Open at Intel

Lessons From GitHub

Ashley Wolf, Open Source Program Office Director at GitHub, joins us to share lessons learned at GitHub.

As the home of so much open source code, GitHub has a unique view of the open source ecosystem. Ashley shares her own take on the role of an OSPO, trends in open source software development, and the tools her team gives back to the community.

Resources:

github-ospo repo on GitHub

Stale Repos GitHub Action

Guest:

Ashley Wolf is the Director of Open Source Programs at GitHub. She runs initiatives and programs to empower developers to be successful with open source. She is also passionate about helping companies participate in the open source community. Prior to joining GitHub, Ashley led the Yahoo (acquired by Verizon) open source program office. Ashley also serves on the steering committee for the TODO Group.

The Best Ethernet on Mars

Intel Ethernet and open source have been making history for decades. Doug Boom and Kevin Bross join us for a history lesson and a look toward future innovation.

If you drive a car, use a phone, or travel to Mars, chances are you'll encounter foundational ethernet technology Kevin and Doug have helped foster. We take a deep and nerdy dive into the world of open source software and ethernet and learn how it impacts all our lives.

 

Resources:

Westport Channel: Intel® Ethernet Network Adapter E810-XXVDA4T

Logan Beach: Intel® Ethernet Network Adapter E810-CQDA2T

 

Guests:

Doug Boom is a Principal Engineer at Intel Ethernet.  Heading into his 29th year at Intel Ethernet, Doug has done it all when it comes to Ethernet.  Driver writer, product technical lead, architect, people and project management, he has lately been doing custom implementations with Intel Ethernet partners.  His code is in everything from soda machines, enterprise ethernet switches, lottery kiosks, ultrasound machines, cars, planes, trains and even rovers on Mars.  He has over 20 patents, and has invented technologies used in billions of dollars of solutions.  He’s had code in the Linux kernel since the old 2.4 days, but for reasons he can’t explain, his favorite distro is Ubuntu.   Doug is an Ethernet evangelist, you can see him talk about Ethernet basics at this YouTube link and history and some product stories at this YouTube link.  Doug writes fiction, makes board games and plays video games in his spare time.

Kevin W. Bross is an Intel Principal Engineer and modular systems architect in Intel’s Network and Edge Group (NEX).   Over the past 30+ years at Intel, he has held a variety of engineering and marketing roles at Intel, including defining bladed systems products, architecting Intel's first M2M/IoT gateway product, working on the development/trials of 64-antenna Massive MIMO cellular base stations, and architecting Intel’s first three timing-related network adapters.  Kevin is currently working on 5G infrastructure and system design for Intel reference designs and numerous customer systems.

Guest Host:

Chris Norman An avid promoter of open source ecosystems, Chris writes documentation and presents at open source events, helping developers better understand Intel’s contributions to operating systems, languages, and runtimes. He also moderates the Clear Linux community forum.

 

Kubernetes, DevOps and Reinventing Ourselves

Building upon existing technology is at the heart of much technical innovation and is the essence of open source culture, and embracing our history provides invaluable perspective.

Kat Cosgrove, a lead developer advocate at Dell and Kubernetes release team member, joins us to talk DevOps culture, reinventing ourselves and our technology, and how to get involved in projects like Kubernetes.

 

Guest:

Kat Cosgrove In her role as a Lead Developer Advocate at Dell, Kat focuses on the growth and nurturing of open source through authentic contribution. In particular, her specialties are approachable 101-level content and deep dives on the history of technology, with a particular focus on DevOps and cloud native. She has served on the Kubernetes release team since v1.22. When she’s not at a conference, she spends her time playing video games, watching horror movies, or reading science fiction, but her current hyperfixation is film photography. She lives in Scotland with her cat, Espresso, who is the real brains behind the operation and actually ghostwriting all of her tweets.

Securing Kubernetes

Cisco's Michael Chenetz, host of the Cloud Unfiltered podcast, joins us to talk through security challenges unique to Kubernetes, and the journey to the cloud native ecosystem for everyone from beginners to veterans.

Resources:

Overview of Cloud Native Security

Guest:

Michael Chenetz is the head of technical product marketing and has lead cloud strategy in the CTO org for Cisco. Michael has consulted for many fortune 500 companies in Networking, Security, and Cloud. Michael is the host of the popular podcast, Cloud Unfiltered that discusses trends in cloud native technologies. You can find Michael speaking at most major cloud native events and online media outlets.

