7 2025 2025-11-07 2025-11-08 2 00:05 https://pretalx.seagl.org https://pretalx.seagl.org/media/2025/img/logo_5qGPBqU.svg America/Los_Angeles Room 145 Keynote 2025-11-07T09:10:00-08:00 09:10 00:30 As Free and Open Source Software enthusiasts, we sometimes concentrate on our own experiences with software, hardware and data. But in the world of social networks, our own computing is deeply intertwined with that of our friends and family, colleagues and neighbours. Open Web standards let us stay connected to people that matter to us while using and building free, private, and technically enhanced systems. And we might even change some hearts and minds along the way! 2025-190-free-the-social-web Keynote Evan Prodromou en Social networks are a ubiquitous part of our life -- about 2/3 of all Internet users use social media platforms on a regular basis. They help us connect to family and friends, meet people from around the world who share our common interests, and read and discuss local, national and global news. But social networks have a dark side, too. Their algorithmic feeds can be psychologically addictive, and lead to anti-social behaviour that's bad for society and for our own mental health. The huge amount of data that we share with social network platforms has dubious stewardship, and is often shared with marketers to target us with ads. Most of all, the platforms are locked down, disallowing most interesting hacking, data mining, and optimization for your own use. As hackers, when we don't like how technology works, we make our own. But in the case of social software, that's not enough -- we need to keep connected to the people who matter to us, and the politicians and thinkers who shape our world. How can we make our own social software that keeps us connected to others? ActivityPub is an open web standard from the W3C. Patent- and royalty-free, collaboratively developed, it lets Free Software developers connect to commercial platforms and free ones alike. The network of ActivityPub-enabled services, dubbed the Fediverse, is a burgeoning coalition of social networks that interoperate with open standards. In this talk, Evan will give a gentle introduction to using ActivityPub-enabled services to get on the Fediverse. He'll talk about the challenges and successes of open social networks, and give some insights based on his 15+ years of building and fighting for the open social web. false https://pretalx.seagl.org/2025/talk/88THX7/ https://pretalx.seagl.org/2025/talk/88THX7/feedback/ Room 145 Keynote 2025-11-07T09:40:00-08:00 09:40 00:30 Manufacturing hardware (devices, machines, objects) is a challenging task. High-volume sales can offset costs of production, but niche products struggle with viability. Distributed production of open source designs---having people build their own niche products---is a possible alternative. In this talk, I will describe how digital fabrication like 3D printing, CNC milling, etc. can be used for distributed production and contrast that approach with centralized production. Through example open source hardware projects I will highlight design features that work well and less well, how community support is crucial for replication, and give recommendations for how to make more distributed production possible. 2025-99-challenges-when-building-open-source-hardware Keynote Nadya Peek en false https://pretalx.seagl.org/2025/talk/8KSBXV/ https://pretalx.seagl.org/2025/talk/8KSBXV/feedback/ Room 145 20-Minute Talk 2025-11-07T10:30:00-08:00 10:30 00:20 A profitable business is one of the best protections for commercial open source projects and communities that depend on them. This talk draws on the experience of companies that pulled it off to explain how to do it for your own projects. We’ll discuss commercial models that actually work, giving back to the community, and gracefully collecting money for free software. We'll also touch on topics for larger projects like foundations and taking VC funding. It is possible to balance a strong belief in open source communities with making payroll every two weeks. We've done it and will share our secrets. 2025-128-build-a-great-business-on-open-source-without-selling-your-soul Open-Source Careers Robert Hodges en false https://pretalx.seagl.org/2025/talk/DYCBJX/ https://pretalx.seagl.org/2025/talk/DYCBJX/feedback/ Room 145 20-Minute Talk 2025-11-07T11:00:00-08:00 11:00 00:20 Software freedom doesn't just preserve your freedoms as the enduser or developer. It makes the software itself immortal. 2025-90-what-is-free-may-never-die Community and Culture Romeo S en Software freedom grants a project functional immortality. Legal, economic, organizational, and temporal forces all conspire to destroy software going back to the dawn of recorded software history. We will explore the exact mechanisms for how the free nature of FOSS allows for unparalleled longevity, even in the face of assassination attempts from multi-billion dollar trans-national corporations. We'll look forward in time as well, and chart out a course for the future where all software is free. false https://pretalx.seagl.org/2025/talk/FNRU7M/ https://pretalx.seagl.org/2025/talk/FNRU7M/feedback/ Room 145 50-Minute Talk 2025-11-07T11:30:00-08:00 11:30 00:50 Being the Compliance Manager of the Open Program Office of Hewlett Packard Enterprise (https://www.hpe.com/us/en/open-source.html) is the culmination of my prior lives as a computer programmer, lawyer and adjunct professor specializing in intellectual property subjects including open source. I'll discuss my start in computer programming and how I first became acquainted with open source along with the lessons I've learned along the way to maximize my impact in the Open Program Office at HPE. 2025-107-full-circle-from-programmer-to-lawyer-to-open-program-office-manager Open-Source Careers Ria Farrell Schalnat en false https://pretalx.seagl.org/2025/talk/KFGUTN/ https://pretalx.seagl.org/2025/talk/KFGUTN/feedback/ Room 145 50-Minute Talk 2025-11-07T14:00:00-08:00 14:00 00:50 Have you ever wanted to contribute to Nextcloud or develop a Nextcloud app, but do not necessarily have any experience with PHP? In this talk, we will share some recent developments that have been happening around Nextcloud in order to make the Nextcloud ecosystem more welcoming and accessible to developers of all skill levels and programming languages. In particular, we will introduce the new AppAPI framework, which enables the ability to produce "external apps" that can be written in *any* programming language (yes, really!), as well as provide some examples of such apps being used in production today. As one of the leading FLOSS alternatives to many of big tech's product offerings, Nextcloud needs you now more than ever! 2025-153-developing-on-nextcloud-in-2025-what-s-new Languages and Tools Edward Ly en This 50-minute talk will include a brief introduction to [AppAPI](https://github.com/nextcloud/app_api) and how it works, explain what "external apps" are and how they differ from traditional Nextcloud apps, as well as show some example external apps in action and their real-world use cases. We will also highlight other ways the community can contribute to the Nextcloud ecosystem as a whole through: 1) the various programming languages already in use throughout the suite of Nextcloud software, and 2) how other (under-represented) languages can be newly integrated into the app ecosystem. Afterwards, we will move into the live workshop component where we will walk through the development of a simple example app in Python. With this hands-on tutorial, our