I’m running for OpenSSF TAC, as an independent, in an election that any OpenSSF participants are eligible to vote in. If you’ve been active in OpenSSF, I’d appreciate your vote. The election is open until 30 December. If you’d like to know more background, read on. In Summer 2022, I joined Snyk and became involved with the Open Source Security Foundation – the OpenSSF. The OpenSSF is a Linux Foundation off-shoot which focuses on … well … Open Source Security – and specifically on “software supply chain” security. My philosophy when it comes to open source foundations and governance bodies like this is that if you want to be involved then it’s best to do so proactively – to jump in with both feet. That is one reason why, in late 2022, I put myself forward as a candidate for OpenSSF’s Technical Advisory Council.  Given the fact that I’ve been impacted in a recent round of lay-offs at Snyk, you might wonder why am I still involved in this organization and why have I once again put myself forward for OpenSSF TAC election this year? Since becoming involved with this community, with this part of the open source ecosystem, I’ve become convinced of the importance of this way of thinking about open source software. I still believe what I wrote in 2022: “This web of software that we all rely on so much is under constant attack.” The more developers are empowered and supported to mitigate against software security issues during the development process, the stronger the defence against this …

Why Am I Running for OpenSSF TAC? Read more »

In navigating the landscape of technology and digital innovation, we often find ourselves having to deal with complex concepts that cross between the technical, policy and legal domains. We hear words like “open source”, “open data”, and “open standards” thrown around, each with its attached notions of transparency, accessibility, and collaboration. However, these concepts aren’t as interchangeable as they might seem, and it’s crucial to understand the different rules that govern each. Bear in mind too that the term “IP” or “intellectual property” is really a catch-all term for a bag full of different types of rights, including copyright (which can apply to software, as a so-called literary work), database rights, patents, trade marks, and more. As someone who has served as an Open Source & Open Standards Strategy Director, worked for the Open Data Institute, and sat on the Open Standards Board for the UK Government, I’ve seen first-hand the nuances that define and differentiate these domains. This understanding is crucial as we cannot simply transfer licenses or IP guidelines from one sphere to another, owing to their unique features and scopes. This post was prompted by a few examples I’ve seen this year where people are either misunderstanding the differences between these domains, or conflating them. Having said all that: I am not a lawyer. This is not legal advice. I did not say this. I am not here. Open Source licenses: Code Reuse The term “open source” generally refers to a type of software whose source code is accessible to the public, allowing …

What’s the deal with Open Source, Open Data, and Open Standards licenses? Read more »

One of the most exciting projects I’ve been involved with this year has been the launch of Vodafone Betavine. Betavine is a collaborative portal for the developer community focusing on mobile and communications apps. Although mobile operators have launched developer sites in the past, Betavine is different because it’s aimed at individual, small company and student developers – the real grass roots. It’s also the first Vodafone group Web site to feature a blog, user-generated content. Betavine is now launching three exciting features: student competitions, APIs and the open source zone. The competition offer students the opportunity to win up to €5000 just for developing and uploading an innovative application in one of four categories (Social Networking & Communications, Information & Entertainment, Office & B2B and Social Impact). Very cool stuff. The API section (which will be previewed at JavaOne next week by Stephen Wolak, the pioneering soul behind the Betavine initiative) will feature, well, APIs. APIs into network functions, such as location and messaging functions, have been something small company developers have been asking about for years. The Betavine APIs will be initially provide SMS messaging, WAP push and access to Betavine itself (to allow for Betavine mashups). Watch the site for the launch and to find out more details. Finally, the open source counterpart to Betavine has now launched: Vodafone Betavine Forge. This is a fully functional open source community site featuring CVS, bug tracking, etc… the whole shebang. Along with the launch of the site are three internal Vodafone open source projects that …

Betavine Continues to Ripen Read more »