I’m running for OpenSSF TAC, as an independent, in an election that any OpenSSF participants are eligible to vote in. If you’ve been active in OpenSSF, I’d appreciate your vote. The election is open until 30 December. If you’d like to know more background, read on. In Summer 2022, I joined Snyk and became involved with the Open Source Security Foundation – the OpenSSF. The OpenSSF is a Linux Foundation off-shoot which focuses on … well … Open Source Security – and specifically on “software supply chain” security. My philosophy when it comes to open source foundations and governance bodies like this is that if you want to be involved then it’s best to do so proactively – to jump in with both feet. That is one reason why, in late 2022, I put myself forward as a candidate for OpenSSF’s Technical Advisory Council.  Given the fact that I’ve been impacted in a recent round of lay-offs at Snyk, you might wonder why am I still involved in this organization and why have I once again put myself forward for OpenSSF TAC election this year? Since becoming involved with this community, with this part of the open source ecosystem, I’ve become convinced of the importance of this way of thinking about open source software. I still believe what I wrote in 2022: “This web of software that we all rely on so much is under constant attack.” The more developers are empowered and supported to mitigate against software security issues during the development process, the stronger the defence against this …

Why Am I Running for OpenSSF TAC? Read more »

In navigating the landscape of technology and digital innovation, we often find ourselves having to deal with complex concepts that cross between the technical, policy and legal domains. We hear words like “open source”, “open data”, and “open standards” thrown around, each with its attached notions of transparency, accessibility, and collaboration. However, these concepts aren’t as interchangeable as they might seem, and it’s crucial to understand the different rules that govern each. Bear in mind too that the term “IP” or “intellectual property” is really a catch-all term for a bag full of different types of rights, including copyright (which can apply to software, as a so-called literary work), database rights, patents, trade marks, and more. As someone who has served as an Open Source & Open Standards Strategy Director, worked for the Open Data Institute, and sat on the Open Standards Board for the UK Government, I’ve seen first-hand the nuances that define and differentiate these domains. This understanding is crucial as we cannot simply transfer licenses or IP guidelines from one sphere to another, owing to their unique features and scopes. This post was prompted by a few examples I’ve seen this year where people are either misunderstanding the differences between these domains, or conflating them. Having said all that: I am not a lawyer. This is not legal advice. I did not say this. I am not here. Open Source licenses: Code Reuse The term “open source” generally refers to a type of software whose source code is accessible to the public, allowing …

What’s the deal with Open Source, Open Data, and Open Standards licenses? Read more »

What’s an influencer, anyway? This is the question that rings out in my mind as I attempt to internalize the fact that I have been named one of the Top 100 UK Open Source Influencers for 2022 as part of their 2023 honours list #OpenUKHonours23. It’s definitely an “honour” to be recognized by OpenUK for my work in this way. But when we think of internet “influencers,” open source usually doesn’t come to mind. What I think and hope it means to be an open source influencer is that people are listening to what I have to say, be it on social media, in blog posts, videos, or whatever channel. But with great power comes great responsibility, right? So what can I use this currency, this influential authority, for?  I hope that I’ve influenced people to pay attention to ethical technology development, to the importance of privacy and personal dignity, and to the importance of building diverse and inclusive communities as we build tools, services, and applications for people. I also hope I’ve influenced people to understand the importance of community efforts, open source, and open standards in helping to build a technology ecosystem on the internet that is sustainable and exists to build people up and support society, starting from supporting marginalized groups. Halfway through 2022, I changed jobs, joining Snyk as Open Source & Open Standards Strategy Director. One thing that attracted me to Snyk was its stance on workplace flexibility. I hope to influence in 2023 by banging the drum a little about the importance of flexibility in the …

Influence Read more »

Today, as reported in the Guardian and elsewhere, Twitter suspended accounts of several journalists who had reported on Elon Musk and have also suspended accounts related to Mastodon as well as banning or “shadow-banning” people who talk about or link to their Mastodon profiles. Everyone should now be “reconsidering” their engagement with Twitter at this point. Personally I’ve stopped Tweeting. I’ve been removing links to my Twitter from across my other identities on the web. I’ve also been encouraging the organisations I’m involved with to move their social media engagement to the #Fediverse / Mastodon / ActivityPub and away from being Twitter-centric. By the way, I’ve been on Twitter since 2006. For context the iPhone debuted in 2007. I’ve spend a significant portion of my social media energy on Twitter. So it’s painful for me to say this, but Twitter is now dead – dead to me, at least. I’ve been on Mastodon since 2016. After witnessing the migration of people to Mastodon and other open federated platforms over the past months and how well the federated approach has been working, I’m more convinced than ever that this is the way forward. I think closed services like LinkedIn can also continue to play a role in the social media landscape but when it comes to filling the hole Twitter leaves, the #Fediverse is the way forward.

