Open Standards

Call for Survey Responses: Security Perceptions of Open Source Software Among Practitioners

Divyansha Sehgal — 2021-11-30T05:14:46Z

Most software projects today contain open source components. Some industry estimates put the number at 500+ OSS components per app. Centre for Internet and Society is studying the security impact of the widespread use of these (often under-maintained) projects.

The survey for this study here

If you use any open source components for your job, your input around how you select components to use would help us understand industry standards around the use of OSS.

Even if you’re not a part of the security teams in your organization, please take this survey! It will help us understand how you select OSS components and you may learn ways to vet your own dependencies.

The survey should take around 30 minutes to complete. As a token of our gratitude for your time and your survey contributions, we would like to send you an Amazon India Gift Card for Rs. 250. Please be sure to include your email address since it will be used to send the Gift Card at the end of the week.

For more details visit http://editors.cis-india.org/openness/call-for-survey-responses-security-perceptions-of-open-source-software-among-practitioners

Wikiorientation at Dr.GR Damodaran College of Science

bhuvana — 2020-01-18T08:11:03Z

An orientation session on Wikimedia projects was held on 6-7 December 2019 at Dr. GR Damodaran College of Science. This talk was part of the “Hour of Code” event, which is an International event celebrated across the globe to encourage students to develop their knowledge on Computer Science. This event was supported by Open Knowledge movements like Wikimedia, Mozilla, etc.which would help students to share their knowledge in the form of volunteerships and contributions. The highlights of gender gap research and women based projects such as Women in Red were covered as part of a focussed group discussion.

Hour of code event

The “Hour of Code” is an International event conducted across the globe to commemorate the birthday of Grace Hopper, a computer scientist. In India 1047 events were officially registered and were conducted region-wise. In Coimbatore, Dr.G.R. Damodaran College of Science initiated the first Hour of Code event in the city. The event was attended by 350 students, where 50% of the participants were identified as women, from various departments and 6 Open Source and Knowledge movements’ community members were invited as speakers. Among them were Wikimedia, Mozilla, Google Developers Groups, Facebook Devcircles, Women Tech Makers and School of AI where all the community representatives pitched to the student gathering on how to contribute to these groups. The students were enthusiastic to initiate Open source clubs and also nominate a Point Of Contact with the guidance of the faculty members.

Wiki Orientation

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-6.jpg

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-7.jpg

I was invited as a Chief Guest for the event to talk to students about how they may contribute to Wikimedia and its projects. I presented to the students the various forms of Wiki which would be of interest to coders and non-coders. This also included discussions on Wikidata, Wikisource, Wikipedia, Wikimedia commons and Wikimedia in Education program. As the participants from the college were mostly from Tamil Nadu, I also emphasised how contribution in Tamil in the Wiki world will be of great help. I discussed with students how contribution to an Open Knowledge movement not only enhances their intellectual stand but also benefits the whole world. Also the founder of Koval labs, Coimbatore was the co-speaker of the day who highlighted about importance of Open source and Computer Science in today's industries.

Bridging Gender Gap

After the orientation, I invited a few participants to a focussed group discussion about my research on “Bridging the Gender gap in Indian Wikipedia languages”.A majority of the participants were women, even though the event was open to all. I discussed the research work and the necessity behind this. Apart from this I introduced the students to various women- focussed wiki-based projects such as Women In Red, WikiLoves Women, Wiki Women for Women Well Being (WWWW) etc. I also asked the attendees to express t in the open discussion session on what are the major issues faced by women in technology taking examples from their own lives.

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-12.jpg

The common and major issues with pursuing a career in technology discussed were the inaccessibility to internet and infrastructure to work at home besides the other household responsibilities. Also the freedom to pursue a career in this field is less and not permissible for longer years in these women's lives.

Key observations/ learnings

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-9.jpg

The key issues of women working on technology in a structured environment (such as an educational institution in this case).
The possibilities of initiating a WikiClub at the campus.
Almost 60% was interested in non/less coding contributions/subjects.
Discussed the kinds of projects students can contribute to on Wikipedia.

