Slashdot Mirror


Obama Administration Supports Recycling Code and Open Source

jones_supa writes: The Obama administration is seeking public comments on its open source policy. They have released for public comment a draft Federal Source Code policy to support improved access to custom software code. From the policy document: "This policy requires that, among other things: (1) new custom code whose development is paid for by the Federal Government be made available for reuse across Federal agencies; and (2) a portion of that new custom code be released to the public as Open Source Software (OSS)." Tony Scott, Federal CIO of the US government, mentioned one of the strengths of open source – cost saving. Scott wrote on the White House blog that the U.S. government "can save taxpayer dollars by avoiding duplicative custom software purchases and promote innovation and collaboration across Federal agencies."

56 of 100 comments (clear)

  1. Obama administration supports backdoors by Anonymous Coward · · Score: 4, Insightful

    ... which means that, by definition, it cannot support open source software.
    http://www.nytimes.com/2016/03...

    1. Re:Obama administration supports backdoors by Anonymous Coward · · Score: 2, Funny

      I'm not sure where you are getting your definition from, but as long as the backdoor is open source, I don't see any conflict here.

    2. Re:Obama administration supports backdoors by grimmjeeper · · Score: 1

      Having the code for the back door open to the public is like giving away keys to anyone and everyone who wants it. It would render any encryption useless.

      However, I think the OP is confused about things a little. Obama is pushing for private companies to install back doors so the government can spy on you. This article is about the source code for publicly funded software being open. Your phone is not government funded software so that's actually two different things.

    3. Re:Obama administration supports backdoors by ShanghaiBill · · Score: 1

      Just because the license permits you to modify/redistribute it however you wish (the definition) ...

      That is NOT the definition of "Open Source". You can modify OSS, and you can redistribute OSS, but you cannot do it "however you wish". All OSS licenses put restrictions on modification and/or redistribution. Only "public domain" has no restrictions, and while that is Open Source, it is not a license.

      While Obama's proposal sounds good, it is actually a step in the wrong direction. Under current policy, much government source code is automatically in the public domain. So if this proposal uses any other OSS license, it will mean more restrictions, not fewer.

    4. Re:Obama administration supports backdoors by Dragonslicer · · Score: 2

      While Obama's proposal sounds good, it is actually a step in the wrong direction. Under current policy, much government source code is automatically in the public domain. So if this proposal uses any other OSS license, it will mean more restrictions, not fewer.

      The difference with releasing government source code under a GPL-like license, instead of public domain or a BSD-like license, is that it would prevent private entities from taking that source code and using it in a closed-source product. Whether that's an advantage or a disadvantage is a matter of personal opinion; I think there are reasonable arguments either way.

    5. Re:Obama administration supports backdoors by Bert64 · · Score: 1

      No it wouldn't...
      You can release the code, while not releasing the keys. It would be quite easy to create a system with a default SSH public key such that anyone with the private key could log in, without having to release the private key. Of course such a backdoor would be obvious and quickly found, and people would surely remove or change the public key if they were using it themselves but it wouldn't help anyone else to actually gain access unless they were to also leak the private key.

      Most encryption algorithms are open source, it's the keys which need to be secret not the algorithms.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    6. Re:Obama administration supports backdoors by grimmjeeper · · Score: 1

      By definition, a back door lets you get access to the encryption without having the key. So not releasing the keys is irrelevant.

    7. Re:Obama administration supports backdoors by tripleevenfall · · Score: 1

      Right. The Obama administration wants the model to generally be proprietary and closed, except open to the government. They don't want everything to be open. They want it closed to everyone but them.

    8. Re:Obama administration supports backdoors by Tharkkun · · Score: 1

      Just because the license permits you to modify/redistribute it however you wish (the definition) ...

      That is NOT the definition of "Open Source". You can modify OSS, and you can redistribute OSS, but you cannot do it "however you wish". All OSS licenses put restrictions on modification and/or redistribution. Only "public domain" has no restrictions, and while that is Open Source, it is not a license.

      While Obama's proposal sounds good, it is actually a step in the wrong direction. Under current policy, much government source code is automatically in the public domain. So if this proposal uses any other OSS license, it will mean more restrictions, not fewer.

