Right - I see the other topic has been locked / author hasn’t returned to follow community rules.
Here’s the original topic https://news.ycombinator.com/item?id=49003386
and a measured (IMHO) response to it. (BTW, do your self a favour and change tabs with that site open :)
https://マリウス.com/i-regret-migrating-to-codeberg/
It’s a tough spot, Codeberg has found themselves in and I wish them luck. But beyond that, this is (yet) another reminder that in 2026, if you don’t self host it, the cloud is just someone else computer
You must log in or register to comment.
OOTL Wasn’t there something about forgejos capabilities to federate? I had the impression, that it would go the fediverse route with many interacting instances. Then everyone can make their own rules. There are many reason to moderate repos. So why is this such a big thing (if forgejo federates as I remembered from the back of my head)?
Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I’ve seen in this thread:
Fewer Letters More Letters DNS Domain Name Service/System Git Popular version control system, primarily for code SSH Secure Shell for remote terminal access
[Thread #63 for this comm, first seen 26th Jul 2026, 08:50] [FAQ] [Full list] [Contact] [Source code]
Yeah, you’re the asshole
Honesty, I respect Codeberg for making a decision. No matter what they choose there would be pushback
I’ll just note that they can make whatever decision they want, its their platform, and considering its just forgejo underneath - you can always take it and host your own.
Also, I think it coincidentally lines up quite nicely with what we have here for posting an AI project now. Anything at that Generated stage is going to count as “mostly”.
I find it disappointing that people are upset with codeberg over this.
Sometime in the last two years, the number of people consider themselves to be programmers has at least doubled. We have a giant contingent of people who have never gone through the hell of actually developing a skill but are now “developers” in much the same way that typing “make me a song like ______” now makes you a musician. No theory, no chords, no building of callouses, just load up our AutoPlagio and dance the night away!
And these sudden Developers and such are all very upset at having their legitimacy questioned by a bunch of… of… NERDS.
Sometime in the last two years, the number of people consider themselves to be programmers has at least doubled.
As per usual, normies ruin everything.
From what I understand from their blogpost, it was mostly about conserving their own resources, because a lot of the vibecoded projects they got were uploading insane amounts of binary releases and wasting resources on CI/CD while having no users or other collaborators.
They wanna reserve more server space for projects, that actually productively use it, like bigger FOSS projects with actual users and contributors.
That is perfectly understandable for me, even without taking my huge distaste for AI into consideration. Anyone that thinks, that this small, community funded project is obligated to host their huge slop repos semms pretty entitled to me.
before reading the blog post I was thinking the same. now I don’t.
the worst of the LLM projects have no place on codeberg that’s for sure, but there would have been better ways than a blanket ban to limit the resource consumption of LLM and crypto projects. codeberg already has a storage quota system, they could be giving a lower quota for LLM projects, maybe also disable free CI for them, which I am a bit surprised they have given. and solve the reputation problem with banners. but no, total blanket ban based on feelings, it is.
If the hard legal reality of all LLM generated code having a high risk of breaking copyright is “feelings” for you, then sure 🙄
There is simply no way that is true. First, the legal arguments are dodgy:
- There is a good chance that LLMs are sufficiently transformative that courts will decide they don’t infringe the copyright of their sources.
- Even if not, hosts will get DMCA-style safe harbour protection and the most they’ll be liable for is takedown requests, which is a major thing for any large host.
Second, there is no fucking way a western court is going to tell every big tech company they have to delete 99% of the code that was written since the start of the year, even if the law as written literally said verbatim, “use of any LLM output for any purpose is breach of copyright” because it doesn’t take a conspiracy theorist to realise that it’s politically impossible.
You may not like that, but it means that, again, Codeberg is doing this based on feels.
You are missing the point entirely. LLMs regularly generate code that is a near verbatim copy of existing copyrighted code, but with almost no way for the LLM using person to notice that. LLMs being sufficiently transformative might be an argument about the use of training material, making the resulting model not a copyright violation itself, and thus might protect the companies that produce and offer these models, but it says nothing about the actual output of a model.
It is only a question of time before some enterprising law firm decides to mass scan open-source projects and weaponize their findings similar to patent trolls or file-sharing legal threats. This has a long history in Germany where Codeberg is located, and even if a court rules that the host itself is only responsible for removing such copyright violating code, it will require significant effort to do so with constant legal fights as the attacking lawyers will try to figure out the identity of the person responsible so that they can blackmail them with cease and desist legal fees.
