Conferences and events this week with STF's co-founders, great ways to hear about our mission and ideas:
🗓 Tuesday, 4 June 2024: Adriana Groh will be at the APELL (the European Open Source Software Business Association) conference in Berlin, speaking on the panel “Engage in Open Source Policy Discourse: Past, Present, and Future” with @OpenForumEurope's Astor Nummelin Carlberg, APELL’s Peter Ganten, moderated by @OSBA's Miriam Seyffarth https://apell.info/conference/
🗓 Wednesday 5 June 2024: Adriana and @krakenbuerger will be participating in the @NGICommons 's Strategic Advisory Panel’s workshop “Co-Creating Digital Commons Priorities for Europe's Digital Decade” in Amsterdam convened by @openfuture.
🗓 💻 Also on Wed 5 June 2024, @krakenbuerger and @mirkoboehm (@linuxfoundation Europe) are speaking at Upstream with Tidelift’s @luis_in_brief "Government carrot, government stick: Exploring two contrasting approaches to improving open source security"
We’re excited to share details about STF’s investment in @gnome to improve accessibility, tooling, and security for the Linux desktop ecosystem. Learn more about the comprehensive plan to modernize the platform and support features in the public interest:
Open source software is a critical part of our national security infrastructure, but one that government is entirely neglecting. Federal agencies rely on OpenSSL, liblzma, etc. just as much as the private sector.
We need a division of federal government whose job isn’t to find and exploit security holes (like the NSA), but fix them. A sort of a national security agency, but that actually does…that.
@luis_in_brief@jacob@waldoj Could you elaborate on what you mean by “never made it to their radar”? Maintainers can apply through a light-weight process, and we also scout and reach out to critical technologies. May be a good topic for Upstream with @krakenbuerger in June.
On the #EUOpenSource panel on security and resilience, STF's @krakenbuerger has four main points:
“The infrastructure that we base all modern society on is neither sustainable nor healthy; it’s a threat for any security concept. It doesn’t work without securing these core technologies”1/4
@krakenbuerger "For any kind of regulation that affects open source developers, it can’t be an afterthought in how we support them in complying with these rules. They don’t owe us anything, they’re not our suppliers. We can’t create a hazardous environment for them to develop in." 2/4 #EUOpenSource
@krakenbuerger On AI and automation: “AI-powered tools can be very effectively used by developers. We would be well-advised to look into how reliability and security are affected. It’s going to impact how code is written, evaluated, and even how bug reports are submitted.”
“There are not enough people in the space, and this is a hazard and a structural issue. It’s our responsibility to think about how we can grow in a reasonable and sustainable way.” 3/4 #EUOpenSource
@krakenbuerger On trustworthiness: “There’s nothing inherently trustworthy or untrustworthy about open source. It’s like asking whether we should trust water. There are ways to make water trustworthy. We can filter it, we can process it, we can put processes in place to make it safe and usable.” 4/4 #EUOpenSource
Wir stellen jetzt die ausgewählten FOSS-Teams der STF #ContributeBackChallenges vor! 70 Anträge aus 20 Ländern wurden eingereicht; Vorhaben im Gesamtwert von 9,8 Mio. € wurden vorgeschlagen. Hier sind die 9 Projekte, die insgesamt 1,3 Mio. € für Arbeiten in drei Bereichen erhalten.
Die dritte der #ContributeBackChallenges ist die „Dokumentation der FOSS-Infrastruktur“, bei der es darum geht, umfassende Dokumentation für die kritischsten und meistgenutzten FOSS-Infrastrukturprojekte zu erstellen.
OpenPGP dient als Baustein für sichere persönliche Kommunikation, unter anderem in E-Mail- und Messaging-Software. Dieses Projekt stellt eine OpenPGP-Dokumentation für Programmierer:innen von Applikationen bereit, um für die kommende „OpenPGP crypto-refresh”-Version des Standards gewappnet zu sein. @hko
Organisation & Barrierefreiheit von p5.js Dokumentation https://p5js.org
p5.js ist eine kostenlose Open-Source-JavaScript-Bibliothek für kreatives Programmieren, die vor allem Kunstschaffende, Designer:innen, Lehrkräfte und Anfänger:innen auf die Technologie einladen will. Die Bibliothek und die Community ermöglichen es jeder Person, interaktive Elemente zu erstellen, wobei ein besonderes Augenmerk auf Barrierearmut gelegt wird.