Kubernetes has standardised on sigstore in a landmark move – The Stack

Kubernetes has standardised on the Linux Foundations free software signing service, sigstore, to protect against supply chain attacks. sigstore, first released in March 2021, includes a number of signing, verification and provenance techniques that let developers securely sign software artifacts such as release files, container images and binaries with signatures stored in a tamper-proof public log. The service is free to use and designed to help prevent what are increasingly regular and sophisticated upstream software supply chain attacks.

sigstores founders include Red Hat, Google and Purdue University. Its adoption by Kubernetes one of the worlds most active open source communities, with close to six million developers (a huge number given that CNCF data from December 2021 suggests that there are 6.8 million cloud native developers in total) is a significant vote of trust in the standard for verifying software components. (nb The Linux Foundation hosts both sigstore and Kubernetes, as well as Linux, Node.js and a host of other ubiquitous critical software projects.)

Kubernetes 1.24 released May 3 and all future releases will now include cryptographically signed sigstore certificates, giving its developer community the ability to verify signatures and have greater confidence in the origin of each and every deployed Kubernetes binary, source code bundle and container image.

Few open source projects currently cryptographically sign software release artifacts, something largely due, the Linux Foundation suggested on sigstores launch back in March 2021, to the challenges software maintainers face on key management, key compromise / revocation and the distribution of public keys and artifact digests.

The move by Kubernetes maintainers comes as supply chain attacks escalated 650% in 2021. The Kubernetes team in early 2021 began exploring SLSA compliance to improve Kubernetes software supply chain security, explaining that sigstore was a key project in achieving SLSA level 2 status and getting a head start towards achieving SLSA level 3 compliance, which the Kubernetes community expects to reach this August [2022]

(SLSA is a set of standards and technical controls that provide a a step-by-step guide to preventing software artifacts being tampered with, tampered artifacts from being used, and at the higher levels, hardening up the platforms that make up a supply chain. It was introduced by Google as a standard in June 2021.)

Dan Lorenc, originalco-creator of sigstorewhile at Google (and presently CEO / co-founder ofChainguard) told The Stack that the sigstore General Availability (GA) production release is due out this Summer.

This means enterprises and open source communities will benefit from stable APIs and production grade stable services for artifact signing and verification. This is being made possible thanks to the dedicated sigstore open source community, which has fixed major bugs and added key features in both services over the past few months. Sponsors like Google, RedHat, HPE and Chainguard provided funding that allowed us to stabilize infrastructure and perform a third-party security audit he said, adding: Many programming language communities are working towards Sigstore adoption and the Sigstore community is working closely with them. We just announced a new Python client for PyPI and are hoping to extend this to other ecosystems like Maven Central and RubyGems.

In terms of broader enterprise adoption (likely to accelerate when it is GA) he said in an emailed Q&A that a number of enterprises have already adopted Sigstore and are using it for signing and verifying both open and closed software. Notably the Department of Defense Platform One team has implemented Sigstore signatures into the IronBank container hardening platform which means they can verify container images, SBOMS and attestations.

sigstores keyless signing has raised some concernst that it could make revocation harder but thats not the case, he added, telling The Stack: No, in fact the opposite is true! While it is true that the signatures on software are stored forever, software verification using Sigstore does support artifact revocation. Further, Sigstore allows after-the-fact auditing to help organizations understand the extent of a compromise, and Sigstore makes discovering compromises in the first place easier by posting signatures on a transparency log. The Sigstore community recently published Dont Panic: A Playbook for Handling Account Compromise with Sigstore with more details on this

In terms of policy automation or vendor services support for sigstore, Lorenc as a co-creator had understandably got in early. His companys Chainguard Enforce, announced last week, is the first tool with native support for modern keyless software signing using the Sigstore open source standard he said, adding that the product will give CISOs the ability to audit and enforce policies around software signing for the code they use.

sigstores release had met with genuine appreciation across the community in 2021, with Santiago Torres-Arias, Assistant Professor of Electrical and Computer Engineering, University of Purdue noting that the software ecosystem is in dire need of something like it to report the state of the supply chain. I envision that, with sigstore answering all the questions about software sources and ownership, we can start asking the questions regarding software destinations, consumers, compliance (legal and otherwise), to identify criminal networks and secure critical software infrastructure. This will set a new tone in the software supply chain security conversation.

Its great to see adoption of sigstore, especially with a project such as Kubernetes which runs many critical workloads that need the utmost protection, said Luke Hinds, Security Engineering Lead at Red Hat, CTO & Member of the Kubernetes Security Response Team & Founder of the sigstore Project in a May 3 release.

Kubernetes is a well known and widely adopted open source project and can inspire other open source projects to improve their software supply chain security by following SLSA levels and signing with sigstore, added Bob Callaway, Staff Software Engineer at Google, sigstore TSC member and project founder.

He noted: We built sigstore to be easy, free and seamless so that it would be massively adopted and protect us all from supply chain attacks. Kubernetes choice to use sigstore is a testament to that work.

Security firm BlueVoyant earlier in 2021 noted after a survey of 1,500 CISOs, CIOs, and CPOs from the US, UK, Singapore, Switzerland and Mexico) that 77% had limited visibility around their third-party vendors (let alone the components they were using) and 80% having suffered a third-party related breach.

Users can find out how sigstore works in more detail here.

Original post:
Kubernetes has standardised on sigstore in a landmark move - The Stack

FLOW LAUNCHES $725 MILLION ECOSYSTEM FUND TO DRIVE INNOVATION ACROSS THE FLOW ECOSYSTEM – PR Newswire

Participants include industry-leading firms that have backed several of the most successful Web3 companies, such as a16z, AppWorks, Cadenza Ventures, Coatue, Coinfund, Digital Currency Group (DCG), Dispersion Capital, Fabric Ventures, Greenfield One, HashKey, L1 Digital, Mirana Ventures, OP Crypto, SkyVision Capital, Spartan Group, Union Square Ventures, and Dapper Ventures.

"We are thrilled to see such a strong vote of confidence in the Flow ecosystem from some of the world's leading investors in Web3 through their commitment to this Fund," said Roham Gharegozlou, CEO of Dapper Labs. "With their active participation and support, the Ecosystem Fund has the opportunity to become a real game-changer for the 7500+ strong and fast-growing developer community in the Flow ecosystem."

With a focus on enabling more distributed and equitable Web3 opportunities to developers around the globe, participants will focus on providing support for gaming, infrastructure, decentralized finance, content and creators. The resources are expected to be used by developers for product development, product scaling, team expansion, user acquisition and general operating expenses.