Politics will not care about some hobbyist open-source projects and large companies will spend a lot of effort to obfuscate their code to prevent this legal trolling to affect them.
People can upload code that violates copyright too. No llm required.
So if that is the concern have a rule about not violating copyright (which they may already have). And there is likely already a process for handling that.
This is the problem I have with the situation: the solution chosen (banning llm code) doesn’t really address the concerns they’ve raised directly. It’s just apologetics to make it sound like it’s reason-based rather than “we don’t like it”.
It’s their platform, they can do what they want, but let’s not pretend it’s not code-puritanism.
Yes, they can upload copyrighted stuff, but people typically don’t do so on large scale and when they knowingly do it these days they typically try to hide their tracks well enough that law firms know it will not be a lucrative business to try and blackmail them.
And one of Codeberg’s main points is the unknown copyright status, you just failed to understand it.
Yeah - it’s well known that scripts to automate doing bad things did not exist before llms.
People have tried using forges to host explicitly illegal material all the time. Not just “this may be a copyright issue perhaps maybe”.
The copyright complaint is a fig leaf to hide their shame.
They also outright banned cryptocurrency code with no “copyright fig leaf” apologia.
It’s code puritanism plain and simple. “We don’t like these things so we’re banning them.”
You’re right I wasn’t really thinking about the possibility of verbatim reproduction. I guess we’ll see about that.
Codeberg will need efficient procedures to handle IP trolls anyway, getting a bunch more takedown requests ought not to make a big difference. And if somehow it does start to be a problem… that would be the time to blanket ban or take similar drastic action. If it’s possible to detect now, it will be possible to detect then.
Politics will absolutely care about having a precedent which leaves big tech exposed. Any case against little fish will be jumped on by Zuck and Bezos before you can say “datacenter”.
No, these malicious law firms intentionally go after the small fish, who are much more likely to be intimidated and give in to a settlement payment before it even reaches the courts.
And for Codeberg it makes absolutly sense to minimize the issue for them now before it becomes an even bigger issue.
k
AIs already pillaged all the code in the world. This is fighting a lost fight. We won’t manage to force big AI firms that literally props a country to stay afloat to make their AI “forget” or “untrained”.
Regulators let the pillaging happen so now AI does know how to code. They dont imitate they truly code.
But IMO the real fight is about things like malus that are the real dangerous and malevolent actor here. They will take your open source code and resell it to big businesses.
You are linking to a parody project 🤦
And you are also misunderstanding my point. Yes the cat is out of the bag and companies will absolutely copyright wash their codebases like that, but they have big legal teams to defend against copyright trolls and generally do not publish most of their code base for anyone to see.
Small hobbyist open-source projects that make up near 100% of the projects hosted on Codeberg on the other hand are easy marks for malicious litigation, just like home users torrenting movies were in the 1990ties and early 2000.
Lol Malus is not a parody.
You can verify it yourself but they do make money doing exactly what they say.
They play on that “parody/malevolent” idea but they do have customers and confirmed they make money on that.
There is a good chance that LLMs are sufficiently transformative that courts will decide they don’t infringe the copyright of their sources.
How much money are you willing to put in to test that?
5 Zimbabwean dollars.
So then why are you asking other people to on your behalf?
Hmm, maybe the bits of my post that you didn’t quote contain the answer.
First though you need to understand I’m mainly saying I don’t buy their justification.
An important consideration is that the usage of “AI” aka currently using like LLMs is viral, in a worse sense than eg.: the GPL is viral, and it’s completely understandable that some hosters would prefer to avoid the community problems that that causes.
What about setting quotas? They could introduce new account validations if they wanted
Frankly, I don’t see where the whole big deal of this story is.
People who don’t like codeberg can just go somewhere else (even back to github) and/or found/support an alternative that better suits their needs.
It’s not like the world needs to have one git hosting service to rule them all, it’s not like there must be free ones (entitled much?), and it’s not like whatever service happens to be the new “cool” one must be neutral as to what they host.
BTW, although to my knowledge their policy is not enforced super-strictly, codeberg has never been neutral in this regard — see 1 and 2
People who don’t like codeberg can just go somewhere else
And Codeberg literally makes it easier for them, as you can just download or git clone Forgejo directly from them! When have we ever seen a breakup so amicable.
