Herald (De): Herzlich willkommen im Hacker Morgengrauen im Stream der c-base der Raumstation unter Berlin Mitte. Das ist schon der zweite Talk heute. Wir begrüßen diesmal Alex. Hallo, Alex. Alexander: Hallo. Guten Morgen. Herald: Alexander Sander zum Thema Public Code in der Pandemie. Public Money, Public Code. Genauer gesagt. Also wir möchten doch gerne für das sauer abgesparte Steuergeld auch Dinge zurückbekommen und nicht Dinge, wo wir hinterher nicht ran dürfen und nicht reingucken dürfen und nichts mit machen dürfen. Und welche Bedeutung das hat. Und warum das langfristig noch wichtiger wird. Das wird Alex uns gleich lang und breit erklären. So lang und so breit wie nötig. Bis ungefähr 1 Uhr. Und wenn ihr Fragen habt, dann benutzt den Hashtag rc3 und dann werden wir versuchen das in dem Pad zu materialisieren und noch kurz drüber zu sprechen um 1. Gut. Alex, dann halbe Stunde für dich. Viel Spaß. Alex (De): Ja, vielen Dank. Alex (En): Good morning, everyone. 12:30 laughs hacker morning. That's that's lovely. Yeah. So in the next 30 minutes, I will talk about the public money, public code and what role free software played during the crisis and is still playing. And so my name is Alexander Sander. I'm policy consultant of the Free Software Foundation Europe, and we are a charity that empowers users to control technology. And yeah, we do believe that free software plays a crucial role here. So to get us in the mood, I think you all remember it was around March last year when the borders have been closed because of the crisis. So we wanted to avoid contacts. And yeah, one solution back in the days was to close borders. And as you know, free movement is a fundamental right. And to fix this issue, software played important role and contact tracing apps, for example, have been pushed on the market to fix this. And I will talk about this a bit later. And also, we have seen us and many of us in home office and again here. Software, was very important and as well free software played an important role. And as said in the next minutes, I will tell you why and free software is important and as and specifically what free software solutions helped us to tackle the crisis. So everybody loves free software, especially, I think, around c-base and the Congress free software is pretty well known. However, let me introduce you quickly the concept of free software. So it's also sometimes called libre software, open source software. But free software always comes with 4 freedoms, and it's the freedom to use, study, share and improve. This means free software gives you the freedom to use the software for any purpose you want. Without any restrictions, you are free to study the code so it can be analyzed by anyone so you can see the code. You can see what the software is going to do, what it does. You also free to share the software without any limitations. So there are no like license costs or something like this, so you can install it on as many workstations as you want and so on. But here, please keep in mind the price doesn't matter. So free is not coming with the price in general. So you can also sell free software and this is also done, but you are free to share it afterwards. And also, you are free to improve the software. You can modify it. And by this you can give back to the community. And whenever we have these 4 freedoms to use, study, share and improve, then it is free software or s said there are many names like open source, libre software and so on. And these 4 freedoms helped us during the crisis a lot when it came to software solutions to give you a better understanding of the 4 freedoms I just named. In practical terms, I have this slide here for you where I will first show you the problems of proprietary software. So software, which is not coming with this 4 freedoms and on the other hand, on a practical way, the 4 freedoms as a solution for free software. So first, they are. The major problem was proprietary software is that there is no interoperability at all. You might have laughing this problem as well a lot. So it's the thing that you are stuck in an ecosystem. And if you buy a piece of software from one vendor, you always have to go back to this one vendor. To like broaden your system, so programs are not working together, so there is no connection and but as we call it interoperability, this is something we don't see at proprietary software. But as you are coming into this vendor lock in, as said. If you buy one piece of software, let's say office solution, then you need to buy a mail program, or presentation thingy or something like this from the same vendor. Because as you want, have want to have interoperability, these proprietary vendors only give you interoperability in their own system. But if you want to go out of the system, then you run into struggles, and there's no interoperability at all. So this is a problem with data sharing with others, but also like collaborative working and so on. And this also means that these pieces of software came with unpredictable costs. So first of all, you have to buy a piece of software. Then you do not know how much you have to pay for the other pieces you might need in the future. But also, you don't know at one point you have to pay for upgrades for updates and so on. And so it's really hard to estimate the costs for the software in the future. And this is also a huge problem which is coming with proprietary software. And also as you have to pay for the license first, and many also like for a license for every workstation and so on. Your investments are lost so you can't invest the money into the coding, but you just pay for licensing. And so that's why your investments are also just lost in the very beginning. And we have seen during the crisis I will show you some examples that's later that there's also a very low acceptance by citizens if they have to, or if they are forced to use proprietary software. And in the end, there are also security issues. As you can't look into the code, you might don't find backdoors, for example, or you can't see if the software is really is going to do what it's supposed to do. And so therefore proprietary software also comes with security issues. And so on the other hand, we have the solution. It's risk free software because we have there, we have these open standards. This is coming from the 4 freedoms as you are free, for example, to look in the code as you can modify it and so on, and as it based on open standard we have this interoperability by default. And so we can, like work together across borders, and it's very easy