      It can be open and free to use among government entities without releasing it to the public. It's about re-using and sharing code instead of having each agency or project working in a silo.

    9. Re:Obama administration supports backdoors by ShanghaiBill · · Score: 1

      It can be open and free to use among government entities without releasing it to the public.

      That is NOT what this is about. Sharing code within an organization does not require any OSS license. You can do that with full proprietary.

    10. Re:Obama administration supports backdoors by Bert64 · · Score: 1

      No a backdoor just gives you access via a method other than the publicly disclosed one. A backdoored encryption where there are two keys just means that you need one of the two keys, it's quite possible to publish the source code without publishing the backdoor key, and equally possible for anyone with the source to remove or change the backdoor.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    11. Re:Obama administration supports backdoors by grimmjeeper · · Score: 1

      You really don't understand how encryption works, do you?

    12. Re:Obama administration supports backdoors by vovin · · Score: 1

      Which BSD license? The 2 clause or the 3 clause?

  2. Yes, especially when it comes to encryption by vvaduva · · Score: 4, Insightful

    Yes, they support recycling code...old code..related to encryption.

    1. Re:Yes, especially when it comes to encryption by Desler · · Score: 1

      The weaker the chiphers the better. Because, you know, pedophiles and stuff.

    2. Re:Yes, especially when it comes to encryption by Locke2005 · · Score: 1

      Because you know pedophiles are going to use any of the hundreds of 3rd part apps to encrypt all there communications, i.e. the ones that Apple can't help at all to decrypt... or were you being sarcastic in the first place?

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
    3. Re:Yes, especially when it comes to encryption by Desler · · Score: 1

      Yes, Captain Aspergers, I was being sarcastic.

  3. im sure the dinner tables a mess at the whitehouse by nimbius · · Score: 5, Funny

    Sasha: Im all done with my loop, can I return to main()?
    Barack: Now, sasha, what did i say about recycling code? check with Malia and see if you can use data from her constructor instead?
    Malia: My constructor doesnt handle 32 bit integers, only 64. Sasha wont redo her booleans.
    Michelle Barack: And for god sake use a pointer. we're not made of address space you know...
    Sasha: Im dereferencing on line 14 dad! god! Malias stupid library doesnt support returning a linked list i think...
    Barack: now --let me be clear here-- this, and i mean this code, isnt going to compile in Borland young ladies...
    daughters: OMG DAD this compiles FINE in GCC!
    Michelle: have you kids been hanging around uncle Richard and his GNU friends again...

    --
    Good people go to bed earlier.
  4. Lame duck President wants to be the hero now by NotDrWho · · Score: 2

    Hooray?

    --
    SJW's don't eliminate discrimination. They just expropriate it for themselves.
  5. Re:How about H-1B visas? by NotDrWho · · Score: 2

    They're very tech *CEO* friendly, however. The Obama Administration supports giving them all the H1B's they want and are quite happy to help them artificially drive down all tech salaries as a result.

    --
    SJW's don't eliminate discrimination. They just expropriate it for themselves.
  6. What about gov't contractors? by goombah99 · · Score: 1

    Does this mean that any code at a university which was associated with an NIH or NSF or DOE grant has to be provided freely to the govt?

    --
    Some drink at the fountain of knowledge. Others just gargle.
  7. In related news... by PopeRatzo · · Score: 4, Funny

    Donald Trump has announced that he's going to make Open Source great again by putting the "SS" back in "OSS".

    --
    You are welcome on my lawn.
    1. Re:In related news... by PopeRatzo · · Score: 2

      Do you and your fellow President Trump denigrators realize that...

      "...not many people know it, but the Fuhrer was a terrific dancer. And he could paint an entire apartment in one afternoon...TWO COATS!"

      https://classicmovienight.file...

      --
      You are welcome on my lawn.
    2. Re:In related news... by Locke2005 · · Score: 1

      Just keeping drinking that koolaid; you'll be rewarded in due time...

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
  8. Re:Reuse across Federal agencies by tomhath · · Score: 2

    No. This proposal is already what federal law requires. But it's an election year so they are saying whatever will get votes.