"The Ecosystem Fund is an opportunity to power the next generation of developers across the global Flow community," said Dan Rose, Chairman of Coatue Ventures. "Coatue has already backed multiple companies building in the Flow ecosystem including Dapper Labs, Crypthulu and Faze Technologies, and we are excited to play an active role in enabling more Web3 opportunities."

In addition to financial support, the developers in the Flow ecosystem will be able to leverage expertise via informational events, office hours, accelerators & incubators, subsidized office space and similar initiatives. For example, investors will provide Flow teams office space in cities such as Berlin (Greenfield One) and Asia (for AppWorks Accelerator program), and Liberty City Ventures will be providing two scholarships for college students to work on Flow-related projects. As a Venture Partner for Bybit and BitDAO, Mirana Ventures will also help catalyze strategic collaboration opportunities for Flow projects.

"As web3 accelerates and sophisticated app developers search for the best platforms, Flow is perhaps the best decentralized blockchain built for the scale, security, and ease of use most modern startups need to succeed." said David Pakman, Managing Partner at CoinFund. "The Flow Ecosystem Fund will be a huge accelerator of innovation and growth on the platform and we at CoinFund are excited to work with this talented community to help drive innovation and growth."

Originally developed by Dapper Labs to create more efficient, secure and scalable proof-of-stake blockchain experiences, Flow is an open-source, developer-friendly and energy efficient blockchain built for consumer applications. With global partners including the NBA, NFL, UFC and Dr. Seuss; unicorn developers such as Animoca and PlayCo; and emerging projects such as Genies, Fancraze and Cryptoys, Flow has seen daily transactions triple since September 2021 as it has grown into the leading blockchain for nonfungible token (NFT) sales by number of NFT transactions.

To learn more about Flow and the Flow Ecosystem Fund, please visitwww.flow.com/ecosystemsupport.

About Flow

Flow is the blockchain designed to be the foundation of Web3 and the open metaverse, supporting consumer-scale decentralized applications, NFTs, DeFi, DAOs, and more. Powered by Cadence, an original programming language built specifically for digital assets, Flow empowers developers to innovate and push the limits that will bring the next billion to Web3. Created by a team that has consistently delivered industry-leading consumer-scale Web3 experiences including CryptoKitties, Dapper, and NBA Top Shot, Flow is an open, decentralized platform with a thriving ecosystem ofcreators from top brands, development studios, venture-backed startups, crypto leaders, and more. For more information, visitwww.flow.com.

SOURCE Flow

Read more here:
FLOW LAUNCHES $725 MILLION ECOSYSTEM FUND TO DRIVE INNOVATION ACROSS THE FLOW ECOSYSTEM - PR Newswire

The Progress of Low-Code/No-Code and an Update to our Thesis – Madrona Venture Group

Low-Code/No-Code solutions are not new they have existed in some way, shape, or form for more than thirty years. Microsoft Excel was probably the earliest LCNC solution of its kind it enabled workflows in various ways for billions of people, most of which are still using it. As a developer, I remember my world changing when Microsoft released Visual Basic. Its graphical user interface (GUI) allowed developers to modify code by simply dragging and droppingobjectsand defining their behavior and appearance through the creation of an abstraction layer that hid complexities and automated routine tasks.

The idea ofcreating high-quality solutions at speed and scale without deep coding capabilities or an expensive development team is what most businesses want. Momentum around these Low-Code/No-Code solutions started ramping up in the early 2000s with companies like Smartsheet, which focuses on breaking down silos and creating a dynamic work environment. But that momentum has begun to increase significantly over thelast decade and even more so in the last five years. We saw the launch of AirTable for workflows, Coda for in-doc collaboration, Microsoft Power Apps and Appsheet, which was acquired by Google, for creating apps, Unqork with its visual development platform, and Plus Docs for real-timedata capture and sharing. All of this has the singular focus of democratizing technology to empower creators and builders in the modern world.

Low-Code/No-Code is a visual and hassle-free approach to software development. Low-Code/No-Code democratizes software application development. Users without deep programming knowledge are able to build enterprise-level applications that are deployable to teams and across enterprises.

In its simplest construct, you can think of Low-Code/No-Code as a visual and hassle-free approach to software development. Low-Code/No-Code platforms abstract, automate and optimize every step of a process and enable rapid delivery of any software solution. Low-Code/No-Code democratizes software application development users without deep programming knowledge are able to build enterprise-level applications that are deployable to teams and across enterprises.

Developers utilize Low-Code for rapid software delivery and workflow automation. Other professionals or knowledge workers are able to develop simple apps or expand app functions with minimal visual programming, automatic code generation, and model-driven design.

On the other hand, No-Code takes a more visual approach to creating apps or solutions without the need to know any programming languages. Users can drag and drop components to create a complete solution. Its critical to know that in reality, No-Code is never truly without code there is code involved, but it is abstracted behind an easy-to-use visual user interface.

Many factors are contributing to the acceleration of the creation and use of Low-Code/No-Code solutions.

Weve seen communities of makers grow faster over these last two years: sharing bread baking recipes on TikTok, DIY home improvement projects on YouTube. Just as were seeing people outside technology getting really excited about building stuff again, were seeing it in no code as well: people are posting challenges, like One Hundred Days of No Code on Twitter and creating maker communities supporting their building journeys. The no-code building blocks have been around for a decade, but these open maker communities are quickly on the rise. Coda Head of Solution Services John Scrugham

As the barrier to entry to participate in what was previously a highly technical field keeps getting lower, were seeing the number of people who want to change how things have always been done spike. People are more comfortable with technology, and as John Scrugham, Codas Head of Solution Services, said during Madronas annual meeting, all anyone needs is a $200 device with basic capabilities, and they can pull up everything they need to start building a solution to a productivity issue theyre having. That mindset is not limited to the workplace. John said he thinks that the recent growth in the creator/maker mindset spurred by the pandemic is inspiring people to try it in all aspects of life.

Weve seen communities of makers grow faster over these last two years: sharing bread baking recipes on TikTok, DIY home improvement projects on YouTube. Just as were seeing people outside technology getting really excited about building stuff again, were seeing it in no code as well: people are posting challenges, like One Hundred Days of No Code on Twitter and creating maker communities supporting their building journeys, said Coda Head of Solution Services John Scrugham. The no-code building blocks have been around for a decade, but these open maker communities are quickly on the rise.

It is really important for product growth and viral adoption of these types of products that people arent just using them at work. If that were the case, you wouldnt be able to share them with other people, which is pretty important. Plus Docs CEO Daniel Li

Another important observation thatPlus Docs CEO Daniel Li made was that people are now using Low-Code/No-Code tools not just in their work lives but also outside of work because there is so much low-hanging fruit to improve cumbersome workflows and processes anywhere.

