April 2024 - opensource-wg - mailman.ripe.net

Register for RIPE NCC Training Courses: Zagreb, Croatia: 15-16-17 May 2024.
by Vesna Manojlovic ＠ RIPE.net 30 Apr '24

30 Apr '24

Dear colleagues, We invite you to register for the the RIPE NCC*LIR,**RIPE Database and BGP Routing Security Training Course* which will take place in *Zagreb* on *15-16-17 May 2024*. : https://learning.ripe.net For each of those topics, we promote Free/Libre & Open Source tools to help you in your work. Our training courses are free of charge and *delivered* in *English*. Trainers will be Gerardo Viviers and Ralph Smit. If you have already benefitted from a RIPE NCC training, we encourage you to share this email with your colleagues who might be interested in attending our courses. *General Information:* ------------------- Register to attend your chosen course(s) through our learning platform: https://learning.ripe.net We have a limited number of places, and registration will close once we are at capacity. The course includes lunch and printed training materials. If you have any questions, please contact learning(a)ripe.net. We are looking forward to seeing you in Zagreb! Kind regards, RIPE NCC Learning and Development (& Vesna, your link between RIPE NCC Croatia ;-) ======= *LIR Training Course:* ------------------ Date: *Wednesday, 15 May 2024* Time: 09:00-17:30 local time Hosted by: Carnet <https://www.carnet.hr/en/> at this location: Josipa Marohnića 5, 10 000 Zagreb <https://www.google.com/maps/place/Croatian+Academic+and+Research+Network+-+…> The *LIR Training Course* is a one-day introduction to the RIPE NCC's administrative procedures and RIPE Policies related to obtaining and distributing Internet resources (i.e. IP addresses, AS Numbers and reverse DNS delegation) and operating a Local Internet Registry (LIR). The course includes a basic introduction to the RIPE Database. You should attend this training course: if you are a staff member of a Local Internet Registry (LIR) in the RIPE NCC service region. For more information visit our: *Course information* and *registration page* <https://learning.ripe.net/w/courses/1-lir-training-course> === **RIPE Database Training Course*:* ---------------------------- Date: *Thursday, 16 May 2024* Time: 09:00-17:30 local time Hosted by: Carnet <https://www.carnet.hr/en/> at this location: Josipa Marohnića 5, 10 000 Zagreb <https://www.google.com/maps/place/Croatian+Academic+and+Research+Network+-+…> The *RIPE Database Training Course* is a one-day course. We'll make you a capable user of the RIPE Database. Mixing hands-on activities with theory, the course participants will get a comprehensive idea of what the RIPE Database is and what they can do with it. You should attend this training course if you are part of the staff of a Local Internet Registry (LIR) in the RIPE NCC service region, and need to register networks in the RIPE Database. You should attend this training course if you are part of the staff of a Local Internet Registry (LIR) in the RIPE NCC service region, and need to register networks in the RIPE Database. For more information visit our: *Course information* and *registration page* <https://learning.ripe.net/w/courses/2-ripe-database-training-course> === *BGP Routing Security Training Course:* ----------------------------- Date: *Friday, 17 May 2024* Time: 09:00-17:30 local time Hosted by: Carnet <https://www.carnet.hr/en/> at this location: Josipa Marohnića 5, 10 000 Zagreb <https://www.google.com/maps/place/Croatian+Academic+and+Research+Network+-+…> BGP Routing Security training course is a one-day course covering different aspects of the security of BGP protocol. The participant will gain insight and a high-level understanding of the need for security in BGP, the main threats it faces and the main security measures that can be applied nowadays. Some future developments on the topic will also be covered. The course includes theory and hands-on exercises. You should attend this training course if you are using, or plan to use, BGP in your network and want to know more about the potential threats and the security solutions available to make your BGP routing more secure. For more information visit our: *Course information and registration page* <https://learning.ripe.net/w/courses/34-bgp-routing-security-training-course…>

1 0

Invitation to RIPE NCC Open House Events – Community Projects Fund Recipients 2023
by Alastair Strachan 22 Apr '24