Press coverage about the event can be seen at Desathin Nambikai , The Covai mail news , Prime Time Tamil , Covai news and Updatenews360.com

For more details visit http://editors.cis-india.org/a2k/blogs/wikiorientation-at-dr-gr-damodaran-college-of-science-1

Wikiorientation at Dr.GR Damodaran College of Science

bhuvana — 2019-12-23T08:18:11Z

Hour of code event

The “Hour of Code” is an International event conducted across the globe to commemorate the birthday of Grace Hopper, a computer scientist. In India 1047 events were officially registered and were conducted region-wise. In Coimbatore, Dr.G.R. Damodaran College of Science initiated the first Hour of Code event in the city. The event was attended by 400-500 students, where 50% of the participants were identified as women, from various departments and 6 Open Source and Knowledge movements’ community members were invited as speakers. Among them were Wikimedia, Mozilla, Google Developers Groups, Facebook Devcircles, Women Tech Makers and School of AI where all the community representatives pitched to the student gathering on how to contribute to these groups. The students were enthusiastic to initiate Open source clubs and also nominate a Point Of Contact with the guidance of the faculty members.

Wiki Orientation

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-6.jpg

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-7.jpg

Bridging Gender Gap

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-12.jpg

Key observations/ learnings

https://commons.wikimedia.org/wiki/File:Wikiorientation_at_Dr.GR_Damodaran_college_of_arts_and_science,_Coimbatore_-9.jpg

The key issues of women working on technology in a structured environment (such as an educational institution in this case).
The possibilities of initiating a WikiClub at the campus.
Almost 60% was interested in non/less coding contributions/subjects.
Discussed the kinds of projects students can contribute to on Wikipedia.

Press coverage about the event can be seen at Desathin Nambikai , The Covai mail news , Prime Time Tamil , Covai news and Updatenews360.com

For more details visit http://editors.cis-india.org/a2k/blogs/wikiorientation-at-dr-gr-damodaran-college-of-science

Gurshabad Grover nominated to join advisory group on open source software for ISO/IEC JTC 1

Admin — 2019-11-02T05:17:24Z

Gurshabad Grover has been nominated through the Bureau of Indian Standards (BIS) to be a member of the Advisory Group AG) on Open Source Software for ISO/IEC JTC 1.

JTC 1 deals with international standards on information technology. This AG is currently documenting requirements and potential opportunities for industry use of open source software for all work areas under the various committees of JTC 1.

For more details visit http://editors.cis-india.org/openness/news/gurshabad-grover-nominated-to-join-advisory-group-on-open-source-software-for-iso-iec-jtc-1

DevFest'19

Admin — 2019-10-14T14:50:33Z

Bhuvana Meenakshi was a speaker at the event organised by Google Developers Groups at Coimbatore on September 14, 2019.

She spoke on WebXR: The journey to the centre of Reality. The audience were all beginners and they were amused to see her works on Mixed Reality. They also learnt to kickstart with the easiest ways of developing the most cool applications using Firefox's framework.

Website: https://devfest19.gdgcbe.com/

Blog: https://kbmtechie.wordpress.com/2019/09/22/speaker-experience-at-devfest19/

For more details visit http://editors.cis-india.org/openness/devfest19

Event Report: Community Discussion on Open Standards

Karan Saini, Prem Sylvester and Anishka Vaishnav — 2019-08-02T06:51:00Z

This community discussion organised by HasGeek was held at the office of the Centre for Internet and Society in Bangalore, India on June 20, 2019.

Open standards are important for the growth and evolution of technology and practices for consumers and industries. They provide a range of tangible benefits, including, for instance, a reduction in cost of development for small businesses and organizations, facilitation of interoperability across different technologies in certain cases, and encouragement of competitiveness in the software and services market. Open standardization also encourages innovation, expansion in market access, transparency — along with a decrease in regulatory rigidity, as well as volatility in the market, and subsequently the surrounding economy, as well.

The importance of open standards is perhaps most strikingly evident when considering the ardent growth and impact the Internet — and the World Wide Web in particular — have been able to enjoy. The modern Internet has arguably been governed, at least for the most part, by the continuous development and maintenance of an array of inventive protocols and technical standards. Open standards are usually developed in a public-consultancy process, where the standards development organizations (“SDOs”) involved follow a multi-stakeholder model of decision-making. Multi-stakeholder models like this ensure equity to groups with varying interests, and also ensures that any resulting technology, protocol or standard which is developed is in accordance with the general consensus of those involved.