goal is to lower the entry barrier for all developers by showcasing what it is actually like to develop for Nextcloud, ultimately making it accessible to students and entry-level developers. false https://pretalx.seagl.org/2025/talk/3ZJJA3/ https://pretalx.seagl.org/2025/talk/3ZJJA3/feedback/ Room 145 20-Minute Talk 2025-11-07T15:00:00-08:00 15:00 00:20 SSH certificates improve both security and usability. No more TOFU (trust on first use) when you log in. Time-bound keys for access to limit the blast radius of a stolen or compromised key. We'll show how certificates are used and improve upon identity/pubkey authentication, and introduce several open source tools for managing them. 2025-162-ssh-certificates-all-the-trust-none-of-the-fuss Security and Privacy Bri Hatch en false https://pretalx.seagl.org/2025/talk/LFQS3C/ https://pretalx.seagl.org/2025/talk/LFQS3C/feedback/ Room 145 50-Minute Talk 2025-11-07T16:00:00-08:00 16:00 00:50 Resist Tech Monopolies (RTM) is a collective that aims to build & support community alternatives to big tech. One of our projects is a self-hosted and distributed photo sharing application that will be an alternative to proprietary platforms like Google and iCloud Photos. Alternatives already exist; however, there are several barriers to more people adopting these tools, including cost of physical infrastructure, required tech skills, time and energy, and a lack of desired features. In this talk we present the case for resisting tech monopolies like Google Photos, go through the technical details of how we set up a community photo hosting platform, and share our lessons learned on the process. 2025-172-resist-tech-monopolies-community-photo-hosting Cloud and Infrastructure Linnea en false https://pretalx.seagl.org/2025/talk/XE8TL3/ https://pretalx.seagl.org/2025/talk/XE8TL3/feedback/ Room 145 50-Minute Talk 2025-11-07T17:00:00-08:00 17:00 00:50 I've been creating, performing, and touring several full length, high energy mime-inspired shows I describe as "Living Cartoons" for over 10 years at festivals around the USA. Happy to share different pieces or sections of shows, which have been made on shoestring budgets using open source software and open hardware for prop design: laser cutters, synthesizers, etc. You can also learn more about my fascination with DIY and fully open source tooling through my podcast [Linux Prepper](https://podcast.james.network) 2025-149-physical-theatre-made-using-open-source-tooling Performance Art James Sundquist (Living Cartoon Company) en false https://pretalx.seagl.org/2025/talk/EWCUGD/ https://pretalx.seagl.org/2025/talk/EWCUGD/feedback/ Room 332 50-Minute Talk 2025-11-07T10:30:00-08:00 10:30 00:50 This talk will introduce Chapel (https://chapel-lang.org), an open-source programming language designed to support parallel computing on multicore CPUs and GPUs, whether on personal laptops, the cloud, or the world's largest supercomputers. Chapel's goal is to support code that's as easy to read and write as Python, yet with performance and scalability that matches C, C++, OpenMP, CUDA, MPI, and other low-level approaches. This talk will cover Chapel's motivation and features, while also surveying a few flagship applications that have been written using it. 2025-121-productive-parallel-programming-from-laptops-to-supercomputers-with-chapel Languages and Tools Brad Chamberlain en false https://pretalx.seagl.org/2025/talk/WDYNZF/ https://pretalx.seagl.org/2025/talk/WDYNZF/feedback/ Room 332 50-Minute Talk 2025-11-07T11:30:00-08:00 11:30 00:50 As Linux users, we often install Linux for friends and family, but many struggle with updates, packaging quirks, and system maintenance—leaving you to fix issues and them frustrated. Instead of simply suggesting they get a Chromebook, what if we could create a similar experience with NixOS? My Nixbook project delivers automatic updates, easy Flatpak app installs, and sane defaults for everyday users. In this talk, I’ll share how I built it and made it work flawlessly. 2025-88-building-a-chromebook-replacement-with-nixos Languages and Tools Mike Kelly en false https://pretalx.seagl.org/2025/talk/YCPRXG/ https://pretalx.seagl.org/2025/talk/YCPRXG/feedback/ Room 332 50-Minute Talk 2025-11-07T14:00:00-08:00 14:00 00:50 Git is a major part of modern software development. It is the de facto open source version control platform, enabling developers worldwide to work concurrently without conflicts. Its robust branching and merging features facilitate both parallel development and efficient project management in a culture that encourages the use of Git as a universal tool for managing code in many varied settings and for adapting your dev process to fit its design. This talk will outline the TempleOS development environment, tips and tricks for writing software in the HolyC programming language, and how an operating system without a network stack can still follow modern development practices. 2025-112-the-cathedral-and-the-bizarre-ii-branches-of-faith-or-committing-code-not-sins Languages and Tools Toby Betts en false https://pretalx.seagl.org/2025/talk/SVTBXG/ https://pretalx.seagl.org/2025/talk/SVTBXG/feedback/ Room 332 20-Minute Talk 2025-11-07T15:00:00-08:00 15:00 00:20 This talk addresses the issues that Linux has preventing it from being a mainstream option like Windows and macOS currently are, and the lessons I am taking away when building stillOS. 2025-92-linux-doesn-t-resonate-with-the-mainstream-stillos Systems and Platforms Cameron Knauff en This talk addresses Linux issues that prevent it from being a mainstream option like Windows and macOS currently are. I'll also demonstrate how I'm applying these lessons when building stillOS. Many people point to app compatibility issues, but I believe the real issues are closer to stability and usability problems with current Linux desktops, as well as Linux's brand reception among the mainstream audience. With that, I aim to leverage the current issues that Windows and macOS have, while also learning from their strengths to create the perfect mainstream Linux OS. false https://pretalx.seagl.org/2025/talk/ZZRGMW/ https://pretalx.seagl.org/2025/talk/ZZRGMW/feedback/ Room 332 50-Minute Talk 2025-11-07T16:00:00-08:00 16:00 00:50 An overview of the backport automation and validation done on CentOS Stream kernel merge requests: - what gets automatically backported? - what checks are run? - how do these changes end up in CentOS and Red Hat Enterprise Linux? 2025-160-kernel-backport-automation-and-validation-in-centos-rhel Cloud and Infrastructure Jarod Wilson en We’ll walk through the building blocks that help ensure CentOS Stream (and by extension, Red Hat Enterprise Linux) kernels are ready for use on your mission-critical systems. - Webhook that performs CVE assignment automation and commit identification, parsing upstream vulns repo, updates triggering Jira issue - Webhook that reacts to Jira issue updates, and triggers automated backport attempts - Automated submission of GitLab merge requests for successful backports - Build and test pipelines that run on merge request creation and code updates - Webhooks that react to merge request creation and updates to run various sanity checks false https://pretalx.seagl.org/2025/talk/HMNXFY/ https://pretalx.seagl.org/2025/talk/HMNXFY/feedback/ Room 332 20-Minute Talk 2025-11-07T17:30:00-08:00 17:30 00:20 You may already know that in Python, everything is an object. You may also have learned that _type_ is the ur-type of everything. This is also true. But these two truths seem to be in conflict with one another. Which is the more fundamental thing of Python? Join me as I explore some of Python's most fundamental built-ins and try to reconcile this question. In the end you might see how Programming at large holds many dualities and paradoxes. 