SourceHut moves business operations from US to Europe
100 comments
·June 24, 2025reisse
stego-tech
> I'd wish there were movement for the privacy-conscious services to escape any regulation, not just choose the currently-politically-correct one.
Not possible. Anywhere that an entity is able to exist will also see some form of regulation. Regulation is the attempt of society to balance the benefits and harms of business such that its benefits reach as many people as possible, and its harms minimized or eliminated.
Too much regulation is just as bad as too little, and we have centuries of data demonstrating the need for a balanced approach.
As for the nod to piracy sites, what you’re suggesting is instead civil protesting of hostile regulations that harm society to benefit business interests. That’s excellent but the answer there is better regulations, not a lack of regulations.
surgical_fire
I used those piracy websites, but there is some incredibly naivety in the thought that people trusted those.
I certainly trust governments where the rule of law applies more than I trust corporations. I certainly would not input any real data in a service hosted in Equador with a registrar in God-knows-where.
That does not mean that governments get unquestionable faith, but there's still the pretence that they protect their citizens. Corporations only seek profit.
blitzar
> escape any regulation
You don't get to opt in to the laws you like and ignore the ones you don't like.
diggan
> You don't get to opt in to the laws you like and ignore the ones you don't like.
Well, maybe you shouldn't, or maybe you should, but you definitely can if you have the technical know-how. Probably best example is ThePirateBay which people and organizations have tried to take down for more than 20 years, yet it persists.
They're quite literally still alive while still choosing what laws they want to follow.
Obviously, that you can make this choice also means you get to chose if to even expose yourself to the potential consequences of that too, as Silk Road would attest to.
giancarlostoro
It helps that they don't generate nor host the content, they just maintain a database. TPB is basically a yellow pages for torrent content.
bee_rider
That might make sense from the point of view that only considers the service provider and the host.
> And if the risk you're hedging against is "yourself turning to big corp and abusing customers" moving to EU is okay, but not in any other case.
I mean, this seems like a silly concern (just don’t abuse the customers, lol). But, he can now reasonably offer to his customers the fact that he’ll be bound by EU privacy laws.
In the case of something like SourceHut which has consistently made decisions in favor of having a slow/sustainable business model instead of going for massive growth, this seems to make a lot of sense. He probably isn’t too worried about having to eventually backstab his customers, so why not make the value proposition clear?
Like what if the big plan here is to offer clear business terms backed by customer-friendly local laws and make a nice middle class salary for the rest of his life, while living in a nice friendly country?
that_guy_iain
All privacy-conscious services are already based in countries that have privacy-conscious laws.
And most privacy-conscious services generally protect you to a certain level by the amount of data they don't keep. Mulvad, for example, when raided kept everything they had. Because they could prove that the data that the warrant was for was not stored on their equipment. PRQ, they're quite happy to work with you without knowing who you are.
If you want to keep yourself private from law enforcement or intelligence agencies, then you shouldn't be using standard services without your own layer of encryption and privacy steps in between. You're always going to be at the behest of some government, that's just how the law works.
alephnerd
> Like piracy sites did in 00-10s (abuse-proof hosting in Ecuador, shady domain registrar from SEA, zero search indexing) or crypto companies now (net of shell companies where not a single one is responsible for anything).
And they were only able to do so under the auspices of corrupt politicians in said country. For example, Crypto firms in UAE purchasing property in projects closely affiliated with the Emirs of the Emirate they are domiciled in [0]. And Vietnam cracking down on shady domain registrars for streaming in order to unlock trading opportunities such as not being treated as a "Non-Market Economy".
Tech will always be subordinate to the government, and any techno-libertarian ideal faces that harsh reality fairly quickly.
atoav
Sure go into some desert without them knowing and do your thing there. As soon as tou plan to interact with other people you will have to deal with the fact that societes like to create rules for themselves.
There is a word for people who like to unilaterally break social contracts for their own benefits and it has not a lot of positive connotations.
Note: that I totally get the sentiment of wanting to get away from all these complications especially in technically minded people. But the sooner we realize that this can either be lived political resistance or antisocial/sociopathic exploitation the better. Even in an ideal society individuals will have to be bound to certain rules, otherwise everybody will have to fear everybody else violating their boundaries. And different societies will find different forms of rules with different evaluations of how to do things.
TL;DR: Don't want to deal with the rules of a society? Don't interact with it. You cant have your cake and eat it too.
gwervc
[flagged]
danielspace23
In recent news from the "land of the free": a Norwegian tourist was detained by ICE and denied entry at Newark Airport for having a funny picture of JD Vance on his phone.
You can claim what you want about freedom of speech being guaranteed in the USA, but the reality shows that it only applies for some people.
https://www.nordlys.no/mads-sin-drommereise-til-usa-spolert-...
oeitho
What are you talking about? Multiple EU countries have free speech written in their constituion.
