From seanroberts66 at gmail.com  Thu Jan 19 15:56:26 2023
From: seanroberts66 at gmail.com (Sean Roberts)
Date: Thu, 19 Jan 2023 07:56:26 -0800
Subject: [PublicPolicy] OSS security and what to do next
Message-ID: <03982CBA-E108-4A63-81DD-E3D2807A3115@gmail.com>

An HTML attachment was scrubbed...
URL: <http://lists.opensource.org/pipermail/publicpolicy_lists.opensource.org/attachments/20230119/8bfd214e/attachment.html>

From seanroberts66 at gmail.com  Thu Jan 26 18:35:06 2023
From: seanroberts66 at gmail.com (Sean Roberts)
Date: Thu, 26 Jan 2023 10:35:06 -0800
Subject: [PublicPolicy] OpenGovCon and is this where innovation happens?
Message-ID: <5325CE16-6C6F-45E7-A007-46080EA60D7B@gmail.com>

An HTML attachment was scrubbed...
URL: <http://lists.opensource.org/pipermail/publicpolicy_lists.opensource.org/attachments/20230126/40c08d92/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OSS-NA_2023_EventLaunchGraphics-2_1200x628-Snackable-Tagline.png
Type: image/png
Size: 213067 bytes
Desc: not available
URL: <http://lists.opensource.org/pipermail/publicpolicy_lists.opensource.org/attachments/20230126/40c08d92/attachment-0001.png>

From deb.bryant at opensource.org  Thu Jan 26 22:15:38 2023
From: deb.bryant at opensource.org (Deb Bryant)
Date: Thu, 26 Jan 2023 17:15:38 -0500
Subject: [PublicPolicy] OpenGovCon and is this where innovation happens?
In-Reply-To: <5325CE16-6C6F-45E7-A007-46080EA60D7B@gmail.com>
References: <5325CE16-6C6F-45E7-A007-46080EA60D7B@gmail.com>
Message-ID: <824D1C36-38EB-4261-83A5-6C3C2403749D@opensource.org>

Thanks Sean for the share, not sure we?d have to ask the organizers it?s the first I?ve heard of it.  Looks like they?re partnering with sosi.com ? (noting the contact info).

Deb



> On Jan 26, 2023, at 1:35 PM, Sean Roberts <Seanroberts66 at gmail.com> wrote:
> 
> <OSS-NA_2023_EventLaunchGraphics-2_1200x628-Snackable-Tagline.png>
> OpenGovCon
> events.linuxfoundation.org
>  <https://events.linuxfoundation.org/open-source-summit-north-america/about/opengovcon/>OpenGovCon <https://events.linuxfoundation.org/open-source-summit-north-america/about/opengovcon/>
> events.linuxfoundation.org <https://events.linuxfoundation.org/open-source-summit-north-america/about/opengovcon/>
> 
> I?m not attempting to shill for LF rather asking is this one of the good forums to promote OSS representation in government? And / or is it more like OSPO++ promoting open source office practice in government institutions?
> 
> Sean Roberts
> seanroberts66 at gmail.com <mailto:seanroberts66 at gmail.com>
> 925.980.4729 
> _______________________________________________
> Publicpolicy mailing list
> Publicpolicy at lists.opensource.org
> http://lists.opensource.org/mailman/listinfo/publicpolicy_lists.opensource.org

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensource.org/pipermail/publicpolicy_lists.opensource.org/attachments/20230126/41db56dd/attachment.html>

From simon.phipps at opensource.org  Fri Jan 27 19:34:51 2023
From: simon.phipps at opensource.org (Simon Phipps)
Date: Fri, 27 Jan 2023 19:34:51 +0000
Subject: [PublicPolicy] EU Cyber Resilience Act
Message-ID: <CANDKxoUBOOwrZ8m8sB5rjtPvUqfA_NMs+eFf7zT4H1XTjgVbPQ@mail.gmail.com>

List members will be aware that the European Commission has proposed text
for a new Cyber Resilience Act
<https://ec.europa.eu/info/law/better-regulation/have-your-say/initiatives/13410-Cyber-resilience-act-new-cybersecurity-rules-for-digital-products-and-ancillary-services_en>
in
an attempt to address fitness-for-use of software in critical applications
and has sent the draft to the European Parliament for adoption. Many
experts believe the draft will have serious detrimental effects on the
software market in Europe if adopted as-is.

Open source voices have been especially critical because, while the
Commission has attempted to carve an exception so that the legislation does
not affect open source, the exception is faulty as it is based on a poor
understanding of open source (derived we think from academic papers that
address the supply chain of embedded industrial use of open source and not
the whole field).

OSI submitted its own comments
<https://blog.opensource.org/what-is-the-cyber-resilience-act-and-why-its-important-for-open-source/>
on the exception and also co-signed more extensive work co-ordinated by
Open Forum Europe. a wide range of other voices joined a chorus of concern;
I have excerpted their comments on my blog
<https://the.webm.ink/reactions-to-the-cyber-resilience-act>. Open source
software is made everywhere, so the impact of broad reaching legislation
like this (and there is more in the pipe) touches us all.

Given the text is now before the Parliament, this will be an issue that
will only grow in profile. I'd be pleased to hear from you if you intend to
engage in Brussels, as we need to help European legislators grasp the
realities of open source before they write more legislation.

Best regards

Simon
-- 
Simon Phipps*, Standards & Policy Director, The Open Source Initiative*
www.opensource.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opensource.org/pipermail/publicpolicy_lists.opensource.org/attachments/20230127/3154c1f7/attachment.html>