Juri.

I Created a little app that shows you what laws allow what government departments legal access to information on the end of an IP Address, it's called Juri. after Jurisdiction, it's here https://juri.host/, what initially started as a if I feed it an IP I want the laws specific to that country that are for Legal Data Access in it's various forms, but ultimately 'these authorities can access data in those places legally, or can try' and then all the nuance sets in and you break everything, this application is mostly created with the help of Claude-code from Anthropic, I found it much easier to work with and it seems to gas-light me less when it had dropped some serious no-no's, the more I use Claude-code the more I take a more stoic view that I need to be better at finessing my prompts, and maybe less cathartic swearing. but generally 'Juri.' is a pretty good functional PoC but has some quirks that any PoC might carry, with potential to grow into something beautiful, should the funding and desire align.

Anyway...

You see that searching for fsb.ru yields a high risk score and ... I'm kinda half in half out on this, and that's solely down to essentially creating a target to hit, I didn't have a measurement of what risks might be useful to measure against when I started the Juri project, the question I really wanted to surface was 'have you had a conversation about legal access to data at this location?' I'm personally more involved in answering that question, something that spawned from thinking about the recent Apple/UK Technical Notice Wet-wipe of a move by our government but the factors that I'd considered felt like they could be scored; here they are...

• Judicial Oversight

  • Evaluates the strength and independence of judicial review processes governing government access to data.

• Agency Powers

  • Assesses the breadth and depth of legal authorities granted to government agencies for data access.

• Technical Requirements

  • Measures mandated technical capabilities that providers must implement to facilitate government access.

• Extraterritoriality

  • Evaluates the degree to which a jurisdiction's legal frameworks assert authority beyond their borders.

• Transparency

  • Analyses the visibility into government data access activities, including public reporting and notification.

• Embargo Impact

  • Measures the severity of trade restrictions that prohibit or limit commercial activities with specific countries.

• Sanction Severity

  • Evaluates targeted financial and economic restrictions affecting specific entities, individuals, or sectors.

I think this is a good starting point for 'what do we care about and how much' but that's also a very relative and personal calculation, one that I wanted to avoid in the app right now as I like it's minimalism.

I've pinned the bigger picture up here https://www.glars.io/glars-deep.html the site www.glars.io will mature over time (I'm self employed, 2 children and am suitably time poor, but that's how the scoring was created)

I'm still half in and half out about implying risk, I think using the terms concern/concern set(s) might be more suitable, because I care more about the conversation being had rather than possibly imposing fictitious levels of agency

at the same time, check out the roadmap on https://juri.host/ if I could afford the time, this could be quite a nice offering for a number of spaces, but it's burning a hole in my hand now, so I thought I'd send it to the internet.

I like the idea that this information can be useful at the right time, I think it's highest value is pre-event (i.e. let's pause before we migrate all that data to that 'cheaper' location but it retains value on insight for acquisitions or understanding existing infrastructure hosting and it's obligations to regional laws, how you might architect, how you might want to migrate away from problematic sites

Anyway, Juri - hit me up if you're interested in making that roadmap a reality