Open Source Day 2023

Schrödinger Hat is an organization that aims to connect developers and the open source community.With projects, events, podcasts and live-streams our goal is to share experiences and information about software development and other related subjects.The name is a tribute to the Nobel Prize-winning physicist, Erwin Schrödinger, and his most famous thought experiment, keeping the assonance of "cat" in the word "hat", as we would like to refer to the leading open source company Red Hat.

Schrödinger Hat

Schrödinger Hat is reviving in a big way the Open Source event that was held in Florence in 2021.
New bigger location, many more speakers

Nana Bianca

The Open Source Day is at its second edition in Florence, Italy!This year we decided to go even bigger! In this edition we are going to have a full day, plus the after party, full of people passionate about the open source environment: maintainers, junior dev, senior dev, engineer manager, full stack, and so on will attend the event. Feel free to have a chat with the speakers and the sponsors.During the conference we are going to host coffe breaks and lunch break. On top of that we are going to held a lot of giveaway sessions from our sponsor and other fancy gadget.The event will be on 24 March 2023, at <a href="https://nanabianca.it/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">Nana Bianca</a>, and it will open up the gates from 8am, with the event starting time at 9am.Share the event to your friends and collegues, the language will be english, the cost will be free and it will broadcasted online. Take yuor ticket for the in-person or online presence!For more information visit our <a href="https://osday.dev/" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">website</a>, osday.dev.If you like the event, please <a href="https://opencollective.com/schrodinger-hat" target="_blank" data-msys-clicktrack="0" rel="nofollow noopener noreferrer">support us</a>

Programma

 Open gate

Morning talk intro

Hello there dear developer building your app on open source dependencies. Oh wait, did you think open source code lives forever? Think again! Did you hear about the maintainer discontinuing a library despite having tens of millions of downloads? What about a maintainer who intentionally introduced code to break the functionality of his package which receives millions of downloads? So, did you ever wonder why dependencies die? Join me on a journey full of humor and horror across real-world incidents to learn how even the mightiest of open source projects got defeated. What can we learn from past incidents on the continuous struggles of open source software sustainability, maintainer burnout, and how it impacts us.

The Unexpected Demise of Open Source Libraries

All languages and runtimes are or were vulnerable to some kind of threat. We contribute directly to Node.js Security and during the year 2022, we've performed many Security Releases and some of them were really hard to think about. Did you know you can make money by finding critical vulnerabilities in Node.js? In this talk, We’ll show you 5 ways you can have hacked Node.js and how the Node.js team deals with vulnerabilities.

5 Ways You Could Have Hacked Node.js

One of the challenges IoT solutions face is ensuring application reliability at Edge and in the Cloud. IoT solution reliability can be impacted by events outside of your control. Examples include: the network provider drops the connection, the application crashes or a technician unplugs and plugs the device back in, power cuts, low battery life. Building resilience in your application is the solution to ensuring reliability, and it is your responsibility, as an engineer, to build resilience in your IoT application. This session will look at application resilience at edge, and using open source tools to achieve this. We will focus on MQTT connection resilience, message delivery, and application runtime resilience.

Ensuring IoT Application Edge Resilience with the Open Source AWS IoT Device C

Coffee Break & Giveaway

Broken Access Control is the top vulnerability in the OWASP Top 10 security risk list. Today more than ever, proper configuration and enforcement of access control are critical to modern organizations, as privacy and compliance awareness are at their peak. Yet, building authorization or permissions management is a painful process for developers. This is due to complex and ever-evolving requirements, and lack of knowledge for avoiding common pitfalls. OPAL (Open Policy Administration Layer) is an open-source administration layer for OPA (Open-Policy Agent). OPAL detects changes to both policy and policy data in real-time and pushes live updates to policy engines, making them real-time and event-driven. OPAL uses Git as the source-of-truth for policy, enabling Git Ops workflow for policy delivery and versioning. Today, OPAL is used by thousands of engineers, including developers from Tesla, Zapier, Cisco, and Accenture. In his talk, Filip Grebowski will explain the challenges of managi