As an example, we at Madrona use Plus Docs to track the performance of some of our portfolio companies and have also built a set of dashboards to track the ski conditions at Whistler for the avid skiers we have on the team.

It is really important for product growth and viral adoption of these types of products that people arent just using them at work, said Plus Docs CEO Daniel Li. If that were the case, you wouldnt be able to share them with other people, which is pretty important.

Low-Code/No-Code platforms put the power of application development into everyones hands. Users can range from knowledge workers all the way to field specialists, including those that run x-ops functions. The primary goal is to do things faster and cheaper in a more repeatable and systematic way using software and automation versus manual tooling.

If once a week you have to provide a status report, and youre comfortable going through your emails, pulling out information, going to spreadsheets, cutting out information, and building that deck for that status meeting, and you think that is the best you can do. Youre probably not the target user of this technology. But if you think theres got to be a better way to get information right from the source and present it through a live dashboard, so you never have to rebuild this deck that is the mindset. You have to be somebody who wants to change the status quo. Smartsheet Chief Product Officer & EVP of Engineering Praerit Garg

Having spent years building Smartsheet, Chief Product Officer & EVP of Engineering Praerit Garg explained the typical Low-Code/No-Code user well during Madronas annual meeting: Someone who looks at problems differently and thinks there are better ways to solve them.

He further added: If once a week you have to provide a status report, and youre comfortable going through your emails, pulling out information, going to spreadsheets, cutting out information, and building that deck for that status meeting, and you think that is the best you can do. Youre probably not the target user of this technology. But if you think theres got to be a better way to get information right from the source and present it through a live dashboard, so you never have to rebuild this deck that is the mindset. You have to be somebody who wants to change the status quo.

The consumerization of technology is back! The user is and wants to be more in control of their ability to build, deploy and manage at scale. With the advent of the creator economy, builders want solutions deployed in seconds without having to go through a cumbersome development process. The underlying framework that makes this possible is truly intelligent software with not just analytical but decision-making capabilities. There will always be work that requires the skills of what you can call professional programmers but there are only so many of them coming out of college.

We are excited to see what sort of new ideas the millions of other people that are no longer constrained by the requirements of deep coding knowledge and now have the capacity to innovate around technology in a way they never have before. At Madrona, we want to meet the next great founders who are innovating in the Low-Code/No-Code space. My contact info is linked in the byline!

July 14, 2020

This is the third in our series describing our investment themes for 2020 and beyond. Software is eating the world, but today, most organizations have a limit on how quickly they can build software. While

December 17, 2020

Today we are excited to announce our investment in Rec Room, an online universe where people can play and create games with their friends. We first met Nick Fajt and the founding Rec Room team

October 25, 2017

Today we are pleased to announce that Ted Kummert is rejoining Madrona as Venture Partner. Ted spent the last four years at Apptio as EVP of Engineering and Cloud Operations. While at Apptio (NASDAQ:APTI), Ted

Original post:
The Progress of Low-Code/No-Code and an Update to our Thesis - Madrona Venture Group

PRESS RELEASEAmnesia Atmica NYC Opens in Times Square this May – Bulletin of the Atomic Scientists

Times Square Arts Presents ZERO NUKES, a Large-Scale Sculpture by Artist Pedro Reyes and Call to Action to Eliminate Nuclear Weapons

New York, NY May 10, 2022 This May, Times Square Arts presents Amnesia Atmica NYC, a public exposition centered around artist Pedro Reyess ZERO NUKES, a 30-foot-tall inflatable sculpture that will function as a beacon to bring experts, political leaders, and engaged citizens together to address nuclear threat. On view in Times Square from May 17 May 24, 2022, the sculpture will serve as a central platform for a series of public programs and events designed to spotlight the voices of activists, artists, scientists, and community organizations in the anti-nuclear field, and drive conversations around non-proliferation and disarmament. Amnesia Atmica is curated by Pedro Alonzo, who specializes in ambitious artworks in public spaces.

ZERO NUKES is the centerpiece of Amnesia Atmica, commissioned by the Bulletin of the Atomic Scientists, which focuses on three main areasnuclear risk, climate change, and disruptive technologiesand equips the public, policymakers, and scientists with the information needed to reduce man-made threats to our existence. ZERO NUKES focuses on the zero as a graphic, visual, and conceptual element common to all languages. The structure stands as a symbol of global unity for a single non-controversial cause: to avoid the destruction of life on earth.

We commissioned Pedro Reyes to create an artwork that engages with the growing threat of nuclear conflict. Amnesia Atmica is his response, says Rachel Bronson, President and CEO of the Bulletin of the Atomic Scientists. Events in Ukraine are a stark reminder that nuclear weapons continue to threaten humanity on a daily basis. ZERO NUKES is Pedros latest contribution to this collection.

Amnesia Atmica holds a topical urgency and warning as nuclear weapons states around the world are investing in ways that are making these weapons more rather than less usable. The project will feature a two-day expo on May 19 and 20 showcasing artists, organizers, and organizations offering hands-on activities, a VR experience, information booths, and merchandise to engage the hundreds of thousands of visitors who pass through Times Square weekly. Public programs will be led by the Bulletin of the Atomic Scientists, and will include experts from organizations in the field, such as the International Campaign to Abolish Nuclear Weapons, a global coalition focused on mobilizing civil society around the world to support the specific objective of prohibiting and eliminating nuclear weapons; The Tank, a Manhattan-based non-profit arts presenter and producer serving emerging artists; Games of Change, an organization that supports using games for social change; Global Zero an international movement dedicated to stopping the spread of nuclear weapons; and Union of Concerned Scientists, a science advocacy group dedicated to solving the worlds most pressing problems.

There is no better public platform than Times Square to host a diversity of viewpoints and in turn, open minds and encourage a better understanding of the complexities around the most pressing issues of our day, says Tom Harris, Times Square Alliance President.

Times Square has a rich cultural history as an epicenter of protest and a platform that elevates a chorus of voices of our era, says Times Square Arts Director Jean Cooney. We are thrilled to turn this platform over to a range of artists confronting the most important topics of our times, such as Pedro Reyes and the issue of nuclear disarmament.

Times Square Arts will unveil Pedro Reyes ZERO NUKES, on Tuesday, May 17th at 1:30pm. If you are interested in covering or attending the unveiling, please email Ali Rigo ([emailprotected]).

Download a copy of this press release here.

