Owner of anti-Trump sign in Oil City gets another reprieve in federal court – GoErie.com

Ed Palattella|Erie Times-News

An expletive-ladenanti-Trump sign is all but certain to remain on displayin Oil City through the election on Nov. 3.

Lawyers for the owner of the sign and Oil City have reached an agreement in federal court in Erie that prohibits the city from taking action against thesign or "other political signage that is otherwise lawful" untilNov. 4.

U.S. District Judge Susan Paradise Baxter still must approve the joint motion for relief, filed Monday. Her approval is expected given that both sides reached the deal on their own.

The agreement, if approved, eliminates the need for Baxter to hold a hearing in the case on Oct. 13. The agreement also givesOil City until Nov. 30 to answer the sign owner's lawsuit against the city in court.

A week ago, Baxter signed an agreement that allowed the sign to stay up for at least 14 days, until Oct. 13. The deal, which both sides fashioned, temporarilyhalted the First Amendment dispute over the sign.

The sign owner andcritic of President Donald Trump, William E. Healy, sued Oil City on Sept. 17. According to the suit, Oil City violated Healy's First Amendment rights by raising objections to the political sign, which includesthe phrase(Expletive) Trump."

The suit says thatHealy put up thesign on Sept. 13 on a lot he owns onCooper Avenue that he refers to as "Freedom Corner." The Oil City police chief called on Sept. 14 and told Healy's lawyerthat the chief had received complaints about the18-by-24-inch sign and considered it to be an act of disorderly conduct because of the explitive, according to the suit.

Healy agreed to remove the sign temporarily while he and his lawyer, MichaelHadley, pursued the matter in federal court, according to court records.

Contact Ed Palattella at epalattella@timesnews.com. Follow him on Twitter @ETNpalattella.

Continued here:

Owner of anti-Trump sign in Oil City gets another reprieve in federal court - GoErie.com

Lobbying in Q1 topped a record $938 million, but lobbyists say their profession is misunderstood – CNBC

In the first quarter of 2020, the total amount spent on lobbying,about $938 million, reached the highest on record, according to the Center for Responsive Politics. At least 3,200 companies, trade associations and other groups reportedtrying to influence the government's response to the pandemic, CRP said.

Many of the biggest spenders, according to CRP data, also received substantial relief from the CARES Act. The health sector, which spent $168 million on lobbying efforts, received$150 billion in coronavirus relief aid, according to Advisory Board. The airline industry, which spent $29 million on lobbying, received $32 billion in relief aid, according to the Peter G. Peterson Foundation, and agribusiness, which spent $38 million, received $19 billion in aid, CRP said.

"If you don't have a strategy to deal with Washington today, I don't care if you're a small business, a medium-sized business or large business, if you don't have a government affairs strategy, you are going to be left behind," said Paul Miller, a veteran lobbyist and partner at Miller Wenhold Capitol Strategies.

"The pandemic is a perfect example of that. If you didn't have somebody here with the relationship to speak for you, well, then you likely didn't get what you wanted or needed to help yourself," Miller said.

The lobbying industry is arguably the U.S. government's oldest profession and is protected by the First Amendment. Yet critics say it undermines the country's democracy by tilting the power to influence policy in favor of those with unlimited financial resources.

Nearly 12,000 active lobbyists in Washington, D.C., helped thousands of clients spend over $3.5 billion in 2019.

Jimmy Williams worked as a lobbyist from 2002 to 2010. Before that, he worked as a legislative staffer for nearly a decade. He said lobbyists were instrumental to his work on Capitol Hill. Even as a lobbyist, he felt that his expertise helped lawmakers, as they were often inundated and overworked.

But he said things changed when he moved from trade associations to K Street.

"It was financially rewarding, as I got paid a lot more. But at the same time, I was then beginning to figure out that people didn't give a damn about my knowledge of banking or of the real estate industry. It was all about checks. No one gave a damn about anything other than who I knew and how much it would cost for us to write checks to get into those offices, i.e., campaign donations," said Williams, who now lives on a South Carolina farm.

The symbiotic relationship between campaign finance and lobbying is often contested. According to Sheila Krumholz, CPR's executive director, "sending an army of lobbyists up to work Capitol Hill to follow that donation is kind of the one-two punch. You first give a donation, and you next have your lobbyist pay a call."

One study by The Sunlight Foundation examined 14 million records from 2007 to 2012,including on campaign contributions and lobbying expenditure, and found that for every dollar spent, the corporation received $760 from the government.

