10. What’s to stop you fromWhat’s to stop you from
getting paid by the Chinese togetting paid by the Chinese to
approve an insecure pullapprove an insecure pull
request?request?
What’s to stop you fromWhat’s to stop you from
getting paid by the Chinese togetting paid by the Chinese to
approve an insecure pullapprove an insecure pull
request?request?
11. If we don’t control theIf we don’t control the
answers, it’s a security threat!answers, it’s a security threat!
If we don’t control theIf we don’t control the
answers, it’s a security threat!answers, it’s a security threat!
12. Answers to the public mustAnswers to the public must
be vetted for accuracy!be vetted for accuracy!
Answers to the public mustAnswers to the public must
be vetted for accuracy!be vetted for accuracy!
14. Answers to the public mustAnswers to the public must
be vetted for accuracy!be vetted for accuracy!
Answers to the public mustAnswers to the public must
be vetted for accuracy!be vetted for accuracy!
15. Make sure your contract permits you to
share code under an unrestricted
(e.g. public domain) license.
) license.
See 52.227-17 in the FAR and, of course,
consult with your legal and procurement offices.
Do not use this as legal advice. Consider this a caution to get legal advice.
Agenda: Why, Culture, Tools We Are Making Available
Example: WHD wants to improve their app, but lacks the resources. We have a lot we want to be able to accomplish, but we have only 3 developers in OPA...for app development and maintaining the API & releasing data. We’re doing as much as possible with a shoestring budget.
Walled garden...with extra high walls
was a “tarball-only” effort (zip)
As shared earlier in the day, even if a contractor sitting in your building on your computer writes the code the government may not own the copyright. My vision was to evaluate everything we create whether we can open source it.
Go where the developers are! SDKs: ease access to federal APIs for even the most novice Example: WHD Timesheet app (project owner hopes the public can help make it better) Even if the forks take off on their own and it’s commercialized, we win if end-users find value.