Happy to see my Phd advisee and true champion of privacy, Ian Goldberg, named as an ACM Fellow. Congrats to Ian, faculty at Waterloo.

acm.org/media-center/2…

Open Source Insights and OSS-Fuzz are now interconnected. You can see an OSS-Fuzz project's fuzzing coverage (Code coverage, configuration, etc) right inside deps.dev. Read more at blog.deps.dev/oss-fuzz/

Always great to see this level of partnership across the ecosystem and shout out to Tavis Ormandy for the great find on CVE-2023-20593. Thank you to AMD for the partnership, collaboration like this is how we as an industry continue to keep users safe online
cloud.google.com/support/bullet…

Sharing the inaugural State of Kubernetes Cost Optimization report Google Cloud cloud.google.com/blog/products/…

The Inktomi IPO was 25 years ago today. What a crazy ride and a full throttle experience with a great team.

This is a great derivative of work that came out of Tier long-distance WiFi many years ago. Congrats

Once again learning from Kelsey

#GoogleIO was particularly awesome this year, not least because the Go and Google Open Source Security teams put out this great video detailing all the tools we make to help developers secure their software supply chains. Julie Qiu @[email protected]

Check out the adoption journey of a simple, easy-to-use first class JSON format for describing vulnerabilities in open source software. Adopted by 18 ecosystems (incl GitHub), 44000 vulns and growing. Part of client tooling such as Renovate, OWASP Dependency-Track, & govulncheck.

'Google’s cloud business turns profitable'. Big congratulations to everyone who helped get us here! Looks like Google Cloud is also the fastest growing cloud again, which is pretty exciting too. What a fun market and opportunity. cnbc.com/2023/04/25/goo…

Celebrating SLSA v1.0: securing the software supply chain for everyone - security.googleblog.com/2023/04/celebr…

'By contributing to OpenSSF’s Supply chain Levels for Software Artifacts (SLSA) v1.0 Build Track, our commitment to empowerment and the ability to do more, securely, is on display with true partnership in mind' – Mark Russinovich from Microsoft

'VMware sees SLSA as a positive contribution toward ever improved trustworthiness both in the open source artifacts we create and from the community projects which underpin and accelerate our own offerings' – Tim Pepper, Principal Engineer / VP, VMware Open Source

so proud of the sigstore community and our partnership with npm to help provide a verifiable link between source, build, and npm packages!
github.blog/2023-04-19-int…

OpenSSF Announces SLSA Version 1.0 Release openssf.org/press-release/…

Congratulations to David B. Papworth on receiving the ACM Breakthrough in Computing Award! Papworth is recognized for fundamental groundbreaking contributions to Intel's P6 out-of-order engine and Very Long Instruction Word (VLIW) processors. bit.ly/40knfan #ACM #awards

Over the last year, GOSST Open Source Maintenance Crew aka Upstream team has worked hand-in-hand with OSS devs across 181 critical projects (e.g. docker, curl, numpy) towards adoption of theopenssf security tools & frameworks. Read more on their journey- opensource.googleblog.com/2023/04/google…