2025-96-duality-of-python Languages and Tools Jeremiah Paige en false https://pretalx.seagl.org/2025/talk/DU8YUQ/ https://pretalx.seagl.org/2025/talk/DU8YUQ/feedback/ Room 334 50-Minute Talk 2025-11-07T10:30:00-08:00 10:30 00:50 I'll walk you through my process of building interactive visual learning tools with my children and share with you what we built and let you play with them as well. Topics include logic gates, simple simulations and systems thinking. This talk is suitable for beginners and the platforms we built are fun for adults as well. Learning can be fun :) 2025-173-beyond-scratch-playing-with-no-code-visual-programming Education Josh Shupack en As a web developer with small children, I wanted to find a way for them to engage with computer programming concepts without having to write functions or even have to read. In collaboration with my kids I built a few simulation/games/learning tools to explore different concepts. I was heavily influenced by Bret Victor. I was also inspired by the Nand2Tetris course. My projects are all free and open source and I welcome feedback and collaboration to make them better: https://github.com/imme5150/ false https://pretalx.seagl.org/2025/talk/ZWPRGU/ https://pretalx.seagl.org/2025/talk/ZWPRGU/feedback/ Room 334 20-Minute Talk 2025-11-07T11:30:00-08:00 11:30 00:20 A brief intro to the history and fundamentals of writing programs that communicate over a network. This talk provides basic background and examples so that attendees can experiment immediately and kickstart their own projects and tools. 2025-125-throwing-bits-on-the-wire-an-introduction-to-network-programming Education Tree Davies en false https://pretalx.seagl.org/2025/talk/A7EBVC/ https://pretalx.seagl.org/2025/talk/A7EBVC/feedback/ Room 334 20-Minute Talk 2025-11-07T12:00:00-08:00 12:00 00:20 Over the past few decades, a rich ecosystem of open source hardware, programming environments, and server applications has grown to support rapid device development. With any device, user interaction is an all-important part of design. But the screens, lights, and buttons to support interaction are often the most intensive part of development. One strategy found in commercial devices is to pair with a richer device, such as a smartphone, for improved interactivity. Serial-config brings this kind of interaction to the open-source domain. From an abstract specification, it generates an embedded library, protocol, and a desktop or smartphone application binary for interacting with a tethered device. 2025-177-serial-config-compiling-applications-for-embedded-interactivity Languages and Tools Simon en Interactivity is built into most every electronic device. (It’s unnerving when it isn’t!) Lights, screens, and chirps indicate power or status. Switches power up. Buttons and screens navigate, select, and start. Graphs show data. Menus alter settings. For many devices, interaction is the most difficult and intensive part of development. Screens need case cut-outs. Buttons need debouncing. Buzzers need pulsing. In some commercial applications, designers support interactivity with an app running on a phone or computer. Serial-config is an open source effort to bring this kind of tethered interactivity to prototypers and independent device builders. The input to serial-config is a data schema and environment specification. The schema describes the data format and kind of interaction, such as settings editing, command execution, and data streaming. The environment specification describes the language and hardware configuration (arduino/etc), storage, connection method (serial or BLE), app destination (android or desktop), and plug-ins for greater control. Serial-config outputs an embedded library that a designer builds into their device, and an application binary that supports interaction. Crucial to serial-config’s success is a low-overhead embedded command set, and a self-describing interface that reuses the application environment to specify its own input. false https://pretalx.seagl.org/2025/talk/PY8QLS/ https://pretalx.seagl.org/2025/talk/PY8QLS/feedback/ Room 334 50-Minute Talk 2025-11-07T14:00:00-08:00 14:00 00:50 Prepare for incidents with the AI Incident Response & Control (AIRCTL) Project maintainers. You will learn about AI risks, why preparedness matters, and incident response (IR) scenarios using FOSS resources. We will guide you through how to run an in-person or virtual tabletop role-playing session using an AI-themed expansion to the game Backdoors and Breaches from Black Hills Information Security. All tools for gameplay and resources are included and FOSS. Attendees will leave with all the practical skills needed to run a realistic tabletop IR exercise for safeguarding an organization using AI technology and for protecting research & development (R&D) assets. NO artificial intelligence or incident response experience needed! 2025-187-learn-practical-skills-today-to-prepare-for-ai-incident-response-with-the-airctl-project Security and Privacy Emily Soward en After learning how to be incident commanders, you will immediately apply the skills learned in-session to run tabletops at SeaGL with instructor-led facilitation. Participants of will attend an introductory briefing by the AIRCTL team on AI for security professionals, four common types of AI incidents, and the mechanics of the Backdoors & Breaches tabletop IR game. Participants will then form teams, get guidance for your scenario, and breakout to roleplay as an Incident Responder or Incident Commander for a facilitated playtest of one of the common AI incident scenarios: R&D compromise, material breach via AI path, AI defacement & manipulation, AI exploitation. Be prepared to commit at least one hour to the workshop session to experience all segments. The intro briefing is 10 minutes with short Q&A. Each game scenario takes 30-60 minutes for play, depending on the IR team. Debrief discussion and exit survey will take roughly 20 minutes. An optional “all hands” debrief will follow. Participants who playtest any of the AIRCTL Project IR scenarios and share their experiences and ideas as feedback will be eligible for playtester credit on the AIRCTL project pages — we want to see the community win and appreciate your time with us has value. The session will not be recorded but notes and photos with consent are welcome. false https://pretalx.seagl.org/2025/talk/DFQ38B/ https://pretalx.seagl.org/2025/talk/DFQ38B/feedback/ Room 334 20-Minute Talk 2025-11-07T15:00:00-08:00 15:00 00:20 From plain-old Postgres to the LGTM stack, ELK, Cassandra, and ClickHouse, the landscape of telemetry storage options is as vast as it is overwhelming. With so many choices, how do we decide which datastore is right for the job? In this talk, Joshua will guide attendees through the foundational principles of telemetry—covering metrics, traces, logs, profiles, and wide events—and break down the strengths and limitations of different database technologies for each use case. We’ll examine how traditional relational databases like Postgres can still hold their own, where ELK and CockroachDB fit into the picture, and why specialized stacks like LGTM (Loki, Grafana, Tempo, Mimir) are so popular in modern observability pipelines. And, of course, w 2025-137-magical-mystery-tour-a-roundup-of-observability-datastores Cloud and Infrastructure Joshua Lee en false https://pretalx.seagl.org/2025/talk/3GKV8X/ https://pretalx.seagl.org/2025/talk/3GKV8X/feedback/ Room 334 50-Minute Talk 2025-11-07T16:00:00-08:00 16:00 00:50 Observability is the ability to measure the current state of a system. Backend engineers are familiar with the 3 pillars of observability, and technologies such as OpenTelemetry that can be used to instrument applications and diagnose issues. Yet in the frontend world, we're behind the curve. Join me as I dive into the tools and techniques we can use to instrument, monitor and diagnose issues in our frontend services. We'll cover RUM (Realtime User Monitoring) agents and the metrics and traces they provide, how to combine them with backend tracing for a full story path, and how this can be accomplished with a completely open source Observability platform. 