The Linux Foundation Member Summit

“Perfect is the enemy of good.” Whether it was Voltaire or Aristotle who said it first, it’s true for risk management in open source software.

For both vulnerability mitigation and license compliance, risk management is always a sliding scale. How do you define or apply practical policies to focus identification and mitigation for the highest risk vulnerabilities in the context of your technology stack? And for the highest risk licenses in the context of how you deploy or distribute products or applications?

In this talk, Michael will discuss setting priorities for open source software compliance and how to avoid the pitfalls of focusing on low value / high cost activities, based on over 15 years of experience running Software Composition Analysis projects. The best advice? Focus on accuracy over precision.

If you had a collection of every kind of animal on earth, from mules to narwhals to goldfish, how would we pick out just the housepets? And how does AI distinguish between a pack mule and a Moscow Mule?

Embeddings are numerical representations that capture the essential features and relationships of objects, like words or images, in a continuous vector space, enabling tasks such as semantic search, clustering, and recommendations. We'll explore the core concepts of embeddings, using relatable examples to make advanced ideas accessible.

Legal professionals may find embeddings particularly relevant due to their ability to distinguish between different entities and concepts with nuance. Such capability is crucial for addressing legal issues like data privacy, bias mitigation, and intellectual property.

By understanding how embeddings distinguish between concepts, attendees can draw parallels to their own legal reasoning processes, gaining insights into how these AI mechanisms intersect with legal frameworks. This session encourages legal professionals to explore the intellectual and professional possibilities that embeddings present, deepening an understanding of AI’s role in law

You're making decisions about open source project funding, hiring, travel, and overall engagement. But do you have the latest data to get internal buy-in for your open source engagement and resourcing needs? This session will point you to the most current and compelling data and insights from dozens of LF Research studies that drive open source project budgets and strategy, that illustrate the value proposition for open source collaboration, and that highlight examples and resources for you to leverage to set your organization up for success, no matter the industry or technology domain.

Enterprises are eager to adopt Generative AI to increase their productivity. OPEA, the Open Platform for Enterprise AI, is a new project with the Linux Foundation. It provides a framework of composable microservices for state-of-the-art GenAI systems including LLMs, data stores, and prompt engines. It provides blueprints of end-to-end workflows for popular usage such as ChatQnA, CodeGen, and RAG systems. OPEA applications leverage cloud-native architecture to simplify deployment. It even includes a friendly high-level pipeline definition language for deployment on Kubernetes. This session will introduce OPEA, key component microservices, and how GenAI applications can be composed using those microservices. The attendees will learn to start with OPEA by deploying their GenAI application on a k8s cluster. Explicit contribution opportunities will be shared with the attendees. You'll also see an open source OPEA playground running on k8s, and how to contribute your components to it.

As Open Source continues to grow in functionality & adoption, so does the likelihood & risks of patent attacks. OIN protects OSS through a unique cross-license whereby OIN’s members agree to not sue each other for use of their Linux & Open Source related patents. The cross-license is defined in scope by over 4,5o0 core Linux & Open Source technology packages known as the Linux System which is updated & expanded every 18-24 months. Newly released in August 2024, Linux System Table 12 covers cloud-native computing, enterprise software, IoT, networking, automotive, embedded systems & hardware development technologies, among others. Table 13 is open for nominations from Linux Foundation members and the greater open source community.

Are you leveraging the Linux Foundation membership benefit? Hitachi is a member of the Linux Foundation(LF) since its launch and has been collaborating with LF in various aspects. Yuichi Nakamura, responsible for OSS strategy in Hitachi and Japan evangelist of LF, introduces a case study of how to accelerate business with LF as its member company. He will talk lessons learned from a failure case of OSS business, then introduce OSS strategy for business. The most important part of the strategy is to find and take new OSS into our business timely. Hitachi is working with LF to expand utilization of OSS. LF leaders/LF Japan provide forecast of market and technology trends in consultation for members, navigate new projects by connecting with key people and work together to launch local communities. By such support, Hitachi can utilize new OSS projects to business quickly. He introduces detail of collaboration in examples of CNCF, OpenSSF and FinOps Foundation.

This Ask Me Anything session connects attendees to the TODO Steering Committee. The TODO Group is an open community of practitioners who aim to create, share knowledge and collaborate on best practices on open source management in organizations to run successful Open Source Program Offices Members of the committee will assist the audience through the best practices, guides, and tools made by and for open source managers to help them in their day-to-day responsibilities, as well as share their first-hand experiences and lessons learned in building and operating OSPOs. Additionally, attendees will learn ways to connect with the TODO Group – the largest OSPO community dedicated to building best practices in open source management – as well as with the SIGs and working groups from the foundations and projects across the LF ecosystem. The session will also provide information on accessing OSPO mentorship in their local regions.