People who don’t like codeberg can just go somewhere else (even back to github) and/or found/support an alternative that better suits their needs.
searches
https://gitgud.io/ provides free GitLab hosting for open source projects.
https://gitlab.com/ has a free tier for personal/open source stuff, though looks like it has a 5 user limit on said free tier.
Gitea can be self-hosted. It doesn’t look like they provide free hosting themselves, though, just paid. Apparently it’s considerably less resource-intensive to host than GitLab.
GNU Savannah is available if one is writing projects under a specific set of licenses (the GPL family).
I use Forgejo which is either forked from or built on Gitea
Super easy to set up it was a docker container and a cloudflared tunnel.
People who don’t like codeberg can just go somewhere else
Didn’t down vote ya but…This. This is what I’ve been saying for forever.
I agree, but I believe that there must be free git hosting and archiving for code projects.
What’s stopping you from doing it yourself? Be the change you want to see.
Sure, but that does not make it mandatorily Codeberg’s mission.
Sure, but it didn’t say that.
I’ll offer a comparison not yet mentioned in the context of hosting software, but which should sound familiar in the social media context: moderation is hard at scale.
By every metric of scale, Codeberg is a competitor to the behemoth that is GitHub. And that means they have to contend with tough choices, such as who and what to host on their servers, no different than BlueSky, Facebook, and the individual instances of the Fediverse. And to be clear, Codeberg has always been limited to FOSS projects anyway, so nobody can genuinely argue that limits weren’t in the cards.
The distinction is that less alike Meta, and more alike with the Fediverse, Codeberg takes no hostages: people with obvious AI repos (or even marginal repos, given the possible ambiguity) are free to take their code and leave. Yes, they have to rebuild their CI pipelines, but that’s always required for any platform, including self hosting.
The fact is that Codeberg is a centralized entity that needs to (try to) make consistent policy. In this case, they have a concern about copyright and nothing anyone says can magically dematerialize that risk. If their new policy is not agreeable, then decentralized self hosting is probably the only way forward. But that was always an option with ForgeJo and federation.
And indeed, folks moving from GitHub or elsewhere are not exactly without fair warning that they might have to migrate again; we’ve not reached a utopia yet.
Why are we posting this random tech bloggers whiny complaint again?
I said it before: Codeberg uses Forgejo which is FOSS. If you don’t like Codeberg’s decision: stop complaining, self-host Forgejo and lose nothing.
But fwiw, Fuck AI coding, not only for its unmaintainability but also for stealing of intellectual property.
But fwiw, Fuck AI coding, not only for its unmaintainability but also for stealing of intellectual property.
Would you be okay with a coding model that was trained only on open source software?
Response guy seems to think that “legitimate crypto” is a thing.
My SSH keys are legitimate crypto. Fake money for criminals is not legitimate.
While I fully agree and support Codeberg stance on vibecoded projects I’m not sure I follow their reasoning here. For instance they complain about webcrawlers scraping their site to train their LLM models but I don’t see why getting rid of the vibecoded repositories wouldn’t make them more palatable for scrapers. A site full of human made code is infinitely more useful to those companies than a slop infested honeypot.
It’s two separate problems. Scrapers and heavy uploaders both consume resources.
if you don’t self host it, the cloud is just someone else computer
I pretty much said this in the other thread. Unless you own the platform, or a significant investor in said platform, you are subject to the whims of the platform, good, bad, or indifferent. Some don’t like that I guess because they feel like they supported the platform, may have contributed to the platform, but at the end of the day, the platform dictates law for the platform.
Kind of like lemmy.selfhosted. There are rules. If you don’t bother yourself with reading the rules before posting, you get what you get.
I fail to see why people are getting worked up. While yes the tos says the ambiguous “mostly” the rest of the paragraph gives you a clear indication why. Copyright. Which I the same reason many other platforms don’t level allow vibe code into their codebases.
CB does not want to host code a large number of repos that in the future could be classified as stolen code, and now as the code host will have to do the work of deleting it all when they get sued for hosting it. And you know right holders are just waiting to do that.
So made up fears over settled law. Makes perfect sense.
