The Atlantic Council has published a policy report entitled "Avoiding the success trap: Toward policy for open-source software as infrastructure". It addresses the idea of Open Source Software (OSS) as essential infrastructure. OSS differs from physical infrastructure yet supports critical functions, provides dependable services, offers subtle and often unseen service delivery, and functions through decentralized control.
This report aims to develop tangible example policies for the United States and European Union to support OSS as infrastructure and point policymakers toward existing policy vehicles that government can readily modify and adopt to better support and engage with the OSS ecosystem. The report does not seek to make definitive statements about what open source is or is not through these analogies. Rather the goal is to capture a snapshot of its most essential features and most consequential participants. Any of the analogies can be extended far past usefulness, and policymakers should approach each keeping in mind the essential truth that, while all models are wrong, some (including, we believe, these) are useful, nonetheless. Before diving into the analogies though, this report looks to discuss the open-source ecosystem as it is, highlighting key principles and addressing common misconceptions.
[...] None of this report reflects a belief that OSS is inherently insecure, but rather that it is uniquely central to modern digital systems and that relationships with the OSS community are necessarily, and substantively, different than those government has grown accustomed to with industry and industry within itself. Sustainable use emphasizes the user responsibility for much of the risk associated with software use, including OSS, and addresses OSS-specific features of development and contribution possibly only with open-source code. Addressing systemic risk is an important step for policy efforts to support the security and sustainability of OSS projects with an accurate picture of the considerable interdependency between code bases. Finally, governments must step up to support OSS as the infrastructure that it is. These resources should come alongside expanded private sector support and can manifest in targeted formats as well as a more general support model, the OSS Trust. OSS is infrastructure, and the provision of support for it as such will permit more rapid adoption and considerable innovation in even critical domains of economic and government activity.
So it seems that the establishment continues to turn its jaundiced eye towards software development.
Previously:
(2023) Opinion: FOSS Could be an Unintended Victim of EU Security Crusade
(2022) Honoring Peter Eckersley, Who Made the Internet a Safer Place for Everyone
(2022) Open Source Community Sets Out Path to Secure Software
(Score: 3, Interesting) by bloodnok on Saturday February 11, @10:08PM (4 children)
The comment seems to imply that there is something to be dismayed about in this report but I fail to see it. Please enlighten me.
__
The major
(Score: 2) by Mojibake Tengu on Sunday February 12, @12:28AM (3 children)
"The Atlantic Council..." is like a neon sign on a sex shop. Says everything.
So, the report itself is conveying an elitist lament overflowing with veiled sentiments "We failed to hold tight grip on whole industry segment so the technology is now leaking here and there and everywhere even to adversaries without monetization. What a tremendous loss of money and power! We need to reinvent something to govern it back under control!".
That's why "success is a trap" by them.
They only realized their former conceptual error made of greed. Just ignore them. They are not humans anyway. Not in the sense of human morality. They are heading to irrelevance and they know it.
The edge of 太玄 cannot be defined, for it is beyond every aspect of design
(Score: 2, Interesting) by Anonymous Coward on Sunday February 12, @01:08AM (2 children)
> They are heading to irrelevance and they know it.
Did you look at the board and advisors to the Atlantic Council? A list is here,
https://en.wikipedia.org/wiki/Atlantic_Council#Leadership [wikipedia.org]
Dozens of heavy hitters from international finance, military, gov't, academia, media, philanthropy (big old money) and other think tanks--all with wikipedia pages about them. In general, it looks like they are from both major parties, but most all could probably be called "centrist". And all meeting to discuss matters of interest on a regular basis. If they are "heading to irrelevance", it won't be any time soon.
I read the intro to the main article linked in tfa and what it looks like to me is that they got caught off guard. Someone finally noticed that the software running things was mostly OSS of one kind or another.
(Score: 3, Interesting) by Anonymous Coward on Sunday February 12, @03:00AM (1 child)
I thought about this a little more. The kind of soft power at the Atlantic Council looks pretty scary. But since they are just learning about the software community they may still be malleable? What if someone put a bug in their ear about systemd and how it messes up Linux for the community? And how the strength of Linux and the Unix way is historically based on many small, easily debugged modules.
These people at the Atlantic Council are the sorts that could call up their friends at the top of IBM and say something like, tell your Red Hat bunch to stop this crap with systemd. We don't think it's a good idea to turn Linux into another monolithic system like Windows.
A little ways into the linked article mentions a survey they ran and this appendix describes it, https://www.atlanticcouncil.org/in-depth-research-reports/report/open-source-software-as-infrastructure/#appendix [atlanticcouncil.org]
Only 46 responses, but they charged ahead and based this initial briefing on OSS on them anyway. These are people that want to dig, it's time to start feeding them some data.
(Score: 3, Informative) by canopic jug on Sunday February 12, @04:03AM
Only 46 responses, but they charged ahead and based this initial briefing on OSS on them anyway.
It's almost like they wanted to be able to say they sought, and got, input without actually having done so.
Money is not free speech. Elections should not be auctions.