But many in the field say a lobbyist is not what people may think and instead works as a part educator and part lawyer.

The misconception about lobbyists is that "we walk around with bags of money and say, 'Vote our way' or 'Oppose this.' But it's not even close to the truth," said Marcie McSwane, owner of The McSwane Group.

"Everyone always says, 'Drain the swamp,' and [that] all these lobbyists who've been up there for so long are the worst," McSwane said. "We're not working against anyone. We're hoping to work for and improve the lives of people here in the States. We love our country."

Watch the video above to learn more about why lobbying exists.

View post:

Lobbying in Q1 topped a record $938 million, but lobbyists say their profession is misunderstood - CNBC

RCFP’s Technology and Press Freedom Project welcomes legal fellow – Reporters Committee for Freedom of the Press

Mailyn Fidler has joined the Reporters Committee as a legal fellow for the Technology and Press Freedom Project. Her work focuses on litigation, policy and research on technology issues affecting the news medias First Amendment rights.

Ive always been interested in the tools and systems that people use to govern themselves, Mailyn said. Law is one of those systems, as is technology.

The Technology and Press Freedom Project team, led by Gabe Rottman, publishes a weekly newsletter analyzing legal and policy issues at the intersection of technology and press freedom, including government surveillance and leak investigations.

Mailyns past work also concentrated on technology and press freedom issues. As an undergraduate, she studied science, technology and society at Stanford University before attending Oxford University on a Marshall Scholarship to study international relations. While attending Yale Law School, she interned at the Knight First Amendment Institute and worked with a law firm litigating First Amendment issues on behalf of major internet platforms.

In law school, Mailyn also worked with the San Francisco City Attorneys Office to develop impact litigation related to cybersecurity and First Amendment rights, an experience that she says helped prepare her for this fellowship.

I think theres a lot of room for growth at this intersection of technology and press freedom, Mailyn said. She added that her past work is relevant to how RCFP thinks, particularly as were thinking of new ways and new angles to attack these issues.

As she begins her position with the Reporters Committee, Mailyn looks forward to working to support journalists.

I have found that in almost everything Ive done in law, somehow I end up talking to journalists, she said. I think they are very important to the rule of law.

Mailyn Fidler is not admitted to practice law.

The Reporters Committee regularly files friend-of-the-court briefs and its attorneys represent journalists and news organizations pro bono in court cases that involve First Amendment freedoms, the newsgathering rights of journalists and access to public information. Stay up-to-date on our work by signing up for our monthly newsletter and following us on Twitter or Instagram.

Go here to read the rest:

RCFP's Technology and Press Freedom Project welcomes legal fellow - Reporters Committee for Freedom of the Press

Reps. Gabbard And Gosar Introduce Ridiculous House Companion To Ridiculous Anti-230 Senate Bill From Senator Kennedy – Techdirt

from the push-my-buttons dept

You may recall that, last year, Rep. Tulsi Gabbard decided to file a ridiculously silly lawsuit against Google, claiming that the company had "violated her First Amendment rights" because it temporarily shut down her advertising account, and also because it filtered some of her campaign emails to spam. In a lawsuit that read remarkably similar to the various people arguing that "anti-conservative bias" was the basis for a lawsuit, it made a whole bunch of silly claims that any good lawyer would recognize as frivolous (hold that thought).

The lawsuit was easily tossed out on 1st Amendment grounds. And when I say "1st Amendment grounds," I mean the court had to explain to Gabbard -- a sitting Congressional Representative -- that the 1st Amendment only applies to the government and Google is not the government. This is really embarrassing:

Google is not now, nor (to the Courts knowledge) has it ever been, an arm of the United Statesgovernment....

[....]

To support its contention that a private actor can regulate elections, Plaintiff directs the Court toTerry v. Adams, 345 U.S. 461, 463 (1953). However, Terry is utterly inapposite to Plaintiffs contention.In 1954, the Supreme Court held that the Fifteenth Amendment was implicated when a political partyeffectively prevented black citizens from voting. Terry, 345 U.S. at 463. The Court held: The evil hereis that the State, through the action and abdication of those whom it has clothed with authority, haspermitted white voters to go through a procedure which predetermines the legally devised primary. Id.at 477. But Terry bears no relation to the current dispute, where Google, an undisputedly privatecompany, temporarily suspended Plaintiffs Google advertising account for a matter of hours, allegedlybased on viewpoint bias.

