Switzerland mandates open source for federal software, promoting transparency. Google backs away from abandoning third-party cookies. Mark Zuckerberg advocates for open source AI as a key future direction. GitHub now allows access to deleted and private repository data, enhancing data accessibility. Meanwhile, Tailscale aims to reshape our online experience with a 'New Internet' vision. The conversation delves into the evolution of networking and the necessity for simplicity in tech advancement.
Switzerland's law mandates that publicly funded software must be released as open source, enhancing transparency and accountability in government operations.
GitHub's ability to access deleted repository data poses serious privacy risks, urging developers to rethink their use of private forks for sensitive information.
Deep dives
Switzerland's Open Source Initiative
Switzerland has recently enacted a law that mandates public bodies to disclose the source code of software developed with public funds, unless there are third-party rights or security concerns. This initiative, rooted in a philosophy of 'public money, public code', aims to enhance government operations through increased transparency, security, and efficiency. By adopting this approach, Switzerland hopes to set a precedent for other tax-funded governments worldwide to follow in order to promote accountability and cost-effectiveness in software development. This legislative change reflects a growing trend toward open-source solutions in government, allowing the public to benefit from and scrutinize taxpayer-funded projects.
Concerns Over GitHub's Data Access
Recent revelations have shown that data from deleted repositories and private forks on GitHub can be accessed indefinitely, raising significant privacy and security concerns. This feature, known as cross fork object reference, is intentional and part of GitHub's design, which means sensitive information may be exposed even after a repository has been deleted. The implications of this design choice urge developers to reconsider the use of private forks as a protective measure for sensitive data. GitHub has acknowledged this issue but stated that while they might tighten restrictions in the future, no immediate changes are planned, emphasizing the need for heightened caution among users.
The Switzerland federal government requires releasing its software as open source, Google decides not to deprecate third-party cookies, Mark Zuckerberg says “open source” AI is the path forward, GitHub allows anyone access to deleted / private repository data & Tailscale wants to build a New Internet.
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
1Password – Build securely with 1Password - 1Password simplifies how you securely use, manage, and integrate developer credentials. Manage SSH keys and sign Git commits. Access secrets stored in 1Password. Automate administrative tasks. Integrate with third-party tools. Also, check out our INFRASTRUCTURE.md file for more details on how we do secrets with 1Password.