2025-93-observability-is-for-the-frontend-too Cloud and Infrastructure Justin Castilla en This talk covers the core concepts of Observability with a focus on the implementation on a pure vanilla frontend service. React, Next.js, and other frontend frameworks have existing observability packages but this talk examines all of the core modules necessary to implement an extensible, easy to understand telemetry solution. The core technology used is Open Telemetry, an open source observability platform that is forcing all of the data platforms to play nice and share a common schema for the people. Attendees will leave with the knowledge on what is needed to integrate observability into their systems without rewriting all of their code, yet capturing the most important information privy to their business logic. false https://pretalx.seagl.org/2025/talk/FE3E7R/ https://pretalx.seagl.org/2025/talk/FE3E7R/feedback/ Room 334 50-Minute Talk 2025-11-07T17:00:00-08:00 17:00 00:50 When you surf the web, there is a lot of stuff that goes on. When it works, which is most of the time, surfing the web is a joyous activity, unless you go to news sites. But when things go wrong, most browsers are not very helpful at diagnosing the problem. In this presentation, I am going to describe browser failures in terms of what goes wrong at your end, what goes wrong at the server end, and what goes wrong in the middle. I will have some bash scripts to simulate problems on the client, on the server, and in the network. 2025-98-my-browser-isn-t-working-now-what-do-i-do Education Jeff H Silverman en I am going to show several different common failure modes when browsing. I am going to demonstrate a failure by: 1) Run a bash script in the terminal window that will break something 2) Show what that looks like in the browser 3) Diagnose the problem using Linux command line tools 4) Run a bash script in the terminal window that will repair the problem 5) Use those tools to show that the problem is repaired. 6) Show what that looks like in the browser I am going to demonstrate common problems, such as a firewall issue, name server unreachable issue, bad IP address from a name server, web server turned off, bad SSL/TLS cert, typographical errors in the URL, and some other failure modes. false https://pretalx.seagl.org/2025/talk/HT9NCW/ https://pretalx.seagl.org/2025/talk/HT9NCW/feedback/ Room 340 20-Minute Talk 2025-11-07T10:30:00-08:00 10:30 00:20 Open research benefits researchers, institutions, and science in general: but open science practices and open source for research software aren’t always taught in universities. This talk will present a success story for filling the gaps: the Digital Research Academy. Based in Germany but working across Europe, the DRA is building a community of trainers to bridge knowledge gaps, cultivate innovation, and drive positive change through continuous learning and re-adapting. The DRA focuses on open science, data literacy and open source research software engineering: so far, we have trained over 700 people across 50+ academic institutions. This presentation will share the DRA model, success stories, and how to get involved! 2025-167-open-training-for-open-research-the-digital-research-academy Education Laura Carter en false https://pretalx.seagl.org/2025/talk/BV33RQ/ https://pretalx.seagl.org/2025/talk/BV33RQ/feedback/ Room 340 20-Minute Talk 2025-11-07T11:00:00-08:00 11:00 00:20 Kubernetes has changed everything. Not only the way we deploy our applications. But also how we monitor them, how we collect, store, visualize, and alert on time series data generated by monitoring systems. What are the challenges in modern monitoring? Why have new-generation time series databases like VictoriaMetrics and Prometheus emerged? Why is there no SQL support in these databases? Why are Grafana dashboards so fancy? Join us as we explore these questions and many other questions related to the specifics of time series data analysis. 2025-154-exploring-data-analysis-in-time-series-databases Cloud and Infrastructure DIma Lazerka en false https://pretalx.seagl.org/2025/talk/JCCBUJ/ https://pretalx.seagl.org/2025/talk/JCCBUJ/feedback/ Room 340 20-Minute Talk 2025-11-07T11:30:00-08:00 11:30 00:20 Data lakes on open table formats like Iceberg are a popular way to manage large datasets for analytics, data science, and AI. This talk explains how data lakes work and how to adapt open source analytic stacks to use them. First, we'll tour projects like Arrow, Iceberg, and Unity Catalog that make data lakes possible. Next, we'll see how analytic engines like DuckDB, ClickHouse, and Spark are adapting. Finally, we'll survey a few projects that enable applications written in Python, Golang, or Rust to deliver fast query. You'll have to build the app yourself but this talk will show you a path to use data lakes and open source successfully. 2025-126-what-s-a-data-lake-and-what-does-it-mean-for-my-open-source-analytics-stack Open source AI and Data Science Robert Hodges en false https://pretalx.seagl.org/2025/talk/D7VANS/ https://pretalx.seagl.org/2025/talk/D7VANS/feedback/ Room 340 20-Minute Talk 2025-11-07T12:00:00-08:00 12:00 00:20 Of all the ways we might evaluate a FOSS project, here is some logic behind how we can evaluate a group's or community's capacity to mobilize it's intellectual labour, and good judgment. With well pin-pointed areas of strengths and weaknesses, helpful interventions can be tailored to fit the real-life of a group in its current situation. 2025-189-evaluating-foss-projects-applying-habermas-theory-of-communicative-action Education Delib en This is a talk about a method for analyzing a group's ability to reason things out together; a kind of diagnostic tool for participatory democracy. This is an organizational implementation of a socio-political and philosophical work by Jurgen Habermas, and generational experience from secular 'Quaker' business styles. false https://pretalx.seagl.org/2025/talk/QR89R9/ https://pretalx.seagl.org/2025/talk/QR89R9/feedback/ Room 340 20-Minute Talk 2025-11-07T15:00:00-08:00 15:00 00:20 The International Code of Zoological Nomenclature is the protocol by which scientific names are validated and properly formed. It also is pretty broken. There are issues with grammatical agreement of species names, for one, and other issues with how names which are set by it differ because of different lists made by different people using different interpretations of the Code. Having conflicting names in your data makes life difficult. In this talk, I cover briefly how the Code works, and then I go on to discuss how to reconcile different taxonomies using Wikidata and code, so that you can know what bird or fish you're looking at when you're doing your research. 