no different then what people complain about Chinese companies? So if your not American there is no difference between Chinese and American companies.

    • springplums@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      2 days ago

      I really dont think that it matters if the data is in Europe. If the company is American then it will not matter. The data must be in Europe AND the company must be also European, this way it can not be forced by the US to do anything.