~/talk

So You Want to Open Source Your Project? Hold Your Horses!

Talkat RSA Conference 2024 · 2024-05-06..05-09· [open-source, security]
slides:none on file

Argues that going open source requires explicit choices about community, licensing and productization, not just tossing code online. Uses a concrete case: Enarx is written in Rust, donated to the Confidential Computing Consortium, and spawned a startup (Profium) that burned VC funding; core runtime is Apache 2.0 while service components use LGPLv3 and community utilities use Apache 2.0. Recommends joining ecosystems (ByteCode Alliance, Rust), keep copyright control, treat releases as supported products with reproducible builds and security patching.

AI-written summary · about

  1. 0:00Introduction
  2. 3:57Open source mistakes
  3. 5:05Success vs control paradox
  4. 6:11Strategic fit
  5. 8:28Software types
  6. 10:15Monetizing open source
  7. 13:31Open source licensing
  8. 17:12Licensing and business
  9. 17:33Copyright and patents
  10. 20:08Building communities
  11. 23:45Ecosystem responsibility
  12. 26:37Open source foundations
  13. 31:22Preparing for release
  14. 31:45Enarx project overview
  15. 33:14Enarx licensing
  16. 35:01Engaging communities
  17. 36:05Balancing needs
  18. 37:35Security considerations
  19. 39:27Next steps
  20. 41:18Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.