- opensource-wg - mailman.ripe.net

RV: [ripe-list] Announcing Green Tech Hackathon: in December, in Amsterdam (& online)
by Marcos Sanz 28 Aug '24

28 Aug '24

FYI. Sorry for cross-posting. > -----Mensaje original----- > De: Vesna Manojlovic @ RIPE.net <becha(a)ripe.net> > Enviado el: martes, 27 de agosto de 2024 12:24 > Para: ripe-list(a)ripe.net > Asunto: [ripe-list] Announcing Green Tech Hackathon: in December, in > Amsterdam (& online) > > Dear colleagues, > > Join the next RIPE NCC hackathon focused on Green Tech this December! > Our goals are to develop tools, policies and protocols to reduce the > environmental impact of Internet infrastructure. > > RIPE NCC hackathons are non-commercial and non-competitive. We focus on > cooperation and openness - all the code produced is FLOSS, and all the > results are published on public software repositories, wikis, and on > blogs to help others further create, experiment, and develop ideas and > tools. > > Please find more information in this RIPE Labs article: > https://labs.ripe.net/author/becha/announcing-the-green-tech-hackathon/ > > Direct link to application form: > https://www.ripe.net/participate/forms/apply/green-tech-20234/ > > Regards, > Vesna Manojlović > > -- > Senior Community Builder > RIPE NCC > > > ----- > To unsubscribe from this mailing list or change your subscription options, > please visit: https://mailman.ripe.net/mailman3/lists/ripe-list.ripe.net/ > As we have migrated to Mailman 3, you will need to create an account with > the email matching your subscription before you can change your settings. > More details at: https://www.ripe.net/membership/mail/mailman-3- > migration/

1 0

"The European Union must keep funding free software", open letter to EU about NGI
by Vesna Manojlovic ＠ RIPE.net 22 Jul '24

22 Jul '24

Dear community, this is an open letter, published by more than 42 organisations & individuals, as a reaction to the announcements by EU to stop funding NGI: https://pad.public.cat/lettre-NCP-NGI Next Generation Internet (NGI) programmes, since 2020 part of European Commission's Horizon programme, fund free software in Europe . This year, according to the Horizon Europe working draft detailing funding programmes for 2025, NGI is not mentioned any more as part of Cluster 4. Therefore, I share this call with RIPE community, to gather support & influence EU to keep on funding free software. Regards, Vesna Manojlovic -- Senior Community Builder RIPE NCC

1 0

RIPE88 open source WG meeting minutes
by Sasha Romijn 13 Jun '24

13 Jun '24

Hello all, The minutes for our meeting at RIPE88 have now been published: https://www.ripe.net/community/wg/active-wg/os/minutes/open-source-working-… Please let the chairs know if you have any comments. Thanks to Sean Mottles and other RIPE NCC staff for taking and editing them. Sasha

1 0

Final reminder for RIPE88 lightning talks
by Sasha Romijn 20 May '24

20 May '24

Hello all, We look forward to our session this Thursday afternoon at RIPE88! Meanwhile, I wanted to remind you that we still have space for lightning talks. If you would like to present a short update on your RIPE-related open source project, or have something else to share that is relevant to the group, please send a short message to opensource-wg-chairs(a)ripe.net by noon CEST tomorrow. Talks will be selected on Tuesday afternoon. Marcos Sanz & Martin Winter & Sasha Romijn

1 0

Open-source Software Risk Mitigation Practices survey
by Sasha Romijn 15 May '24

15 May '24

Hello all, As you can see on the agenda, Petr Špaček from ISC will do a talk on Open-source QA in our RIPE88 session. They’ve set up a survey on this subject, and we encourage you all to submit: https://ec.europa.eu/eusurvey/runner/RIPE88OpenSourceWGSurvey The data from this survey will serve as input for both the presentation and the discussion we can have afterwards. Looking forward to insightful discussions from your survey input! Best regards, Marcos Sanz & Martin Winter & Sasha Romijn Open-source WG chairs

2 1

Credit and contributions policy guide launches May 20
by Valerie Aurora 14 May '24

14 May '24

Hi all, I'm happy to say that, thanks to Maria Matějka, the guide to creating a contributions and credit policy is up on GitHub and ready for PRs: https://github.com/contribution-credit/policy Feel free to share this starting now, but the "official" launch will be May 20, when Linux Weekly News publishes an article on the policy guide. We are open to improvements of all sorts, and especially additions to the list of projects that already have such a policy: https://github.com/contribution-credit/policy/blob/main/policies.md And of course you can check out our own contributions and credit policy :) https://github.com/contribution-credit/policy/blob/main/CONTRIBUTING.md Thanks again to Maria Matějka for many contributions, edits, structural improvements, and creating the GitHub repo, Marcos Sanz and Martin White for early support and important input, and many others from the OS WG for their input. If you'd like to add yourself as a named contributor or update your entry on the credits, please do! Valerie