  9. Open Source AHA Exchange by BiggoronSword · · Score: 1

    The Obama administration should open source the AHA exchange; let market competitors fix and replace it.

    --
    interactive hologram, or it didn't happen.
    1. Re:Open Source AHA Exchange by BiggoronSword · · Score: 1

      ACA*

      --
      interactive hologram, or it didn't happen.
    2. Re:Open Source AHA Exchange by ArchieBunker · · Score: 1

      Nah Trump will repeal it when he wins.

      --
      Only the State obtains its revenue by coercion. - Murray Rothbard
  10. Re:How about H-1B visas? by PolygamousRanchKid+ · · Score: 2

    I think we need to start granting H-1Bs for politicians. We don't seem to have enough politicians with the right skills.

    --
    Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
  11. What code reuse really means... by __aaclcg7560 · · Score: 1

    The people who run the Department of Re-inventing The Wheel will get laid off.

  12. Nobody Wants It by avandesande · · Score: 1

    So government is going to have to release source code from some crappy custom HR or accounting application? Really folks think about the business applications you work on.

    --
    love is just extroverted narcissism
  13. What about other IP? by rayzat · · Score: 2

    The Federal government pays a lot of money for research and development in a lot of areas, architecture, bridges, roads, jet engines, custom ASICs, etc etc. I used to design custom racks, brackets, conduit routing, power/heating/cooling systems for electronics. Think Humvees with quarter racks to a full mobile data center. It eventually got to the point where we were only doing something new/innovative every 3rd or 4th deal. Every other deal was use the bracket designed for A, the rack from B, the generator from C, etc. If we had to release those cad drawings we would have had no competitive edge. If they're saying code should be reusable across agencies and parts should be made open, when stop just at software?

  14. Maybe we'll finally get new code here? by damn_registrars · · Score: 1

    Considering President Obama has approval ratings on slashdot that are about even with the Ebola Virus or Kim Jong-Un, I would expect that his endorsement of recycling code would encourage the monkeys that write slashdot to cough up some all-new code very soon. This might be the greatest gift Obama has given to the slashdot community since ... well, likely ever.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  15. Mod parent up? by Crowd+Computing · · Score: 2

    They see the opposition that President Trump is receiving, and they see the source of this opposition. And they start to think that President Trump is right, and that he's needed more now than ever before. His support continues to grow and grow, all thanks to those who are trying to oppose him!

    By this logic, if I modded you down, I'd mod you up.

    1. Re:Mod parent up? by Locke2005 · · Score: 1

      To a certain extent, the troll is right: attacking Trump increases his support from his followers. My worst fear is that someone will attempt to assassinate Trump and fail, thereby making him enough of a hero to get elected. Of course, I wouldn't put it past Trump to fake an assassination attempt just to increase his "ratings", because he is enough of a narcissist to do that.

      --
      I've abandoned my search for truth; now I'm just looking for some useful delusions.
  16. Just great! by PPH · · Score: 3, Funny

    Another bin I have to haul out to the curbside every week. Worse yet, they'll make us sort it first. Perl goes in the green one, C++ in the blue (please remove and discard templates first), VB goes in with the compost.

    --
    Have gnu, will travel.
  17. Re:The BSD and MIT licenses are the only real opti by Waffle+Iron · · Score: 1

    There's no justifiable reason to disallow the distribution of binaries built from modified source code.

    Which implies that there is no justifiable reason to deny your users the freedom to copy and redistribute those binaries as they please.

    You were going to allow that, weren't you?

  18. Re:The BSD and MIT licenses are the only real opti by qwijibo · · Score: 1

    Microsoft uses BSD code. They couldn't do that with GPL code.

    I don't like Microsoft or their products, but I would rather they use BSD code written by people who understand what they're doing than have Microsoft, yet again, reinvent the wheel.

    When there's no possibility of the end result being open sourced, would you rather someone commercially benefit from using BSD code, or live with whatever fundamental security holes they can introduce starting from scratch?

    Sometimes, "freedom" has to include the freedom to be a douchebag.

  19. Re:The BSD and MIT licenses are the only real opti by Anonymous Coward · · Score: 2, Insightful

    Sometimes, "freedom" has to include the freedom to be a douchebag.