Article 5 in German basic law (their constitution): https://www.gesetze-im-internet.de/englisch_gg/englisch_gg.h... (translated)
77th paragraph in the Danish constituion: https://www.thedanishparliament.dk/-/media/sites/ft/pdf/publ... (translated)
Edit: the flagged comment I replied to claimed that no EU country had free speech in their constitution. This is objectively wrong, and is why I wrote my comment.
mslansn
Germany? Must be some dark joke. You know how many things can get you fined there?
perihelions
> "Multiple EU countries have free speech written in their constituion."
That's an exceedingly low bar! We need more critical thinking than that to start a substantive discussion about comparative freedoms across political systems. A government can't just declare itself to be a free country; it's practical reality which matters.
Exhibits A, B, & C:
> "Citizens of the People's Republic of China shall enjoy freedom of speech, the press, assembly, association, procession and demonstration"
https://english.www.gov.cn/archive/laws_regulations/2014/08/... ("Constitution of the People’s Republic of China")
https://en.wikisource.org/wiki/Constitution_of_the_People%27...
> "In conformity with the interests of the toilers, and in order to strengthen the socialist system, the citizens of the U.S.S.R. are guaranteed by law:—(a) Freedom of speech; (b) Freedom of the Press; (c) Freedom of assembly and of holding mass meetings; (d) Freedom of street processions and demonstrations..."
https://en.wikisource.org/wiki/Page:The_Soviet_Socialist_Con... ("Constitution of the Soviet Union (1936)")
> "Citizens are guaranteed freedom of speech, the press, assembly, demonstration and association. The State shall guarantee the conditions for the free activities of democratic political parties and social organizations."
https://en.wikisource.org/wiki/Socialist_Constitution_of_the... ("Socialist Constitution of the Democratic People's Republic of Korea (2023)")
jl6
I’m not sure which is worse, the impersonal, automated, regulatory padded cells of US gov/tech hegemons, or the potentially very personal attention of a local lord with very strong opinions[0].
amiga386
If you do read Drew DeVault's The Stallman Report, please also consider reading the rebuttal at https://stallmansupport.org/ and perhaps consider reading the DeVault Report at https://dmpwn.info/
3D30497420
This has been awhile in coming. They incorporated in the Netherlands a few years ago: https://sourcehut.org/blog/2022-10-31-tos-update-cryptocurre...
bgwalter
The Netherlands is one of the most surveilled societies on earth. This is from 2016 and it has only gotten worse:
https://www.irishtimes.com/news/world/europe/sweeping-survei...
amiga386
SourceHut isn't under Dutch law because it's the best legal jurisdiction to run a code hosting service from. It's because the sole trader who runs this particular code hosting service personally moved to the Netherlands, so that's the easiest place for him to run his business from.
Also, this diff does not say his business has left US jurisdiction:
- before: "You must obey all local, US, and Dutch laws"
- after: "You must obey all local, US, European, and Dutch laws and regulations"
diggan
> Also, this diff does not say his business has left US jurisdiction:
That is true, but the commit message also says:
> v2: rollback the premature removal of compliance with US law - Will defer this until we finish shutting down the US business entity entirely.
So it seems leaving US jurisdiction is planned, it was just a bit premature so they temporarily rolled that particular change back.
f_devd
This seems demonstrably false, e.g. GFW of China, and similar cases of effectively the entire country being under surveillance: https://www.statista.com/statistics/1290708/top-surveilled-c...
bgwalter
The Netherlands essentially has pre-crime units:
https://www.theguardian.com/cities/2018/mar/01/smart-cities-...
The city also keeps track of the number of young people hanging out in the streets, their age group, whether they know each other, the atmosphere and whether or not they cause a nuisance. Special enforcement officers keep track of this information through mobile devices. It calls this process “targeted and innovative supervision”. Other council documents mention the prediction of school drop-outs, the prediction of poverty and the monitoring of “the health of certain groups” with the aim of “intervening faster”.
thedevilslawyer
I mean if you have to give that as the only example, then GP's point stands very strong.
bee_rider
The country with the most surveillance laws in the books and the most documented phone taps is probably not the most surveilled country on earth (at least, for the worst countries I expect law enforcement to just do whatever they want and not leave a paper trial because… why would they bother? Nobody is going to scrutinize them anyway).
Of course, this puts the conversation in a tricky spot. The less-bad actors (no country is great in this context) should have the most well documented abuses, the worst will just do it without bookkeeping. So it is, unfortunately, a “prove a negative” sort of thing.
wyldfire
The relevant portion of this change is the addition of "European" in "You must obey all local, US, European and Dutch laws ...", I guess?
Not super clear from the link that's the case. Maybe sourcehut will make an explicit publication to this effect.
diggan
> relevant portion of this change is the addition
No, that was there before too. What's new is the legal address in the bottom, that now specifies Netherlands, and a KVK+BTW identifier.
"-" prefix on a line in a diff indicates removals, "+" prefix indicates additions.