to collaborate if you are using free software because you have these interoperability by default. Also you are highly independent through the free licenses. So the 4 freedoms are always guaranteed when it is free software, so you are free to modify and adapt it to your needs. You are free to share it, to use it in as many workstations as you want and so on, as just said. So you are highly independent, by this you can also collaborate, and this is also something we have seen heavily during the crisis. That collaboration is key, especially when it comes to global crisis. We need to work across borders. We need to collaborate across borders. And so this this collaboration, we can share risks, but also costs. So this is a big advantage of free software and also you can involve local partners. So this is especially something we see when it comes to the use of free software within administrations, public bodies. So whenever governments are using free software, then there's a huge involvement of local partners, which is also like a strengthening not only the software project but also the region and so on. And it is transparent by default, as you can see the code. This is very important. It's also one of the freedoms. And because of this transparency, you can see the code. And by this, you can, for example, identify bugs. You can fix bugs quickly. And so free software gives you the advantage to make your software even more secure. And so free software isn't secure by default, but you have the chance to quickly find security issues, but also other issues and fix them immediately. So and this is also a big advantage, so you don't have to go back to a vendor and ask him if he can fix something. You can simply do it by your own or the community can thus. So with all of this, you can also already see why it is a very good idea to use free software in general, but also in particular during a crisis, which is. What we have seen, especially during the corona crisis. So we need to work together because global problems need global solutions, so as already said during the corona crisis, we have seen a lot that there was free software around and that that was very good, that we used free software and not proprietary software. And that especially in the beginning, there were very interesting debates around it. I think you might remember the tracing apps and so on, but we have seen that here in global crisis the demands are very similar. So for example, when it comes to contact tracing or something like this, we have seen that specific software and specific hardware is and was needed. And for Home Office, for example, or for remote working, we have seen this and especially with the tracing and now we see certificate apps, we see that they are more or less the same demands around the world. And especially if we look at Europe, they are more or less the same solutions as we want to. Yeah, the European region without borders and so on. And here again, the solution is that we need interoperability. So we need these open standards to be able to collaborate, to work together and to also use the free licenses and to spread the software as wide as possible. And also that we need to foster the innovation and collaborate. So we have seen this a lot, that it was very important that it's not only coders who work on a project and not only a nation or a specific region working on a project, but that we have to involve many stakeholders from many countries working on specific projects. And this is only possible with free software as we can work and collaborate across borders. And we have also seen that the transparency of free software gives us acceptance, and this is very important, especially if you want to roll out software projects on a very large level. You need acceptance, especially by citizens that they use the systems, and therefore transparency is and also was key. And yeah, as said as you can involve all stakeholders, this is also a big advantage. And I want to give you a concrete example now, with the apps. I think most of you are using at least 1 or 2 of these laughing free software apps, which are around at the moment. And when the debate started, it was also like one and a half years ago we were discussing these contact tracing apps, and it was a discussion if it should be centralized, decentralized, if it should be free software or proprietary software and so on. And we very quickly jumped in with a press release and advocated around governments with 3 demands, and they are still valid today. And the 1st demand is that no matter what it is, these apps need to be used voluntarily. So this is not that much on free software, but it's also a key that it's a voluntary. But then it also must respect fundamental rights. So whenever these apps are introduced and when they are health data, for example, in these apps are, then we must respect fundamental rights, for example, the right to privacy and so on. And we can only see if fundamental rights are protected, if the code is transparent and if you can prove that the software is really going to do what it's supposed to do. And in the end, so we set all of these apps and solutions need to be free software, and we have been very successful with this demand and there was a very huge debate. And what makes us very happy was that there was not only a debate and not only the apps have been released as free software, but there were some fundamental statements during the time, for example, from the World Health Organization. And they said they need to be full, there need to be full transparency and these apps need to be open sourced and also the European eHealth network. So this is the European Commission and the member states of the European Union released the toolbox for the member states, where they said already defined how these mobile applications need to be designed in the European Union. And here they said also that it need to be open sourced and. What makes us very happy that they're not just said it need to be open source, but they also said it's good for reuse, it's good for interoperability, it's good for the security and the transparency. And so they followed our arguments fully, and this is very important that the European Union, but also the World Health Organization, quickly understood that it's only free software that can help us during this time and the crisis. And we have quickly seen that there is this community engagement and that it's not just about hackers and coders who improve apps, but it's also about translations, for example. So we need people with language skills, but also