11–20 of 32 posts
See also: https://publiccode.eu
Anything funded with public money should have same proportion going back to the public (the organization running the area which funded it).
For example: a 100% EU money funded innovation should be free for everyone to use within EU and outsiders should license a patent.
50% public funding from state of Norway, then state of Norway has 50% ownership.
And so on.
See also: https://publiccode.eu
Why only code? Anything funded with public money should have same proportion going back to the public (the organization running the area which funded it). For example: a 100% EU money funded innovation should be free for everyone to use within EU and outsiders should license a patent. 50% public funding from state of Norway, then state of Norway has 50% ownership. And so on.
Earlier quoted context omitted.
> Realistically there's no reason government can't use open source software and open formats especially. > Last time I had to fill out a government form in Canada (...) Without any evidence, let me argue why maybe it shouldn't. In the past, a common opinion that I have heard is that open source is more secure because all the code is out in the open. The recent xzutils backdoor attempt [1] kind of led me to believe it…
Microsoft has literally been hacked multiple times by Russia in the last few years. Our government lost hundreds of thousands of CRA (tax agency) credentials to hackers and had to lock millions of accounts. Other agencies have also been breached. Meanwhile the XZ backdoor was found in Sid, Arch and pre-releases of Fedora and openSuse. It never actually made it into any numbered release of Fedora, openSuse, Ubuntu, De…
I would maybe not go quite that far. That it got caught was mostly a confluence of lucky breaks and accidents. The second version of the exploit would likely have not been detected if not for the fact that the first version of the exploit had a couple of programming mistakes that attracted some attention to itself.
Earlier quoted context omitted.
Microsoft has literally been hacked multiple times by Russia in the last few years. Our government lost hundreds of thousands of CRA (tax agency) credentials to hackers and had to lock millions of accounts. Other agencies have also been breached. Meanwhile the XZ backdoor was found in Sid, Arch and pre-releases of Fedora and openSuse. It never actually made it into any numbered release of Fedora, openSuse, Ubuntu, De…
>Meanwhile the XZ backdoor was found in Sid, Arch and pre-releases of Fedora and openSuse. It never actually made it into any numbered release of Fedora, openSuse, Ubuntu, Debian, Red Hat or Suse distro. It's actually a pretty big win and the system worked as intended. I would maybe not go quite that far. That it got caught was mostly a confluence of lucky breaks and accidents. The second version of the exploit would…
It was caught before any distro released with it. The system worked.
Earlier quoted context omitted.
> Realistically there's no reason government can't use open source software and open formats especially. > Last time I had to fill out a government form in Canada (...) Without any evidence, let me argue why maybe it shouldn't. In the past, a common opinion that I have heard is that open source is more secure because all the code is out in the open. The recent xzutils backdoor attempt [1] kind of led me to believe it…
Every country already has a special government agency that deals with keeping stuff protected. In fact you tend to think the people who know most about this are in government, don't you? And it's not like there haven't been vulnerabilities found in proprietary software, despite them paying people to keep things safe.
I would also argue that you could take all the $$ paying for proprietary software and contribute it to people who are making the open source software, making the reliance on "free" eyeballs less of an issue.
See also: https://publiccode.eu
Europe: https://www.europarl.europa.eu/petitions/de/home
Germany: https://epetitionen.bundestag.de/epet/startseite.nc.html
Earlier quoted context omitted.
>Meanwhile the XZ backdoor was found in Sid, Arch and pre-releases of Fedora and openSuse. It never actually made it into any numbered release of Fedora, openSuse, Ubuntu, Debian, Red Hat or Suse distro. It's actually a pretty big win and the system worked as intended. I would maybe not go quite that far. That it got caught was mostly a confluence of lucky breaks and accidents. The second version of the exploit would…
The entire thesis behind the open source security model is to have lots of eyes on the code/program, since more eyes = more likelihood of catching it. Even if you say it's accidental, let's say the odds of catching it are 0.00001. Repeat that enough times and you get 1. It was caught before any distro released with it. The system worked.
This really seems to be obvious. Brazil has such a legislation[0]. However, the code for the important payment service called Pix, developed by the Brazilian Central Bank, is nowhere to be seen. Laws alone are not enough. [0] https://www.gov.br/governodigital/pt-br/plataformas-e-servic...
Are there government functions which CANNOT be done on Linux or LibreOffice?
Look at berlin / ms