Open Source Summit North America 2017

Open source needs people to write the code today, but, even more important, is those that will write the code tomorrow. Investing in the people who will replace you is the only way to ensure immortality, both for yourself, and for the project you care so much about. In this session, you'll learn you practical ways to invest in people, and about why, sometimes, *not* fixing a bug is a better choice than fixing it.

In the open source developer community, code is king. But who is the kingmaker?

Most people are used to operating in hierarchical, “command and control” environments, and often expect the same rules and behaviors to work when they join open source communities. But with so many different people and organizations all theoretically working as peers, how do leaders emerge, and what does it take to become influential?

This presentation will provide insights and best practices into navigating open source projects and ways to get involved, including: submitting code, becoming a PTL, joining an Advisory Group, Technical Steering Committee or board of directors. Hear about the different values and leadership opportunities and what they can mean for you and your organization. 

Quantum computing is no longer a thought experiment. Companies, labs, and even nation states all have achieved success at working prototypes that will be scaled within 3 years. As we build toward a sea change where quantum bits or qubits enable the instant cracking of PK, ECC, and other encryption, open source software by D-Wave and IBM is already being used. It's a chance for FOSS to get in on the ground floor of the next breed of supercomputer, as well as the systems being built to upgrade our encryption.

No Physics degree needed for this look at how quantum computers and their software work. We'll also dive into what is being done to protect future encrypted communications and even blockchains via open source.

The autonomous driving market continues to heat up as automakers race to acquire tech companies or forge partnerships with suppliers who can accelerate and expand their development efforts. This flurry of M&A activity over the past year is being driven by the realization that the software and hardware required for autonomous driving is too complex for any company to develop alone. While this is a step in the right direction, an open source platform for automakers to share information such as map data, miles driven and scenarios tested could speed up production cycles and decrease time-to-market.

Dan Cauchy, General Manager of Automotive at The Linux Foundation, will discuss the impact that open source could have on autonomous driving and how collaboration could benefit automakers without hindering competition.

Hyperledger Executive Director, Brian Behlendorf, Siva Kannan, VP of Engineering at Gem and Presanna V Sundararajan, head of the blockchain practice at Wipro will participate in a fireside chat that will focus on blockchain technology, healthcare and the role of open source.

On a large open source project like Zulip, we were starting to see major productivity problems for the project, caused by longstanding limitations in GitHub’s permissions and notifications systems. Learn how we created zulipbot, an open source GitHub workflow bot written in Node.js, that patches these limitations in GitHub’s model and how you can use it to manage your own GitHub projects and organizations. zulipbot creates a significantly more democratic workflow for our contributors, allowing them to claim issues, manage labels, and transition from new contributors to being the maintainer of their portion of a busy open source project, even if they’re a volunteer with only a bit of free time. While in part, zulipbot is a workaround for GitHub limitations (that GitHub should probably just fix for everyone), it also is a tool that gives maintainers control over how their project works.

What are the hottest jobs in open source? According to Dice’s annual Salary Survey, the highest salary increases are happening in the networking and storage technology areas. This talk will share original Dice data that can inform open source developers’ and open source IT manager’s next salary negotiation or career move. It will review the best ways to determine what skills are increasingly in demand and how to approach skills development, from training to certification and hackathons, among other strategies.

Tech is moving fast, and so goes the jobs associated with the latest language, open source project or newest technology. Staying current on where the most lucrative jobs are will increase your open source influence, career mobility and bank account.

Join Alison Kane, from Dice, for a talk that will provide tangible next steps for your next promotion or job opportunity. The presentation will also benefit employers and recruiters who need to understand what skills are warranting what salaries so they can stay competitive in their recruitment efforts.

One of the largest global insurance firm recently introduced TensorFlow, the open source library from Google for machine intelligence, for classifying car drivers who has high likelihood on major accidents with deep neural network. The model provides 2x higher accuracy compared with existing random forest model, gives them a possibility to lower the insurance price significantly. Also, a cucumber farmer in Japan has been using TensorFlow to build a hand-made sorter that classifies cucumbers into 9 classes based on its length, shape and color. At this session, we'll look at how TensorFlow democratizes the power of machine intelligence and is changing the world with many different real-world use cases of the technology.

Mobile devices are widely used in our every day lives and the apps that we download onto our phones play a large role as well, whether they're used for home automation, social media, or other purposes. Being able to understand the current trends and latest developments in this area can be advantageous for those who want to develop the next big thing. In this workshop, Sara will provide an overview of mobile application development and the most recent crop of technologies, like ARCore/ARKit and CoreML.

Intellectual property is everywhere in software, especially in open source. From licenses to copyrights, our world is one drenched in IP. This talk will cover the essentials of IP law in the US, giving both open source developers and users a working knowledge of the systems behind those big blocks of legal text. Starting from the four main branches of IP, we'll cover topics like copyrights, licenses, trademarks, CLAs, and more.