especially when it comes to the tracing apps. We also need, like scientists from all areas who can tell us how such a virus spread and so on, and how we can trace it. So here we have seen how global cooperation can work and can lead to a situation that we have a very good app in the end, which helps us in this case for contact tracing in the very beginning. And here you can see what happened on git, but also with the CovPass app. We have seen that it's now available on F-droid. Unfortunately, in Germany the CovPass app, so this is the app which gives you your COVID certificate that your vaccinated, for example. And so in Germany, this app was free software, but it was not released on F-droid and F-droid is a free software app store. So the yeah, the better app store compared to Play Store, because in F-droid, you can only find free software. But what happened is that the community again stepped in, so volunteers helped us to make it possible that this app is now also available on F-droid and ?. Yeah, it's also possible to use it on more devices than before, and it's also free to use without any Google services, which is also very important when it comes to privacy and so on. So here we have seen that with the use of free software, we can make this app available to everyone and we can ensure that fundamental rights are respected and that everything is based on free software and that you, for example, don't need Google services to use these apps. But on the other hand, what happened later? So after the good news, yeah, as said there are also always bad news. In October last year, the European Commission released a Open-Source strategy, so just a year later, after they said when it comes to the CovPass apps and COVID apps, where they said it's important that they are transparent because of security reasons, interoperability and so on, they gave themselves a strategy. So the European Commission released an open source strategy for themselves how they want to act and how they want to use free software in the future. And unfortunately, there they watered down a lot. So it was not like that, they said. So now we learned, and we want to have now everything on free software because this is our learning from the crisis this is our learning from the last decades. No. They said they want to release their solutions wherever it makes sense to do so as open source. And they also want to be in the position to choose non open technologies where there are good reasons to do so. So but at the same time, they never, ever defined what are good reasons and where something makes sense. So this is completely open. And so what is good, on the one hand, is that they have something like open source strategy so that they are thinking about it, that they are giving themselves the strategy. But at the same time, if they releasing this paper, with so many loopholes we fear that there won't be a major change here. And I think or we do believe that not only the crisis has shown us that free software is the way to go, but also like the last decades and also before the crisis. We have advocating a lot around this, and we have seen many administrations who have very good experience with free software, not only when it comes to crisis but also in general. Again, think about Home Office, think about video chats. What we are do using here today, jitsi a free software tool, but also BigBlueButton, is for example one so nobody has to be forced to use proprietary solutions like Zoom or something like this. So they are very good free software tools on the market. And there are good reasons to use them, especially when it comes to administrations, because they are in contact with citizens with us. And I think this is again a learning from the crisis. Transparency, for example, is key, but also interoperability so that we are free to use whatever device we want, but are still in the position to communicate with administrations. So and they also said they want to set up a small, open source program office. There is no budget at all for this. So what sounds very good from the very first page, so »think open« that's the title of the strategy, turns out to be a paper full of loopholes, and we are still in contact with the European Commission in order to learn what they are doing. From what we have seen so far. It's not that much. They just released another new paper. And um, but still, we don't see any budget. We don't see any people working on this so that were specifically hired for this after the strategy was introduced and so on. So, but yes. Stay tuned. Hopefully we can release some news on this soonish on our website, but the commission is very, let's say, closed when we ask about they think open strategy. Which is at the same time, very strange. And so I said already before the crisis, not only us, but 100s of organizations and also 10s of 1000s of individuals demanded that publicly financed software must be be made publicly available under a free software license. And I think with a crisis we have learned that it's now even more important than ever before to tell administrations to convince administrations to use free software, and it's not only about crisis, but it's also about digital sovereignty, for example. So also for administrations, it's good to know what a software does if they use it. So it's in the core of our state digital infrastructure and therefore the administrations need to have the full control over the software they are using. And this is also true for everybody else, like for us individuals, but also for companies and civil society and so on. So it's in terms of digital sovereignty, a very good idea to use free software. But it's also about our money. It's public money, it's taxpayers money and public bodies are financed through taxes, and that's why they have to make sure they spend their funds in the most efficient way possible. And as I've shown to you, I think there's only 1 solution and this is free software in the and. And to give you 1 number here and just imagine this money would have been invested in free software in the last years. So the governments and public bodies, public administrations are the largest purchasers of IT goods and services, and they comprise up to 27% of the revenue of software firms. And so now just think about if we would use these 27% and invest it in free software and think about the solutions we would have had during the crisis already, for example, to be able to have a secure workspace for Home Office and so on, but also to be available to be in a digital administrations. And so I think this number