What Plaintiff fails to establish is how Googles regulation of its own platform is in any wayequivalent to a governmental regulation of an election. Google does not hold primaries, it does not selectcandidates, and it does not prevent anyone from running for office or voting in elections. To the extentGoogle regulates anything, it regulates its own private speech and platform. Plaintiffs nationalsecurity argument similarly fails. Google protects itself from foreign interference; it does not act as anagent of the United States. Nearly every media or technology company has some form of cybersecurityprocedure. Under Plaintiffs theory, every media organization that took steps to prevent foreigncybercrimes could potentially implicate the First Amendment. Googles self-regulation, even of topicsthat may be of public concern, does not implicate the First Amendment.

Pretty embarrassing for a court to need to explain how the 1st Amendment works to someone in Congress, but hey, it's 2020.

The court jumped straight to the 1st Amendment issue, though it could have easily tossed out the case on Section 230 grounds as well, and it appears that Tulsi has now joined the "destroy Section 230" crowd, teaming up with Rep. Paul Gosar to introduce yet another anti-Section 230 bill in the House. If Gosar's name rings a bell, he's the representative from Arizona whose politics are so Trumpian and ridiculous that six of his own siblings took out an ad that told people not to vote for their brother.

So these two have now teamed up to introduce the Don't Push My Buttons Act. If that sounds familiar, it's because Senator John Kennedy introduced the same thing in the Senate last week. When that was introduced, we explained just how awful the bill was and that analysis stands. It would take Section 230 immunity away from sites that do some fairly basic data tracking, or if they use an algorithmically generated feed. It makes no sense and seems to serve only one purpose: to frustrate social media companies with annoying nuisance regulation.

The bill seems unlikely to go anywhere, and Gabbard is not running for re-election, so this again seems more for show than anything else, but what a terrible bill to go out on. Gabbard failed in her wacky legal attack on social media, and so as a parting gift she tries to remove their Section 230 protections. Disgusting.

Oh, as a side note: in Gabbard's original lawsuit she was represented by the lawyers at Pierce Bainbridge. While the specific lawyers working on her case appear to have jumped ship from that firm during the collapse of that firm, the founder of the firm John Pierce, was a "high profile" addition to the defense team of Kyle Rittenhouse, the teenager facing murder charges in Wisconsin. This seemed weird, given that Pierce's experience is in civil litigation, not criminal, and had to resign from the board of the foundation that he and Lin Wood (another lawyer with quite the recent reputation) had set up to seek funds for Rittenhouse's defense, after questions were raised about how Pierce presided over the mess that was his disgraced law firm. The full article is worth reading, but just a snippet:

The firms financial woes have involved Pierce himself. In March 2020, John Pierce and Pierce Bainbridge were sued by a payday-lender-style financial business called Karish Kapital, which offers emergency cash for businesses. Karish Kapital alleged that Pierce had personally taken out a loan worth nearly $4 million from them and signed over the firms assets as collateral.

In a statement to The American Lawyer, a Pierce Bainbridge spokesperson said Pierce was on an indefinite leave of absence and had accepted money from Karish Kapital LLC for his personal use. In May, Pierce told Law360 that he had gone to rehab for unspecified issues.

Pierces loan from Karish Kapital marked the start of a cascade of bad news for the firm. On April 9, three named partners left the firm. James Bainbridge, the last remaining named partner aside from Pierce, set up his own separate firm in July, although he remains a partner at Pierce Bainbridge. As of May, Law360 reported, more than 60 lawyers had left the firm in the last six months.

So beyond an embarrassing legal loss, the fact that this was the firm Gabbard chose to file her ridiculous lawsuit against Google seems to raise significant questions about her own judgment in understanding not just the law she's now seeking to change, but also the people she chose as her lawyers. Perhaps she really should sit out questions regarding internet law.

Thank you for reading this Techdirt post. With so many things competing for everyones attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.

Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites especially a site like ours that is unwilling to pull punches in its reporting and analysis.

While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise and every little bit helps. Thank you.

The Techdirt Team

Filed Under: don't push my buttons act, john kennedy, john pierce, paul gosar, section 230, tulsi gabbard

See more here:

Reps. Gabbard And Gosar Introduce Ridiculous House Companion To Ridiculous Anti-230 Senate Bill From Senator Kennedy - Techdirt

Analysis: To Preserve Their Exclusive Right to Representation, NEA, AFT and Other Major Unions Will Even Buy into Janus Ruling – The 74

Mike Antonuccis Union Report appears most Wednesdays; see the full archive.