PUBLIC PROGRAMMING

Public Unveiling, Tuesday May 17th at 1:30pm (Duffy Square)

1:30pm Remarks from Times Square Alliance

1:45pm Remarks from Mitchie Takeuchi, Producer The Vow From Hiroshima, Not Just A Survivor Film LLC. Mitchie will share her experiences as a second-generation Hiroshima survivor, her father having served the Red Cross in Hiroshima before and after the bombing.

1:50pm Beatrice Finn, who received the Nobel Peace Prize on behalf of ICAN, will speak about the immediacy of nuclear threats. ICAN NYC will be part of the Mobilization Expo, hosted by the Bulletin of the Atomic Scientists on Thursday and Friday to share what New Yorkers can do.

1:55pm Remarks from Pedro Reyes, artist of Zero Nukes

2:00pm Adjourn; Performance produced by The Tank

Mobilization ExpoPartner organizations dedicated to reducing nuclear weapons will host information sessions, public displays, and hands-on activities to encourage public engagement and mobilization. Participating organizations include: B(L)OOM; Bulletin of the Atomic Scientists; Das Bombe; Games for Change; Global Zeros Bomb Squad; Horizon 2045; ICAN; NYCAN; PATH Collective; Reverse the Trend; #StopInvestingInDestruction; Union of Concerned Scientists; among others.

Expo Schedule:Thursday, May 19, 12pm-8pmFriday, May 20, 12pm-8pm

ZERO NUKES: Performance SeriesZERO NUKES is a series of anti-nuclear performances curated and produced by Meghan Finn, Artistic Director of The Tank, a Manhattan-based non-profit arts presenter and producer serving emerging artists. The series is part of The Tanks outdoor series, Open Air Tank. Emerging artists will perform storytelling, hip hop and spoken word in Times Square beneath the mushroom cloud. Musical performers include Miriam Pultro, Questa Music, Elyse Durand, Baba Israel and Grace Galu of Soul Inscribed, Sarah Cagianese of Frances Rose, and Doll Parts. Performance and spoken word artists include Gabriel G Torres, Paige Cowen, David Trevor Lawson, Kev Berry, Carol Maz, Ben Firke, Emma Gomez, and Hunter Gause.

Performance Schedule:Tuesday, May 17, 2-4 pm- following the unveilingWednesday, May 18, 2-4pmThursday, May 19, 2-4pmFriday, May 20, 2-4pmMonday, May 23, 2-4pm

Artists Against the BombA collection of urgent messages calling for universal nuclear disarmament. The campaign is an international effort by artists, writers and activists who, through words and pictures, call for a reduction of the worlds nuclear weapons down to zero. The effort is designed to support disarmament organizations across the globe.

StockpileA new participatory work by Pedro Reyes where 12,075 rocket shaped balloonsequivalent to the total estimated number of global nuclear weaponswill be handed out to the public throughout the event. The balloons are a limited edition artwork that will be given to participants upon posting an image of ZERO NUKES on social media with the hashtags #ZERONUKES and #AmnesiaAtmica or upon following a participating organization such as the Bulletin.

Stockpile Schedule: Daily Handout, 4pm

Virtual Reality: On the Morning You Wake (to the end of the world)Games for Change will showcase On the Morning You Wake (to the End of the World), a virtual reality experience that uses innovative documentary storytelling and virtual production techniques to viscerally recreate the lived experiences of people of Hawaii, who, for 38 minutes, had to react during a false alert in January 2018. Learn more about the project here.

On the Morning You Wake (to the End of the World) Schedule:

Time: 12pm-8pm, May 19 and 20

Address:1560 Broadway, Suite 901New York, NY 10036Due to construction, entrance at 165 W. 46th Street

Take ActionThe project will consist of a QR code leading to information that guides the public in how to get involved, including clear ideas on how to take action, reach your representative, and find organizations to follow. Join local and international efforts to reduce nuclear dangers, discuss current events with experts, connect with various education and advocacy organizations, and post your concerns to social media. You can even cast your vote to share what time you think it should be on the Bulletins iconic Doomsday Clock. Also, feel free to tag and follow Times Square Arts Instagram account (@tsqarts) to get involved.

Merchandise KioskThe kiosk operated by public art ambassadors will feature an assortment of information as well as merchandise available for the public to buy such as shirts, hats, and buttons. The graphics on the kiosk designed by Pedro Reyes will prominently display the ZERO NUKES imagery. Any net proceeds will go towards traveling the cloud in support of other disarmament-based events.

Frieze New York Art FairAmnesia Atmica will be presented in collaboration with Frieze New York from May 18-22. Frieze will feature two booths dedicated to Amnesia Atmica, one designated for a historical archive featuring contributions to the disarmament movement by artists and activists in the 20th century; and the other an installation of imagery and merchandise from the ZERO NUKES campaign. One of the two booths will also feature Pedro Reyes limited edition interactive artwork Stockpile.

ABOUT AMNESIA ATMICAAmnesia Atmica opened in Mexico City in 2020 to raise public awareness, revitalize the once vibrant anti-nuclear community, and most importantly, put pressure on political leaders, policymakers, and global citizens by informing them of the consequences of inaction. It included an early version of ZERO NUKES, a locally curated dance performance, and presentations by leading dignitaries. The artist aims to draw attention to the issues of nuclear threat and the failure of experts and leaders to contain it. The title, Amnesia Atmica, urges visitors to not forget or ignore the global issues at hand and engage first-hand with solutions-oriented thinking and strategies. Inspiration for Amnesia Atmica was sparked at an incubator created by N Square, a network of innovators committed to ending the nuclear threat.

It is exactly because of what we are confronting around the world today that I created this piece. Im hoping to provide an invitation for people who want to get engaged, learn from others, connect and create a safer future. Im trying to provide a megaphone for the disparate voices committed to abolishing nuclear weapons. Im trying to provide answers for those asking what can I do?, says Pedro Reyes.

Artists like Pedro Reyes can play an important role in revitalizing the disarmament community. While ZERO NUKES sends a clear multilingual message in support of the disarmament movement, Amnesia Atmica is a symbol of the consequences of inaction, says curator Pedro Alonzo.

Reyes has garnered international acclaim for large-scale projects that explore current social and political issues, through the use of mediums like sculpture, performance, video, and activism. His work tends to investigate the power of individual and collective organization to incite change through communication, creativity, happiness, and humor, making Times Square an ideal locale for his project, as an epicenter of both protest and kitsch. New York City was also the center of the 1982 Rally for Nuclear Disarmament, making a return to the city generations later a fitting representation of the timelessness of nuclear instability.

Reyes is working with experts in the nuclear realm on the project, including the Bulletin of the Atomic Scientists and the International Campaign to Abolish Nuclear Weapons, among others.

