Hacker News new | ask | show | jobs
by traceroute66 36 days ago
> The actual risk is that US spooks can use these hardware features to infiltrate European clouds.

If your threat model is clandestine government actors then I think it would be a rather odd decision to host on ANY cloud !

The main risk for most people is being subject to US CLOUD Act, US PATRIOT Act etc. etc. Which, despite what the sales-droids will tell you, still applies in the fake-EU clouds operated by the US providers.

If you are serious about EU data sovereignty then you absolutely want an EU OpCo that has nothing whatsoever to do with any US company. If OpCo has ties to a US company or IS a US company such as AWS or Microsoft, then you've lost the EU jurisdiction.

1 comments

The concern over "digital sovereignty" is motivated by the US wielding sanctions as a political tool against Europe.

It's impossible to fully eliminate any exposure to US sanctions. If the EU wants to fully shield itself, it should aggressively counter-sanction American entities. If the US government knows that every time it sanctions some EU entity, an American entity will get sanctioned just as hard, it will think twice.

For some reason, the EU has been unwilling to go down this obvious path.

The problem is that European (in the EU and outside) countries do not have the same ability to sanction the US as the US has to sanction them.

If the US imposed sanctions that blocked access to cloud services a lot of the government and the private sector would just shut down.

Take what happened to the French ICC judge and imagine that happening across a whole country and far more pervasively (because a lot of people he deals with will not follow US sanctions, but would have their own services cut off if his country was sanctioned): https://www.euronews.com/my-europe/2026/02/18/us-sanctions-t...

The EU could absolutely find ways to hurt the US economy just as much as vice versa. It doesn't have to use the same tools as the US. Just ban major US companies from doing business in the EU. Impose massive fines. Get creative.

The EU economy is on par with the US economy. The EU has plenty of ability to hurt the US economy.

The reason this doesn't happen is because the EU isn't a country. It doesn't have a unified central government. It's 27 different sovereign states, each with their own completely different foreign policy. The type of policy I'm describing requires a unified political leadership willing to play for high stakes.

This is why China has been so much more effective than the EU in the trade war with the US. It's not that China theoretically has better cards to play. It just has a central government.

EU economy is not on par with the US economy. This is a dangerously old belief. That was maybe true in 2000 but not in 2026. EU GDP per capita is ~$48k and US GDP per capita is ~$94k. US economy is nearly twice as big. Quarter of a century of higher growth will do that.

EU does run a trade surplus with the USA. In a big fight the USA would, strictly speaking, have to replace more stuff than the EU would. However that ignores the makeup of the things being traded. EU exports to the US is dominated by pharma products that the US could make generics of, misc machinery that can often be replaced by Chinese competitors now, and luxury goods the US doesn't strictly need. US exports to EU are critical for the functioning of the economy (assuming you count tech services as exports).

It would be catastrophic for the world if there was a serious trade war between US and EU but if it involved major disruptions to tech services the EU would fold within days. There are no home grown replacements for most US software and no ability to make them anytime soon (especially as any broad spectrum sanctions would include frontier AI models).

> EU economy is not on par with the US economy. This is a dangerously old belief. That was maybe true in 2000 but not in 2026. EU GDP per capita is ~$48k and US GDP per capita is ~$94k. US economy is nearly twice as big. Quarter of a century of higher growth will do that.

I think per capita is not a useful measure here? The populations are unequal.

By nominal exchange rates, the US economy is estimated to be $31.856T this year; the EU's $23T; by purchasing power parity exchange rates, the EU is $30.678T.

Exchange rates matter for what actually gets traded, but they're also easily shifted by interest rate policies. But even with this, any simplification of economics sufficient to fit in a comment is going to be very misleading about questions of who is more or less dependent on global free trade, the US or the EU. Even the complexity you list: I suspect there's an office or five in various EU nations filled with economists trying to work out exactly what would go down if there was an EU-US trade war and how to remove the critical points of failure.

> US exports to EU are critical for the functioning of the economy (assuming you count tech services as exports).

> It would be catastrophic for the world if there was a serious trade war between US and EU but if it involved major disruptions to tech services the EU would fold within days.

Yes, but this is kinda the point of all the digital sovereignty stuff.

It was already weird to me, as an iPhone app developer in Germany making apps for Germans living in Germany where sometimes the only language option was German, that I had to tick a box while uploading apps confirming that any encryption in the app would be in compliance with US export laws*; now, it's unacceptable.

* https://developer.apple.com/help/app-store-connect/manage-ap...

(Irony, that page links to https://bis.doc.gov/index.php/policy-guidance/encryption which for me has an SSL error)

> It would be catastrophic for the world if there was a serious trade war between US and EU but if it involved major disruptions to tech services the EU would fold within days. There are no home grown replacements for most US software and no ability to make them anytime soon (especially as any broad spectrum sanctions would include frontier AI models).

It's true that much of our infrastructure depend on US parties, but there are regions, governments, municipalities and more that is already 100% independent, although they're few right now, growing every day though.