1 1

Draft agenda open source wg RIPE 88
by Marcos Sanz 10 May '24

10 May '24

Dear all, Please find attached the draft agenda for the upcoming open source working group meeting during RIPE 88. It will soon be online. As always, we'd still welcome any lightning talks! No formal submission is required ahead of RIPE 88, but please send a short message to the chairs by noon on Tuesday of the meeting week. Talks will be selected on Tuesday afternoon. Best regards, Martin Winter & Sasha Romijn & Marcos Sanz Open Source WG Chairs -- Thursday, 23rd May, 14:00-15:30 CEST * Administrivia * Chair selection process review (Martin Winter, co-chair) * Open-source QA process (Petr Špaček, Internet Systems Consortium) Speculative session with WG participant survey & open mic discussion about how WG sees open-source Q&A processes. We will compare wishes of the WG with real example of what is being done today around BIND DNS server. * Contribution and credits policy for open-source projects (Maria Matejka, BIRD | CZ.NIC) After RIPE 87 in Rome, several people thought more about contributing to open-source software and crediting people. We created a template or example how a policy on contributions and credits may look like, and it's ready for use. * Lightning talks * AOB --

1 0

Register for RIPE NCC Training Courses: Zagreb, Croatia: 15-16-17 May 2024.
by Vesna Manojlovic ＠ RIPE.net 30 Apr '24

30 Apr '24

Dear colleagues, We invite you to register for the the RIPE NCC*LIR,**RIPE Database and BGP Routing Security Training Course* which will take place in *Zagreb* on *15-16-17 May 2024*. : https://learning.ripe.net For each of those topics, we promote Free/Libre & Open Source tools to help you in your work. Our training courses are free of charge and *delivered* in *English*. Trainers will be Gerardo Viviers and Ralph Smit. If you have already benefitted from a RIPE NCC training, we encourage you to share this email with your colleagues who might be interested in attending our courses. *General Information:* ------------------- Register to attend your chosen course(s) through our learning platform: https://learning.ripe.net We have a limited number of places, and registration will close once we are at capacity. The course includes lunch and printed training materials. If you have any questions, please contact learning(a)ripe.net. We are looking forward to seeing you in Zagreb! Kind regards, RIPE NCC Learning and Development (& Vesna, your link between RIPE NCC Croatia ;-) ======= *LIR Training Course:* ------------------ Date: *Wednesday, 15 May 2024* Time: 09:00-17:30 local time Hosted by: Carnet <https://www.carnet.hr/en/> at this location: Josipa Marohnića 5, 10 000 Zagreb <https://www.google.com/maps/place/Croatian+Academic+and+Research+Network+-+…> The *LIR Training Course* is a one-day introduction to the RIPE NCC's administrative procedures and RIPE Policies related to obtaining and distributing Internet resources (i.e. IP addresses, AS Numbers and reverse DNS delegation) and operating a Local Internet Registry (LIR). The course includes a basic introduction to the RIPE Database. You should attend this training course: if you are a staff member of a Local Internet Registry (LIR) in the RIPE NCC service region. For more information visit our: *Course information* and *registration page* <https://learning.ripe.net/w/courses/1-lir-training-course> === **RIPE Database Training Course*:* ---------------------------- Date: *Thursday, 16 May 2024* Time: 09:00-17:30 local time Hosted by: Carnet <https://www.carnet.hr/en/> at this location: Josipa Marohnića 5, 10 000 Zagreb <https://www.google.com/maps/place/Croatian+Academic+and+Research+Network+-+…> The *RIPE Database Training Course* is a one-day course. We'll make you a capable user of the RIPE Database. Mixing hands-on activities with theory, the course participants will get a comprehensive idea of what the RIPE Database is and what they can do with it. You should attend this training course if you are part of the staff of a Local Internet Registry (LIR) in the RIPE NCC service region, and need to register networks in the RIPE Database. You should attend this training course if you are part of the staff of a Local Internet Registry (LIR) in the RIPE NCC service region, and need to register networks in the RIPE Database. For more information visit our: *Course information* and *registration page* <https://learning.ripe.net/w/courses/2-ripe-database-training-course> === *BGP Routing Security Training Course:* ----------------------------- Date: *Friday, 17 May 2024* Time: 09:00-17:30 local time Hosted by: Carnet <https://www.carnet.hr/en/> at this location: Josipa Marohnića 5, 10 000 Zagreb <https://www.google.com/maps/place/Croatian+Academic+and+Research+Network+-+…> BGP Routing Security training course is a one-day course covering different aspects of the security of BGP protocol. The participant will gain insight and a high-level understanding of the need for security in BGP, the main threats it faces and the main security measures that can be applied nowadays. Some future developments on the topic will also be covered. The course includes theory and hands-on exercises. You should attend this training course if you are using, or plan to use, BGP in your network and want to know more about the potential threats and the security solutions available to make your BGP routing more secure. For more information visit our: *Course information and registration page* <https://learning.ripe.net/w/courses/34-bgp-routing-security-training-course…>