    Not "sometimes". Always. It's not freedom otherwise.

  20. Re:The BSD and MIT licenses are the only real opti by HornyBastard · · Score: 4, Informative

    There's no justifiable reason to disallow the distribution of binaries built from modified source code.

    My code. My rules. That is all the justification I need.
    If you don't like my rules, don't use my code.

    Disallowing that isn't promoting freedom; it's eliminating freedom.

    The GPL is about the freedom of the code.
    with the BSD/MIT/whatever licenses the code is more Free to start with. The GPL makes sure that the code stays Free.
    If you don't like the GPL, don't use it.
    You just have to understand that different types of people appreciate different types of freedom.

    --
    Death has been proven to be 99% fatal in lab rats.
  21. Re:Reuse across Federal agencies by cayenne8 · · Score: 1

    Huh ? Does that mean that right now, code that is developed for one agency, doesn't get reused by another ?

    Simple answer is YES.

    You act at this?

    It has worked this way forever really....but is getting slightly better.

    But, unless this is for a new department or govt agency....most software is coming in to be built upon or added to a pile of old code/systems of legacy systems cobbled together over the years.

    Most of them have at their base, old stovepipe legacy systems, or maybe multiple stovepipe systems that over the years are modified to try to talk to each other and an increasingly modern world.

    Now, without getting into functionality and restrictions from old and even new laws....we just talk about how they are done.

    A need is found in the govt. and requirements, usually fairly narrow are put out. Said dept uses their money for that fiscal year as budget to pay for it...a contractor bids and wins.

    So, then basically the contractor will work on custom proprietary code or use COTS products, maybe customizing them or interfaces to them...or some combo of all of the above.

    This code only must match the description and functionality of the contract and that is what is turned over.

    Contractor and govt part ways on that one....unless some maintenance is put into place, etc.

    But you don't see the govt having forethought to write into the contract that the code must be flexible, or that it must be open sourced, or that it must be able to talk to other systems, or...well, really anything about it. Just that it meets the often narrowly defined need of the contract. There isn't often money for the software to be maintained or modified or anything after contract is overwith.

    And for decades now, for the most part the Federal govt has not only not been coding or developing on its own.....they actively got OUT of the tech business and do it all with contracting.

    This system has pros and cons....you can get new blood in for work, but if all coders and such were Federal employees....well, they would part of the jobs for life thing, and don't really have that much incentive to keep their skills up. That happened in the past. But you get problems with not having or keeping folks around that know systems or how they're built, etc.

    OH...and finally....these contracts are generally won by the lowest bidder.

    Quite often, this winner is just a front company, female and/or minority owned...usually a smaller company that "partners" with the big boys, like Lockheed or Northrop Grumman, General Dynamics, etc....they are the ones that provide the talent and real workers, with the front company getting a nice cut to fill out a govt. quota column on a form somewhere.

    But anyway, that's how it goes. And so no...you don't see reuse, and you sure don't see release of code...hell if COTS is used, that cans that little idea right off to bat as that it is usually strictly and expensively licensed out for each use and each department.

    --
    Light travels faster than sound. This is why some people appear bright until you hear them speak.........
  22. What? by Etherwalk · · Score: 2

    ... which means that, by definition, it cannot support open source software.
    http://www.nytimes.com/2016/03...

    +4 Insightful? Look, government's position on backdoors is fundamentally wrong, as almost everyone who works in tech knows and almost nobody who works outside of tech understands or cares about. But that debate has nothing to do with open source.

    The United States Government is the biggest purchaser on the planet, and we pay their bills. If they want to recycle code across their organization to save us money, great. If they want to open-source their unclassified software, great.

  23. Re:The BSD and MIT licenses are the only real opti by Anonymous Coward · · Score: 1

    with the BSD/MIT/whatever licenses the code is more Free to start with.
    The GPL makes sure that the code stays Free.

    This is something that is often reiterated and that I strongly disagrees with, not necessarily the intention, but the definition of the words.

    GPL has nothing to do with making sure that the code stays free. What GPL does is that it ensures that any software that is built on top of it will have to be open source.
    When it comes to the original source code BSD/MIT/unlicensed distribution all ensures that the original source remains free. You can compile and distribute as many binaries you want, the source is still out there, this makes the "free" claim often put on GPL software a bit dubious since it limits what you can do with the software rather than ensures that you can decide on your own.

