The Linux Foundation Member Summit

Africa still is the forgotten continent, even if all the means are there to have African talent participating in the world wide Open Source movement. Governments are using proprietary software, implemented by expensive foreign consultants, because of the lack of local people that have received the proper education. The Living Open Source Foundation aims at changing that by empowering individuals through training in Open Source techniques and attitude. In this session you will learn how the Living Open Source Foundation has been offering education to talent in different African countries since 2019. On that journey, different problems were encountered and lessons were learned. Just bringing education is not enough, the educated talent needs to have access to jobs in local economies once educated and certified. That is why Living Open Source Foundation focusses on enabling local economies by using Open Source software. In this session you'll learn how we work, and how you can participate in bringing Open Source to Africa.

In the great hall of The Open Source, gathered together from the cosmic reaches of the multiverse are some of the greatest heroes of open source security ever assembled. Their mission, to fight injustice, to right that which is wrong, and to serve all mankind by helping make open source software more secure. In this session, attendees will learn from the OpenSSF about simple techniques, tactics, and tools that can help improve the overall security posture of their project, help them better defend against attackers, and react more quickly when the inevitable vulnerability report lands in their inbox. Key Takeaways - Learn about steps that can be taken to prepare your project to respond effectively to security findings - Learn about industry standards such as CVE, CVSS, VEX, CVD, and others that will help contextualize external and downstream interest in security - Learn about resources available to learn valuable secure coding techniques and concepts - Learn about community resources that are available to help triage, coordinate, and disclosure discovered vulnerabilities in your codebase, dependencies, and your supply chain

It's been about 20 years since cloud computing in its modern form debuted. Open source has been around longer but that's also about the point when open source matured beyond being a cheaper Unix replacement to being the source of development and technology innovation that it has become. There are important lessons in those 20 years. Lessons about standardization. Lessons in flexibility. Lessons in cooperation. Lessons in developing ecosystems. Lessons in what not to do. Indeed, for all the success of Linux, the cloud has arguably been the great showcase for open source success over the past couple of decades. As a result, it's useful to think about the lessons there and how they apply to AI and other important areas of innovation going forward.

The threat of quantum computers to cryptography and, more broadly, computer security, is something that gets a little closer to reality every passing day. But what this means for real-world software can be confusing. When (and how) do we need to be ready? What do we need to do now to be ready when quantum computers come? In this talk, Hart Montgomery will explain what open source software projects, companies, and anyone who relies on cryptography need to do to protect themselves against the quantum threats of the future. He will explain projected timelines of when quantum attacks against cryptography could be viable, and then discuss what this means for software and data today. By the end of the talk, attendees will understand how to “threat model” quantum computing for their software or company needs and be better informed on how to make decisions regarding updating cryptography. In addition, Hart will explain how the tools of the LF’s PQCA project can be used to mitigate quantum threats. This talk will require no mathematical or cryptographic background to understand and will be aimed at business leaders who need to lead their companies in the transition to post-quantum cryptography.

Open Source options have had a difficult time gaining visibility and uptake by game developers, particularly when compared to commercial options. The talk will discuss the various tools and options available to game developers, challenges faced by open source in gaining adoption, and some ideas on how visibility and viability of options can be improved. It is important that open source tooling owners work together to raise visibility across the game development industry.