This event report highlights a community discussion on the state of open standardization in the age where immediately accessible cloud computing services are readily available to consumers — along with an imagined roadmap for the future; one which ensures steady ground for users as well as the open standards and open source software communities. Participants in the discussion focused on what they believed to be the key areas of open standardization, establishing a requirement for regulatory action in the open standards domain, while also touching upon the effects of market forces on stakeholders within the ecosystem, which ultimately guide the actions of software companies, service providers, users, and other consumers.

The event report can be accessed here.

For more details visit http://editors.cis-india.org/internet-governance/blog/event-report-community-discussion-on-open-standards

Rootconf 2019

Admin — 2019-07-05T00:52:38Z

Karan Saini participated in the annual Rootconf conference held by HasGeek on June 21 and 22, 2019. This conference was held at the NIMHANS Convention Centre in Bangalore, India.

Apart from being responsible for reviewing proposals for security-related talks for Rootconf, Karan also moderated a 'Birds of a Feather’ session with Vandana Verma and Shubham Mittal wherein participants discussed the various offensive and defensive security applications of open source intelligence. The conference schedule can be accessed here. The abstract for the Birds of a Feather session on OSINT can be found here. More information on the event can be viewed here.

For more details visit http://editors.cis-india.org/openness/news/rootconf-2019

Discussion on Open Standards with Bernd Erk and Jiten Vaidya

Admin — 2019-07-04T16:53:37Z

Rootconf organised a discussion on open standards at CIS Bangalore office. Zainab Bawa, Karan Saini and Anwesha Das coordinated and organised the event.

The discussions created awareness on:

Consequences of building your applications around non-open standards.
Risks associated with non-open standards.
How to build your applications around open standards.

Open standards are important for:

Business
Application development
Communications
Open internet

The event kicked off with Bernd Erk talking about how the convenience of availing services from a few 'cloud' providers is killing open standards in the space. Jiten Vaidya then discussed his experience running a successful open source product and business, and the future of open standards in the space. Kiran Jonnalagadda and Gurshabad Grover contributed to and moderated the subsequent discussion.

For more details visit http://editors.cis-india.org/openness/events/discussion-on-open-standards-with-bernd-erk-and-jiten-vaidya

Regulating the Internet: The Government of India & Standards Development at the IETF

Aayush Rathi, Gurshabad Grover and Sunil Abraham — 2019-01-22T07:29:39Z

The institution of open standards has been described as a formidable regulatory regime governing the Internet. Given the regulatory and domestic policy implications that technical standards can have, there is a need for Indian governmental agencies to focus adequate resources geared towards achieving favourable outcomes at standards development fora.

This brief was authored by Aayush Rathi, Gurshabad Grover and Sunil Abraham. Click here to download the policy brief.

Executive Summary

The institution of open standards has been described as a formidable regulatory regime governing the Internet. As the Internet has moved to facilitate commerce and communication, governments and corporations find greater incentives to participate and influence the decisions of independent standards development organisations.

While most such bodies have attempted to systematise fair and transparent processes, this brief highlights how they may still be susceptible to compromise. Documented instances of large private companies like Microsoft, and governmental instrumentalities like the US National Security Agency (NSA) exerting disproportionate influence over certain technical standards further the case for increased Indian participation.

The debate around Transport Layer Security (TLS) 1.3 at the Internet Engineering Task Force (IETF) forms an important case for studying how a standards body responded to political developments, and how the Government of India participated in the ensuing discussions. Lasting four years, the debate ended in favour of greater communications security. One of the security improvements in TLS 1.3 over its predecessor is that is makes less information available to networking middleboxes. Considering that Indian intelligence agencies and government departments have expressed fears of foreign-manufactured networking equipment being used by foreign intelligence to eavesdrop on Indian networks, the development is potentially favourable for the security of Indian communication in general, and the security of military and intelligence systems in particular. India has historically procured most networking equipment from foreign manufacturers. While there have been calls for indigenised production of such equipment, achieving these objectives will necessarily be a gradual process. Participating in technical standards can, then, be an effective interim method for intelligence agencies, defence wings and law enforcement for establishing trust in critical networking infrastructure sourced from foreign enterprises.