 

Guest Host:

Chris Norman An avid promoter of open source ecosystems, Chris writes documentation and presents at open source events, helping developers better understand Intel’s contributions to operating systems, languages, and runtimes. He also moderates the Clear Linux community forum.

Security and the OSPO

Jessica Marz, Director of Intel's Open Source Program Office, discusses the role of the OSPO in securing the software supply chain and the role she plays in encouraging good open source citizenship.

Guest:

Jessica Marz  Director of Open Source Program Office An expert at explaining legal concepts to software developers and software development concepts to lawyers, Jessica is responsible for defining and managing Intel’s open source approval policies and practices. She’s also an avid arts-and-crafter known for her creative reuse of materials.

Open Source Isn’t Broken

The open source software ecosystem has always faced tough challenges related to community, governance, and scalability. More than ever before, much conversation about open source struggles is devoted to the security of the software supply chain, especially when considering the unique challenges of a distributed, often anonymous, community-based development team.

Josh Bressers, VP of Security at Anchore, fellow podcaster and Open SSF volunteer, joins us to talk about why, despite these challenges, open source isn't broken and how to address the very human aspects of open source security and communities.

Resources:

Avoiding the success trap: Toward policy for open-source software as infrastructure

I am not a supplier

All About SBOMs: The Software Bill of Materials

Open Source: The Nerd Version of Formula One

XKCD: Dependency

Guest:

Josh Bressers is the Vice President of Security at Anchore. Josh has helped build and manage product security teams for open source projects as well as several organizations. Josh is the co-lead of the OpenSSF SBOM Everywhere project and co-hosts the Open Source Security Podcast and the Hacker History Podcast. He also is the co-founder of the Global Security Database project to bring vulnerability identification into the modern age.

Open Source: The Nerd Version of Formula One

Jorge Castro of the Cloud Native Computing Foundation joins us to geek out on taking the desktop cloud native with immutable Linux, talk open source community sustainability, and have a lot of fun along the way.

Episode Transcript

Resources:

Universal Blue

The Cloud Native Linux Desktop Model (video)

Architecture Of The Immutable uBlue Linux (video)

The Cloud Native Landscape

 

Guest:

Jorge O. Castro is a community manager, specializing in Open Source. He's basically a cat herder – a combination of engineering, developer relations, and user advocacy. Jorge graduated with a degree in Telecommunications from Michigan State University and rode with the 11th Armored Cavalry Regiment for four years. He first entered the technology field at SAIC and then moved to system administration at the School of Engineering and Computer Science at Oakland University in Rochester Hills, Michigan. Jorge then joined Canonical to work on Ubuntu for about 10 years before moving to Heptio to work on Kubernetes. Heptio was then acquired by VMware in December 2018. He's currently at the CNCF working on developer relations.

 

Guest Host:

Chris Norman An avid promoter of open source ecosystems, Chris writes documentation and presents at open source events, helping developers better understand Intel’s contributions to operating systems, languages, and runtimes. He also moderates the Clear Linux community forum.

Building Trust with Attestation

In this episode, we dive deep into the concept of attestation as it relates to building trust in our software and systems. 

Marcela Melara and Vinnie Scarlata take us on a technical tour of both software and remote attestation and how these relate to ideas we've covered previously with software supply chain security and confidential computing. We talk trust and integrity, standards and projects, and share some best practices.

 

Guests:

Dr. Marcela Melara is a research scientist in the Security and Privacy Group at Intel Labs. Her current work focuses on developing solutions for high-integrity software supply chains and building trustworthy distributed systems. She has several publications and patents filed related to her research, and leads a number of internal, academic and open-source efforts on software supply chain security. Prior to joining Intel, she received her PhD in Computer Science from Princeton University and did her undergraduate studies at Hobart and William Smith Colleges. She is a Siebel Scholar, a member of Phi Beta Kappa, and her research on CONIKS was awarded the Caspar Bowden PET Award. Outside of work, Marcela is an avid gardener, bookworm, hiker, and gamer.

Vinnie Scarlata is a Principal Engineer in the Security & Privacy Research lab in Intel Labs. He is one of the architects for Intel® Software Guard Extensions and Trust Domain Extensions, and has 20+ years of research experience in various areas of security, e.g. Trusted Computing, Trusted Execution Environments (TEE), Attestation, Recoverable Platforms, Runtime Integrity, and Key Management. He has been granted 50+ patents and co-authored several papers. Vinnie received a MS in Information Security from Georgia Tech and a BS in Computer Science from the University of Massachusetts, Amherst.