But it's a misconception that it's 100% dependent on US SaaS and services, when already there are islands of people running their own infrastructure already today. People won't just give up if the US somehow cuts all connection, they'll just collaborate with the people who's infrastructure continue running like nothing happened, and it'll happen fast as a lot of services depend on that to work.

> It's true that much of our infrastructure depend on US parties, but there are regions, governments, municipalities and more that is already 100% independent, although they're few right now, growing every day though.

What about the devices people use to use this infrastructure? Most individuals use American controlled smartphones and American OSes on computers. What about private businesses?

US GDP is only about 30% larger than EU GDP in nominal terms, which is not enough to matter in this discussion. It's "on par" for all intents and purposes. The EU has plenty of ways to hurt the US economy very severely.
The EU is not necessarily the right comparator. If it came to that level of conflict its possible that not all EU countries would side against the US, its also possible some non EU countries would. However, i agree with your broad point that some European alliance is roughly comparable to the US.

However:

1. European countries are low growth and therefore of diminishing economic importance. Every year that goes by North America and Asia and other economies become comparatively larger.

2. What the US supplies Europe is going to do greater immediate damage to Europe than what Europe supplies the US. The US can turn off things that start hurting economically broadly and immediately and are hard to replace: cloud services, payment systems, etc. Things that only hurt when stocks run out, or that could be bought from elsewhere have less impact.

> If the US imposed sanctions that blocked access to cloud services a lot of the government and the private sector would just shut down.

You don't think they'd rather maybe find alternatives rather than shutting down? Sure, it'd be sucky probably for a long-time, but it's not like we don't have IT professionals who can stand up physical servers, email servers and what not, plenty of local municipalities do so already, so somewhere there is expertise already.

People generally don't just give up and throw their hands in the air in the face of difficulties, even less so when the governance of their country depends on it.

I think you are underestimating the supply chain problem. You can't stand up extra servers you don't already have in extra data center capacity you don't already have. The whole point of the cloud is that you don't have these assets.

While you can acquire these assets the lead times would be several months at a minimum, and probably years if everyone is trying to do it at the same time. It isn't an issue of knowhow, the required physical infrastructure doesn't exist.

Say Microsoft/Google/whatever my local municipality is using right now, gets blocked tonight, and tomorrow everything US-related is offline. It won't (and can't) take months for them to get one server up and running for them to continue with their administration. As mentioned, other municipalities in the country already are 100% independent, running everything themselves, either they're willing to help out the rest of us, or at least provide expertise enough so we can. Then the country is filled with FOSS nerds like myself, who wouldn't shy away from stepping in to help either.

Probably the larger cities would take longer to solve, but I don't think "We cannot get server hardware from the US" will be the biggest problem, it'll be around national organization until the biggest fires been put out. Putting one server in each ajuntament would basically be enough to get 80% of the local municipalities up and running again.

It wouldn't only affect local governments, it'd also trash all the businesses, banks, national governments, etc. Google on its own getting blocked breaks the entire internet because so many websites rely on the free services they host. Remember there are no European search engines of any quality and only Mistral as a European AI provider, so even just findings things would be difficult.
> the EU has been unwilling to go down this obvious path

Well, the EU in general tends to favour the "lets sit down in a room and talk like grown-ups" approach to finding solutions to problems.

Wielding sanctions as a first/second choice option is a very US thing, even more so with the present administration.

In theory the EU does have a lot of options available to it beyond sanctions, such as making life difficult getting Schengen visas for all those US citizens you constantly read about on the CNN website who are flocking to Europe .... but that sort of action would be very un-European[1][2]

[1] https://edition.cnn.com/travel/us-family-relocated-miami-ita... [2] https://edition.cnn.com/travel/central-eastern-europe-americ...

> such as making life difficult getting Schengen visas for all those US citizens you constantly read about on the CNN website who are flocking to Europe

Trashing your own tourism sector is a very European defense mechanism.

The truth is there is one and only one way Europe can try reclaiming sovereignty, and it’s the one that’s most painful—rebuilding its own military.

> Trashing your own tourism sector is a very European defense mechanism.

Yeah, virtually unheard of in a certain North American country, where every tourist with a certain skin color never been very worried about being extra-judicially sent to an internment camp.

No state in America is as dependent on European tourism the way Southern Europe is on American tourism. (And yes, the temporary blip in Canadian tourism sent a message.)
> as dependent on European tourism the way Southern Europe is on American tourism.

We're mostly dependent on other Europeans, the US is not the single highest tourist/visitor in any of the Southern Europe countries. Italy is the country with the highest percentage of American tourists, but even they have more German visitors. Most southern countries have most tourists from the UK, Germany and France, kind of as expected.

If you think about it for a second that makes a ton of sense too, considering the distances involved here, and how cheap flights inside Europe are.

> Trashing your own tourism sector is a very European defense mechanism.

Please re-read my post .... in particular the first two words "IN THEORY".

As far as I am aware, the option I mentioned has never, ever been mooted as a possibility. It was something I invented as a random example of a non-sanction possibility.

