Stories
Slash Boxes
Comments

SoylentNews is people

posted by janrinok on Saturday February 11, @07:54PM   Printer-friendly
from the still-milking-log4j-for-politics dept.

The Atlantic Council has published a policy report entitled "Avoiding the success trap: Toward policy for open-source software as infrastructure". It addresses the idea of Open Source Software (OSS) as essential infrastructure. OSS differs from physical infrastructure yet supports critical functions, provides dependable services, offers subtle and often unseen service delivery, and functions through decentralized control.

This report aims to develop tangible example policies for the United States and European Union to support OSS as infrastructure and point policymakers toward existing policy vehicles that government can readily modify and adopt to better support and engage with the OSS ecosystem. The report does not seek to make definitive statements about what open source is or is not through these analogies. Rather the goal is to capture a snapshot of its most essential features and most consequential participants. Any of the analogies can be extended far past usefulness, and policymakers should approach each keeping in mind the essential truth that, while all models are wrong, some (including, we believe, these) are useful, nonetheless. Before diving into the analogies though, this report looks to discuss the open-source ecosystem as it is, highlighting key principles and addressing common misconceptions.

[...] None of this report reflects a belief that OSS is inherently insecure, but rather that it is uniquely central to modern digital systems and that relationships with the OSS community are necessarily, and substantively, different than those government has grown accustomed to with industry and industry within itself. Sustainable use emphasizes the user responsibility for much of the risk associated with software use, including OSS, and addresses OSS-specific features of development and contribution possibly only with open-source code. Addressing systemic risk is an important step for policy efforts to support the security and sustainability of OSS projects with an accurate picture of the considerable interdependency between code bases. Finally, governments must step up to support OSS as the infrastructure that it is. These resources should come alongside expanded private sector support and can manifest in targeted formats as well as a more general support model, the OSS Trust. OSS is infrastructure, and the provision of support for it as such will permit more rapid adoption and considerable innovation in even critical domains of economic and government activity.

So it seems that the establishment continues to turn its jaundiced eye towards software development.

Previously:
(2023) Opinion: FOSS Could be an Unintended Victim of EU Security Crusade
(2022) Honoring Peter Eckersley, Who Made the Internet a Safer Place for Everyone
(2022) Open Source Community Sets Out Path to Secure Software


Original Submission

 
This discussion was created by janrinok (52) for logged-in users only, but now has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 3, Interesting) by bloodnok on Saturday February 11, @10:08PM (4 children)

    by bloodnok (2578) on Saturday February 11, @10:08PM (#1291321)

    ...So it seems that the establishment continues to turn its jaundiced eye towards software development.

    The comment seems to imply that there is something to be dismayed about in this report but I fail to see it. Please enlighten me.

    __
    The major

    Starting Score:    1  point
    Moderation   +1  
       Interesting=1, Total=1
    Extra 'Interesting' Modifier   0  
    Karma-Bonus Modifier   +1  

    Total Score:   3  
  • (Score: 2) by Mojibake Tengu on Sunday February 12, @12:28AM (3 children)

    by Mojibake Tengu (8598) on Sunday February 12, @12:28AM (#1291327) Journal

    "The Atlantic Council..." is like a neon sign on a sex shop. Says everything.

    So, the report itself is conveying an elitist lament overflowing with veiled sentiments "We failed to hold tight grip on whole industry segment so the technology is now leaking here and there and everywhere even to adversaries without monetization. What a tremendous loss of money and power! We need to reinvent something to govern it back under control!".
    That's why "success is a trap" by them.

    They only realized their former conceptual error made of greed. Just ignore them. They are not humans anyway. Not in the sense of human morality. They are heading to irrelevance and they know it.

    --
    The edge of 太玄 cannot be defined, for it is beyond every aspect of design
    • (Score: 2, Interesting) by Anonymous Coward on Sunday February 12, @01:08AM (2 children)

      by Anonymous Coward on Sunday February 12, @01:08AM (#1291329)

      > They are heading to irrelevance and they know it.

      Did you look at the board and advisors to the Atlantic Council? A list is here,
            https://en.wikipedia.org/wiki/Atlantic_Council#Leadership [wikipedia.org]
      Dozens of heavy hitters from international finance, military, gov't, academia, media, philanthropy (big old money) and other think tanks--all with wikipedia pages about them. In general, it looks like they are from both major parties, but most all could probably be called "centrist". And all meeting to discuss matters of interest on a regular basis. If they are "heading to irrelevance", it won't be any time soon.

      I read the intro to the main article linked in tfa and what it looks like to me is that they got caught off guard. Someone finally noticed that the software running things was mostly OSS of one kind or another.

      • (Score: 3, Interesting) by Anonymous Coward on Sunday February 12, @03:00AM (1 child)

        by Anonymous Coward on Sunday February 12, @03:00AM (#1291345)

        I thought about this a little more. The kind of soft power at the Atlantic Council looks pretty scary. But since they are just learning about the software community they may still be malleable? What if someone put a bug in their ear about systemd and how it messes up Linux for the community? And how the strength of Linux and the Unix way is historically based on many small, easily debugged modules.

        These people at the Atlantic Council are the sorts that could call up their friends at the top of IBM and say something like, tell your Red Hat bunch to stop this crap with systemd. We don't think it's a good idea to turn Linux into another monolithic system like Windows.

        A little ways into the linked article mentions a survey they ran and this appendix describes it, https://www.atlanticcouncil.org/in-depth-research-reports/report/open-source-software-as-infrastructure/#appendix [atlanticcouncil.org]

        As part of this report, the Atlantic Council and the Open Source Policy Network distributed an anonymous survey to several OSS governance, policy, and security communities, including through the OpenSSF’s general Slack channel and Open Forum Europe’s email forum. The survey, which was open from November 20, 2022, through January 8, 2023, aimed to gather attitudes on OSS policy and security from OSS maintainers, developers, and stakeholder communities closer to the problem set than policymakers in Brussels or DC. Despite being open to over two thousand potential respondents, the survey only achieved a sample size of forty-six, limiting the insight into community priorities that it could provide. Nonetheless, there were some noteworthy trends in the responses, and the Atlantic Council and Open Source Policy Network will continue to gather outside perspectives and sentiment trends in this manner.

        Only 46 responses, but they charged ahead and based this initial briefing on OSS on them anyway. These are people that want to dig, it's time to start feeding them some data.

        • (Score: 3, Informative) by canopic jug on Sunday February 12, @04:03AM

          by canopic jug (3949) Subscriber Badge on Sunday February 12, @04:03AM (#1291347) Journal

          Only 46 responses, but they charged ahead and based this initial briefing on OSS on them anyway.

          It's almost like they wanted to be able to say they sought, and got, input without actually having done so.

          --
          Money is not free speech. Elections should not be auctions.