Open at Intel

The Open Source Path to Security and Privacy: Divvi Up and Let's Encrypt

In this episode, Sarah Gran and Brandon Pitman from the Internet Security Research Group (ISRG) dive into their projects, Divvi Up and Let's Encrypt. They discuss the creation and impact of Divvi Up, a privacy-preserving metrics aggregation service, and its role in protecting individual data while providing valuable insights to organizations. They share the journey from collaborating with Google and Apple on COVID-19 exposure notifications to enhancing privacy for Firefox users. The conversation also explores the importance of TLS certificates provided by Let's Encrypt and the challenges and advancements in the realm of online privacy.

00:00 Introduction and Guest Introductions

01:22 Overview of DivviUp

02:29 Privacy Concerns and Data Security

06:18 Real-World Applications and Examples

11:28 Technical Details and Protocols

19:53 Open Source and Community Involvement

20:39 Conclusion and Final Thoughts

 

Guests:

Sarah Gran is the Vice President of the Brand and Donor Development team at Internet Security Research Group (ISRG), the nonprofit entity behind Let's Encrypt, the world's largest certificate authority. Sarah joined ISRG in early 2016, shortly after the Let’s Encrypt launch and has helped it become a household name in software development. Sarah has also helped to shape ISRG’s latest projects, one focused on bringing memory-safe code to security-sensitive software, called Prossimo, and a privacy-respecting metrics service, called Divvi Up.Sarah is an independent member of the Tor Project’s Board of Directors. Previously, Sarah worked as a Vice President at Edelman SF and Deutsch NY in brand and communications strategy groups.

Brandon Pitman is the Senior Software Engineer for Divvi Up and has a Master’s in Computer Science from Georgia Tech. Prior to ISRG, they worked at Google on a variety of Security, Privacy, and Green Energy projects. Bran came to ISRG to be a part of improving the privacy stance of the Internet as a whole.

ROI in Open Source Contributions

In this episode, Katherine Druckman speaks to Alex Scammon, who leads the Open Source Program Office (OSPO) at G Research. Alex discusses the company's significant contributions to open source projects and their unique operating model. He covers the success of Armada, a CNCF sandbox project for multi-cluster batch scheduling, and the considerable efforts of G Research’s OSPO, which includes 30 engineers dedicated to direct open source contributions. Alex also shares insights on the benefits of supporting open source projects, the complexities of project prioritization, and the collaborative efforts in the open source community. The episode emphasizes the importance of sustainable open source involvement and offers a glimpse into G Research's mission to use AI and ML tools to drive financial market predictions.

 

00:00 Introduction and Guest Welcome
00:08 Overview of Alex's Role and OSPO
03:27 Importance of Open Source Contributions
04:37 Prioritizing Projects and G Research
07:27 Challenges and Collaboration
12:43 Personal Journey in Open Source
18:09 Encouraging Open Source Contributions

 

Guest:

Alex Scammon: Currently, I'm leading a large and intrepid band of open-source engineers engaged in a number of philanthropic upstream contributions on behalf of G-Research. All of our work centers around open-source data science and machine learning tools and the MLOps and HPC infrastructure to support those tools at scale. We're almost certainly hiring.... As part of this work, I'm also leading a discussion around batch scheduling on Kubernetes as the chair of the CNCF's Batch Working Group. Please reach out if this is an area of interest for you -- we'd love to have more voices at the table!

Cloud Native at the Edge

In this episode, Mark Abrams discusses his role at SUSE as a domain solution architect specializing in edge computing. He shares insights on leveraging Kubernetes for edge solutions, the evolution of the open source community, and the importance of contributing to open source projects. They also touch upon the complexities and opportunities in cloud native technologies, the impact of AI, and future developments in edge computing and the open source ecosystem.

00:00 Introduction and Setting the Scene
00:50 Mark's Role and Interests at KubeCon
02:08 Discussing the New Book: Cloud Native Edge Essentials
03:43 The Evolution of Kubernetes and Cloud Native
05:58 Challenges and Solutions in Edge Computing
08:01 Open Source Community and Contributions
14:42 Future of Edge and AI Integration
20:20 Conclusion and Final Thoughts

Guest:

Mark Abrams has been involved in developing and delivering technology solutions for over 25 years. Mark has broad experience ranging from writing code for backend services, embedded systems, and user interfaces to managing and building technical teams and field activities around pre-sales engineering. Mark founded and led a technology enterprise using distributed methodologies before the modern day cloud existed. Mark was a part of the original team that brought k3s - the lightweight kubernetes - to market. Mark is currently a proud member of the Domain Solutions Architect's team at SUSE.