Okay, so I lack the sources, so I ask others to please back me up; but isn’t this anything but settled law? There was something in the US but it was more of a recommendation than a law, and will have to be tested in court. Also, Codeberg is hosted in Germany, so its laws would apply there.
No, well founded reservations based on an ever changing legal landscape that varies from country to country.
It’s more than just the ‘mostly’. In legal proceedings they would really struggle to ‘demonstrate cause’, i.e. what is copyrighted, and what is not - not to mention demonstrating criminal intent.
As I wrote before, these are phase 2 effects of a new emerging technology. All it will take is one company to go after them in court to reverse this.
What do you mean? They are perfectly in their right to enforce this rule, even if they couldn’t prove that their reasoning made sense. They are not obligated to host your slop
I agree they are within their right to do it, I’m saying it legally wouldn’t survive a challenge in court the way they implemented it.
No need for your combative tone or assuming I have slop that needs hosting.
How would it be legally challengeable? No one can be legally forced to host someone else’s data against their will, that sounds ludicrous, otherwise people could sue YouTube for removing their videos before they were legally required to.
The TOS are essentially a way to let you know what they will consider, but legally they can remove your repo without any reason, they’re not legally required to host your data.
Again, you’re right, but the TOS do need to be clear and unambiguous which this is not. This is - like a lot of Lemmy these days- a knee jerk response to a novel technology that’s not fully understood. That’s obvious because of how the rules are worded.
This opens them up to anti discrimination lawsuits - which are take quite serious in German courts. They would have to demonstrate that a user is banned from uploading work because it is “mostly” LLM generated and not because they are trans or black or something.
I know this is unpopular opinion on Lemmy atm, but this genie isn’t going back in the bottle. And it is very difficult to fence against because when used properly as an assisting tool, and not as an oracle of truth or a full self driving vibecoding machine, the code quality is basically indistinguishable from human code.
I’m not saying Codeberg can’t do this, I’m saying they will struggle once there is serious pushback on this and it will hopefully open up the discussions on copyright and their place in modern society. Akin to how guns are still made and used, but the more advanced countries have strict laws around who can purchase them and who can use them and for what purpose.
I’m not a law expert, but I think even in Germany you would need to prove a pattern not a one off banned a black/trans person to accuse of discrimination. Otherwise any negative repercussion to a black/trans person would generate a discrimination lawsuit, and that just seems absurd.
I assume that if codeberg forces this it will do so with the most egregious offenders, because like you have pointed out it’s impossible to differentiate good code written with AI tools from good code written without them, but bad code written with AI tools is sometimes very differentiable from bad code written without them. And at the end of the day they’re trying to safe-guard against lawsuits over it (as the person uploading the code is not the owner) and becoming a slop repository.
But also, here’s the thing, they’re not making money of you hosting your code there, so it’s much harder to force them to take someone’s data. You could force Google to host your photos if you were unjustly banned, you can’t force me to do so if you found a loophole to use my server for that.
Alright, I just don’t understand what you mean by “a challenge in court”. In this case, you couldn’t challenge them on these rules, a court could do nothing about them.
I think the “regret” post misses an entire point, that Codeberg doesn’t want to be the place where AI stuff is hosted. Maybe it wasn’t clear in their communications but it always seemed to me the copyright and resource stuff was more of a justification of something they wanted to do anyways.
Also everyone suggesting AI should just be treated as a tool comfortably ignores the externalized costs. Maybe there’s some “yeah it sucks but we can’t to anything and it so we just use it” and that’s it. I’m so tired of lengthy AI-is-just-a-tool justifications that are omitting the central point.
The article seems correct with the “Codeberg’s reputation” clause though. That one smells bad, not sure why they felt the need to add it.
If you’re running a site that anyone from the public can sign up to, resources are not some afterthought you add to your argument like pepper. Resources are everything. I have been on this Internet since NCSA Mosaic; look up the term “hugged to death”.
everyone suggesting AI should just be treated as a tool comfortably ignores the externalized costs.
Thank you. Electrical, environmental, intellectual, economical…
Lots of people who have never used Codeberg and don’t understand the difference between Codeberg and Forgejo are very angry about this.
And people also don’t understand the difference between a non profit managed in good will by people and a capitalist saas provider that has billions to spend in hundreds and hundreds of people to maintain an ever growing central place to host all corporate interests.
The internet is becoming ridiculous.