is very important and shows us that there are many investments lost because we are or administrations are still buying proprietary software and didn't switch to free software. So in the end, free software gives you the many advantages you can as said involve local partners. So whenever administrations or public bodies are procuring free software, we can see that it's also strengthening the local economy so licensing fees are not going anymore to Ireland and the U.S., but it's also highly efficient, so you don't have to reinvent the wheel again and again. So administrations all over the world have pretty much more or less the same demands. And so why do we have to reinvent the wheel again and again and buy one piece of software again and again? And so there's absolutely no reason. And it would be way more efficient to collaborate. And we can also see that when administrations are doing this, it's happening. And also again, we have this digital sovereignty, so you can have software which is tailored to your needs and you can modify it whenever you want and adapt to your needs. And it's not just like a vendors business model what you are following. And so therefore free software is a very good idea. So if you are in line with our arguments and if you like our arguments, you are still free to sign our campaign. So 3 years, 4 years ago now. We started our comparing public money public code where we demand that whenever it's public money, the code should be also public. And so we want legislation requiring that publicly financed software developed for the public sector, need to be made publicly available under a free software license. And we are seeing more and more treaties and also, for example, in the coalition treaty in Germany, we have some sentences on the use of free software. And so we see that there is some progress here. But still, we only need not only we need to do more pressure here, we have to fight for public money, public code still, and we see more and more commitments. But at the same time, we need to also follow up with the implementation. As we have seen, for example, with the European Commission, their open source strategy, which is called think open but full of loopholes. Now it's important to see that there is a good implementation because this is key. Papers are important. Sure, this is a 1st step, but now we need to make sure that there's also a proper implementation. And if you want to support us with our demand, you can also sign this campaign. If you haven't done already or reach out to us, we have several activities. We have an activity package telling you how you can contact your local administration and convince them to use free software. Lots of our volunteers are doing this, sometimes successfully. And so I think this is important that we continue to talk about the advantages of free software and also use the example from the crisis, I just have shown to you and continue our efforts to convince administration to switch to free software. And with this, I want to end my talk and would be up for questions if there are some in the pad, in the meantime. Herald: Thank thank you very, very much. There's essentially 1 question popping up on our pads here. And this is about this term of digital sovereignty and whether digital sovereignty funded by national state actors would eventually mean that we are sooner or later hacking for the national security agencies of our countries. And what that would imply to for free software and the ethics of free software. Alex: I mean, there was a bit of background noise, so I'm not sure if I fully got it, but it's about if we would like, if our community would like hack or fix governments software, if this is in line with the ethical principles of free software, was this was, was this the question or did I get it wrong? H: Yes. (not audible) A: But I'll try to I try to address this, I think. Yeah. Governmental bodies are using free software or should use free software as they are handling our data as they are communicating with us. And for sure, also governmental bodies are using software for surveillance, for example, for reasons we might personally don't like. And this is very different. So and nobody should be forced to like invest the time or resources to have governments to fix their software. And it's also again on procurement so as said free software doesn't need to be priceless. So although for us, it's important that if public bodies are using software, then whatever, it is it should be free software and this gives us the chance to see code and, for example, to discuss. And this also opens debates. If you want a solution which is going to work like this, and this doesn't necessarily mean that we contribute to the code, but we can also contribute to a software by discussing what it does. Is this something we want to have for our society. Is this a software we really need? And this is, I think, only possible if we have something like, for example, a repository for governmental software which is used and then we can like check what this is, what they are doing. And it doesn't mean that that you have to do it, but you are free to do it. And I think this is important and this is also what we have seen during the crisis. So there are some general or fundamental discussions about the apps and about tracing and so on. But this is possible because it is free software, and that doesn't mean that you have to contribute to the code or that you have to use it. So as we said, it's important that it's that people can use it voluntarily, but still you can contribute even if you just debate around it. So and I think this is important and that is why we want free software. And I think in the end, it's better to have a free software project where you can see what the software does and that are a government tells you transparently what they are going to do instead of doing it completely secretly. H: Very well, so that demonstrates that we that we have maybe another problem or a new problem, but a constructive one, something we can work on. And this whole issue of digital sovereignty and national state actors must be discussed. As you said, this was the main question from the pad. So thank you for the talk this morning. A: Yeah, thanks for having me. Yeah, it was fun. And yeah,enjoy the rest of the conference then. H: Yes, I hope you do too. Thank you. A: Yeah. Thanks a lot. See you. Bye bye. *Since. Everything is licensed under a CC BY 4.0. And it is all for the community, to download for every bot.* Subtitles created by c3subtitles.de in the year 2022. Join, and help us!