The Open Source AI Definition

In this episode, Katherine speaks with Nick Vidal, Community Manager at the Open Source Initiative (OSI), about his role and the organization's work in defining open source AI. Nick shares insights into the challenges and discussions surrounding AI, software licenses, and the necessity for clear definitions and community consensus. He also elaborates on the Clearly Defined project aimed at securing the software supply chain and the importance of community feedback in evolving the OSI's stance on open source AI.

00:00 Introduction and Guest Introduction
00:37 Nick Vidal's Role at OSI
01:04 Community Involvement and Challenges
03:43 Defining Open Source AI
06:21 Handling Feedback and Criticism
13:14 Overview of Open Source AI Definition
16:16 Future Plans and Community Involvement
18:09 Closing Remarks and Invitation to Join

 

Resources:

The Open Source AI Definition

 

Guest:

Nick Vidal is Community Manager at the Open Source Initiative and former Outreach Chair at the Confidential Computing Consortium from the Linux Foundation. Previously, he was the Director of Community and Business Development at the Open Source Initiative and Director of Americas at the Open Invention Network.

 

Empowering Enterprises: OPEA, AI, and the Future of Storage

In this episode, Daniel Valdivia, an engineer from MinIO, discusses his participation at KubeCon and his work in Kubernetes integrations and AI initiatives. We discussed the significance of object storage standardization via the Open Platform for Enterprise AI (OPEA), emphasizing the flexibility and scalability of MinIO's offerings. Daniel highlights MinIO's contributions to open source projects like PyTorch and Spark and shares insights on new hardware technologies like PCIe Gen 5. Daniel also announces the launch of MinIO's new AI store, designed to empower enterprises to efficiently manage exascale infrastructure and AI pipelines.

00:00 Introduction
00:13 Meet Daniel Valdivia: Engineer at Minio
00:24 The Importance of Kubernetes Integrations
00:43 Intel's Open Platform for Enterprise AI
00:58 MinIO's Unique Object Storage Solutions
01:56 Community Participation and Contributions
02:18 Ensuring Compatibility with AI Hardware
03:20 The Role of OPEA in Enterprise AI
05:56 Open Source Contributions and Challenges
09:12 Future of AI and Hardware Innovations
13:23 Big Announcement
14:40 Conclusion and Final Thoughts

 

Guest:

Daniel Valdivia is an engineer with MinIO where he focuses on Kubernetes, ML/AI and VMware. Prior to joining MinIO, Daniel was the Head of Machine Learning for Espressive. Daniel has held senior application development roles with ServiceNow, Oracle and Freescale. Daniel holds a Bachelor of Engineering from Tecnológico de Monterrey, Campus Guadalajara and Bachelor of Science in Computer Engineering from Instituto Tecnológico y de Estudios Superiores de Monterrey.

Inside CISA: Enhancing Cybersecurity Through Collaboration and Open Source Initiatives

In this episode, Jack Cable, Senior Technical Advisor at CISA, discusses the agency's role in securing the technology ecosystem, particularly focusing on open source software security. Jack explains what CISA is, its mission to protect critical infrastructure, and the significance of the 'Secure by Design' initiative. The conversation covers the collaboration efforts with the open source community, resources available for developers, and the importance of integrating security into software development. Jack also shares his personal journey into cybersecurity and emphasizes empowering developers to enhance security measures from the start.

00:00 Introduction
00:45 What is CISA?
01:26 CISA's Mission and Mandate
02:51 CISA's Role in Open Source Security
03:55 Collaborations and Initiatives
05:18 Open Source as Critical Infrastructure
07:11 Secure by Design and Developer Resources
10:41 Jack Cable's Journey into Cybersecurity
12:52 Empowering the Open Source Community
17:11 Bridging the Gap Between Developers and Security Communities
19:24 Conclusion and Final Thoughts

 

Resources:

Secure by Design

CISA on Open Source Security

Guest:

