2014-04-15

Heartbleed: Open source's worst hour | ZDNet

Heartbleed: Open source's worst hour | ZDNet



This is actually a very good essay. It is not an attack on open source, not a jeremiad, and it was written by someone who has been reporting on the phenomenon pretty much since it started. Rather, it is a call to attention.



Why, given open source's vaunted transparency to flaws and supposedly eager communities, did this serious flaw go so long unnoticed? Vaughan-Nichols:




I think I know why and I can sum it up with one phrase: "Magical Thinking." We think that because open source code can be more secure, it is more real secure. Wrong!
Everyone just assumed that OpenSSL must be perfectly safe because, well OpenSSL has a reputation for being safe, therefore it was safe. Developers, website developers, security experts, one and all, it seems no one ever thought to actually use those eyeballs that successful open source relies upon to check the code to see if it really was safe.
We were idiots.
We thought that because OpenSSL was open source that everyone was actually using open source methodology to make sure its code was correct. In reality, no one, after that initial approval years ago, ever bothered to check up to see if the code was both right and secure.
The open source method remains as good as ever when used correctly. When it's not, when we simply assume that all the t's have been crossed and the i's dotted, then we're relying upon faith and not testing and that's doesn't work for any program.

2014-01-10

EC recommends supporting open document format | Joinup

EC recommends supporting open document format | Joinup

The title says it, but to snip:

All European institutes should be able to use the Open Document Format (ODF) in exchanges with citizens and national administrations, says Vice-President of the European Commission Maroš Šefčovič, in response to questions by member of the European Parliament Amelia Andersdotter. "There is no lock-in effect whatsoever, and no contradiction with the Commission's strategy on interoperability."
---
"Generally, selecting a single, open standard is the best way to achieve interoperability and unrestricted re-use of public documents", says Brunet. 
"In our experience, ODF is not always fully supported by the European institutions in their external exchanges. For instance, EC public consultations are sometimes only released and/or answerable in PDF and Microsoft's version of OOXML. In such cases, ODF is supported only upon request and the documents may contain formatting errors. This is a problem for citizens and public administrations that choose to use an open standard for document editing."
 Official support
The Swiss Open Systems User Group welcomes the Commission's statement of support for ODF. Matthias Stürmer: "Although Switzerland is not a member state of the EU, we hope that the Swiss government and also the Swiss cantons follow this suggestion to officially support ODF documents."
Stürmer points to the country's highest court, the Federal Court, as an example. The court is using ODF for all of its electronic documents, and has been doing this for more than ten years. "This should help to convince other public administrations to also use ODF."

I find this really affirming. Yes, to be sure, it's policy not fact; yes, it's not stated what the path to enact it will be; yes, it's the case that we've seen versions of this before, even on a transnational level. But this policy declaration comes at a time when the idea of a monopoly on the desktop--Microsoft's and its formats--is increasingly seen as close to irrelevant. That's not because Linux has won the hearts and keyboards of the world (or Europe). Nor is it because Apple's OS X has. It's because the mobile environment is seen as pretty much the future environment. That's not to say that the desktop is about to follow the word processor and typewriter, nor is it to declare that we must all get used to using cramped virtual keyboards on small smudgy screens. But it is to say that the mobile devices that will come in the next few years will be replacing--and also adding elements none of us can really foresee--that 20th century icon, the desktop.

But for this kind of future to work, where documents of whatever sort can be created and shared among mobile and desktop devices, requires open standards. An open standard does not lock the user or buyer into a particular vendor's brand. One can use either open source or not, however one wishes. ("One" including the enterprise class buyer.) It means, too, that municpalities--all polities, really--need to be mindful of the software choices they make. By this, I don't mean to suggest that there should be a disruption of purchasing, which is asking for trouble and intractability. It would also be difficult to plan future purchases and maintenance if the applications and their status were always uncertain. (Let alone ask for reasonable support and training.)

Rather, an emphasis on open standards and applications implementing them to an agreed-upon degree would provide both for application flexibility as well as device interoperability.

But what mobile devices actually support ODF editing today? (I mean natively, not just via HTML5 or equivalent.)

The Open-Office Trap

The Open-Office Trap : The New Yorker

It's a good summary of what most of us who have worked in an open office experienced. And, interesting to me, at least, is that the article's photo looks a lot like my old workplace, CollabNet, which moved to a rather beautiful open-office concept back in November 2001. Now, I mostly work from home, out of an office that is fairly sequestered, fairly isolated from the usual family distractions, and on the second floor, so I am not too distracted by making tea, coffee, food. But I just wish that the construction surrounding our little street in Toronto would stop.

The Power of the Commons-based Crowdfunding: Goteo 2013 in Review

P2P Foundation's blog » Blog Archive » The Power of the Commons-based Crowdfunding: Goteo 2013 in Review