2025-108-words-words-words-you-fishmonger-using-wikidata-to-reconcile-taxonomies Languages and Tools Richard Littauer en The title of the talk is from Shakespeare. Shakespeare will be minimally relevant to this talk. Anyone should be able to attend this, beginner or old-timer. Is this a language and tools talk? Kind of, yes! It deals with language and tools. What's not to like? false https://pretalx.seagl.org/2025/talk/P8SE9B/ https://pretalx.seagl.org/2025/talk/P8SE9B/feedback/ Room 340 20-Minute Talk 2025-11-07T16:30:00-08:00 16:30 00:20 High Level talk with the following topics # What is patch management / content management at scale ? # compliance as a service # metal as a Service # Some vendor options for patch management & ( baremetal & compliance as a service ) What are the os in your environment ? What package management tooling ? What is an errata ? Why are there no security updates for most 3rd party repo ? Multi Vendors OS pro&cons of software tooling ? What 3rd party vendors embedded system is in your closet with an exception think deep packet inspection boxes / firewalls ? Where are the sbom for these vendors ? What is vendor embedded os running , arch linux , gentoo , etc . What is your Env/Estate you need to defend 🛡️ ? What compliance / governance regi 2025-169-patch-management-baremetal-as-a-service-on-linux-redhat-suse-tbd-other-windows-vmware Cloud and Infrastructure Andrew Puch en false https://pretalx.seagl.org/2025/talk/VZMBEW/ https://pretalx.seagl.org/2025/talk/VZMBEW/feedback/ Room 340 50-Minute Talk 2025-11-07T17:00:00-08:00 17:00 00:50 In an era where data privacy and security are paramount, self-hosting an email server offers unmatched control, customization, and protection from third-party surveillance. "Your Email, Your Rules: Self-Hosting Simplified" empowers Debian GNU/Linux users by dispelling myths that self-hosting email is overly complex or impractical. Key topics include privacy through data ownership, server/VPS hardening, DNS records, server policies, autodiscovery, encrypted transmission and content, spam management with sieve, and Roundcube webmail. The presentation concludes by delimiting the approach’s scope and provides a roadmap for adjustments needed to scale to larger use cases. 2025-120-your-email-your-rules-self-hosting-simplified Security and Privacy Jonathan Haack en Reclaim your email with a self-hosted Debian GNU/Linux server! This presentation demystifies self-hosting email, proving it’s neither overly complex nor impractical for individuals, families, or small businesses. Learn how to achieve privacy through data ownership, secure your server with encryption (TLS) and authentication (SPF, DKIM, DMARC), optimize delivery with clean DNS management and spam filtering (SpamAssassin, sieve), and provide user-friendly access via Roundcube webmail. We’ll cover server/VPS hardening, autodiscovery, and server policies, offering practical, step-by-step guidance based on proven Debian tools like Postfix and Dovecot. Whether a hobbyist or small business sysadmin, walk away empowered to reclaim your email with confidence! Post-conference Matrix support (https://matrix.to/#/#pubglug:gnulinux.club) is available for attendees eager to set up their own self-hosted server. false https://pretalx.seagl.org/2025/talk/VLM7AS/ https://pretalx.seagl.org/2025/talk/VLM7AS/feedback/ Community Community 2025-11-07T13:15:00-08:00 13:15 03:00 Ada's Technical Bookstore will be selling books in the expo hall within the Husky Union Building (HUB). 2025-195-ada-s-technical-book-sale en Ada’s Technical Books & Café is where the technical mind finds what it craves. And where a bookstore becomes a community. Our store sits in Capitol Hill, Seattle. And is home to the kinds of books, gifts, workshops and events, that beckon to the geek {and the geek in all of us.} Because we believe in never-ending learning, evolving, and collaboration, {and hanging out while doing it.} So you can find the knowledge you seek, feed your curiosity among friends, and always feel in your element. false https://pretalx.seagl.org/2025/talk/WDTPWZ/ https://pretalx.seagl.org/2025/talk/WDTPWZ/feedback/ Community Community 2025-11-07T18:30:00-08:00 18:30 03:30 Join us for some refreshments and great conversation at Ada's Bookstore on Capitol Hill. 425 15th Ave E, Seattle, WA 98112 https://www.openstreetmap.org/?#map=19/47.622666/-122.313328 2025-196-social-at-ada-s-technical-bookstore en Bright, airy cafe inside a self-described "geeky" bookstore offering light, health-conscious fare. false https://pretalx.seagl.org/2025/talk/DALKJT/ https://pretalx.seagl.org/2025/talk/DALKJT/feedback/ Room 145 Keynote 2025-11-08T09:10:00-08:00 09:10 00:30 The Seattle Community Network is a volunteer-based, grassroots, nonprofit community ISP with a small operating budget (currently averaging $10-$50K in grants, donations, or in-kind contributions per year) that installs and provides internet access for homeless shelters; the services we provide to our users is critical infrastructure for their daily lives. This talk discusses some of the core operational challenges we face, the software infrastructure we use to meet those challenges, and its limitations. 2025-192-the-seattle-community-network-stack Keynote Esther Jang en SCN uses a lot of free and open-source software (FOSS) in our production network, often self-hosted on hardware we own, which dramatically reduces our operating costs and gives our volunteers access and exposure to more advanced functionality. Our software "stack" is dynamic and evolving, based on volunteers’ interests, capacities, and opinions on how we should operate and organize. Examples range from an internal site management VPN that helps our volunteers conduct remote troubleshooting, to a custom-written Discord bot that allows us to create and manage shared volunteer tasks in a ticketing system. At the same time, self-hosting FOSS comes with risks and responsibilities. For example, maintaining hardware redundancy, disaster recovery procedures, and data backups falls to us, a group of passionate but time-constrained volunteers. We discuss methods for managing these risks, and welcome suggestions and proposals for how to improve our processes. Our methods will be most useful for other community networks featuring similar organizational styles that seek to minimize operating costs. The time, technical labor, and expertise that our volunteers contribute allows us to save money. As a DIY "community learning network," we collectively enjoy and gain valuable experience from configuring and maintaining SCN's software stack. Doing so, and writing public documentation about it, furthers our mission of contributing technical knowledge and facilitating learning experiences for the broader public. false https://pretalx.seagl.org/2025/talk/NZUCYJ/ https://pretalx.seagl.org/2025/talk/NZUCYJ/feedback/ Room 145 Keynote 2025-11-08T09:40:00-08:00 09:40 00:30 Open Source is software, hardware, a community, a development methodology, a resource, a charity, a business, a philosophy, and more than the sum of its parts. This reflection on decades of engagement in free and open source software and open hardware mixes a dash of history with an ounce of hope for the future. 2025-119-the-river-has-roots-lessons-in-open-source Keynote Allison Randal en false https://pretalx.seagl.org/2025/talk/9JEFYQ/ https://pretalx.seagl.org/2025/talk/9JEFYQ/feedback/ Room 145 50-Minute Talk 2025-11-08T10:30:00-08:00 10:30 00:50 Project Caua was launched to help students afford university by helping them to create their own company as a part time job using Free Software and Open Hardware with off-the-shelf components. All the profits go into the pockets of the people that do the work. Democratic socialism at its finest, not one company with a million employees, but a million companies with one (or perhaps two) employees. 