Jack Cable is a Senior Technical Advisor at CISA, where he helps lead the agency’s work on open source software security and Secure by Design. At CISA, Jack authored CISA’s Open Source Software Security Roadmap and has co-led community efforts to standardize the security of package repositories. Prior to that, Jack worked as a TechCongress Fellow for the Senate Homeland Security and Governmental Affairs Committee, advising Chairman Gary Peters on cybersecurity policy, including election security and open source software security. There, Jack was the principal author of the Securing Open Source Software Act. He previously worked as a Security Architect at Krebs Stamos Group. Jack also served as an Election Security Technical Advisor at CISA, where he created Crossfeed, a pilot to scan election assets nationwide. Jack is a top bug bounty hacker, having identified over 350 vulnerabilities in hundreds of companies. After placing first in the Hack the Air Force bug bounty challenge, he began working at the Pentagon’s Defense Digital Service. Jack holds a bachelor’s degree in Computer Science from Stanford University and has published academic research on election security, ransomware, and cloud security.

AI, Community, and the Future of Generative Applications

In this engaging conversation at the All Things Open conference, Tim Spann, Principal Developer Advocate at Zilliz, discusses the importance of community collaboration in advancing AI technologies. He emphasizes the need for diverse perspectives in solving complex problems and highlights his work with the Milvus open source vector database. Tim also explains the evolving landscape of retrieval augmented generation (RAG) and its applications and shares insights into the future of AI development. The conversation concludes on a lighter note with Tim describing his creative use of Milvus in a fun Halloween project to catalog and identify ghosts.

00:00 Introduction
00:41 Meet Tim Spann: Principal Developer Advocate
01:35 The Importance of Community in AI
02:56 Advanced RAG and Multimodal Models
06:17 The Future of Agentic RAG
09:04 Challenges and Excitement in AI Development
13:35 Building AI the Right Way
17:50 Fun with AI: Capturing Ghosts
19:24 Conclusion and Final Thoughts

 

Guest:

Tim Spann is a Principal Developer Advocate for Zilliz and Milvus. He works with Apache NiFi, Apache Kafka, Apache Pulsar, Apache Flink, Flink SQL, Apache Pinot, Trino, Apache Iceberg, DeltaLake, Apache Spark, Big Data, IoT, Cloud, AI/DL, machine learning, and deep learning. Tim has over ten years of experience with the IoT, big data, distributed computing, messaging, streaming technologies, and Java programming. Previously, he was a Principal Developer Advocate at Cloudera, Developer Advocate at StreamNative, Principal DataFlow Field Engineer at Cloudera, a Senior Solutions Engineer at Hortonworks, a Senior Solutions Architect at AirisData, a Senior Field Engineer at Pivotal and a Team Leader at HPE. He blogs for DZone, where he is the Big Data Zone leader, and runs a popular meetup in Princeton & NYC on Big Data, Cloud, IoT, deep learning, streaming, NiFi, the blockchain, and Spark. Tim is a frequent speaker at conferences such as ApacheCon, DeveloperWeek, Pulsar Summit and many more. He holds a BS and MS in computer science.

Growing the Helm Community

In this episode, Matt Butcher, CEO of Fermyon and a creator of the Helm project, returns to discuss his work with Helm—a nearly ubiquitous project in Kubernetes management. Matt provides insights into Helm's evolution from version 2 to version 3 and shares his vision for Helm 4. He emphasizes the importance of maintaining stability while embracing necessary changes and highlights the role of community contributions in open source projects like Helm. The conversation covers the new features and architectural changes planned for Helm 4, as well as how individuals can get involved in its development. Matt reflects on the significance of fostering a supportive and inclusive community and encourages new contributors to join the effort, noting the current opportune moment to influence Helm's future.

00:00 Introduction
00:37 The Helm Project
01:08 WebAssembly and Spin 3
01:54 Helm's Evolution and Future
04:22 Philosophy Behind Helm 4
11:35 Community Involvement and Contribution
18:46 Encouraging New Contributors

 

Guest:

Matt Butcher is co-founder and CEO of Fermyon, the serverless WebAssembly in the cloud company. He is one of the original creators of Helm, Brigade, CNAB, OAM, Glide, and Krustlet. He has written or co-written many books, including Learning Helm and Go in Practice. He is a co-creator of the Illustrated Children’s Guide to Kubernetes series. These days, he works mostly on WebAssembly projects such as Spin, Fermyon Cloud and Bartholomew. He holds a Ph.D. in Philosophy. He lives in Colorado, where he drinks lots of coffee.