Outlining some of the existing measures the Indian government has put in place to build capacity for and participate in standard setting, this brief highlights that while these are useful starting points, they need to be harmonised and strengthened to be more fruitful. Given the regulatory and domestic policy implications that technical standards can have, there is a need for Indian governmental agencies to focus adequate resources geared towards achieving favourable outcomes at standards development fora.

Click here to download the policy brief.

Note: The recommendations in the brief were updated on 17 December 2018 to reflect the relevance of technical standard-setting in the recent discussions around Indian intelligence concerns about foreign-manufactured networking equipment.

For more details visit http://editors.cis-india.org/internet-governance/blog/regulating-the-internet-the-government-of-india-standards-development-at-the-ietf

Comments on the Draft National Policy on Software Products

Anubha Sinha, Rohini Lakshané, and Udbhav Tiwari — 2016-12-12T14:45:11Z

The Centre for Internet & Society submitted public comments to the Department of Electronics & Information Technology (DeitY), Ministry of Information & Communications Technology, Govt. of India on the National Policy of Software Products on December 9, 2016.

I. Preliminary

1. This submission presents comments by the Centre for Internet and Society, India (“CIS”) on the Draft National Policy on Software Products [1] (“draft policy”), released by the Ministry of Electronics & Information Technology (“MeitY ”).

2. CIS commends MeitY on its initiative to present a draft policy, and is thankful for the opportunity to put forth its views in this public consultation period.

3. This submission is divided into three main parts. The first part, ‘Preliminary’, introduces the document; the second part, ‘About CIS’, is an overview of the organization; and, the third part contains the comments by CIS on the Draft National Policy on Software Products.

II. About CIS

4. CIS is a non-profit organisation [2] that undertakes interdisciplinary research on internet and digital technologies from policy and academic perspectives. The areas of focus include digital accessibility for persons with diverse abilities, access to knowledge, intellectual property rights, openness (including open data, free and open source software, open standards, open access, open educational resources, and open video), internet governance, telecommunication reform, freedom of speech and expression, intermediary liability, digital privacy, and cyber security.

5. CIS values the fundamental principles of justice, equality, freedom and economic development. This submission is consistent with CIS' commitment to these values, the safeguarding of general public interest and the protection of India's national interest at the international level. Accordingly, the comments in this submission aim to further these principles.

III. Comments on the Draft National Policy on Software Products

General Comments

6. CIS commends MeitY on its initiative to develop a consolidated National Policy on Software Products. We believe that there are certain salient points in the draft policy that deserve particular appreciation for being in the interest of all stakeholders, especially the public. An indicative list of such points include:

A focus on aiding digital inclusion via software, especially in the fields of finance, education and healthcare.
The recognition of the need for openness and application of open data principles in the private and public sector. Identifying the need for diversification of the information technology sector into regions outside the developed cities in India.
Identifying the need for innovation and original research in emerging fields such as Internet of Things and Big Data.

7. We observe that the draft policy weighs in the favour of creating a thriving digital economy, which indeed is a commendable objective per se. However, there are certain aspects which remain to be addressed by the draft policy, to ensure that the growth of our domestic software industry truly achieves the vision set out in Digital India for better delivery of government services and maximisation of the public interest.

8. We submit that the proposed policy should include certain additional guiding principles to direct creation of software and its end-utilisation. These principles would ensure responsible, inclusive, judicious and secure software product life cycle by all the relevant stakeholders, including the industry, the government and especially the public. An indicative list of such principles that we believe should be explicitly included in the policy are:

Ensuring that internationally accepted principles of privacy are followed in software development and utilisation, including public awareness.
Requiring basic yet sufficient standards of information security to ensure protection of user data at all stages of the software product life cycle.
Enforcing lingual diversity in software to allow for India’s diverse population to operate indigenous software in an inclusive manner.
Mandating minimum standards on accessibility in software creation, procurement and implementation to ensure sustainable use by the differently-abled.
Focusing on transparency & accountability in software procurement for all public funded projects.
Implementing the utilisation of Free and Open Source Software (“FOSS”) in the execution of public funded projects as per the mandate of the Policy on Adoption of Open Source Software for Government of India; thereby incentivising the creation of FOSS for use in both private and public sector.
For software to be truly inclusive of the goals of Digital India, it is essential that to provide supports to Indic languages and scripts without yielding an inferior experience or results for the end user in non-English interfaces. Software already deployed should be translated and localised.