You wont often find the four largest public-sector unions the National Education Association, American Federation of Teachers, American Federation of State, County and Municipal Employees and the Service Employees International Union and the National Right to Work Legal Defense Foundation all on the same side of a major labor issue.

I take that back. Youll never find it.

But 2020 is a year where anything and everything can happen, so its in keeping with the times that these eternal adversaries should find common ground in the case of Sweeney v. Raoul.

The case is a response to the U.S. Supreme Courts 2018 ruling in Janus v. AFSCME, which banned public-sector unions from charging representation fees to nonmembers. Unions universally decried the 5-4 decision and immediately went to work to mitigate its effects. Though most of these measures were legislative or administrative in nature resignation windows, membership pitches during required orientation sessions for new employees, etc. several unions chose litigation.

Unions in Idaho and Wisconsin filed suit, claiming the loss of nonmember agency fees violated the Takings Clause of the Fifth Amendment of the Constitution. They were unsuccessful.

In Illinois, Local 150 of the International Union of Operating Engineers, which represents some public-sector workers, took a different route. The union claimed that being forced to file grievances on behalf of nonmembers was a violation of the unions First Amendment rights. The case was dismissed in trial court but was successfully appealed to a three-judge panel of the U.S. Court of Appeals for the Seventh Circuit. Oral arguments were heard last week.

The underlying principle of the suit is the unions duty of fair representation. Since the union is the exclusive bargaining agent for all employees in a unit, it must represent all equally, regardless of whether they are union members. Unions defended agency fees as a way to avoid free rider problems, but the Janus ruling changed that dynamic.

Voices on both the right and left began discussing the possibility of members-only unions. Common in Europe, these unions dont have exclusive representation rights and negotiate only on behalf of dues-paying members. This leaves individuals the freedom to set the terms of their own employment, and even allows for multiple unions in the same workplace.

No doubt Local 150 thought using the First Amendment arguments that won the case for the Janus plaintiff against it was a shrewd move. But a host of the nations largest public-sector unions saw the suit as a threat to exclusive representation.

In an amicus brief, attorneys for NEA, AFT, AFSCME, SEIU and their Illinois affiliates laid out their reasons for opposing the Local 150 lawsuit.

Though they stated that Janus was wrongly decided, NEA et al. argued in the brief that a Local 150 victory could undermine longstanding collective bargaining arrangements and even chip away at the validity of public-sector collective bargaining itself. The major unions went on to cite the majority ruling in Janus multiple times.

The unions approvingly noted the Janus reasoning that exclusive representation gives them a privileged place in negotiations over wages, benefits and working conditions and that representing nonmembers is a necessary concomitant to that exclusivity. Exclusive representation without an obligation to represent nonmembers would leave those employees without any representation or means to gain it. That, according to the Janus ruling, would lead to serious constitutional questions.

NEA et al. also appear to have wholeheartedly accepted the Janus majoritys logic that no union is ever compelled to seek exclusive status. They stated that the duties involved in representing nonmembers do not impose substantial restrictions on a unions core rights of expression and association. Whats more, they said, performing those duties furthers the unions interests in keeping control of the administration of the collective-bargaining agreement.

Local 150 responded to these criticisms by saying it is being misunderstood. The union said it doesnt want to erode exclusive bargaining, merely charge nonmembers for services. But the major unions oppose this reasoning as well.

Many unions, they stated, believe that fee-for-service arrangements promote a detached, transactional view of the relationship between a union and the employees it represents, rather than the sense of solidarity and engagement within the workplace that is ultimately the most significant source of unions power.

NEA at al. concluded: Janus confirms the central role the duty of fair representation plays in ensuring the constitutionality of exclusive representation. That duty is also consistent with broad principles of First Amendment doctrine. Any conclusion to the contrary would jeopardize not only fundamental aspects of labor relations in the public sector but a broad array of duties that are well recognized under the law.

Union allies and opponents will continue to argue about whether exclusive representation infringes on individual rights. Whats clear from this brief is that unions prize their monopoly on bargaining above all else and will embrace the existence of nonmembers as a small price to pay for retaining that privilege.