    For me freedom typically means that you are allowed to do things that someone else doesn't necessarily approve of, and that would include change the software and release the binary.
    I feel that calling GPL free software is a bit dishonest. I would rather call it something like "ensured open" or "ensured open derivatives" since that is more that GPL is about.
    There is a big difference between open source software and free software, yet people seem to mix them up or use free when they mean open.

  24. Re:This just in: by KGIII · · Score: 1

    That's kind of odd as it's the second to last option, the last being to discard. The terms are reduce, reuse, recycle. There's some merit to that and, as near as I can tell, it applies to code as well as anything.

    --
    "So long and thanks for all the fish."
  25. Re:The BSD and MIT licenses are the only real opti by Bert64 · · Score: 2

    If you provide absolute freedom, then you also provide the freedom for some to take away freedoms from others. Releasing binaries without source is just such an act, you are using source which you had the freedom to receive and modify, but you are not extending that same level of freedom to others.

    The GPL aims to ensure equality for everyone, which requires to impose an equal set of limits on everyone to avoid a select few from imposing their own set of limits on everyone else. Society works much the same way, you are free to do quite a lot but when it comes to things which harm others there are various laws to stop you.

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  26. Unintended Consequences? by sycodon · · Score: 1

    If done in the full spirit of the summary, would that not create a mono culture of code that makes vulnerabilities available everywhere instead of just the agency in which it was developed?

    --
    When Fascism comes to America, it will call itself Anti-Fascism, and tell you to give up your guns.
  27. Seems like a no-brainer by Locke2005 · · Score: 1

    Any software paid for by public funds should be made available for public use, duh! We also need to open source all textbooks, and put all the for-profit textbook companies out of business. Seriously, a huge chunk of our education budget goes to publishers, and open source text would be freely downloadable to tablets, making it cheaper, more current, and more correct, sense any errors could be instantly corrected. Put out bounties, and pay students for finding "bugs" in the text, that'll make those little buggers study!

    --
    I've abandoned my search for truth; now I'm just looking for some useful delusions.
  28. API by kyldere · · Score: 1

    To me, this means that someone in the government understands what an API is. This is great news!

  29. Re:Reuse across Federal agencies by Infiniti2000 · · Score: 1

    Huh ? Does that mean that right now, code that is developed for one agency, doesn't get reused by another ?

    In many cases, yes, though I'm not sure of the number of cases in each. For example, most code developed by the DoD is by default Distribution D, which doesn't allow distribution to other (non-DoD) government agencies.

  30. Re:The BSD and MIT licenses are the only real opti by shaitand · · Score: 2

    "We're talking about open source software here, however. That means relinquishing control over how other people use the code."

    No, that wouldn't be open source software. That would be public domain software.

    "your intent is to control others (that is, to remove their freedom to act as they choose)."

    Not at all, others are perfectly free to act as they choose. But my labor and efforts are not free, time is the one truly limited resource humanity has and the only freedom you are granted with a BSD/MIT license vs the GPL is the freedom to save yours at the expense of mine while selfishly refusing to pass that benefit along.

  31. Not really by goombah99 · · Score: 1

    Look at all the commercialized code that have come out of universities.

    --
    Some drink at the fountain of knowledge. Others just gargle.
  32. Re:The BSD and MIT licenses are the only real opti by shaitand · · Score: 1

    "would you rather someone commercially benefit from using BSD code, or live with whatever fundamental security holes they can introduce starting from scratch"

    Commercial benefit has nothing to do with it. You can commercially benefit while complying with the GPL. But would I rather someone is able to take my time in order to save their own without allowing others the same benefit or live with whatever fundamental security holes they can introduce starting from scratch?

    I pick option C. I neither allow douchebags to benefit from my work not utilize the swiss cheese software produced by douchebags. Therefore do not have to live with their holes in my face.

  33. Re:The BSD and MIT licenses are the only real opti by vux984 · · Score: 1

    GPL has nothing to do with making sure that the code stays free.

    Please define 'free'.

