There are several important reports from various parts of the US Federal Government that I've been meaning to share with the CNI community. Even though they cover some rather diverse areas, I've aggregated them here in the interests of getting this done sooner rather than later or not at all. My thanks to Gary Price for bringing several of these to my attention. Also, I cannot resist reflecting how amazing I find it that government is actually engaging some of these issues; I can't imagine this happening a decade ago, and if nothing else it underscores how central issues related to security and computational infrastructure have become.

First off, an update on efforts to secure the open-source software ecosystem (includes links to related material)

https://www.whitehouse.gov/wp-content/uploads/2024/01/Securing-the-Open-Source-Software-Ecosystem-OS3I-End-of-Year-Report-MASTERCOPY.pdf

Next, three documents on memory-safe programming languages and technologies, and the need for better metrics for software quality. Very interesting if somewhat technical reading.

https://www.whitehouse.gov/oncd/briefing-room/2024/02/26/memory-safety-fact-sheet/  (summary document)


https://www.whitehouse.gov/wp-content/uploads/2024/02/Final-ONCD-Technical-Report.pdf   (the report proper)

an earlier and more technical document, probably the most informative of the three

https://www.cisa.gov/sites/default/files/2023-12/The-Case-for-Memory-Safe-Roadmaps-508c.pdf

Finally,  on a very different topic, there's a short open letter from the Copyright Office that gives a really good succinct summary of what they've been doing in there investigations and policy-making around copyright and AI, with emphasis on generative AI.

https://copyright.gov/laws/hearings/USCO-Letter-on-AI-and-Copyright-Initiative-Update-Feb-23-2024.pdf


Clifford Lynch
Director, CNI