Read more here:

Analysis: To Preserve Their Exclusive Right to Representation, NEA, AFT and Other Major Unions Will Even Buy into Janus Ruling - The 74

Supreme Court functions in the midst of COVID-19 chaos – Roll Call

Chief Justice John G. Roberts Jr. started the Supreme Courts new term Monday with a brief tribute to Justice Ruth Bader Ginsburg, whose death last month thrust the court into Washingtons central political drama less than a month before the presidential election.

Ahead of two hours of oral arguments, held remotely by telephone because of the COVID-19 pandemic, Roberts went through Ginsburgs career in law that culminated with 27 years on the high court. He said her contributions as advocate, jurist and citizen are immeasurable.

The Supreme Court is, at the moment, down to eight justices and not conducting business in person. But the justices moved right into oral arguments after that making it the only branch of government that was not grappling with how to do its work because of the coronavirus pandemic.

The Senate postponed hearings and looked to stay away from the Capitol this week because three Republican members are in isolation with the virus and others are quarantining because of exposure. Their absence prompted questions about whether Senate Republicans can move forward with plans to swiftly confirm Trumps nominee to fill Ginsburgs seat, Amy Coney Barrett, a federal appeals court judge.

President Donald Trump returned to the White House on Monday evening after spending three days in the hospital with coronavirus, and he spent Monday morning tweeting out in all caps a string of reasons why he thinks voters should reelect him. Some related to the Supreme Court and a case the justices will hear next month on the 2010 health care law.

Read the original post:

Supreme Court functions in the midst of COVID-19 chaos - Roll Call

Snyk and PerimeterX Partner to Address Open Source JavaScript Risk Increasingly Common in Web Applications – GlobeNewswire

SAN MATEO, Calif., Oct. 06, 2020 (GLOBE NEWSWIRE) -- PerimeterX, the leading provider of application security solutions that keep digital businesses safe, and developer-first security company Snyk, today announced a technology alliance partnership that solves the growing number of open source vulnerabilities found in web applications, to help businesses minimize exposure to risk and data breaches.

Together, PerimeterX and Snyk provide a complete view of open source risk in web applications to reduce mean time to mitigate and improve collaboration between application security and development teams.

By partnering with the industry leading vendor for open source vulnerabilities, PerimeterX is ensuring that our customers have access to the most accurate and timely information to mitigate web application vulnerabilities in real time. The PerimeterX Code Defender runtime behavioral analysis and mitigation across first-, third- and Nth-party scripts combined with comprehensive and actionable JavaScript vulnerability data from Snyk provides users a quick path to remediation, said Ido Safruti, Co-founder and Chief Technology Officer, PerimeterX.

The need for efficiency and speed in developing web applications is driving increasing adoption of open source and containers. However, in attempting to expedite development by leveraging open source, code reuse and third-party scripts, enterprises face greater potential for risk. The Snyk 2020 State of Open Source Security Report found that the bulk of the open source vulnerabilities discovered are considered to be high severity. Furthermore, according to PerimeterX, as much as 70% of a typical website code is third-party scripts.

PerimeterX Code Defender will integrate with the Snyk Intel Vulnerability Database to give application security teams a complete view of open source vulnerabilities in web applications, shortening mean time to mitigation and reducing the possibility of client-side data breaches and non-compliance.

Snyks new partnership with PerimeterX not only provides an automated, holistic view of vulnerabilities, but it also opens the door to quick, easy fixes and ongoing monitoring, said Geva Solomonovich, CTO of Global Alliances, Snyk. The Snyk database includes the most current, comprehensive, actionable vulnerability data in the market. With developers able to make meaningful security decisions early in development, collaboration and efficiency between application security and development teams soars.

About Snyk IntelWidely adopted because of its timely and accurate data, Snyk Intel combines automated machine learning with expert analysis maintained by a dedicated Snyk research team. In addition to PerimeterX, Red Hat, Docker, Google Chrome Lighthouse and the Linux Foundation embed Snyk Intel vulnerability data into their products to identify critical vulnerabilities in open source dependencies and container images.

About PerimeterX Code DefenderPerimeterX Code Defender is a client-side application security solution that continuously protects websites from digital skimming, formjacking and Magecart attacks, stopping data breaches and reducing the risk of non-compliance. It uses behavioral analysis and advanced machine learning to automatically detect vulnerable Shadow Code scripts, suspicious PII access and data leakage from users browsers. With Code Defender, businesses can reduce the risk of data breaches and compliance penalties while improving operational efficiency.