9. The inclusion of these principles in substantive clauses of the policy will go a long way in ensuring the sustainable and transparent growth of domestic software product ecosystem.

Specific Comments

10. Development of a robust Electronic Payment Infrastructure

10.1. CIS observes that clauses 5.4 and 6.7 of the draft policy aim to establish a seamless electronic payment infrastructure. We submit that an electronic payment infrastructure should be designed with strong standards of information security, privacy and inclusivity (both accessibility and lingual).

10.2. We recommend that the policy mandate minimum standards of information security, privacy and inclusivity in all payment systems across private and public sectors. The policy should, therefore, ideally specify the respective standards for these categories, for instance ISO 27001 and National Policy on Universal Electronics Accessibility [3], alongside other industry standards for Electronic Payment Infrastructure.

11. Government Procurement

11.1. CIS observes that clause 6.1 of the draft policy seeks to develop a framework for inclusion of Indian software in government procurement. It is commendable that the draft policy identifies the need for a better framework. CIS notes that the existing procurement procedure allows for usage of Indian software. In fact, the Government e-Marketplace(eGM) already has begun to incorporate some of these principles in general procurement.

11.2. Indeed, the presence of a transparent and accountable government procurement, which leverages technology and the internet, is key to ensuring a sustainable and fair market. CIS recommends that the policy refer to these guiding principles to enable the development of a viable cache of Indian software products by creating more avenues, including government procurement.

12. Incentives for Digital India oriented software

12.1. CIS observes that clause 6.3 of the draft policy incentivises the creation of software addressing the action pillars of the commendable Digital India programme.

12.2. For development of superior quality software which will ensure excellent success of the Digital India programme, CIS recommends that the incentives should be provided contingent to the incorporation of certain minimum standards of software development. Such products and services should, inter alia, adhere to the stipulations under National Policy on Universal Electronics Accessibility, the Guidelines for Indian Government Websites, Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011, etc. In the process, the software should be subjected to reviews by a neutral entity to gauge the compliance with the abovementioned minimum standards.

13. Increasing adoption of Open APIs and Open Data

13.1. CIS observes that clause 6.6 of the draft policy promotes the use of open APIs and open data in development of e-government services.

13.2. We strongly recommend that open APIs and open data principles be adopted by software used in all government organizations, and non-commercial software . Open Data and Open APIs can serve a vital role in ensuring transparent, accountable and efficient governance, which can be leveraged in a major way within the policy by the public and civil society.

14. Creation of Enabling Environment for Innovation, R&D, and IP Creation and Protection

14.1. CIS observes that clause 8.1 of the draft policy seeks to create an enabling environment for innovation, R&D, and IP creation and protection.

14.2. CIS submits that the existing TRIPS-compliant Indian intellectual property law regime is adequately designed to incentivise creativity and innovation in the area of software development. The Indian Patents Act, 1970 read with the Guidelines for Examination of Computer Related Inventions, 2016 do not permit the patenting of computer programmes per se. Several Indian software developers, notably small and medium sized development companies have made evidence-based submissions to the government previously on the negative impact of software patenting on software innovation [4].

14.3. CIS recommends that the proposed policy re-affirm the adequacy of the Indian intellectual property regime to protect software development, in compliance with the TRIPS Agreement.

IV. Conclusion

15. CIS commends the MeitY on the development of the draft policy. We strongly urge MeitY to address the issues highlighted above, especially emphasising the incorporation of essential principles such as information security, privacy, accessibility, etc. Adoption of such measures will ensure a fair balance between commercial growth of domestic software industry and the maximisation of public interest.

[1]. National Policy on Software Products (2016, Draft internal v1. 15) available at http://meity.gov.in/sites/upload_files/dit/files/National%20Policy%20on%20Software%20Products.pdf

[2]. See The Centre for Internet and Society, available at http://cis- india.org for details of the organization,and our work.

[3]. See http://meity.gov.in/sites/upload_files/dit/files/Accessible-format-National%20Policy%20on%20Universal%20Electronics.pdf

[4]. See http://economictimes.indiatimes.com/articleshow/52159304.cms?utm_source=contentofinterest&utm_me dium=text&utm_campaign=cppst

For more details visit http://editors.cis-india.org/internet-governance/blog/comments-on-draft-national-policy-on-software-products