3 ms·
> We are joined by Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, Open
by einpoklum 4mo ago
> We are joined by Amazon Web Services, Anthropic, Chainguard, Cisco, Citi, Endor Labs, Ericsson, Google, IBM, JPMorganChase, Microsoft and GitHub, NVIDIA, OpenAI, RapidFort, Red Hat, Rust Foundation, Sonatype, Vodafone, and Zscaler
Many of the names on the list makes the initiative rather suspect. Companies who do a lot to undermine free and open-source software, who hide critical software behind their walls, preventing both its scrutiny and its adaptation and improvement, and two of the LLM giants - they'll "defend open source"? I don't know about that.
> Akrites gives critical infrastructure stakeholders a confidential, structured place to coordinate vulnerability discovery, remediation, and disclosure across the open source projects they depend on
So, a bunch of large corporations - some of who are known to be in bed with the US government - will share vulnerabilities among themselves, out of the public eye? Fishy.
- deleted 4mo ago[deleted]
- throwaway72587 4mo ago[dead]
- Fordec 4mo agoYeah, a bunch of the worst free riders and malicious consumers all in one place. All they're really missing is Oracle and Bambu Lab.
- nwellnhof 4mo ago> All members must be current Linux Foundation members and sign the participation agreement and NDA. Just another opaque and exclusive subproject of the Linux Foundation.
- hobofan 4mo agoThat's just your typical list that makes up the Linux foundation. It might not be the idealistic flavour of open source you prefer, but it's the flavour of open source that's actively in use in most tech companies, and that also forms the makeup of most corporate open source participation (e.g. also the top corporate Linux contributors).
- habinero 4mo agoNot...really? It's pretty normal. Tech companies share intelligence and knowledge all the time -- there are a lot of birds of a feather and consortium groups out there. Since a lot of places are close in proximity, companies sometimes run private fiber lines and such to let peers download updates without competing with the entire world lol. Everyone's fighting the same fight. Sharing and collaborating are normal things.
- einpoklum 4mo ago> Tech companies share intelligence and knowledge all the time Share it and hide from the public, you mean? > Everyone's fighting the same fight Companies really are not "fighting the same fight" as people, generally. And some of these ones are definitely not "fighting the same fight" as FOSS developers, or just people in general.
- justincormack 4mo agoIt won't be out of the public eye if it is part of Linux Foundation, it will be open.