Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Lyon Drops Microsoft to Boost Digital Sovereignty

digitrendz.blog

Post reply on HN
Print view View original

31–40 of 102 posts

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#31

Post by kergonath »

amelius wrote: post #15

It would be fair if we'd see an increase in government funding of open source projects. Or at least the government could pay for security audits.

I think you are not familiar with how governments work. They are not going to rely on a random git repo, they are going to have contractors to ensure a basic level of support and bug fixing. And some contractors to ensure development and availability of tooling. And deployment and integration. They are also going to test, audit and validate updates, not just pull from remote.

Also, in some cases there are research agencies doing some work as well (sometimes they have been doing it for a long time on not-so-sexy but vital projects like Inria and the open source tax code in France).

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#32

Post by amelius »

guappa wrote: post #29
amelius wrote: post #27

Earlier quoted context omitted.

CS students are not expected to do security audits in production software. And if they do, it will certainly not be exhaustive. Nor will it be at a pace in which software is typically released.

It's funny that you think proprietary code is audited.

Well, I suppose there is a tighter control on who is allowed to commit.

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#33

Post by eigenspace »

tormeh wrote: post #17

Schleswig-Holstein and Thuringia are switching to OpenTalk for teleconference. It's really wild to see things actually happen - not just research grants and talking.

It's *almost* like those research grants and talking laid some groundwork ;)

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#35

Post by Muromec »

tormeh wrote: post #22
amelius wrote: post #15

It would be fair if we'd see an increase in government funding of open source projects. Or at least the government could pay for security audits.

Governments don't generally get Bob from accounting to install it on a spare laptop they have lying around. There's a contractor involved that will also be tasked with fixing bugs and other improvements and change requests. As long as the software is GPL improvements will flow back upstream somehow.

Sometimes the contractor is a different department of the same government or a state enterprise. The point is -- somebody has to own the risk

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#36

Post by notarobot123 »

eigenspace wrote: post #33
tormeh wrote: post #17

Schleswig-Holstein and Thuringia are switching to OpenTalk for teleconference. It's really wild to see things actually happen - not just research grants and talking.

It's *almost* like those research grants and talking laid some groundwork ;)

sure, but international politics was probably a little more than the straw that broke the camel's back.

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#37

Post by madaxe_again »

buyucu wrote: post #24

I said this before, but will say it again: Trump is pure evil, but he is having positive (unintended) consequences. One of them will be is the migration he is triggering away from Big Tech.

Everyone is either pure good or pure evil now, huh? Red team or blue team, compromise is anathema, the centre a desert.

FWIW I’m no fan of Trump, but I’m even less of a fan of this bipolar tribalism.

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#38

Post by sodimel »

sylware wrote: post #26
sodimel wrote: post #4

Earlier quoted context omitted.

We generate pdf files using weasyprint (convert html+css into cool pdf files), I think tools like this are very valuable and practical for building higher-level pdf-generators tools.

Yep, in-house PDF generators should be some sort of good middle ground, but I dunno if this 'weasyprint' is open source, is _lean_ open source? (no c++, java, etc). When dealing with an ultra-complex file format which cannot be dodged, usually a good way to deal with it is to only use a very simple but coherent subset and enforce this usage with validation tools. For instance, the web, noscript/basic (x)html (or you…

You can learn more about weasyprint on their website (https://weasyprint.org/ ). It's an open source Python package that can be launched using cli or from Python code. It uses pypdf, which is "pydyf is a low-level PDF generator written in Python and based on PDF specification 1.7" (from their README at https://github.com/CourtBouillon/pydyf ).

Re: Lyon Drops Microsoft to Boost Digital Sovereignty

#40

Post by bboygravity »

Muromec wrote: post #35
tormeh wrote: post #22

Earlier quoted context omitted.

Governments don't generally get Bob from accounting to install it on a spare laptop they have lying around. There's a contractor involved that will also be tasked with fixing bugs and other improvements and change requests. As long as the software is GPL improvements will flow back upstream somehow.

Sometimes the contractor is a different department of the same government or a state enterprise. The point is -- somebody has to own the risk

I thought that in government everybody and thus nobody owns the risk?
Post reply on HN