About SnykSnyk is a developer-first security company that helps software-driven businesses develop fast and stay secure. Snyk is the only solution that seamlessly and proactively finds and fixes vulnerabilities and license violations in open source dependencies and container images. Snyk's solution is built on a comprehensive, proprietary vulnerability database, maintained by an expert security research team in Israel and London. With tight integration into existing developer workflows, source control (including GitHub, Bitbucket, GitLab), and CI/CD pipelines, Snyk enables efficient security workflows and reduces mean-time-to-fix. For more information or to get started with Snyk for free today, visit https://snyk.io.

About PerimeterXPerimeterX is the leading provider of application security solutions that keep digital businesses safe. Delivered as a service, the companys Bot Defender, Code Defender and Page Defender solutions detect risks to your web applications and proactively manage them, freeing you to focus on growth and innovation. The worlds largest and most reputable websites and mobile applications count on PerimeterX to safeguard their consumers digital experience. PerimeterX is headquartered in San Mateo, California and at http://www.perimeterx.com.

More:

Snyk and PerimeterX Partner to Address Open Source JavaScript Risk Increasingly Common in Web Applications - GlobeNewswire

GitHub: Now our built-in bug checker gets these third-party code-scanning tools – ZDNet

GitHub has released a host of third-party security tools for its just-launched code-scanning feature, which helps open-source projects nix security bugs before they hit production code.

GitHub Code Scanning works on top of CodeQL (Query Language), a technology that GitHub integrated into its platform after itacquired code-analysis platform Semmle in September 2019. GitHub announced general availability of code scanning last week after a beta phase that's run since May.

GitHub has now introduced 10 new third-party code-scanning tools that are available with GitHub code scanning to allow developers to remove flaws before they're committed to code.

The ability to add third-party tools to the native GitHub code-scanning feature lets developers customize it for different teams in an organization.

Extensibility is enabled via code scanning's application protocol interface endpoint, which ingests the results of scans from third-party tools using the Static Analysis Results Interchange Format (SARIF).

GitHub sees it being valuable for organizations post-merger with teams running different code-scanning tools, as well as for extending coverage to mobile, Salesforce development or mainframe development. It also enables customized reporting and dashboards.

The new third-party scanning tools include extensions for static analysis and developer security training.

The current roster includes Checkmarx, Codacy, CodeScan, DefenseCode ThunderScan, Fortify on Demand, Muse, Secure Code Warrior, Synopsys Intelligent Security Scan, Veracode Static Analysis, and Xanitizer.

Developers can begin using third-party scanning tools with GitHub Actions, a feature that allows users to automate development workflows, or a GitHub App based on an event, such as a pull request.

GitHub then handles the rest of the task, ensuring there are no duplicates and that alerts are aggregated and associated with each tool that generates a report.

"The results are formatted as SARIF and uploaded to the GitHub Security Alerts tab. Alerts are then aggregated per tool and GitHub is able to track and suppress duplicate alerts,"explains Jose Palafox of GitHub.

"This allows developers to use their tool of choice for any of their projects on GitHub, all within the native GitHub experience."

The third-party scanners are available on GitHub's marketplace.

During the beta, GitHub says code scanning was used to perform more than 1.4 million scans on more than 12,000 repositories. It's helped identify over 20,000 vulnerabilities.

Visit link:

GitHub: Now our built-in bug checker gets these third-party code-scanning tools - ZDNet

Q&A: Experts Weigh in on the Hidden World of Shadow Code – Security Boulevard

Earlier this month, PerimeterX co-hosted a Tweet Chat with IT Security Guru on the topic of Shadow Code and invited a variety of industry experts including analysts, influencers and executives to weigh in on this little-known threat. The conversation lasted for an hour and delved into the issue from the perspective of DevOps, IT security, e-commerce and beyond. Participants included the following individuals:

Carlos: I think of #ShadowCode as the generally overlooked and often unknown third-party or nested service provider code that is incorporated into your e-commerce websites without the knowledge of the security team or awareness of its impacts on security, latency or compliance.

Jamie: #ShadowCode is the use of third-party scripts and libraries in a web application. 80% of code used in applications today originates outside an organization. External code, called open-source, provides accelerated value delivery, it also represents a risk to the organization.

Quentyn: #ShadowCode is code thats been cut and pasted from other third-party locations and may not have been vetted to the same degree as own written code. It doesnt mean its inherently insecure though.