22 Apr '24

Dear Colleagues, We are pleased to invite you to participate in the upcoming RIPE NCC Open House events. If you are thinking of applying for the Community Projects Fund this year or want to get updates about the projects selected for the 2023 RIPE NCC Community Projects Fund, make sure you attend these sessions to gain insights into the progress, challenges, and future goals of the supported initiatives. During the sessions, recipients of the 2023 RIPE NCC Community Projects Fund will present detailed updates on their projects, summarising their journey thus far and their current advancements. Each presentation will be followed by a Q&A segment, offering you the chance to interact directly with the project teams and gain a deeper understanding of their work. https://www.ripe.net/membership/meetings/open-house/cpf-recipients-2024/ Session Schedule: First Session: April 26, 2024, 10:00 - 11:30 CEST (08:00 - 09:30 UTC) Thomas Holterbach: Designing the Next Generation of Public BGP Route Collection Infrastructures Tobias Fiebig: Measurement.network - Organizing Active Measurements Ioana Livadariu: SubZero - Monitoring the Deployment Impact of the Submarine Cable System Second Session: May 2, 2024, 10:00 - 11:30 CEST (08:00 - 09:30 UTC) Marcus Dansarie: : Secure Time for IoT Devices - Developing the Roughtime Proposed Standard Raffaele Sommese: Anycast Discovery - Daily Mapping the Anycast Landscape for Enhanced Internet Resilience Suelette Dreyfus and Richard Prospesel: Community Canary - Exploring Tor's Rust Implementation, Arti We encourage all members of the Internet technical community and anyone interested in the advancement of Internet infrastructure to attend these insightful sessions. Looking forward to your participation in fostering innovation and progress within our community. Kind Regards Alastair Strachan RIPE NCC

1 0

xz incident shows the need for structural change (in FLOSS maintenance & funding)
by Vesna Manojlovic 11 Apr '24

11 Apr '24

FYI: by Sovereign Tech Fund https://www.sovereigntechfund.de/news/xz-structural-change APRIL 4, 2024 BY ADRIANA GROH " xz incident shows the need for structural change" At Sovereign Tech Fund, we're following the xz incident closely and listening to the many voices in the FOSS maintainer community. There are clear signs that this is a sophisticated attack, but experts are still analyzing it, and it seems we won't know all the facts for a while. At this time, we don't want to point at any single cause and certainly don’t want to suggest a quick fix. We would, however, like to point out again the huge importance of digital infrastructure, which is regrettably overlooked and invisible to most of us. xz is merely the most recent example to illustrate how important the open source ecosystem is for all of us. At the same time, it shows very clearly how serious the structural issues are: for example, not enough new contributors, too few experienced contributors, too little recognition, and not enough (long-term) support from various stakeholders. One consequence is burnout among unpaid volunteers, which is unfortunately not a rare occurrence. If we keep ignoring these systemic issues, this house of cards will be our undoing (see our favorite xkcd comic). A great many companies and organizations incorporate and use critical open source components without ensuring that they are maintained and secured at all. We see this kind of maintenance as an undertaking that is in the public interest. It should not be the responsibility of unpaid volunteers alone, nor should it rest wholly on the private sector. It's a task whose importance society as a whole needs to acknowledge, and should be prioritized accordingly. As we saw with Heartbleed (2014), Log4Shell (2021) and other incidents, foundational open source technologies are essential parts of modern digital infrastructure. They underpin all (not just digital) endeavors, both in the public and private sectors. Just as physical infrastructure like roads, railways, and water systems are constantly being maintained, these digital components also need to be serviced and updated in order to serve as the foundation for digital sovereignty, a successful economy, and a resilient democratic society. Since the creation of the Sovereign Tech Fund, we have been exploring different support mechanisms to fulfill our mission of supporting the development, improvement, and maintenance of open digital infrastructure. We are currently working on more ways to tackle these challenges. Financial support for the people behind the code is a good first step and an important building block. However, to increase the long-term success of our mission, complementary and reinforcing mechanisms are needed. We are in contact with maintainers and FOSS communities as we develop and test these additional mechanisms. Our areas of focus include improving software maintainability, increasing bug resilience, better developer tooling, reducing technical debt, and expanding the communities of FOSS contributors. We welcome you to share your ideas, feedback, or constructive criticism with us. Through Sunday, 7 April 2024, we are especially eager to hear from open source maintainers who would like to fill out our fellowship pilot program survey. https://www.sovereigntechfund.de/news/foss-maintainer-fellowship-survey We see the creation of and commitment to the Sovereign Tech Fund by SPRIND and the German Ministry for Economic Affairs and Climate Action as a clear sign of the increasing awareness of the open source ecosystem’s significance. We hope that our plans for the future will inspire many others to join us in this work and have a lasting impact together. Incidents like xz – others will surely follow – show that we have a major task ahead of us for the foreseeable future.

2 1