Let's start a discussion about how we are introducing new developers to programming. Most textbooks, tutorials, and trainings begin by using mathematics lessons to teach newcomers to code. Many courses on programming require math skills as prerequisites. However, math prowess is not usually an indicator of one's potential programming abilities, and in fact presents a significant barrier to entry for a lot of people who might otherwise be interested.

Having open source tooling that can generate SPDX documents is an important first step in automating detection and summarizing of the license compliance information found in source or binary code. However, how can you tell which tools are able to accurately detect what is actually in the source code? Due to the imprecise nature of the way developers express licenses, there can be a lot of variance. To build up trust in the heuristics used by tools, a curated set of common packages and associated reference set of SPDX documents have been created to provide a starting point for tools to self certify against. This talk will go through the criteria use to select the packages, and provide some preliminary results.

Open source software has traditionally relied on individuals taking the initiative to become a developer or a user. The expectation was that people would 'teach themselves' and use fora such as IRC to get advice. In today's world of rapid adoption we need a better way. This session shows how performance based certification programs can contribute to the growth of the technical talent pool for open source projects. It will draw on the experience gained by The Linux Foundation over the past few years in developing programs for Linux, Cloud Foundry, Kuberetes, Node.js and OpenStack.

There is no set of practices that can guarantee that software will never have defects or vulnerabilities, whether that software is open source or proprietary. Even formal methods can fail if the specifications or assumptions are wrong. Nor is there any set of practices that can guarantee that a project will sustain a healthy and well-functioning development community.

But with open source software, it is possible to reduce security issues in the same way it’s built -- with collaboration and transparency. In this talk, The Linux Foundation CTO Nicko van Someren, will present the Core Infrastructure Initiative, a multi-million dollar project to fund and support critical elements of the global information infrastructure. He will discuss the latest research and an update on creative self-serve tools and best practices that help improve the security and quality of open source projects.

The Best Practices Badges Program, for example, is a free open source secure development maturity model designed with and for the open source community. The Linux kernel, Curl, GitLab, OpenBlox, OpenStack, OpenSSL, Node.js, and Zephyr among the first projects to have a new Best Practices badge. Available on GitHub, the badges program continues to evolve. New badge levels were introduced this year to provide even more sophisticated criteria.

Citing both good and bad examples, he’ll dive into what progress is or isn’t being made with security vis a vis the software development lifecycle. OpenSSL is in the habit of making major quality improvements and consciously works to bring the number of defects down. As of June 2016, the current number of defects was 407, its lowest since June 2006. This proves OpenSSL developers are making a concentrated effort to both find new bugs and close existing ones instead of just closing old ones.

He will also explore how, and if, there are differences between open source and commercial software through multiple industry examples.

Whether a producer and consumer of open source, attendees will gain an understanding of how to quickly assess which open source projects care about security-conscious development and how to apply secure development methodologies to the software that they create and use.

All Open Source Networking projects depend on having access to a Universal Dataplane that is:

• Able to they deployment models: Bare Metal/Embedded/Cloud/Containers/NFVi/VNFs
• High performance
• Feature rich
• Open with Broad Community support/participation

 FD.io provides all of this and more, via a landing site with multiple projects fostering innovations in software-based packet processing towards the creation of high-throughput, low-latency and resource-efficient IO services suitable to many architectures (x86, ARM, and PowerPC) and deployment environments (bare metal, VM, container).

 

With recent rapid growth of container-based solutions — including those from almost all major IT vendors, cloud providers and emerging start-ups—the industry needed a standard to support container formats & runtime. Enter the Open Container Initiative (OCI), established to help promote a set of common, minimal open standards & specs around container formats and runtime. Having recently issued its v1.0 release of container runtime and image format specs, OCI has seen early adoption from the AWS, Cloud Foundry, Kubernetes, Mesos communities and more. With this early adoption trend and the impending release of a formal certification program, OCI is bridging the industry closer to standardized container distribution. Hear from OCI experts on how these specs impact the ecosystem; use cases for how they’re implemented across scenarios/ environments, and what’s next for the project.

This talk will explain how the OpenChain Curriculum team assembled and released extensive compliance training material under CC-0 licensing. It will expand on how this material can be either used for generic in-company or cross-company training and how it helps to comply with the OpenChain Specification. A run through of the key material will be given to illustrate how it can support every company in the adoption and customization of best practices to suit their needs. The talk will conclude with a brief overview of how to engage with the OpenChain Curriculum, the broader OpenChain Project, and what can be expected around Open Source supply chain management in the coming year.

This talk explores where we are in terms of artificial intelligence based programming, what has been achieved so far, what is coming in the near future and what will be the impact for how we code and build software.