4 ms·

The founding members are GitHub, Google, IBM, JPMorgan Chase, Microsoft, NCC Group, OWASP Foundation and Red Hat, among others. So, Microsoft x 2, Google, IBM

The founding members are GitHub, Google, IBM, JPMorgan Chase, Microsoft, NCC Group, OWASP Foundation and Red Hat, among others. So, Microsoft x 2, Google, IBM x 2, a for-profit Security company, and non-profit security group, and a bank. I don't see any of the BSDs listed or any other big open source projects. I'm starting to get a bit worried that this is and some of the goals going to be more for future legislation than helping open source projects with security.

woodruffw 6y ago
If you go to the full members page[1], you will notice that the major Linux distributions are represented: SuSE, Canonical, and Red Hat. It's certainly a corporate interest group, but it would be incorrect to say that large open source projects are not represented. Edit: it should also go without saying that Google et al. are already responsible for a significant portion of the open source ecosystem. For better or worse. FD: My employer is a (much, much smaller) member of the OpenSSF. [1]: https://openssf.org/about/members/ https://openssf.org/about/members/
- protomyth 6y ago
  Red Hat is IBM, and I don't see anything but the "corporate" Linux.
  - woodruffw 6y ago
    Yep; like I said, the OpenSSF seems to be explicitly branded as a "cross-industry" initiative. That seems to be consistent with their partnership (and subsumption?) under the Linux Foundation.
0df8dkdf 6y ago
yeah, this starting to sound a bit like US Chamber of Commerce. https://en.wikipedia.org/wiki/United_States_Chamber_of_Commerce https://en.wikipedia.org/wiki/United_States_Chamber_of_Comme... The name makes it sound like a US gov organisation, in reality it is a lobbying group to curb consumer rights.