Nukeproof: Manifesto for European Data Sovereignty

The current best security practices can be used by any organisation. I respect the engineering that Google have done. gRPC is excellent and local first software can absolutely use it, accessing data locality verified endpoints.

The fundamental problem with SaaS and pure server side applications is we do not know where the data are. With local first we can verify data locality.

Usually I try to open source it & release it usually in permissive licenses (Full disclosure to experiment with ideas I use LLM's sometimes)

I don't really want Europe to replace America only now switching to India. Our ideals might match right now but y'know we live in a multi polarized world now and we just have to look for what's great for Europe from European perspective and so on & as an Indian, I appreciate it given that we have points of common interests regarding privacy.

So my point was that I already open source projects. But the reason I feel a lot of issues is that open source project -> actual deployment pipeline is still messy for the average person and this is the idea I was / still am targeting with firecracker vm's where someone can pay for an open source service to be deployed on vps for some time (Alright now a lot of options have come like sprites but i have been talking about from 2-3 months maybe 4 back when no implementation existed and even right now the one click button solution ui/ux I wanted to create still hasn't been created)

Like instead of being bound to your service with tos as a saas, I am hoping to treat each as a vps and the tos which would surround that which would be more permissive.

I was gonna build more on it but then ramflation happened so probably gonna have the idea internally till the bubble bursts or when its good enough (a big chunk of me not open sourcing it is that its really hacky and consists huge LLM help right now especially with gliderlabs/ssh library part & I don't want to create yet another AI slop)

I know hindi (the most widely spoken language in India) and I am down to provide some translations to Open source too

The issue with Open source without any offering is that (i have written about it) is that there is zero funding and incentive. Heck, I am the person who made a post about how to promote open source/fix this issue & After months of thinking, I kind of feel providing EU privacy friendly solution might be the best bet. (https://news.ycombinator.com/item?id=45558430) [Ask HN: Why are most people not interested in FOSS/OSS and can we change that]

A lot of it felt like a chicken and egg problem to me. People want better UI/UX but developers build for dev first and there needs to be a real incentive in most cases to have great UI/UX which might include some financial benefits plus open source still has some large issues in funding which is why I thought of the cloud idea as well (I want to establish a railway like pricing model where you get charged for what you use but its still reasonable and there can be a deploy to cloud option and developers who create open source projects gets the funding in first place or have a more flexible way to earn from their project, similar to BYOK but way more user friendly)

Anyways my point is that I feel deeply aligned with EU right now. I just want to ask for some EU laws given I am still living in Indian state right now and just more information about it.

Now it does make sense, I do think that Europe should look at Open source more too and contribute as such.

I do agree with what you are saying but supposing the geopolitical spat between America and Europe, It doesn't make sense to me why European countries might trust Indian subsidiaries of American companies.

Sure they might sound sovereign but in reality, they aren't. SO what's the point?

Why not get Independent Indian developers and the startup culture established around it (Although one of the issues I feel with this approach is that VC capital does include America, personally I wish to stay away from much of VC money)

> It's more derogatory to EU initiatives than India. All these flashy announcements hide the fact that most businesses and organizations in the EU continue to operate using non-EU developed software and continue to do so. Yet any attempt at building a durable long term foundation a la the Draghi report is ignored, as Draghi himself pointed out a couple months back [2].

Agreed.

I do feel like a reason why I wanted to establish EU company was to show my acknowledgement of Open source and privacy focus and to get more EU businesses interested. But right now, I feel like I am way more willing to have Open source or at the very least if restrictive, then creating source available software & still having an EU presence & an appreciation towards it.

But like, EU definitely needs to focus on Open source offerings more so than looking for EU alternatives in general which as you mention might be built using closed source products of American companies. It still doesn't effectively prevent the lock-in or worries in case of a geopolitical spat for EU in reality but only on the papers.

To be honest, I am open to open sourcing much of my products (ideologically) but the problems I feel in open source is that its hard to even make a developer salary comparatively even in India.

Open source definitely needs more funding. Probably EU can fund Open source without any bias could be great too?

{Ovh is great but it has a one time setup fee for its dedicated, personally I love hetzner auctions for the most part too but Hetzner is a little restrictive in ban first policy and they are strict so for some workflows like creating a reseller etc., Hetzner does have some flaws but still one of the best companies and their support's really feels good as well!}

Thanks for your response, I will look into the estonia thing later if I would need to seriously pivot to EU for any reason.

Currently thinking that I can use wise or anything to accept SEPA bank payments and other if need be.