Welcome to the October 2024 edition of the OpenSSF Newsletter! Here’s a roundup of the latest developments, key events, and upcoming opportunities in the Open Source Security community.
- Take: Developing Secure Software (LFD121)
- Attend: SOSS Community Day Japan
- Get Involved: Participate in OpenSSF
Join us in Tokyo for SOSS Community Day Japan on October 30, 2024, co-located with the Open Source Summit Japan (October 28-29)
Hosted by the OpenSSF, this event will bring together open source security enthusiasts to connect, collaborate, and share knowledge. Whether you’re an industry leader or a passionate technologist, this is your opportunity to dive deep into the latest open source security trends, learn from experts, and network with the vibrant open source community. Don’t miss out—register today and be part of the conversation on securing open source software! Learn more
Recap on SOSS Community Day EU
On September 19, the OpenSSF community gathered in Vienna for SOSS Community Day EU, held alongside Open Source Summit EU. Each summit and community day is a celebration of open source excellence, showcasing the collective efforts of passionate individuals committed to making the world a safer place. We extend a heartfelt thanks to our dedicated maintainers for their continuous efforts in advancing open source security!
Recordings and photos are now available. Relive the moment as we recap some of the exciting conversations from the event! Read more
2025 Virtual Tech Talk Call for Proposal (CFP)
We are excited to invite proposals for the 2025 Virtual Tech Talk Series, providing a platform for in-depth discussions on critical initiatives to secure open source software within the OpenSSF community. These tech talks are designed to foster knowledge sharing, highlight innovative technical projects, and showcase efforts driving the future of open source security.
Have a topic or expertise you’d like to share? Submit your Call for Proposals (CFP) by December 15, 2024, to ensure ample time for review and planning. This is your chance to contribute, connect with peers, and inspire others in the field.
Submit your CFP
OpenSSF Education Tech Talk Highlights & Future Opportunities
The OpenSSF hosted a virtual Tech Talk titled Jumpstart Your Journey: Mastering OSS Security Development with the Linux Foundation Education. This session was designed for aspiring open source professionals and newcomers eager to dive into the world of open source software (OSS) security. Read more
Developer Relations: The Human Connection Driving Open Source Security
Open source security isn’t just about technology—it’s about the people behind it. Developer Relations (DevRel) connects developers, maintainers, and contributors, ensuring that they have the tools and support to make open source software more secure and resilient. As Katherine Druckman, Open Source Evangelist at Intel, said in her recent episode of the What’s in the SOSS? podcast: “We solve technical problems with technical solutions, but there are also so many human problems that need human solutions.” This illustrates the heart of DevRel—bringing together people to drive progress in open source security. Read more
OpenSSF SOSS Fusion Conference Kicks off with Talks from Google and Cisco Executives
The Open Source Security Foundation (OpenSSF) announced the opening of the Secure Open Source Software (SOSS) Fusion Conference in North America in Atlanta, GA. This event unites a diverse community of professionals, including public sector leaders, software developers, security engineers, students, cybersecurity experts, CISOs, CIOs, founders, and tech pioneers. With a robust agenda covering AI security, critical open source security projects, public policy, and today’s most pressing security topics, SOSS Fusion offers a comprehensive look at OpenSSF’s initiatives that’s aimed at simplifying security for developers, and will help them prepare to shape a safer digital world in 2025 and beyond. Read more
Join us for SigstoreCon: Supply Chain Day at KubeCon NA 2024
Join us for SigstoreCon: Supply Chain Day at KubeCon NA 2024 in Salt Lake City on November 12! Attendees will explore the latest advancements in digital artifact signing, with sessions on Sigstore, SLSA, The Update Framework (TUF), and more.
Key Topics Include:
- Case Studies: Real-world examples of how projects are leveraging Sigstore, SLSA, or TUF
- Package Registry Adoption: Insights for maintainers adopting Sigstore/SLSA
- Client Development: Learnings from building Sigstore clients
- Technical Deep Dives/Research: Exploring transparency, privacy-preserving identities, and more
Don’t miss this opportunity to stay ahead in supply chain security​!
Empower Your Software Development with OpenSSF’s Free “Developing Secure Software” Course!Â
Learn secure software fundamentals at your own pace and earn a recognized certificate. Plus, we’ve just added new optional labs in LFD121! These hands-on exercises will help you practice countering attacks with real-world scenarios and helpful hints. Enroll here
In the News
- The Register: Google’s memory safety plan includes rehab for unsafe languages
- Computer Weekly: Printing vulnerability affecting Linux distros raises alarm
- The Record: Experts warn of DDoS attacks using Linux printing vulnerability
- Help Net Security: Open source maintainers: Key to software health and security
- Cybersecurity Dive: CUPS vulnerability, a near miss, delivers another warning for open source
- DevOps.com: Survey Finds Compensation Drives Better Open Source Software Security Behavior
- CityBiz: OpenSSF Announces Key Themes of AI Security, Diversity and Open Source Public Policy at SOSS Fusion Conference
- TechTarget: U.S. Army, Lockheed Martin detail SBOM progress
Meet OpenSSF at These Upcoming Events!
- Open Source Summit Japan: October 28-29, 2024
- SOSS Community Day Japan: October 30, 2024
- Sigstore North America: November 12, 2024
- Linux Foundation Member Summit: November 19-21, 2024
Get Involved in OpenSSF
You’re invited to…
- Join a Working Group or Project
- Chat with us on Slack
- Follow us on X, Mastodon, and LinkedIn
See You Next Month
We want to get you the information you most want to see in your inbox. Have ideas or suggestions for next month’s newsletter about the OpenSSF? Let us know at marketing@openssf.org, and see you next month!Â
Regards,
The OpenSSF Team