> rebuilding its own military

Aah yes, because a strong military has been so awesome for the US in the US–Iran war where IIRC the Iranians managed to destroy lots of very expensive US military radars[1] and other expensive assets[2][3] in the region despite your president having claimed to have "destroyed 100% of Iran's military capability".

But let's not get in to politics....

[1] https://edition.cnn.com/2026/03/05/middleeast/radar-bases-us... [2] https://edition.cnn.com/2026/03/30/middleeast/us-air-force-a... [3] https://apnews.com/article/amazon-aws-data-center-uae-iran-b...

> the first two words "IN THEORY"

It doesn’t work in theory. America reversing the move and banning its own citizens from traveling to Europe would bankrupt multiple EU members [1].

> because a strong military has been so awesome for the US in the US–Iran war

Uh, the Iran war was an exercise of American sovereignty. Rules be damned.

> where IIRC the Iranians managed to destroy lots of very expensive US military radars

And they didn’t do it with soft power!

Europe has a good deal. America guarantees its security. It gives up sovereignty in exchange.

“In theory” discussions about self immolation through tourism bans and money giveaways on strategically-useless “sovereign clouds” are finger paint on turds. Messaging exercises. They afford Europe zero marginal sovereignty vis-à-vis the U.S.

Europe is not going to be sovereign unless it commits to an independent security posture. And the simple truth is that isn’t politically possible right now.

> let's not get in to politics

Exactly.

[1] https://www.wsj.com/world/europe/ europe-tourism-economy-american-tourists-f6112f78

> America reversing the move and banning its own citizens ...

You sit there lecturing me on "in theory" discussions and you come up with that line.

I think you will find many European countries would celebrate yanks being told they can't visit Europe. Nobody will miss the loud Karens who make no effort in relation to the local culture.

It might have escaped your notice but the present US administration has not exactly done much to encourage Europeans to welcome yanks what with threatening to invade a European country and all that.

Get your own house in order before lecturing others.

> If the EU wants to fully shield itself, it should aggressively counter-sanction American entities

This isn’t a realistic option without an independent security posture. Washington could bankrupt Europe overnight right now with targeted tourism, technical and financial sanctions. (And increasingly, energy.) All of that before considering kneecapping Europe’s NATO-integrated kit.

> Washington could bankrupt Europe overnight right now with targeted tourism, technical and financial sanctions.

Yet again the American exceptionalism bleeds through and shows why the hegemony is currently dying. Maybe with a slight bit of humbleness it could have survived but no, the exceptionalism is so well encoded that it seems short of impossible to stop the decline at this point.

Seemingly this was the idea with Iran too, which based on the current goings, isn't going so well. How do you expect that to be true for the second/third largest economy in the world, when the US can't even do so with Iran, one of the already most sanctioned countries in the world?

> American exceptionalism bleeds through

None of this requires America be better at anything. It just requires the current finance and trade flows to be what they are.

> Seemingly this was the idea with Iran too

The analogy doesn’t work. American sanctions and adversarialism with Iran have famously granted us few grabholds on their system. Tehran is sovereign.

To the extent there is an analogy here, it’s in European reliance on America being its Hormuz. The obvious vulnerability that gives America asymmetric capability over Europe is the financial, security, energy and trade reliance. Unlike the Hormuz, those aren’t geographic features. But if Brussels is content with mincing around with their own special pile of AMD chips (or tourism bans or whatnot), it might as well be carved into rock.

The Iranian economy is in a state of total collapse! That's not something to aspire to.

It's not good to be in denial about this. Even small amounts of US pressure would create chaos in Europe at this point. Multiple European countries are heading towards a major financial crisis entirely on their own, even without any US involvement at all. See e.g. the UK, whose debt is now much too large for even an IMF bailout to work. Only massive austerity of the type that makes 2008 look like splashing around in warm water will be enough to turn that around.

Europe is not independent. Even ignoring basics like oil and gas, the choices of the EU ruling elites in Brussels have, over a period of many years, broken any ability to create a competitive domestic tech industry (something very difficult even with China-style global cutoffs). Even if it was all fixed tomorrow it's far too late. Building a competitive domestic office suite is far beyond what the EU can achieve, let alone everything else required.

> The Iranian economy is in a state of total collapse! That's not something to aspire to.

Right, I agree, situation is awful and Iran is struggling. But is it bankrupt? Did the US bankrupt much-smaller-than-Europe Iran overnight? Nope, so lets not be under the false belief that somehow Europe would be easier, that's backwards.

Yes, they essentially did, so far as civilians are concerned.

Most people can't afford food anymore. Minimum rent is like 40% over minimum wage (and most make only that much, including government employees). A lot of things cost 2x over what they did before the war.

I'm gonna quote a friend of mine that lives in Iran (though he's slightly better off due to family)'s comment on the matter: "When I go get a full bag of groceries and a kid is caught with a can of tuna under his clothes, crying, how am I supposed to feel good about having money"

The word bankrupt loses precise meaning when applied to countries that can print their own currency, as Iran can. It just means something like "collapse with hyperinflation". Iran is in a state of collapse and experiencing hyperinflation. That's what bankruptcy looks like for a country.