Consensus. It shouldn’t be a dirty word, but in some circles it seems to have become one. I was on an industry working group call the other week where someone presented a series of governance models and “consensus” was presented as the worst model for decision-making – something to be avoided at all costs. The speaker was promoting a more “consent”/voting-based approach where the majority rules. It’s not the first time I’ve heard the consensus-based approach to decision-making dragged through the mud. I have to say, I take a different view. Decision-making in groups is hard, especially when those groups are made up of people who do not have formal working relationships such as “boss/employee.” Industry working groups (such as groups at World Wide Web Consortium) are often peopled by software professionals, peers, from industry competitors. Nobody can tell anyone else what to do. I’ve been the chair of a few such groups and I can tell you unequivocally that the chair cannot tell people in a working group what to do. If the chair of such a group were acting as if they did have authority I would see that as a sign of dysfunction. In absence of this kind of formal authority, industry working groups must function using some kind of collective decision-making process. In my experience, consensus-driven decision-making achieves the best outcomes in these kinds of situations. So what is consensus? First of all, consensus does not mean “everyone must agree.” It means making decisions based on general agreement. In practice, it usually means …

Let’s Talk About the C Word Read more »

This blog is now a part of the #fediverse. I was inspired by the recent migration user growth on Mastodon and other federated social web sites to get the ActivityPub WordPress plugin installed here and start federating out any posts I write here. For more info on how to get this working on your own WordPress site, see The Fediverse beyond Mastodon | Fedi.Tips – An Unofficial Guide to Mastodon and the Fediverse. I also had to muck around with my .htaccess file and this post was very helpful.

Apparently there’s been some confusion about my choice of hair color. Some people seem to have been under the impression that I chose purple to match the color scheme of Samsung Internet. So I want to set the record straight. Purple is my favoirite color, and I exclusively choose employers with purple logos. I hope that clears things up. So now – after six years with Samsung, building and leading the Samsung Internet developer advocacy group, I’m moving on to a new role and a new set of challenges. I want to be clear about one thing: Samsung Internet is a great browser and it’s been a privilege to have worked as part of the team there. I also think, under the leadership of the awesome Heejin Chung, Samsung Internet is on exactly the right path — particularly in putting an emphasis on greater user privacy. During my time there I feel I’ve helped to achieve the goal we set out of putting Samsung Internet on the map and establishing it, rightly, as one of the big web browsers. If you’ve been following my journey (and there’s no particular reason you should have been, but just on the off chance) then you’ll know that one constant theme has been the web. I got my start building web sites and web applications for scientific publishers and later for dot-coms during the go-go 90s when the web was just taking off. After moving to London, and subsequently becoming out of work in London, I landed at Vodafone where I took my passion for the …

All Change, Still Purple. Read more »

Post originally appeared on dev.to. The web is going through an unprecedented period of change and evolution. New features, new technologies and new ideas are coming to the web. Luckily, it’s a platform that, since its invention in 1992 by Tim Berners-Lee, continues to be able to incorporate new capabilities as it develops. Unique among computing platforms, the web is built on top of open, royalty free standards. While there are definitely dominant players, the web is not controlled by any one corporate entity or organisation.  But where do new web standards come from? Many web developers think of standards as something that happens to them, by people in some room over there. Historically speaking, they’re not wrong. The culture of the groups that worked on some of the original web standards were born from the culture of the people creating Internet standards: elite groups of technical architects. I used to be one of those people. But I’ve been on a mission to broaden access to web standards, and to increase transparency and participation by web developers. This web we have doesn’t belong to elite architects. It belongs to the people who build it and the people who use it. there has never been a more opportune time to get involved.  If you’re looking for a much more complete primer on different web standards organisations, where they fit together, what work happens where, and how to get involved, I suggest you take a look at this great site put together by the people at Bocoup: the Web Platform Contribution Guide. …

Why Get Involved in Web Standards? Read more »

Browsers play a pivotal role in the web, but does the web need multiple browsers? I think most web professionals would say yes, but how about browser engines, the underlying software platforms that browsers are built on? Does the web need multiple engines? If so, why? To unpack this a bit, we need to talk about “open.” In the web standards world, we like to make a big deal about how the web is open. But what does open mean? The web is open in the sense that anyone can build something with it – that there are no gatekeepers. It is also open in the sense that it’s built on top of open standards. There are many definitions out there of what makes a standard open. One I particularly like is the UK Government Open Standards Principles which partially defines an open standard as one that has: • collaboration between all interested parties, not just individual suppliers • a transparent and published decision-making process that is reviewed by subject matter experts • a transparent and published feedback and ratification process to ensure quality You could say the web is “open” because the process by which it is developed and maintained adheres to these simple ideas of transparency, collaboration, and wide review between many stakeholders. It’s also open in the sense that you as a web user can choose what browser you use, and you can make that choice based on criteria that matter to you. Today, in one of those Twitter arguments that I usually …

Diary of an Engine Diversity Absolutist Read more »

This is a repost of something I originally posted to the Samsung Internet blog on Medium. This week, we have been celebrating the 30th anniversaryof the invention of the web. However, the celebration is tinged with anxiety about the current state of the world and the role the web has unwitting played in making it that way. The misuse of social media to control public opinion through the spread of propaganda, bot-enabled harassment campaigns and over-reliance on biased and simplistic algorithms for content promotion are some of the unexpected consequences of a world wide “web of information nodes in which the user can browse at will”. In order for the web to continue to be beneficial to society, we need to include more ethical thinking when we build web applications and sites. The web is made up of a number of technologies and technical standards. HTML, CSS and JavaScript are often thought of as the web’s core set of technologies but there are a raft of other technologies, standards, languages and APIs that come together to form the “web platform.” One of the web platform’s differentiators has always been a strong ethical framework; for example an emphasis on internationalisation, accessibility and (more recently) privacy and security. These are often cited as some of the strengths of the web. The architecture of the web is that of a user agent, the browser, that balances between the needs of the application developers and the people using those applications. This lends itself well towards this more ethical approach by allowing you to choose a browser that …

We Need a More Ethical Web Read more »