2025-166-project-caua-unleashed Open-Source Careers maddog en false https://pretalx.seagl.org/2025/talk/CVEEAA/ https://pretalx.seagl.org/2025/talk/CVEEAA/feedback/ Room 145 50-Minute Talk 2025-11-08T11:30:00-08:00 11:30 00:50 In April 2011, I started writing a new implementation of the venerable pkg-config utility to improve its performance and usability called pkgconf. Users around the world now interact with pkgconf on a daily basis whenever they build software. Many lessons have been learned along the way. This talk is a combined retrospective as well as a look at future enhancements to the next major release series of pkgconf. 2025-111-pkgconf-15-years-later Languages and Tools Ariadne Conill en In April 2011, I started writing a new implementation of the venerable pkg-config utility to improve its performance and usability called pkgconf. Users around the world now interact with pkgconf on a daily basis whenever they build software as it is the defacto pkg-config implementation in almost all operating systems. Many lessons have been learned along the way. This talk is a combined retrospective as well as a look at future enhancements to the next major release series of pkgconf. In this talk, we will briefly look at legacy pkg-config, as well as the major development milestones of pkgconf, as well as a look at future improvements to the tool and surrounding ecosystem, including the introduction of a new structured data format developed in collaboration with CMake and Meson called CPS and improvements to pkgconf's SBOM generation abilities. This talk will be interesting mainly to software development practitioners and software packagers, who are the primary users of the pkg-config ecosystem. false https://pretalx.seagl.org/2025/talk/T7Q7QN/ https://pretalx.seagl.org/2025/talk/T7Q7QN/feedback/ Room 145 50-Minute Talk 2025-11-08T14:00:00-08:00 14:00 00:50 As AI increasingly powers critical systems across industries, the quality and neutrality of training data have become central to model performance — and to model risk. This talk examines how biased datasets, often stemming from historical imbalances or sampling errors, propagate through machine learning pipelines and influence outcomes at scale. We’ll explore technical pathways through which bias infiltrates — from data labeling and feature selection to model optimization — and demonstrate how even small biases can magnify under automation. Drawing from real-world case studies, we’ll discuss frameworks for bias detection, debiasing techniques, and evaluation methodologies to build more robust, fair, and accountable AI systems. 2025-86-hidden-in-plain-sight-addressing-data-bias-in-ai-driven-systems Open source AI and Data Science Autumn Nash en false https://pretalx.seagl.org/2025/talk/ETZQ8V/ https://pretalx.seagl.org/2025/talk/ETZQ8V/feedback/ Room 145 20-Minute Talk 2025-11-08T15:00:00-08:00 15:00 00:20 Join Adam's talk to learn how to stand up offline AI models for powerful and privacy-friendly advanced interactions with your own data. Chat with your documents, generate ideas, and pair with a virtual programmer. Take these techniques to the workplace to supercharge your business without sacrificing its data. Together we'll explore several methods for setting up models and interacting with them through both end-user and developer-level interfaces. 2025-150-local-offline-ai Open source AI and Data Science Adam Monsen en false https://pretalx.seagl.org/2025/talk/VD9V3K/ https://pretalx.seagl.org/2025/talk/VD9V3K/feedback/ Room 145 50-Minute Talk 2025-11-08T17:00:00-08:00 17:00 00:50 GNU/Linux Loves All is a project that makes microtonal music accessible through FLO software. Microtonal means anything beyond 12edo (standard tuning). FLO stands for Free/Libre/Open. It means anything that respects and supports our Human Tech Rights. We can use FLO technology to be free to access the harmonic series and everything in between two notes. This performance includes ancient notes from harmonics 3, 5, 7, 11, and higher. These tones from modern keyboards and violin are processed through FLO software on a GNU/Linux laptop. 2025-175-gnu-linux-loves-all Performance Art Timmy James Barnett en 11/8 is an ancient musical interval. This interval falls halfway in between two notes of standard 12edo tuning. From the perspective of a standard 12edo tuner, 11/8 is as out-of-tune as possible. Not only is 11/8 an acceptable note of ancient tradition and modern non-Western tradition, it sounds good to modern Western ears as well. This is because it comes from the harmonic series. A 12edo tuner is not made for harmonics. This is why it calls 11/8 out-of-tune. Limiting possible pitches to only 12edo excludes access to the harmonic series. The harmonic series is how the ear perceives music on an unconscious level. The harmonic series is how humans know what instrument is playing, whose voice is talking or sing, and the quality of tones and music. While 11/8 is ancient, the Western standard of 12edo makes it seem modern. The midi standard makes 12edo simple while making other tunings less accessible. 11/8 is not on a standard piano or keyboard. For-profit companies like to offer modern proprietary software as a "solution" to experience ancient notes on a computer or keyboard. This is quite simply not acceptable. Everyone needs to have open access to ancient notes. We should not need to turn to modern proprietary software to experience notes that are millennia old. Instead, we should use FLO software. false https://pretalx.seagl.org/2025/talk/LSJMPH/ https://pretalx.seagl.org/2025/talk/LSJMPH/feedback/ Room 332 50-Minute Talk 2025-11-08T10:30:00-08:00 10:30 00:50 Do you need to search plain text files? Do you have big files? Lots of tiny files? How about inline searching of command output? Introducing "grep"!!! Find out if grep is the tool for you! Watch as your fingers never leave your hands while you slice and dice plain text! Be amazed as you quickly search through mountains of text to find what you're looking for. But, wait, there's more. There's an entire grep family of tools! * egrep for advanced regular expressions * fgrep to ditch the regular expressions * rgrep to recursively search a filesystem There are also the compression and archival cousins such as: * bzgrep * zgrep * xzgrep * ptargrep Those family members also come as accessory command line switches. 