collaborative development the gift that keeps on giving

by any measureCHOATE HALL & STEWART LLP choate.com

Collaborative Development:The Gift that Keeps on Giving

Karen Faulds CopenhaverChoate, Hall & Stewart LLP

CHOATE HALL & STEWART LLP

“Architecture of Participation”

.



Not “If You Build It They Will Come”



If You Provide the Right Platform, They Will Come and Build Together



If You Provide the Right Platform, They Will Come and Build Together

How to build a collaboration platform for developers is one of the many valuable

artifacts of Linux.


Fundamental Elements of Corporate Collaborative Development

• Technical Merit• Trust• Strategic / Long Term


Technical Merit

• The Secret Sauce of Open Source Development– Developer Led

• Direct Communications– Marketing Free Zone– No Spin

• Authority and Credibility from Contributions and Technical Excellence


Building Trust Into a Corporate Project

• Transparency• Level Playing Field

– Everyone Benefits in the Same Way• Developer Driven

– Technology Focused


Strategic / Long Term Thinking

• Not Driven by Quarterly Results– Are driven to “release early, release often”

• Building Infrastructure– Versatility– Platform for Innovation– Agnostic

• Upstreaming Modifications– Value Proposition of Shared Maintenance

• Encourages Broad Participation– Enabling Technologies


Use Cases Beyond IT Infrastructure

• Enabling Technologies for other industries– Pre-Competitive

• Bright-line which preserves competitive opportunities for margins

• Any infrastructure too expensive for anyone to build and maintain alone. – CERN, the European Organization for Nuclear

Research https://home.cern/about• Founded in 1954

– The World Wide Web was invented at CERN in 1989 by British scientist Tim Berners-Lee


Other Use Cases for IT

• Any development that requires a “network effect” to be viable– IOT– Intelligent Traffic

• Data for Research– Clinical– Sensor


Core Infrastructure Initiative

• Heartbleed vulnerability in OpenSSL – OSS needs investment for security– Industry-wide– Global– Leading Experts

• Linux Foundation created Core Infrastructure Initiative (CII) in 2014– “to fund and support critical elements of the

global information infrastructure”• Included in White House Cybersecurity National

Action Plan


Multi-million $ Project - Broad Support

– Amazon Web Services– Adobe– Bloomberg – Cisco– Dell – Facebook – Fujitsu– Google– Hitachi– HP Enterprise

– Huawei– IBM– Intel– Microsoft– NetApp– NEC– Qualcomm– RackSpace– salesforce.com– VMware


CII Projects

• OpenSSL• OpenSSH• GnuPG• Network Time Protocol (NTP) daemon• Linux Kernel Self Protection Project• Fuzzing project• OWASP Zed Attack Proxy (ZAP) as a service• False-Positive-Free Testing with Frama-C• Reproducible builds• CII census / Best practices badge


Managing Technological Risks and Crises

Special Report: Why the BP Oil Rig Blowout Happened

http://www.popularmechanics.com/science/energy/a6065/how-the-bp-oil-rig-blowout-happened/

“operated in an industry with ineffective regulatory oversight.”

"That's what happens," Ruch says, "when the government is dependent upon industry for its expertise."

“Since much of the drilling data necessary to complete environmental reviews was proprietary, MMS scientists were not allowed access to exploration and drilling details.”


Other Areas that Require Collaboration

How Tech Giants Are Devising Real Ethics for Artificial Intelligence

– concern . . if regulators jumped in to create rules . . . So . . . framework for a self-policing organization. . . .

– . . . there have been instances when companies have worked together when it was in their best interests . . . .

– “There is a role for government and we respect that,” . . . . The challenge . . . is “a lot of times policies lag the technologies.”

John Markoff NYTimes SEPT. 1, 2016http://www.nytimes.com/2016/09/02/technology/artificial-intelligence-ethics.html?_r=0


Other Areas that Require Collaboration

Global Network Initiative

• corporations and nongovernmental organizations • companies, civil society organizations (including

human rights and press freedom groups), investors and academics

• creating a collaborative approach to protect and advance freedom of expression and privacy in communications technologies

https://www.globalnetworkinitiative.org/


My Take-Aways

• We are all dependent upon the rare individuals who understand the technology.


My Take-Aways


• Building a value system where developers are rewarded (socially and monetarily) for their integrity and creativity should be a national priority.


My Take-Aways



• If the government cannot employ the technical resources to respond to technology challenges that impact all citizens, we cannot rely on Brownies.


My Take-Aways




• If the expertise necessary to respond is available only inside corporations, we must have established rules of engagement that enable all available experts to help us respond to the challenge without delay.


My Take-Aways





• In the absence of collaboration, we will always lack confidence – we will cower.


My Take-Aways





• In the absence of collaboration, we will always lack confidence – we will cower.

• That kind of collaboration happens now in the Linux kernel community.