1 0

Invitation to RIPE NCC Open House Events – Community Projects Fund Recipients 2023
by Alastair Strachan 22 Apr '24

22 Apr '24

Dear Colleagues, We are pleased to invite you to participate in the upcoming RIPE NCC Open House events. If you are thinking of applying for the Community Projects Fund this year or want to get updates about the projects selected for the 2023 RIPE NCC Community Projects Fund, make sure you attend these sessions to gain insights into the progress, challenges, and future goals of the supported initiatives. During the sessions, recipients of the 2023 RIPE NCC Community Projects Fund will present detailed updates on their projects, summarising their journey thus far and their current advancements. Each presentation will be followed by a Q&A segment, offering you the chance to interact directly with the project teams and gain a deeper understanding of their work. https://www.ripe.net/membership/meetings/open-house/cpf-recipients-2024/ Session Schedule: First Session: April 26, 2024, 10:00 - 11:30 CEST (08:00 - 09:30 UTC) Thomas Holterbach: Designing the Next Generation of Public BGP Route Collection Infrastructures Tobias Fiebig: Measurement.network - Organizing Active Measurements Ioana Livadariu: SubZero - Monitoring the Deployment Impact of the Submarine Cable System Second Session: May 2, 2024, 10:00 - 11:30 CEST (08:00 - 09:30 UTC) Marcus Dansarie: : Secure Time for IoT Devices - Developing the Roughtime Proposed Standard Raffaele Sommese: Anycast Discovery - Daily Mapping the Anycast Landscape for Enhanced Internet Resilience Suelette Dreyfus and Richard Prospesel: Community Canary - Exploring Tor's Rust Implementation, Arti We encourage all members of the Internet technical community and anyone interested in the advancement of Internet infrastructure to attend these insightful sessions. Looking forward to your participation in fostering innovation and progress within our community. Kind Regards Alastair Strachan RIPE NCC

1 0

xz incident shows the need for structural change (in FLOSS maintenance & funding)
by Vesna Manojlovic 11 Apr '24

11 Apr '24

FYI: by Sovereign Tech Fund https://www.sovereigntechfund.de/news/xz-structural-change APRIL 4, 2024 BY ADRIANA GROH " xz incident shows the need for structural change" At Sovereign Tech Fund, we're following the xz incident closely and listening to the many voices in the FOSS maintainer community. There are clear signs that this is a sophisticated attack, but experts are still analyzing it, and it seems we won't know all the facts for a while. At this time, we don't want to point at any single cause and certainly don’t want to suggest a quick fix. We would, however, like to point out again the huge importance of digital infrastructure, which is regrettably overlooked and invisible to most of us. xz is merely the most recent example to illustrate how important the open source ecosystem is for all of us. At the same time, it shows very clearly how serious the structural issues are: for example, not enough new contributors, too few experienced contributors, too little recognition, and not enough (long-term) support from various stakeholders. One consequence is burnout among unpaid volunteers, which is unfortunately not a rare occurrence. If we keep ignoring these systemic issues, this house of cards will be our undoing (see our favorite xkcd comic). A great many companies and organizations incorporate and use critical open source components without ensuring that they are maintained and secured at all. We see this kind of maintenance as an undertaking that is in the public interest. It should not be the responsibility of unpaid volunteers alone, nor should it rest wholly on the private sector. It's a task whose importance society as a whole needs to acknowledge, and should be prioritized accordingly. As we saw with Heartbleed (2014), Log4Shell (2021) and other incidents, foundational open source technologies are essential parts of modern digital infrastructure. They underpin all (not just digital) endeavors, both in the public and private sectors. Just as physical infrastructure like roads, railways, and water systems are constantly being maintained, these digital components also need to be serviced and updated in order to serve as the foundation for digital sovereignty, a successful economy, and a resilient democratic society. Since the creation of the Sovereign Tech Fund, we have been exploring different support mechanisms to fulfill our mission of supporting the development, improvement, and maintenance of open digital infrastructure. We are currently working on more ways to tackle these challenges. Financial support for the people behind the code is a good first step and an important building block. However, to increase the long-term success of our mission, complementary and reinforcing mechanisms are needed. We are in contact with maintainers and FOSS communities as we develop and test these additional mechanisms. Our areas of focus include improving software maintainability, increasing bug resilience, better developer tooling, reducing technical debt, and expanding the communities of FOSS contributors. We welcome you to share your ideas, feedback, or constructive criticism with us. Through Sunday, 7 April 2024, we are especially eager to hear from open source maintainers who would like to fill out our fellowship pilot program survey. https://www.sovereigntechfund.de/news/foss-maintainer-fellowship-survey We see the creation of and commitment to the Sovereign Tech Fund by SPRIND and the German Ministry for Economic Affairs and Climate Action as a clear sign of the increasing awareness of the open source ecosystem’s significance. We hope that our plans for the future will inspire many others to join us in this work and have a lasting impact together. Incidents like xz – others will surely follow – show that we have a major task ahead of us for the foreseeable future.

2 1