Upstream preview: Welcome to Upstream 2024
Tags: upstream, opensource, cybersecurity, maintenance
Published: 2024-06-04 19:00:13

<p><em>Upstream is this week on Wednesday (June 5!), and wow, our schedule is shaping up brilliantly. For the rest of this week, we’ll be giving you a sneak preview into some of the talks and the speakers giving them via posts like these. </em><a href="https://upstream.live/" style="font-style: normal;">RSVP now</a>!</p>
<p><a href="https://explore.tidelift.com/upstream/main-2023/upstream-23-session-luis-villa-keynote?__hstc=151926246.97feb0f0180d1c08e142395baed37855.1710361664533.1717177892477.1717183981584.37&amp;__hssc=151926246.1.1717183981584&amp;__hsfp=3019692598" style="font-style: normal;"><span>Last year at Upstream</span></a><span style="font-style: normal;">, we talked about the accident</span>al “open source software supply chain,” a term coined to help others understand the breadth of open source, but with it came a problematic one-to-one comparison of open source and other supply chains.</p>
<p>And clearly, open source maintainers weren't given the memo that they are part of this "supply chain." One poignant example:&nbsp; the viral blog post “<a href="https://www.softwaremaxims.com/blog/not-a-supplier"><span>I am not a supplier</span></a>” by Thomas Depierre.</p>
<p>What our discussions last year showed was that open source isn’t one-size-fits-all, and it’s not meant to be compartmentalized in a phrase—it’s vast, it’s complex, and with that comes problems, some of which have existed from the start.&nbsp;</p>
<p>At this year’s Upstream, Tidelift co-founder and Upstream host, <a href="https://upstream.live/speaker-2024/luis-villa"><span>Luis Villa</span></a>, will be welcoming attendees with an introduction to the <a href="https://upstream.live/"><span>Upstream 2024</span></a> theme: unusual ideas to solve the usual problems. Problems such as the rising consumption of open source that put stress on an already fatigued system—a system that sees big enterprise users relying heavily on open source projects created and maintained by unpaid volunteers.&nbsp;</p>
<p>Open source’s popularity has made it an even more tempting target for those who seek to exploit it, and highly visible vulnerability incidents like the recent <a href="https://tidelift.com/resources/xz-backdoor-hack" rel="noopener">xz utils backdoor hack</a> have only added to the pressure. In the Upstream welcome, Luis will preview the day’s talks, including ones that illuminate these usual problems, like the panel “<a href="https://blog.tidelift.com/upstream-session-spotlight-life-after-the-xz-utils-backdoor-hack" rel="noopener">life after the xz utils backdoor hack</a>,” where we’ll hear maintainer and industry perspectives on the xz utils incident and what it means for the future of open source.</p>
<p>However, it’s important to note that <em>solutions</em> play a big role in this day, too. When faced with a massively complex issue with its history of failing solutions, it’s hard not to tap out and turn to cynicism. In spite of this, in his opening talk, Luis provides an optimistic take that aims to circumvent the cynics and highlights how we’re already tackling the heavily nested problems of open source with innovative and thoughtful solutions. This year’s Upstream is exciting because it’s asking its speakers and attendees to embrace the challenge of finding different solutions to everyday problems, and we hope to see you there.</p>
<p><a href="https://upstream.live/"><span>Register now</span></a> for our one-day, free virtual event, Upstream, on Wednesday, June 5th.&nbsp;</p>