But yeah, I'd expect them to also make some sort of announcement blog post explaining the change.
tarkin2
Any recommendations for cheap VPSs in Europe? The company should be basee in Europe, not just the server location.
dewey
Hetzner and OVH are both great value for money, you'll find bad stories for every big hoster but they are professional (Someone will post the OVH fire story as a reply of that most likely, but that's not something that happens regularly) and a lot of the VPS resellers will sell you stuff that is hosted there too.
moooo99
To add to the other comments, had good experiences with Netcup and Contabo
nwellnhof
In the last years, many of the smaller German hosting companies were acquired by larger corporations. Netcup is owned by Anexia (Austria) now, Contabo was acquired by KKR (US), Hosteurope by Godaddy (US). If you're looking for hosting in the EU, you probably also want to avoid US-owned providers.
mcosta
> you probably also want to avoid US-owned providers.
Why?
GardenLetter27
Hetzner has been amazing. I'd choose them regardless of the Europe requirement.
CalRobert
Ovh is fine
bilekas
Does anyone know the context around this ? It's not clear form the PR at all. Was there some US regulation/requirement that SH didn't agree with ?
mrweasel
Part of it seems to simply because the owner moved[1] and it makes sense to move his company with him. Given that Source Hut have physical hardware and operating that from across the ocean probably gets tiresome pretty fast it also makes to move the hardware. So now the owner, and the hardware is in Europe. At that point you kinda have to live be the local rules anyway and having your business being a US business makes little sense and provides no actual benefits.
cess11
The political and regulatory climate in the US is quite volatile and has been for years, and perhaps they also disagree with the lack of data protection rights.
They have a bit of an ethical track record where they've disallowed use of their services for crypto commodity projects and the like, for example.
simianwords
This doesn’t track at all. I’m not an expert but from what I heard startups are moving away from Europe not the other way round. It does seem to be a political or lifestyle choice as a sibling comment pointed out.
Edit: I mean ideological not exactly political choice.
>I have felt a kind of dissonance with my home country of the United States for a long time now, and I have found it very difficult to resolve. I am not of one mind with my peers in this country on many issues; social, economic, and political. Even limiting this inquiry to matters related to FOSS, it’s quite clear that the FOSS community in Europe is much stronger than in America. In the United States, capitalism is the secular religion, and my values, in FOSS and otherwise, are incompatible with the American ethos.
Seems ideological to me.
Vinnl
The comment you're replying to pretty much describes it as a political choice? I don't see why that doesn't track at all.
EasyMark
If the owner moved to Europe then it's likely either personal (marriage? family there?) or political/philosophical difference with the authoritarianism starting to effuse the USA, and not related to regulations, as they'll still have to abide by most or all US regulations to do business here.
throwaway2037
Sorry, I am dumb here. Honest question: In English, what is the difference between "ideological choice" and "political choice"? To me they seem similar, but I am sure that you used them with specifically different meanings.
Barrin92
>but from what I heard startups are moving away from Europe
pretty much the other way around. Europe's startup base is still smaller than the US but has been growing faster. It's now 20% or so of global VC capital compared to about 5% a decade ago, and has produced unicorns at faster rates. Just misses the mega-sized companies at the tail end (https://tech.eu/2023/07/05/europes-best-decade-in-tech-reach...)
You can just look at an investor like, ironically enough, Thiel who has been pumping a lot of money into European tech. Defense startups in Germany for example.
delfinom
Start-ups maybe moving away from Europe but they won't be selling to European customers. The EU is increasingly moving to assert data sovereignty and control. The US abusing sanctions and tariffs have basically guaranteed it will become set in stone law, after years of it being a debate and exceptions being made.
simianwords
For people downvoting may I ask why? Isn’t it common knowledge that Netherlands is not the most favourable place to run a company?
nottorp
If you want VC money you have to be incorporated in Delaware, I think. If you don't, you get a choice.
mslansn
[flagged]
InsideOutSanta
Political posturing means that he's saying these things to gain support, rather than out of genuine conviction. He moved from the US to the Netherlands, and he's now relocating his company, which seems to contradict the idea that it's just posturing.
lupusreal
Yes, he is very genuine. He's not posturing just to fit in.
lupusreal
He's incredibly based. I very frequently disagree with him, but I respect him for having the spine to always stick up for what he believes. That's the quintessential essence of being based.
justinrubek
There is absolutely an argument to be made that this place is right wing.
I'd wish there were movement for the privacy-conscious services to escape any regulation, not just choose the currently-politically-correct one. Like piracy sites did in 00-10s (abuse-proof hosting in Ecuador, shady domain registrar from SEA, zero search indexing) or crypto companies now (net of shell companies where not a single one is responsible for anything).
My point is, if you trust the company you're using, also trust it to use any means necessary to protect you from bad actors, don't rely on the laws here. Both the corporate and the state ones. If you don't trust it, don't give it anything you cannot afford to leak or lose.
Specifically, EU data protection laws are good to protect regular customers from the big corporations, but they offer little protection against the EU (and the member states) themselves. And if the risk you're hedging against is "yourself turning to big corp and abusing customers" moving to EU is okay, but not in any other case.