Ignore the open source hot heads, CIOs told

Efforts to increase the adoption of open source software are being derailed by the efforts of a "loud minority" within the community that have stooped to making personal attacks on those deemed to be enemies, according to one of the open source movement's strongest advocates.

So says Jeff Waugh of open source advocacy group Waugh Partners, fed up after a series of personal attacks directed at the heads of government agencies, including comments directed at Australian Taxation Office CIO Bill Gibson, after he told ZDNet.com.au that his agency's adoption of open source software had been stalled by security concerns.

Some of the public responses to the article labelled Gibson a "bureaucratic parasite" and his concerns "short-sighted".

While Waugh believes the open source model holds better security outcomes than its proprietary equivalent, he equally describes the vitriolic reaction to Gibson's comments as being 'disgraceful' and says they achieve nothing for the industry.

"Bill Gibson's comments simply reflect the concerns that CIOs have," he said. "It is precisely in his job description to ask those questions."

"This kind of language makes it extremely hard for the open source industry to get the appropriate level of consideration in government departments," Waugh continued. "It pushes all the other CIOs the wrong way. None of them will talk about open source because none of them want to get their head bitten off."

Want to know more?

For all the latest news, analysis and opinion on open source, click here

"I can tell you that at the very highest levels of government, there is interest and opportunities that exist for open source," Waugh said. "This doesn't help." Waugh was also disheartened when personal attacks were levelled at Standards Australia's Alistair Tegart over Microsoft's push to have its OOXML format accepted as an ISO standard.

"I suspect that as a result, [Teggart] is becoming deeply cynical about open source," Waugh said. "I'm not saying it would affect his professional judgement, but his job has been made uncomfortable."

Waugh said government IT agencies such as AGIMO (Australian Government Information Management Office) have equally been slammed for not taking enough interest in open source. Waugh insists that AGIMO "have done plenty" with regards to symposiums and open source surveys within government.

"These [comments] are the loudest voices, but they are a minority view in the community," Waugh said. "Very rarely are these people practitioners – they are not part of what's going on. We feel its important that people know that from a practitioner's standpoint, we don't think this is a reasonable form of discussion."

Waugh said the open source movement needs to recognise that those with differing opinions or points of view are not enemies but merely people with whom the industry needs a better dialogue with.

A better response to Gibson's dilemma, he said, would be to promote open source as "the best process we have for creating code in a transparent and scientific environment that benefits from incredible exposure".

"Security through obscurity, of which hiding your source code from the world is one form, only makes you 'feel' safe -- but it also slows down the process of finding and rectifying issues," he said.

"In the open source world, you benefit from the shared resources and enlightened self-interest of a global community. When an issue is found and fixed, everyone benefits."

Advertisement

Talkback 6 comments

  1. Jeff Anonymous -- 20/03/08

    When comments such as the following are made,

    "We would need to make sure that we are very comfortable -- through some form of technical scrutiny -- of what is inside such a product so that there is nothing unforeseen there."

    I'm not surprised the shouting started, I would expect any agency, Government or otherwise responsible for such sensitive data to be only prepared to use products that they themselves are able to fully inspect as to the integrity of said software.

    To be prepared to rely on the assurance of the supposed well respected vendor of the binary only solution is not appropriate, if this is the approach taken at the ATO well it's just not good enough and people from all walks of life should be jumping up and down.

  2. Open Source - no guarantee of bug reporting M@tt -- 20/03/08

    Open Source does not guarantee that any security issue is addressed any better than hidden source software.

    All open source does is provide the full source code to the IT community - rather than just supplying them with an API.

    There is no guarnatee that anyone discovering any security flaw in either software type will report it to those who should know.

    There is no guarantee that a person will not use either the API or the source code to develop an attack vector on software.

    1. Open Source - no guarantee of bug reporting Anonymous -- 20/03/08

      No, there is no guarantee but at least you are able to satisfy yourself should you so desire as to the integrity of the software and not just rely on the assurance of the vendor.

      If someone hands me a wad of cash and says here's 5k, do I take them at their word or count it myself? well in my case at least I count it myself.

    2. Counting gifts? Chris -- 02/05/08

      Damn, you are sure ungrateful :P

  3. They don't get it Anonymous -- 20/03/08

    No I'm not talking about no kickbacks for not buying vendor solutions, but more often than not these CIO's are privy to a different approach whereby they have access to lots of money to spend on a custom solution, i.e. "This is what I want" rather than open-source's "this is what I have to offer".

    Sure there is lots of open-source components in vender software e.g. zdnet, NextG, but for these CIO's it's a case of getting them educated on what the open-source philosophy is all about.

  4. So what is the justification ? Anonymous -- 22/03/08

    European governments make extensive use of free software. Even US government uses it much more than we do in Australia. There must be some justification for this. It's obvious security is not the right one.

Add your opinion


Latest Videos

ZDNet's CIO Vision Series

Department of Defence | Greg Farr, CIO (part two)

In the second part of his interview, Defence CIO Greg Farr talks about outsourcing, the skills crisis and reveals his most urgent IT priority.

Sponsored content

Power Centre - Content from our premier sponsors

Blogs

  • Angus Kidman I'm a celebrity, don't back me up
    Celebrity comes with its perks — free alcohol, better-looking partners, lots of holiday time — and disadvantages — constant media intrusions, being forced to appear in films with Eddie Murphy for the long-term good of your career, and having to do mindless radio interviews with angry men who've been awake since 4am.
  • Array Lies, damned lies and telco stupidity
    Earlier this month, Telstra put out a press release trumpeting that it's come up with a new phone coaching service to help people who are "bamboozled" by their mobiles. Another excellent example of wrongheaded thinking from the mobile industry.
  • Array Dear carriers: More walking, less talking
    Sometimes, a well-placed and well-timed letter can make all the difference. Other times, it can make no difference at all — and even hurt your case. This week's missive by the Competitive Carriers' Coalition, I would suggest, falls into the latter category.
  • More blogs »

Tags

Back to top

Featured