Supporters of the project include the Bancel Foundation, the Carnegie Corporation of New York, N Square, Abakanowicz Arts and Culture Charitable Foundation, David Rockefeller Fund, The Prospect Hill Foundation, Lisa Tung and Spencer Glendon, Miner / Nagy Family.

ABOUT PEDRO REYESReyes (b. 1972, Mexico City) lives and works in Mexico City. He has won international attention for large-scale projects that address current social and political issues. Through a varied practice utilizing sculpture, performance, video, and activism, Reyes explores the power of individual and collective organization to incite change through communication, creativity, happiness, and humor.He studied architecture at the Ibero-American University in Mexico City. Solo exhibitions have been held with Museum Tinguely, Basel, Switzerland (2020); SCAD, Georgia, USA (2019); Creative Time, New York, USA (2016); Dallas Contemporary, TX, USA (2016); La Tallera, Cuernavaca, Mexico (2016); Hammer Museum, Los Angeles, CA, USA (2015); ICA, Miami, FL, USA (2014); The Power Plant, Toronto, Canada (2014); Walker Art Center, Minneapolis, MN, USA (2011); Guggenheim Museum, New York, NY, USA (2011); CCA Kitakyushu, Japan (2009); Bass Museum, Miami, FL, USA (2008;) and San Francisco Art Institute, CA, USA (2008). Reyes has participated in group exhibitions at the 21st Century Museum of Contemporary Art, Kanazawa, Japan (2015); The National Museum of XXI Century Arts (MAXXI), Rome (2015); Beijing Biennale, China (2014); Whitechapel Gallery, London, UK (2013); dOCUMENTA (13), Kassel, Germany (2012); Liverpool Biennial, UK (2012); Gwangju Biennial, South Korea (2012); Lyon Biennale, France (2009); and the 50th Venice Biennale, Italy (2003). In Fall 2016, Reyes served as the inaugural Dasha Zhukova Distinguished Visiting Artist at MIT Center for Art, Science & Technology (CAST) at Massachusetts Institute of Technology in Cambridge, Massachusetts.

ABOUT PEDRO ALONZOPedro Alonzo is a Boston-based independent curator. He is currently an Adjunct Curator at Dallas Contemporary. Since 2006 he has specialized in producing exhibitions that transcend the boundaries of museum walls and spill out into the urban landscape, addressing audiences beyond the traditional museum public. In 2017 he formalized his practice by establishing A&C. At the ICA Boston, he curated Shepard Faireys 20-year survey, Supply, and Demand. For the MCA San Diego, he organized the group exhibition Viva la Revolucin: A Dialogue with the Urban Landscape, which featured site-specific works inside the museum and throughout downtown San Diego. In 2015 Alonzo began to develop exhibitions designed to engage the public, starting with a citywide exhibition in Philadelphia, Open Source: Engaging Audiences in Public Space, followed by working with JR to place a gigantic image of a Mexican child named Kikito, overlooking the US/Mxico border wall in Tecate. Since 2016 Alonzo has worked with The Trustees, Massachusettss largest conservation and preservation non-profit, to launch and curate the organizations first Art and the Landscape initiative, resulting in site-specific commissions created by the artists: Sam Durant (2016), Jeppe Hein (2016), Alicja Kwade (2018), and Doug Aitken (2019). In 2019, Pedro Alonzo worked with Now + There as guest curator for Oscar Tuazons Growth Rings and in 2020 for Jose Dvilas To Each Era Its Art. To Art, Its Freedom. for Central Wharf Park in Boston. The most recent project he developed at Dallas Contemporary was a major exhibition that brought together rarely seen works by Japanese artist Yoshitomo Nara.

ABOUT THE BULLETIN OF THE ATOMIC SCIENTISTSThe Bulletin equips the public, policy makers and scientists with the information needed to reduce man-made threats to our existence. At its core, it is a media organization, publishing a free-access website and a bimonthly magazine. But it is much more. The Bulletins website, iconic Doomsday Clock, and regular events draw attention to three main areas: nuclear risk, climate change, and disruptive technologies. What connects these is a driving belief that because humans created them, we can control them. The Bulletin is an independent, nonprofit 501 c (3) organization founded by Manhattan Project scientists nearly 75 years ago. It gathers the most informed and influential thought leaders tracking man-made threats and brings innovative thinking to a global audience. The Bulletin applies intellectual rigor to the conversation and does not shrink from alarming truths.

The Bulletins iconic Doomsday Clock uses the imagery of apocalypse (midnight) and the idiom of nuclear explosion (countdown to zero) to convey threats to humanity and the planet. It is currently set at 100 seconds to midnight, the closest its ever been to midnight. The Clock is set every year by the Bulletins Science and Security Board in consultation with its Board of Sponsors, which includes 11 Nobel laureates. The Clock has become a universally recognized indicator of the worlds vulnerability to catastrophe from nuclear weapons, climate change, and disruptive technologies.

ABOUT TIMES SQUARE ARTSTimes Square Arts, the public art program of the Times Square Alliance, collaborates with contemporary artists and cultural institutions to experiment and engage with one of the worlds most iconic urban places. Through the Squares electronic billboards, public plazas, vacant areas and popular venues, and the Alliances own online landscape, Times Square Arts invites leading contemporary creators, such as Mel Chin, Tracey Emin, Jeffrey Gibson, Ryan McGinley, Yoko Ono, and Kehinde Wiley, to help the public see Times Square in new ways. Times Square has always been a place of risk, innovation and creativity, and the Arts Program ensures these qualities remain central to the districts unique identity.

CONNECT WITH AMNESIA ATOMICA@tsqarts@zeronukes@_pedro_reyes_ @bulletinoftheatomicscientists@trucatriche #ZeroNukes

PRESS CONTACTSAli RigoSenior Account Executive, Cultural Counsel[emailprotected]

Lauren GagnonAccount Coordinator, Cultural Counsel[emailprotected]

Download a copy of this press release here.

Read more:
PRESS RELEASEAmnesia Atmica NYC Opens in Times Square this May - Bulletin of the Atomic Scientists

Open-Source Code a Marginal Problem, Managing It the Key Challenge: Report – TechNewsWorld

Businesses using open-source code which is embedded in a large majority of enterprise-grade software need a full-scale inventory of its existence. That is missing in many corporate IT records.

Without a detailed accounting of open-source code running within their software, companies have no way to monitor software policies, licenses, vulnerabilities, and versions. That means IT departments are clueless about the overall health of the open-source components they use.

At issue is that many enterprises are sure they do not use open source, so they do not have to worry about keeping security patches and code upgrades current. That misconception usually results in network breaches leading to malware and ransomware attacks.

