- Jun 16, 2008
- 8,758
- 543
- 126
https://securityledger.com/2014/04/heartbleed-prompts-fiscal-lifeline-for-open-source/
Here is some bright news to come out of the Heartbleed security issue.
Many companies will now donate funding to help ensure that Open Source software that is used by tech companies get adequate auditing support to reduce the chance of another problem on the scale of heartbleed happens again.
It's interesting to see that some companies that don't necessarily use open source code as much are also donating to the initiative... in contrast to a notable one.
here is another link on the story.
http://www.securityweek.com/tech-ti...-initiative-secure-key-open-source-components
......
One of the most powerful (and substantive) realizations to come out of the news about the Heartbleed OpenSSL vulnerability was that open source projects need help and attention from the tech community that relies on their fruits.
Ive written about this before noting Apples reluctance to put some of its considerable cash hoard towards supporting open source projects it relies on (like the Apache Software Foundation), as have others.
Now that idea appears to have taken root. On Thursday, the Linux Foundation announced the creation of the Core Infrastructure Initiative, a multi-million dollar project to fund open source projects that are in the critical path for core computing functions.
The CII group has some substantial backing. Google, Cisco, Microsoft, Facebook, Amazon, IBM, Intel, Samsung, Fujitsu and VMWare all signed on to the CII Steering Committee. (Surprising (or not): Apple was not one of the firms supporting the CII.)
Here is some bright news to come out of the Heartbleed security issue.
Many companies will now donate funding to help ensure that Open Source software that is used by tech companies get adequate auditing support to reduce the chance of another problem on the scale of heartbleed happens again.
It's interesting to see that some companies that don't necessarily use open source code as much are also donating to the initiative... in contrast to a notable one.
here is another link on the story.
http://www.securityweek.com/tech-ti...-initiative-secure-key-open-source-components
......