This Open Source Tool Building Access Management from Scary to Simple

Building performant cross-platform software is riddled with challenges. In this talk, we’ll discuss the technical journey of Espanso, a popular open-source Rust application, covering the main challenges encountered along the way, along with many useful patterns to solve them (including Rust-specific tips, CI automation, code-signing, distribution, and more)

Challenges of Cross-Platform Development in Rust: The Espanso Case Study

Launch Break & Open Debate

Afternoon talk intro

As the modern cloud grows in complexity, container security based on attack prevention and surface reduction become less effective. Most new cloud environments collect activity logs and store them for later inspection, which consumes lots of storage and loses the benefits of runtime visibility, or apply fine-grained runtime control on access and operations, which is more intrusive and brings scalability concerns. Falco, the Cloud Native Runtime Security tool, offers an open source alternative based on non-invasive runtime detection and low resource consumption. Falco is like a security camera that observes all the activity in your system and alerts you whenever suspicious behavior is detected. Historically, Falco was focused on containers and system security by observing data coming from the Linux kernel, but has more recently evolved to also bring real-time telemetry over logs of cloud services. In this talk, you’ll learn the basics of the project and how you can employ it as an ope

Reliable and Cost-effective Cloud Security with Falco

Open Source has both “won” and “lost” at the same time. Every company in the world leverages Open Source Software (OSS) to build products. However, every software is vulnerable, and OSS is no exception. Yet, despite the strong incentive for companies all over the world to discover and fix them, the majority use open source without paying for it. Security scanners allow companies to discover vulnerable OSS they depend upon, but those vulnerabilities should also be fixed. While there are some incentives in discovering security vulnerabilities via bounty programs, there are none to fix them. A typical email to an OSS maintainer is more like a threat: if you do not fix it in the next month or so, I am going to make this public. In Node.js we have experimented with a public bounty program with https://github.com/nodejs/security-wg, and several companies sponsor full-time researchers to discover vulnerabilities. However, the OSS maintainers receive no compensation for their time in fixing

Why are there no incentives for security in Open Source?

NLP represents a field with myriad opportunities for real-life use cases: one of the best examples is the healthcare sector, where medical research and patient care can rely on different technologies that can enhance the information that has already been collected. Many companies lease commercial NLP software, but which are the open source alternatives? Let's discover MedSpaCy, a recent library of tools for performing clinical NLP with a real-use case application!

One library a day keeps the doctor away

Coffee break & Giveaway

Contributing to Open Source is hard. Too often we submit a pull request without hearing back from the maintainers, wasting our time that could be spent elsewhere. Being a long time open source contributor, and just recently maintaining MetalLB, a fairly popular open source project, I will share the insights and the issues a contributor (and a maintainer) faces when dealing with new contributions. I will provide hints and reasons to maximize the chances to steer the maintainers' attention to our work, to gain their trust and establish a profitful relation with the community behind a project.

How to tame a maintainer

Bringing to success an open-source project is hard, but growing it from an organizational and business point-of-view, organically to the growth of the community, their enthusiasts, and the contributors is an equally interesting challenge for all the companies behind. Growing the maintainers accordingly with the scale of contributions and support, managing the business expectations with the expectations of the open source (and not paying) adopters, growing the product accordingly, those are only some of the topics that every mature Business Open Source organization discusses (on a recurrent basis I would say). In this talk you will learn more about these challenges through practical examples based on the direct experience after having worked directly with several, structured, successful, worldwide, Business Open Source organizations in community-driven projects.

Organization and challenges (with best practices) behind a successful open-sou

Conclusion with the organizer

Aperitivo by SH

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

Open Source Day 2023

More events from Schrödinger Hat

Discover more events from Schrödinger Hat, from Science & Tech to other experiences you might love.

Open Source Day 2023

More events from Schrödinger Hat

Discover more events from Schrödinger Hat, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.