US Republicans query Linux Foundation about open-source security

Correction — December 28, 2022

The article originally referred to Frank Pallone Jr. as a co-author of the letter. He was only cc'd. Gregg Harper is the other author, not Pallone.

Wednesday, April 4, 2018

On Monday, two US legislators, Republican legislators, Greg Walden and Gregg Harper, respectively the chairman of the United States House Committee on Energy and Commerce and the chairman of the Subcommittee on Oversight and Investigations, co-wrote a public letter to Jim Zemlin, executive director of The Linux Foundation, about open-source software (OSS) and improving its security. They requested Zemlin to answer their questions by no later than April 16.

The letter contained the following four questions; each of the first two has a further two follow-up questions.

Has the CII [Core Infrastructure Initiative] performed a comprehensive study of which pieces of OSS are most crucial to the "global information infrastructure"?

If not, does the CII plan to perform such a study?

What would the CII need in order to do so?

Has the CII, or any other organizations, compiled any statistics on OSS usage?

If not, does the CII plan to perform such a study?

What would the CII need in order to do so?

In your estimation, how sustainable and stable is the OSS ecosystem?

Based on your response to the previous question, how can the OSS ecosystem be made more sustainable and stable?

Walden and Harper exemplified Heartbleed, a "critical cybersecurity vulnerability" that allowed the hacking of websites and passwords, and millions of medical records in 2014. They also wrote that, in response to that vulnerability, The Linux Foundation established a multi-million dollar project, the Core Infrastructure Initiative, intended to improve the global infrastucture of such software.

The politicians noted large tech companies like Microsoft, Apple Inc., and Adobe Systems respond more quickly to such critical vulnerabilities than distributors and developers of open-source software.

Open-source software is "publicly accessible" and usually freely-licensed for a wide range of use, such as modification and commercial uses. Walden and Harper also expressed praise toward open-source software and cited a 2015 survey conducted by Black Duck Software saying 78% of companies used such software.

Have an opinion on this story? Share it!

Sources

"What is open source?" — OpenSource.com, April 3, 2018 (date of access)
Sam Varghese. "Republicans seek information on open source security, stability" — ITWire, April 3, 2018
Morgan Chalfant. "Lawmakers press Linux on security of open-source software" — The Hill, April 2, 2018
Greg Walden and Frank Pallone Jr.. "April 2, 2018 letter to Jim Zemlin of The Linux Foundation" — United States House Committee on Energy and Commerce, April 2, 2018
Black Duck by Synopsys. "2015 Future of Open Source Survey Results" — SlideShare, April 15, 2015

Share this:

This page is archived, and is no longer publicly editable.

Articles presented on Wikinews reflect the specific time at which they were written and published, and do not attempt to encompass events or knowledge which occur or become known after their publication.

Got a correction? Add the template {{editprotected}} to the talk page along with your corrections, and it will be brought to the attention of the administrators.

Please note that due to our archival policy, we will not alter or update the content of articles that are archived, but will only accept requests to make grammatical and formatting corrections.

Note that some listed sources or external links may no longer be available online due to age.

The text of this article is licensed under the terms of the Creative Commons Attribution 2.5 License