Æva Black – Can Open Source be Secure by Design? #FOSSBack

This talk examines the security challenges facing Free and Open Source Software (FOSS) in the tech industry, which has significantly relied on it for two decades. Æva Black discusses the under-investment in security and maintenance that has escalated global cybersecurity risks, highlighting the interplay between open source collaboration's economic benefits and its vulnerabilities. The session delves into governmental responses, such as the Cyber Resilience Act in Europe and SOSSA in the U.S., and reflects on historical milestones that have led to these pressing security issues. Æva Black shares insights on how these regulations could enhance the sustainability of open source communities through initiatives like Voluntary Security Attestations.