The 2022 Synopsys Open Source Security and Risk Analysis (OSSRA) Report released last month showed an all-time high in open source code running in software. The problem of using open source has been growing consistently year after year.

Open-source code is prevalent in software packages from business applications to network and server processes. Unless enterprises make a concerted effort to catalog and monitor how their organizations use open-source snippets, even known vulnerabilities go unattended.

Fixing the problems the report highlights is a question of ownership, according to Tim Mackey, principal security strategist at Synopsys SIG.

The results suggest a tacit realization that the software powering businesses might not be under their managers control. It also signals that the open-source code in commercial products may not meet the standards to which they hold their own teams accountable.

Given the OSSRA source data comes from technical due-diligence efforts related to mergers and acquisitions activity, and not a survey, the OSSRA report is a reflection of the current state of software usage and not the opinion of what it might be, Mackey told LinuxInsider.

The 2022 OSSRA report audited anonymized findings from over 2,400 commercial codebases across 17 industries. The summary results in this graphic are a wake-up call to corporate IT overseers.

Source: 2022 Open Source Security and Risk Analysis Report (Credit: Synopsys)

The report serves as a crisis warning, especially in light of the ongoing impact of the Log4J vulnerability that appeared late last year.

Of the 2,400 commercial codebases across 17 industries, 2,097 contained security and operational risk assessments. The growth in the number of codebases Synopsys audited is 64 percent larger than last years. Much of that increase resulted from mergers and acquisitions throughout 2021.

The security threats resulting from Log4j were a significant reason President Biden late last year pushed his Executive Order on Cybersecurity, noted Mackey.

It was also key for the OSSRA report to motivate corporate chief information security officers, vice presidents of engineering, and chief technical officers to analyze their open-source software usage and see how well the OSSRA data maps to their own processes and governance.

The OSSRA report has consistently highlighted that the problem with open source is not within the open-source code itself, but in how people use it, he added. Freely downloadable code is wonderful for the pocketbook, but that does not mean it can be managed using the same processes as you might find for commercial software.

A key tenet of the OSSRA report is that risks can stem from unmanaged use of open source. The difference is significant between a lack of open-source management and the fact that open source itself is not the problem, the report concludes.

Open source now is the foundation of commercial software, noted researchers. It is found in 97 percent of commercial software. Despite its universal use, the misperception that open source is somehow inherently dangerous persists.

A D V E R T I S E M E N T

Unlike Microsoft and Apple products, where software vendors can proactively push updates and patches to known users, open-source has no such vendor to handle risk management issues, observed Mackey.

Existing patch management solutions are often geared toward an update model, he added. Software that is freely downloadable means the software producer does not know who its customers are or even if they are using the software they downloaded.

The patching process and its assumptions get lost when people focus on topics like Software Bill of Materials (SBOM) being a silver bullet for open-source management, according to Mackey. Fixing the problem requires going beyond SBOM.

SBOM is simply a tool to improve processes that were designed for a different type of software consumption, he said. In addition, industries need to focus on identifying and monitoring open-source components in the commercial software they use. That is what has to happen to correct what the OSSRA report indicates are problems, said Mackey.

Using obsolete open-source components requires companies to adopt a process for monitoring when their components become out-of-date. But it is not just explicitly declaring dependencies or selecting approved suppliers. Mackey sees the problem as more deeply rooted in the supply chain.

The Log4Shell experience is a perfect example of a foundational component that few knew existed. But once Log4j became front of mind due to the impact of the Log4Shell vulnerability, [it] forced teams to rush and figure out how to best manage it, he pointed out.

That is the solution enterprise users of commercial software must do. Inventory the existence of open-source components. Then establish and execute monitoring and patching and updating.

Whatever processes those teams used to successfully manage their Log4j experience at scale should be applied to other components. In other words, use the Log4j experience to build a more scalable solution for your organization, urged Mackey.

Follow this link:

Open-Source Code a Marginal Problem, Managing It the Key Challenge: Report - TechNewsWorld

GM Partners With Red Hat on Open-Source Linux Operating System – CNET

Most current vehicle operating systems -- the software your car or truck's systems run on -- are based on relatively closed-off, proprietary software packages from businesses such as Research In Motion (the company behind BlackBerry), Tier 1 supplier Continental and Google. GM is looking to change that through a partnership with software firm Red Hat.

GM confirmed Tuesday that Red Hat, an IBM subsidiary, will lead the development of a new, open-source Linux-based operating system that will underpin the Ultifi initiative, a cloud-based customer service platform GM announced in 2021. GM's Ultifi platform will oversee everything from future infotainment operations and battery management to the way the company's cars communicate with other vehicles, smart infrastructure and even homes.

What makes Red Hat's software special compared to the alternatives on the market? Well, a few things, but chiefly, Red Hat'scontinuous functional safety certification system. An automotive software developer has to go through a number of safety certification processes to ensure that not only is its software reliable and robust, it's also appropriately resistant to cyber attacks and similar threats. Safety certification is expensive, time-consuming and it's carried out repeatedly for every major change or update. Red Hat's system streamlines that process through another partnership with a company called Exida, which handles the certification.

"General Motors is now a platform company and working with Red Hat is a critical element in advancing our Ultifi software development," said Scott Miller, GM vice president of software-defined vehicle and operating system, in a statement. "Incorporating the company's expertise in open source solutions and enterprise networks will pay dividends as we aim to provide the most developer-friendly software platform in the industry. With Red Hat's operating system as a core enabler of Ultifi's capabilities, the opportunity for innovation becomes limitless."

What does this mean for someone who buys an Ultifi-equipped GM vehicle such as the 2023 Cadillac Lyriq electric SUV in the future? It means much more frequent over-the-air software updates, which can enable new features or address bugs on a more timely basis. It also means the variety of apps and features could expand greatly thanks to a more developer-friendly platform, especially since GM plans to open up its software to "authorized third-party developers who meet strict security, safety and privacy standards." In short, the new platform sounds pretty cool.

Now playing: Watch this: GM introduces its new customer service platform, Ultifi

3:51

Read the original here:

GM Partners With Red Hat on Open-Source Linux Operating System - CNET

Kubernetes taps Sigstore to thwart open-source software supply chain attacks – ZDNet

Container orchestrator Kubernetes will now include cryptographically signed certificates, using the Sigstore project created last year by the Linux Foundation, Google, Red Hat and Purdue University, in a bid to protect against supply chain attacks.

The Sigstore certificates are being used in the just-released Kubernetes version 1.24 and all future releases.

