OSS Enterprise: Open source perspectives and securing the software supply chain
Summary
Salesforce expects to close its $27.7 billion Slack acquisition in the coming weeks, while Microsoft Teams usage continues to skyrocket. An enterprise could have various reasons for exploring communication software that adheres to a more open philosophy — companies that manage sensitive data, for example, might wish to retain full control of everything on their own servers. The biggest example was an infiltration of IT infrastructure company SolarWinds that gave the attackers access to sensitive data at thousands of organizations, from Microsoft to government agencies. For example, to get the top SLSA 4 certification, a package must have a two-person review process in place to help catch unauthorized or “bad” modifications submitted to a shared code repository. Author and technology activist Cory Doctorow wrote an excellent piece for Locus magazine, exploring the history of open source software while touching on related themes, such as interoperability, monopolies, and walled gardens.