7 ms·
It seems like they've cut a wide swath for (probably) exempting the most interesting of the software that could have been developed in the open. > Applicable e
by andrewstuart2 11y ago
It seems like they've cut a wide swath for (probably) exempting the most interesting of the software that could have been developed in the open.
> Applicable exceptions are as follows:
> The release of the item is restricted by another statute or regulation, such as the Export Administration Regulations, the International Traffic in Arms Regulation, or the laws and regulations governing classified information;
> The release of the item would compromise national security, confidentiality, or individual privacy;
> The release of the item would create an identifiable risk to the stability, security, or integrity of the agency’s systems or personnel;
> The release of the item would compromise agency mission, programs, or operations; or
> The CIO believes it is in the national interest to exempt publicly releasing the work.
[1] https://sourcecode.cio.gov/Implementation/ https://sourcecode.cio.gov/Implementation/
- spilk 11y agoThis probably excludes pretty much everything except probably the most boring things - public information websites, etc. Anything within the DoD, for instance, will at minimum be tagged "for official use only", which already exempts it from FOIA requests, so I don't see this really opening much up at all.
- JonathonW 11y agoDoD work can, in at least some cases, be open-sourced. We had some work with DARPA where open-sourcing was actually mandated in our contract (at our request), and that code was, for a while at least, in active use in the field. Although I guess research is a little different. Whether or not it's feasible is entirely dependent on the project, though. Something that's ITAR/EAR (or classified) is never going to be open-sourced.
- davb 11y agoI agree with your comment, but I think it will be easier to pass this right now with some wide exemptions and potentially expand it somewhere down the line.
- nerdponx 11y agoSure it's wide, but it also seems pretty reasonable to me
- andrewstuart2 11y agoMy main disappointment is that I'm not sure it will be reasonably applied, as so many things could be interpreted as having national security implications when in reality they're only used with security-sensitive data.
- Pxtl 11y agoOr alternately, every system that handles private information (which, for a government, is basically all of them) will be considered to be a security risk to open-source even though the dataset will still be private. "Security through obscurity" will mean that nothing gets opened.
- deleted 11y ago[deleted]
- jonas21 11y agoThe important thing is that this changes the default. Instead of the default being closed and needing to justify open-sourcing something, the default will be to open-source things and having to justify keeping something closed. That's huge.
- derefr 11y agoIt pushes the incentives around as well, though. Unless there's some sort of marginal cost for each line of code they choose to keep proprietary, they'll inevitably do "the least work necessary" when they realize that some project is going to have components fitting these clauses, by by boxing up the entire effort under one of these clauses. Ideally, with some sort of force opposing propriety, the incentive would be such that the government would think it in its best interests to granularize their code into small libraries, programs, and network services, so that they could open-source as much as possible, leaving tiny "classified kernels" as wrappers for libraries or plugins for apps. For an idea of such a force: maybe create a "proriety credit" that a government department would to buy for each 1000 lines of code they refuse to release, whose funding goes to this effort to open-source everything else?
- wlievens 11y agoLOC-based metric tied to money... What could go wrong?
- deleted 11y ago[deleted]
- Qwertious 11y agoAn overabundance of semicolons per line? A complete abandonment of python?
- Natanael_L 11y agoOne-liners that would kill Perl masters by heart attacks half from envy, half from horror
- Zigurd 11y agoThe first two look reasonable, but after that it goes downhill. "The release of the item would create an identifiable risk to the stability, security, or integrity of the agency’s systems or personnel" means "I don't feel like it and you can't make me."
- ipsin 11y agoI'm probably misreading it, but "the integrity of the agency's personnel" makes it sound like "the in-house developers wrote terrible code and people will criticize them for it".
- BWStearns 11y agoOr the stability. Open sourcing certain code may literally lead to insanity! I think this was just poorly word-smithed and the "correct" interpretation would only apply the protection of security to personnel.
- caf 11y agoI believe the correct parse is: / (the stability, security, or integrity of the agency’s systems) (an identifiable risk to) < (or) \ (personnel)
- revelation 11y agoSo they commit to nothing at all.
- petra 11y agoThis doesn't include anything developed at DARPA, right?
- sitkack 11y agoLots of DARPA sponsored projects have open source releases.
- twistedpair 11y agoOf course there are many exemptions. Did you expect them to release the F-22 source code or NSA PRISM architecture?
- robin_reala 11y agoOperational stuff no, but GCHQ publish their graph database for example: https://github.com/GovernmentCommunicationsHeadquarters/Gaffer https://github.com/GovernmentCommunicationsHeadquarters/Gaff...
- sleepersmith 11y agoOf course not. That's why encryption algorithms are always best kept proprietary. /sarcasm.
- afarrell 11y agoThat looks like PACER still falls under that. I wonder if this would make it easier to build a replacement whose interface isn't utterly terrible. Of course, the hard part would be convincing the courts to use it. Based on a sample size of one Clerk of Court, who thinks PACER is absolutely fantastic, this will be hard. To be fair, it is state-of-the-art in terms of access to court documents in the US.
- nwenzel 11y agoCould you imagine an API-only version of PACER where developers were free to build search, mobile, other front-ends on of it? Sure, that's basically a high school project using a MongoDB or CouchDB back-end. But legal tech is horribly antiquated and govt-legal tech has a long way to go. It seems like the best move would be API-only so that individuals and companies could build services on top. BTW - check out www.casetext.com for an idea of what private enterprise can do in terms of making public records useful.
- konklone 11y agoDifferent branch, though. This policy only covers certain executive branch agencies.