According to founding Sigstore developer Dan Lorenc, a former member of Google's open-source security team, the use of Sigstore certificates allows Kubernetes users to verify the authenticity and integrity of the distribution they're using by "giving users the ability to verify signatures and have greater confidence in the origin of each and every deployed Kubernetes binary, source code bundle and container image."

It's one step forward for open-source software development in the battle against software supply chain attacks.

SEE: The Emotet botnet is back, and it has some new tricks to spread malware

The Linux Foundation announced the Sigstore project in March 2021. The new Alpha-Omega open-source supply chain security project, which is backed by Google and Microsoft, also uses Sigstore certificates. Google's open-source security team announced the Sigstore-related project Cosign in May 2021 to simplify signing and verifying container images, as well as the Rekor 'tamper resistant' ledger, which lets software maintainers build systems to record signed metadata to an "immutable record".

According to Lorenc, the Kubernetes release team's adoption of Sigstore is part of its work on Supply Chain Levels for Software Artifacts, or SLSA a framework developed by Google for internally protecting its software supply chain that's now a three-level specification being shaped by Google, Intel, the Linux Foundation and others. Kubernetes 1.23 achieved SLSA Level 1 compliance in version 1.23.

"Sigstore was a key project in achieving SLSA level 2 status and getting a headstart towards achieving SLSA level 3 compliance, which the Kubernetes community expects to reach this August," says Lorenc.

Lorenc tells ZDNet that Kubernetes' adoption of Sigstore is a major step forward for the project because it has about 5.6 million users. The Sigstore project is also approaching Python developers with a new tool for signing Python packages, as well as major package repositories such as Maven Central and RubyGems.

Kubernetes serves as critical focal points to help draw attention, take a large amount of work, and has an outsized impact on the entire supply chain, he says.

These efforts coincide with new projects like the new Package Analysis Project, an initiative by Google and the the Linux Foundation's Open Source Security Foundation (OpenSSF) to identify malicious packages for popular languages such as Python and JavaScript.

Malicious packages are regularly uploaded to popular repositories despite best efforts, with sometimes devastating consequences for users, according to Google.

Read more from the original source:

Kubernetes taps Sigstore to thwart open-source software supply chain attacks - ZDNet

It’s not easy getting an open-source company off the ground, Appwrite wants to help – ZDNet

Launching an open-source company isn't easy. Even the biggest pure-play open-source company, Red Hat, got its humble start in founding CEO Bob Young's wife's sewing closet. More recently, when Appwrite, a Backend as a Service (BaaS) business, CEO and founder Eldad Fux literally had "his back to the wall." Luckily for him, Fux obtained seed funding at the last minute.

By April 2022, Appwrite has gotten $27 million in funding. Looking ahead, the open-source Backend-as-a-Service (BaaS) platform for web, mobile, and flutterdevelopers with its integrated REST APIs future looks bright. With 27 full-time Appwriters and a community of over 150,000 developers, Appwrite may become a major developer success story.

That's great, but there was a lot of terror along the way. So, Fux has decided that he needs to give back to the open-source community.

The company is doing this with the "Appwrite OSS Fund." The idea behind the fund is to support open-source developers and their projects.

Here's how it works:

Now, this is not millions. You won't be launching a company with this funding. And, it certainly doesn't address the fundamental problem of early-stage open-source project funding. But, if you have an idea and you need just enough cash to get your show on the road, this may be exactly what you need.

See also

See the original post here:

It's not easy getting an open-source company off the ground, Appwrite wants to help - ZDNet

Top 12 Front End Development Tools in 2022 | by ISHIR | May, 2022 – Medium

Front-end development is an important part of having an online presence. Without front-end development, websites are pointless, and users cannot have a great experience.

However, front-end developers are always needed to keep up with the evolving needs of users. As a result, they have a variety of tools and resources to help them keep up to date.

1. Atom

Atom is a free GitHub tool that allows developers to work with open-source text and source codes. It is written in JavaScript and is embedded in GitControl. Its compatible with Microsoft Windows, Mac OS X, & Linux.

Atom has a variety of themes, features, flexible plugins, and languages to choose from. The Atom has a lot of important characteristics. It includes features such as Git and GitHub version management, a built-in package manager, and a smart auto-completion tool. You can also edit between platforms and use the software in several panes.

2. Sublime Text

Sublime Text is a cross platform source code editor & shareware. It supports a variety of programming & markup languages and can be enhanced with community-built plugins.

The software helps you manage text editing processes for markups, codes, and prose on Windows, macOS, and Linux. It also has built-in capabilities that allow you to manipulate various syntax definitions and highlighters.

3. Visual Studio Code

Visual Studio Code (VS Code) is a source-code editor for Windows, macOS, & Linux developed by Microsoft. Many programming languages, including Go, Node.js, JavaScript, C++, & Python, are supported by VS Code.

Most programming languages have fundamental features in VS Code, such as code folding, bracket matching, customizable snippets, and syntax highlighting. The editor component in VS Code is the same as in Azure DevOps.

4. npm

Node Package Manager is abbreviated as npm (npm is correctly written in lowercase). It is the worlds most crucial software registry. It has over 800,000 code packages and is used by open-source developers to distribute software.

5. Codepen

CodePen is used by front-end developers to create online environments. They can use it to test and display CSS, HTML, and JavaScript scripts or code snippets.

The fact that you can view the results in real time appeals to programmers. It speeds up the debugging process.

A developer can use CodePen to create and design a website, test it, and learn more about it. Furthermore, CodePen has a large community of programmers who are active in sharing their work and learning from one another.

6. Meteor

Meteor is a JavaScript platform for developing online and mobile applications. It includes a build tool, as well as a carefully built set of packages from the Node.js and JavaScript communities for creating user-friendly applications.

Meteor has a bundled npm that allows you to use the command without having to install it.

7. Zurb Foundation

The Zurb Foundation is a freely available front-end framework. Its free and comes with a responsive grid, as well as HTML and CSS UI components and templates. It is a volunteer-supported open-source project since 2019 that was previously maintained by ZURB.

To prototype a responsive site, the responsive framework leverages Sass/SCSS and provides the most frequent patterns. You can also use Sass mixins to effortlessly design and enhance Foundation components.

8. Git Extensions

Git Extensions is a control system of a distributed version. It allows users to manage source file collections and make various changes to them.

Users can make changes through a central repository, and the history displays what changes have been made. The principal repository, also known as the remote repository, uses a GUI to maintain the version control system using GIT commands.

9. Sass

Sass is one of the most widely used CSS preprocessors among developers. It converts style sheets to CSS and allows you to use CSS-compatible mixins, rules, variables, & functions.