2025-184-grep-by-example Languages and Tools lufthans en Do you need to search plain text files? Do you have big files? Lots of tiny files? How about inline searching of command output? Introducing "grep"!!! Find out if grep is the tool for you! Watch as your fingers never leave your hands while you slice and dice plain text! Be amazed as you quickly search through mountains of text to find what you're looking for. But, wait, there's more. There's an entire grep family of tools! * egrep for advanced regular expressions * fgrep to ditch the regular expressions * rgrep to recursively search a filesystem * pgrep to search the process table And they can combine to be more powerful than Voltron[0]! There are also the compression and archival cousins such as: * bzgrep * zgrep * xzgrep * ptargrep Those family members also come as accessory command line switches. Use now and you can take advantage of even more command line arguments. grep: the text tool that slices and dices! Act now and all of these fabulous tools ( except Voltron ) can be yours, coming from a distribution repository near you! Warning: Use of grep may lead to exposure of regular expression! You might never be able to return to an ordinary life. Warning: Use of regular expressions in the presence of cats may lead to hours of debugging as they walk across the keyboard creating random strings indistinguishable from regular expressions! [0] Voltron items sold separately and not available under a Free Software license! false https://pretalx.seagl.org/2025/talk/9DPTWS/ https://pretalx.seagl.org/2025/talk/9DPTWS/feedback/ Room 332 50-Minute Talk 2025-11-08T11:30:00-08:00 11:30 00:50 As AI reshapes our digital interfaces, command lines aren't fading—they're evolving. This talk examines why CLIs remain essential in an AI-driven world and how the Model Context Protocol (MCP) represents their future. Drawing from my experience building AWS SAM CLI, I'll demonstrate how CLIs provide precision and composability that AI alone cannot match. MCP, an open protocol, creates a powerful bridge where AI can leverage CLI capabilities while preserving user control and privacy. Through live demonstrations, you'll witness a new paradigm where deterministic command lines and intuitive AI combine to create superior developer experiences, not the end of CLIs, but their renaissance. 2025-94-the-cli-renaissance-why-command-lines-matter-in-the-age-of-ai-and-the-promise-of-mcp Open source AI and Data Science Sriram Madapusi Vasudevan en false https://pretalx.seagl.org/2025/talk/9PWA3Q/ https://pretalx.seagl.org/2025/talk/9PWA3Q/feedback/ Room 332 50-Minute Talk 2025-11-08T14:00:00-08:00 14:00 00:50 Friends, it's time once again to review the newest research findings about FLOSS. What's new in 2025? How are we continuing to thrive despite upheaval and AI slop? What works, what needs improvement, and what's changing? I'll give you a short tour through this year's most exciting findings. 2025-176-today-i-learned-the-2025-floss-research-roundup Education Kaylea Champion en Academics around the globe study FLOSS communities and their development practices. In this talk, we'll explore the very latest findings and trends in research about building, using, and sustaining free software, including AI, cybersecurity, and scientific work. I'll extract key observations that you can bring to your community and workplace, and we'll think together about how to build better partnerships between the academy and communities. false https://pretalx.seagl.org/2025/talk/QAZYWP/ https://pretalx.seagl.org/2025/talk/QAZYWP/feedback/ Room 332 20-Minute Talk 2025-11-08T15:00:00-08:00 15:00 00:20 This presentation covers the differences between free software, open source software, and proprietary software. In short, it provides a broad overview of software licensing, its history, and the possibility for monetization for each software license. 2025-159-what-is-free-software Education Charles Faisandier en false https://pretalx.seagl.org/2025/talk/QXWX7X/ https://pretalx.seagl.org/2025/talk/QXWX7X/feedback/ Room 332 20-Minute Talk 2025-11-08T16:30:00-08:00 16:30 00:20 You're probably asking yourself what open-source software has to do with the US immigration system. As with all good technical questions, the answer is 'it depends'. Personally, I've never found a technical problem that I won't at least try to solve with open-source software, so that's exactly what we did. Join me as I walk through the open-source workflow that my spouse and I used to wrangle the documentary requirements of the US immigration system. 2025-122-how-i-used-open-source-tools-to-prove-my-marriage-to-the-us-government-no-streaming Everything Else Dawn Cooper en In 2023, my American spouse and I filed for an immigrant visa to bring me to the United States. US Citizenship and Immigration Services requires spousal visa applicants to provide a variety of evidence to prove that they have a bona fide marriage - that is, that their relationship is real. It's important to present this evidence clearly, so that USCIS employees and consular officers can easily find what they're looking for. Between boarding passes, photos, and receipts - and the one constant in life, taxes - the evidence accumulated very quickly. We needed a way to keep it organised, so that we didn't overwhelm the people who had to review our application. This is where open-source tools come in. Git, LaTeX, and open-source document management utilities allowed us to store evidence as we went, and collate what we needed when it was time to submit. We even had a CI/CD pipeline, which produced clearly-labelled documents with a table of contents. Not everyone will immigrate to another country in their lifetime, but the principles and tools that we used can be applied to any situation that involves managing and collating personal data. If you'd like to do something with your photos other than letting them sit in an unused folder behind a 'Beware of the Leopard' sign, or if you've never used LaTeX and want to learn, there's something for you in our deeply technical take on an immigration story. false https://pretalx.seagl.org/2025/talk/PSBSUU/ https://pretalx.seagl.org/2025/talk/PSBSUU/feedback/ Room 332 50-Minute Talk 2025-11-08T17:00:00-08:00 17:00 00:50 I just moved to Seattle. I came from Los Angeles, a city of freelancers, whether by choice or necessity. In Seattle, I've met lots of techies who are either unhappily unemployed or unhappily employed. Individually, most can’t build a consultancy or take on the risk of a startup. But tech workers do collectively have the skills and resources to create more and better jobs for themselves. What if we treated job creation (tech and non-tech) as a community project, just like software creation? I propose for Seattle a community-driven job-creation project based on the United Nations Open Source Principles. My thoughts draw on what the open-source community has learned about making software projects welcoming, scalable, and sustainable. 2025-174-let-s-create-our-own-tech-jobs-together-following-open-source-principles Open-Source Careers Jocelyn Graf en false https://pretalx.seagl.org/2025/talk/KMCCEQ/ https://pretalx.seagl.org/2025/talk/KMCCEQ/feedback/ Room 334 50-Minute Talk 2025-11-08T10:30:00-08:00 10:30 00:50 All infrastructure eventually hits its limits. Without timely migration, teams risk falling into tech debt—where upgrades feel daunting and change seems futile. Like homes that need constant touches and fixes, or a remodel long overdue, systems demand ongoing care, leaving teams hamster wheeling just to stay in place. A successful migration ends with a clear plan, a defined path, and strong execution—enabling services to evolve and stay relevant. This talk shares how one mature, distributed service transitioned from a fully managed to a serverless control plane—executed with zero downtime using low-risk, proven strategies. 