    What GPL does is that it ensures that any software that is built on top of it will have to be open source.

    Ok. That Includes copies of the original source.

    When it comes to the original source code BSD/MIT/unlicensed distribution all ensures that the original source remains free.

    How is the GPL not ensuring this exactly?

    You can compile and distribute as many binaries you want, the source is still out there,

    How is this not the case with GPL?

    this makes the "free" claim often put on GPL software a bit dubious since it limits what you can do with the software rather than ensures that you can decide on your own.

    Its analogous to any system of freedom which states that your freedom ends where it starts to infringe on mine.

    If you take a free project, add your 0.02 cents and change the license, then give it to me, then I don't enjoy the same rights you enjoyed. The GPL ensures that I'm just as free when i get your modified code as you were when you got the code from someone else. Not more free; but crucially: Not less free.

    The GPL only limits your freedom to put the next user into a cage. Your absolute freedom with BSD is the freedom to put the downstream users into a cage.

    As an upstream author, that's the decision I am making when I release under GPL vs BSD. Do I want to give downstream users the ability to put people even further downstream into a restrictive license? Or do I want everyone, no matter how downstream to have the same set of freedoms when they get derivate works of this as the first person who picks it up?

    The BSD has certain advantages -- it can be combined with other licenses easier; it can result in the code being used in projects where GPL code couldn't or wouldn't be.

    But it has disadvantages as well... it may be that the hardwork I did, gets subsumed into a new work and nobody, not even me can benefit from that and improve it further. Best case, we can go to the original project where it was still BSD and try to recreate all the features that were added to the now-locked-up version.

    I feel that calling GPL free software is a bit dishonest.

    I don't see that at all.

    I would rather call it something like "ensured open" or "ensured open derivatives" since that is more that GPL is about.

    That's not the worst idea I've heard. Bu you can have open source software that grants you no freedom to redistribute or derive from it at all. So your 'preference' just kicks the can into a different but equally unsatisfying semantic argument about 'open' instead of 'free'.

    For me freedom typically means that you are allowed to do things that someone else doesn't necessarily approve of, and that would include change the software and release the binary.

    You can do that with GPL. Just alongside the binary must be the offer to make the source available, under the GPL.

    The only thing you can't do is change the license.

  34. Not "your" code if taxpayer paying for it ... by perpenso · · Score: 1

    My code. My rules. That is all the justification I need.

    We are talking about coding funded by US taxpayers. It you accept government funding then its not "your" code. The government should be allowed to put a non-restrictive license on things it funds. Much like code from NASA and other agencies that had been released to the public domain.

    If you want to go by "your rules" then use only your money, your resources and your time. "Your" not necessarily being singular, plural in the case of a team of private developers too.

    The GPL is about the freedom of the code.

    The GPL discriminates against some taxpayers. The government can't give an non-governmental organization like the FSS authority over taxpayer funded code. The only options are government authority or no authority.

  35. New territory for GPL, restrict creator not user by perpenso · · Score: 1

    If you provide absolute freedom, then you also provide the freedom for some to take away freedoms from others. Releasing binaries without source is just such an act, you are using source which you had the freedom to receive and modify, but you are not extending that same level of freedom to others.

    There is a fundamental flaw in this argument. Traditionally the creator of software is under no restriction under the GPL. They are free to dual license the code and use it in proprietary closed software. The GPL really only applies to users, people who modify the code. It allows these users to to re-distribute something they have not created.

    The problem with this new context, government funded software, is that all taxpayers are part creators, part owners. The taxpayers paid the developer to write this software for them. So these taxpayers should have the right to use this software in an open or closed manner, as all past creators/owners could do via dual licensing.

    And there is a more important problem. The GPL discriminates against some taxpayers. The government can't give an non-governmental organization like the FSS authority over taxpayer funded code. The only options are government authority or no authority.

  36. Gov't can give FSF authority over taxpayer code by perpenso · · Score: 1

    The government can't give a non-governmental organization like the FSF unrestricted authority over taxpayer funded code since the FSF will selective discriminate against some taxpayers. Also note that the FSF is free to re-write the GPL however it wants, GPL'ing code is a blank check to the FSF.

    The only options are government authority or completely non-discriminatory licensing.