Sass can organize large stylesheets, making it easier to share designs between projects. It also has two syntaxes, one of which can load on the other (SCSS & Sass).

10. LESS

LESS (Leaner Style Sheets) is a CSS language extension that is backwards compatible. If youre already familiar with CSS, understanding LESS will be a breeze.

The software added various features to CSS, such as loops and variables, to make CSS work easier. As a result, LESS makes websites more manageable and reusable. Furthermore, it is dynamic and supports CSS extensions.

11. BootStrap

While creating a website, a front-end framework is also crucial. A front-end framework is a collection of files and assets that are essential to web design.

BootStrap is one of the most popular front-end frameworks available. Developers can use it to make responsive CSS, HTML, or JavaScript webpages.

12. React JS

React JS is an open-source JavaScript front-end library. ReactJS allows programmers to create user interfaces based on UI components. Meta maintains it and it is free to access.

React can be used to create single-page mobile apps or applications that are rendered on servers. React, on the other hand, is primarily concerned with state management and the effects it has on the Document Object Model (DOM). As a result, React based apps requires more libraries for routing.

For programmers, front-end development tools are vital. These technologies must also keep up with the demands of developers who want to focus on producing more creative websites.

The Original Publication can be read at: Top 15 Front End Development Tools in 2022

Read the original:

Top 12 Front End Development Tools in 2022 | by ISHIR | May, 2022 - Medium

Red Hats Paul Cormier on RHEL 9, the edge and open source innovation – VentureBeat

We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today!

This is the IT new normal.

At least, its in the process of being defined.

We all need to adjust, said Paul Cormier, president and CEO of Red Hat, told VentureBeat. What that means is still in the formative stages.

The pandemic pushed the wheel of the new normal forward, and open-source and hybrid cloud are driving it further along, Cormier said today at Red Hat Summit 2022.

Open source, particularly, has gone far past the purview of hobbyists, he emphasized. CIOs that have used it and the pandemic as a way to pivot instead of just focusing on surviving have not only weathered well but have positioned their businesses for future flexibility and growth.

[ Related: Red Hat Enterprise Linux 9 offers new solution to verify the integrity of OSs ]

Its really the innovation engine thats driving this new normal, Cormier said. Where we thought things might be five years from now, have moved up to now.

Red Hat will make several announcements at its two-day summit this week. Notably, the company introduced Red Hat Enterprise Linux (RHEL) 9, the newest version of its flagship product. The platform will be generally available in coming weeks.

RHEL is a commercial open-source distribution platform for Linux. RHEL 9 is the first production release built from CentOS Stream, the free open-source community-supported Linux distribution platform downstream from RHEL.

The release is timely and strategic, Cormier said, as IDC predicts that by 2023, 40% of Global 2000 companies will base cloud selection processes on business outcomes rather than IT requirements. RHEL 9 provides a standardized platform allowing organizations to deploy new initiatives without having to abandon existing workloads or systems, he explained. It was built to support hybrid/multi-cloud deployments ranging from physical to on-premises to public cloud to edge.

We really designed RHEL 9 as a template for a technology world thats distributed, hybrid, automated, Cormier said.

With the significant growth in edge computing, the new version is designed to help address evolving IT needs at the edge, he said. It incorporates comprehensive edge management to oversee and scale remote deployments with zero-touch provisioning, system health visibility and responsive vulnerability migrations. It also has an automatic container roll-back as well as a new image builder service.

New security features are also built into RHEL 9, including those that address hardware-level security vulnerabilities such as Spectre and Meltdown. The platform introduces integrity measurement architecture (IMA) digital hashes and signatures, which allow users to verify operating system integrity and detect rogue infrastructure modifications.

As Cormier noted, new capabilities help IT organizations embrace automation across the hybrid cloud, cut complexity and enhance manageability. For instance, expanded sets of system roles and support of kernel live patching from the RHEL web console enable critical tasks at scale.

The hybrid world brings a lot of value, a lot of functionality, Cormier said. But it also brings a lot of complexity. We need automation to help manage that complexity.

Enterprise interest in edge computing continues to grow exponentially: IDC predicts the market to reach more than a quarter trillion dollars by 2025.

We hear a lot about the edge, and I dont think edge is a thing by itself, Cormier said. Edge is a piece of the architecture in a truly hybrid architecture.

With that, CIOs are no longer just responsible for the pieces that run within the four walls of their data center.

Now they also have to be concerned with apps that run into multiple clouds and out onto the edge whether that edge be a cell tower, a retail store or a factory floor.

Thats all now part of the CIOs world, Cormier said. The CIO has to develop for the edge, just as they do for the data center in the cloud. They have to operate the edge, monitor, update, and they have to secure the edge as part of that overall architecture.

Red Hat has released several new cross-portfolio edge capabilities to help organizations better adapt to edge computing. These include new functionalities across OpenShift (Red Hats family of containerization software products), new edge management feature sets, Podman roll-back to increase edge device uptime, and validated patterns allowing IT teams to quickly build edge stacks.

These are intended to simplify the process, speed deployment, enhance security and increase confidence on the part of administrators, Cormier explained.

For example, Red Hat has long been strong in the telco space, he said, and 4G technologies are built on proprietary, very vertically aligned stacks from hardware to firmware to the operating system to middleware all the way to the application. 5G, by contrast, is built from software, and containers enable alignment of applications. In the case of telco, the edge is all the way out to the cell tower.

It has to run as one common system from the cell tower to the intermediary data centers, to the main data centers, Cormier said. The edge now really completes that hybrid architecture.

He added that We really dont have time to move that data way back to the data center. You need to get the compute closer to the data. Thats where edge comes in.

Open source is critically important to this new era of innovation, Cormier emphasized. Not too long ago, open source was still in the domain of the hobbyist; now, developers versed in it are some of the most lucrative and sought after.

Cormier pointed out that original equipment manufacturers (OEMs) were working in open source and investing in it even when there was no real business coming from it; independent software vendors (ISVs) were certifying themselves on the Red Hat platform when open source was still a fringe concept; and CIOs, notably in the banking space, were early adopters of Linux and open source in production environments.

A lot of people have a lot of skill and a lot of passion for open source, Cormier said. And a lot of people took a lot of risks to even get into open source. We took risks as a company. But the point is, we didnt take them alone. Developers took risks, customers took risks, partners took risks. But thats what was needed to drive innovation today.

VentureBeat's mission is to be a digital town square for technical decision-makers to gain knowledge about transformative enterprise technology and transact. Learn more about membership.

Go here to read the rest:

Red Hats Paul Cormier on RHEL 9, the edge and open source innovation - VentureBeat