2025-103-migrating-distributed-systems-infrastructure-to-serverless-methodology-and-insights Cloud and Infrastructure Priya Ananthasankar en This talk presents a real-world case study of a widely used distributed service that successfully migrated its infrastructure orchestration from a fully managed environment to a serverless control plane—with zero downtime. We outline a structured methodology that looks at migration as a "journey" or "expedition". Charting the Course (client/service-level A/B testing, feature flagging), Blazing a Path (region selection, SLA awareness), Designing a Compass (telemetry, fallback metrics, health probes), and Reaching the Destination (scaling readiness and tuning). We’ll explore how to design A/B experiments that safely route traffic, monitor fallback rates, and measure infrastructure health using container-level telemetry. We’ll also cover how to avoid overloading downstream services by tracking 429s and designing scalable infrastructure units. As traffic grows, we show how to scale out logically and tune system parameters to handle burst patterns. We will also do demo of noisy neighbor issues that can sneak up on any multi-tenant/workload platforms. This session offers practical insights, reusable methodology, and metrics as a compass, to guide any team through a low-risk, high-impact infrastructure migration. false https://pretalx.seagl.org/2025/talk/EDV7EZ/ https://pretalx.seagl.org/2025/talk/EDV7EZ/feedback/ Room 334 50-Minute Talk 2025-11-08T11:30:00-08:00 11:30 00:50 Coop-cloud is a federation of tech cooperatives that builds shared cloud tools and democratically govern the maintenance and development of these tools. The talk goes through coop-cloud's governing structure, what tools they developed (with some practical examples), and what are the challenges of this model. 2025-151-coop-cloud-democrtically-built-and-governed-cloud Cloud and Infrastructure Ammar en false https://pretalx.seagl.org/2025/talk/BXX88L/ https://pretalx.seagl.org/2025/talk/BXX88L/feedback/ Room 334 50-Minute Talk 2025-11-08T14:00:00-08:00 14:00 00:50 The integrity of software has become an increasingly critical concern in an era where digital systems underpin everything from financial transactions to critical infrastructure. Despite advancements in software security, a fundamental vulnerability still remains overlooked: the lack of verifiability in how open source software is constructed from its source code. 2025-124-10-years-of-reproducible-builds Security and Privacy Chris Lamb en This talk introduces the concept of reproducible builds, its technical underpinnings and its potentially transformative impact on software security and transparency. It is aimed at developers, security professionals and policy-makers who are concerned with enhancing trust and accountability in our software. It also provides a history of the Reproducible Builds project, which is approximately ten years old. How are we getting on? What have we got left to do? Aren't all the builds reproducible now? false https://pretalx.seagl.org/2025/talk/PETMRE/ https://pretalx.seagl.org/2025/talk/PETMRE/feedback/ Room 334 20-Minute Talk 2025-11-08T15:00:00-08:00 15:00 00:20 Introduction to using OpenTofu as Infrastructure as Code for deploying server instances, databases, storage, kubernetes clusters to both cloud and on prem platforms 2025-123-intro-to-opentofu-open-source-iac-overview Cloud and Infrastructure Ted Matsumura en This 20 min. talk will give an overview of OpenTofu with examples for deploying infrastructure in the public AWS Cloud using OpenTofu. As time permits, I will run the code examples used to deploy and scale these deployments, while retaining a remote state of the infrastructure in a secure location suitable for production deployments. false https://pretalx.seagl.org/2025/talk/8KQGXX/ https://pretalx.seagl.org/2025/talk/8KQGXX/feedback/ Room 334 20-Minute Talk 2025-11-08T16:30:00-08:00 16:30 00:20 the Anti-Meta Fedi Pact at https://fedipact.online/ is an organized effort to block Meta's Threads platform. it formed as soon as news of fediverse integration in a Meta product was leaked, and for a while was a campaign of preemptive defederation. this talk will delve into my personal reasons for starting the pact as well as those of others i have witnessed. it will talk about the history and experience of running such a project, how it has affected me and what i would do differently if i had the foresight of what i know now. it will expand on https://fedipact.online/why considerably :3 2025-158-fedipact-why Community and Culture Vanta Rainbow BlackKasanwa Solane Aster Hope en FediPact has been featured on wikipedia and in various news articles and books and podcasts and academic papers and more! https://en.wikipedia.org/wiki/Threads_(social_network)#Fedipact https://arstechnica.com/tech-policy/2023/07/fear-loathing-and-excitement-as-threads-adopts-open-standard-used-by-mastodon/ https://www.pcgamer.com/threads-threatens-to-muscle-in-on-mastodons-fediverse-and-admins-are-up-in-arms-about-it/ https://privacy.thenexus.today/should-the-fediverse-welcome-surveillance-capitalism/ https://web.archive.org/web/20250114233420/https://wedistribute.org/2023/06/fedipact-blocking-meta/ https://global.oup.com/academic/product/move-slowly-and-build-bridges-9780197776681 https://radiostudent.si/druzba/tehno-klistir/fedi-pakt# https://journals.sagepub.com/doi/10.1177/20563051241308323 https://policyreview.info/articles/analysis/safer-spaces-design and more! false https://pretalx.seagl.org/2025/talk/QANHFC/ https://pretalx.seagl.org/2025/talk/QANHFC/feedback/ Room 334 50-Minute Talk 2025-11-08T17:00:00-08:00 17:00 00:50 Open source software can be like a plate of mystery brownies in the breakroom: Where did they come from? Are they safe? Do they have gluten? SBOMs are your ingredient list for software, greatly reducing the risk of unknown components, open source licenses, and expired dependencies. This talk demystifies Software Bills of Materials (SBOMs) and security errata, showing how they empower individuals and teams to identify vulnerabilities, track end-of-life risks, and maintain compliance before incidents occur. Learn how SBOMs, advisories, and documentation work together to bring transparency to the Linux supply chain, keeping environments safe, resilient, and free from nasty surprises; just like you'd want for any food you consume. 2025-95-no-more-mystery-brownies-sboms-security-errata-and-the-recipe-for-safer-software Security and Privacy Brady Dibble en Software security, like food safety, shouldn't be a mystery. This talk simplifies jargon and acronyms to show how SBOMs and security documentation make protection accessible for everyone, not just big-budget enterprise teams. We'll explore practical ways to understand what's really inside your Linux systems using freely available tools and community resources. Whether you are a hobbyist running home servers, a FOSS contributor, or professional sysadmin, this talk aims to peel back the curtain on how the errata sausage is made and why, in the age of AI, it's more important than ever to read the back of the box. false https://pretalx.seagl.org/2025/talk/HM7MSP/ https://pretalx.seagl.org/2025/talk/HM7MSP/feedback/ Community Community 2025-11-08T13:00:00-08:00 13:00 03:30 DiscoTech - Discovering Technology Fair 2025-194-discotech-workshop en 🪩Jam out with Resist Tech Monopolies and learn how to switch over your tech accounts to FOSS and surveillance-free alternatives! Bring a device if available and any de-monopoly knowledge you can share with others. false https://pretalx.seagl.org/2025/talk/LTHRNX/ https://pretalx.seagl.org/2025/talk/LTHRNX/feedback/ Community Community 2025-11-08T19:30:00-08:00 19:30 03:00 Enjoy some refreshments and great conversation at Big Time Brewery located close to the University of Washington on the Ave. 4133 University Wy NE, Seattle, WA 98105 https://www.openstreetmap.org/?#map=19/47.657852/-122.313575 2025-197-social-at-big-time-brewery en Brewpub in yellow brick building open since 1988, drawing college crowd with suds, pizza & bar fare. false https://pretalx.seagl.org/2025/talk/B9BMJW/ https://pretalx.seagl.org/2025/talk/B9BMJW/feedback/