open source developers

People want to communicate over the internet as easily as they do in real life, with similar protections but, potentially, farther reach. In other words, people want to be able to chat with a group of other people who aren't physically in the same location, and still maintain some control over who claims ownership of the conversation. In today's world, of course, a lot of companies have a lot to say about who owns the data you send back and forth over the world wide web. Most companies seem to feel they have the right to govern the way you communicate, how many people your message reaches, and so on. Open source, luckily, doesn't need to own your social life, and so appropriately it's open source developers who are delivering a social network that belongs, first and foremost, to you.

Read More »

The Open Source Initiative (OSI) continues the work of exploring complexities surrounding the development and use of artificial intelligence in Deep Dive: AI – Defining Open Source AI, with the goal of collaboratively establishing a clear and defensible definition of “Open Source AI.” OSI is bringing together global experts to establish a shared set of principles that can recreate a permissionless, pragmatic and simplified collaboration for AI practitioners, similar to what the Open Source Definition has done.

Read More »

Microsoft recently seemed to propose that Open Source software didn’t belong in the Windows app store. Excuse me? After the news broke, Giorgio Sardo, Microsoft’s General Manager of the Microsoft Store, argued on Twitter that it wasn’t Microsoft’s intent. “We absolutely want to support developers distributing successful OSS apps. In fact, there are already fantastic OSS apps in the Store! The goal of this policy is to protect customers from misleading listings.” Predictably, confusion results. And the kerfuffle over FairEmail and the Google Play Store earlier this year is a good example of how this sort of confusion is not entirely new, leading to questions about intent. I’ve talked with developers and business managers about their experience in preparing software packages for commercial app stores. Universally, everyone reports having issues with app stores’ packaging. These include...

Read More »

Open source software (OSS), once a niche segment of the development landscape, is now ubiquitous. This growth is fantastic for the open source community. However, as the usage of OSS increases, so do concerns about security. Especially in mission-critical applications— think medical devices, automobiles, space flight, and nuclear facilities—securing open source technology is of the utmost priority. No individual entity, whether developers, organizations, or governments, can single-handedly solve this problem. The best outcome is possible when all of them come together to collaborate. The Open Source Security Foundation (OpenSSF) formed to facilitate this collaboration.

Read More »

The European Union is making big changes to cybersecurity requirements with its proposed Cyber Resilience Act (CRA). You may have heard about the CRA’s potential impact on the open source ecosystem. But what does the Cyber Resilience Act mean for you? This post is an introduction to the Act and explains how it may affect the open source maintainers and developer community. Note that this post is based on a draft of the CRA from September 15, 2022. The Act is still in a draft stage and getting feedback, and its provisions may differ before it is passed into law. The Cyber Resilience Act was introduced by the European Parliament in September 2022. Its purpose is to establish cybersecurity requirements for devices and software marketed in the EU. Everybody who places digital products in the EU market will be responsible for additional obligations around reporting and compliance, such as fixing discovered vulnerabilities, providing software updates, and auditing and certifying the products.

Read More »