Ameet: Application development today makes extensive use of third-party scripts and open source libraries, which are great for innovation and agility, but the end result is you dont really know what code is running (Read more...)

See the rest here:

Q&A: Experts Weigh in on the Hidden World of Shadow Code - Security Boulevard

Leaving Cert grading meltdown shows why open source is top of the class – Siliconrepublic.com

The Leaving Cert grading catastrophe is a great argument for open-source approaches to code for public use, writes Elaine Burke.

Investor and Irish tech veteran Brian Caulfield neatly summarised what many know to be true when it comes to delivering on a project. You can optimise for two of time, cost and quality. Never all three, he told Adrian Weckler in the Irish Independent, deftly explaining what went wrong with the Leaving Cert grading.

The Government was under time pressure to deliver a fair and effective solution for Leaving Cert grading in the absence of exams this year due to Covid-19. Now, the results are in. Perhaps not an abject failure but certainly Minister for Education Norma Foley, TD, and her department didnt meet the grade.

Like the students who only start to cram in the studying after the mocks and mid-term break, the Government may have waited too long to take the task ahead seriously. There may have been a wait and see tactic in place, keeping an eye on how our neighbours in the UK got on with the A Levels. And when that descended into chaos, there was no tried and tested path to follow. The Irish Government was on its own to come up with something that would work for students nationwide.

But Government officials didnt have to work in isolation. In fact, that was the choice that led to their undoing. They should have considered group study, which might have helped them improve their results.

When it comes to projects of such significance to the public, open source should be the default

Thankfully, after the A Levels disaster, the Irish Government opted for a system that would potentially put greater pressure on university placements but cause less heartache for students. That is, the Leaving Cert grading code would likely result in grade inflation compared to standard testing years, but that was the hit worth taking.

Unfortunately, that wasnt the only problematic outcome. A retrospective analysis of the code already deployed found a number of errors affecting the entirety of 2020s Leaving Cert grading. To be fair to students who were already through two rounds of university placement offers and awaiting the third at this point, none would be downgraded. However, more than 6,000 would be upgraded, further adding to the pressure on institutions to make accommodations.

Going back to Caulfields point, you can see which of the three factors the Government lost marks on. The quality of the Leaving Cert grading system was sacrificed by the time restrictions. Clearly, the analysis that has turned up the errors should have been done beforehand, but the country was on a national deadline.

But theres another line of advice for project delivery the Government should have kept in mind: many hands make light work. If the Government hadnt been so secretive about the Leaving Cert grading system it was working on, all sorts of experts would have been able to review the code and spot errors the assigned team simply didnt have time to.

In fact, when it comes to projects of such significance to the public, open source should be the default. Not going open source with the Leaving Cert grading code was a missed opportunity for the Government to get support from the tech community at large for a project of national importance. Deciding to develop behind closed doors has helped no one and led to failure.

And Foleys department has no excuse in ignorance, as we have seen how coding for the public can be greatly successful thanks to open-source software. The Covid Tracker Ireland app was developed in the open and so many concerns about tracing, privacy and efficacy were addressed in good time. The result of this open collaboration was an app that was largely accepted by groups not often in agreement on such things.

Now, under the project name Covid Green, the source code of the Irish Covid-19 contact-tracing app has been made available for other public health authorities and their developers across the world to use and customise. The Waterford-based company behind it, NearForm, manages the source code repository on GitHub and this has been used to roll out apps in a number of countries and regions so far.

This was an incredible success of open-source software development for the public good, with an Irish companys work being held up as something of a gold standard around the world. And for some reason the Irish Government ignored that signal and did what public bodies tend to do with their decision-making: shroud it in secrecy and hope for the best.

Lets just hope the Leaving Cert grading disaster will be a lesson learned and that the Government can see the clear benefits for open-source development of public projects in the future. In fact, they can even join us at Future Human to learn more about open source from none other than NearForm founder Cian Maidn.

Want stories like this and more direct to your inbox? Sign up for Tech Trends, Silicon Republics weekly digest of need-to-know tech news.

Future Human is Silicon Republics international sci-tech event focusing on the future of work, climate change, AI, security, robotics and life sciences. On 29 and 30 October 2020, it will take place as the first major hybrid tech event of its kind in the world. General, Executive and Student tickets are available now.

Continue reading here:

Leaving Cert grading meltdown shows why open source is top of the class - Siliconrepublic.com