►
From YouTube: CHAOSS.Weekly.February.19.2019
Description
No description was provided for this meeting.
If this is YOUR meeting, an easy way to fix this is to add a description to your video, wherever mtngs.io found it (probably YouTube).
A
C
Sure
so,
I
in
the
new
director
of
cybersecurity
research
at
the
Linux
Foundation
and
I've,
been
working
with
Kate
Stewart,
quite
a
bit
over
the
last
couple
of
weeks,
trying
to
align
the
core
infrastructure
initiative
and
talking
about
the
best
practices
badge
with
some
of
the
things
that
you
guys
are
working
on.
So
I
will
be
joining
the
calls
just
to
make
sure
that
we
all
stay
on
the
same
page.
B
Name
is
John
Martic
I'm,
not
new
to
the
Linux
Foundation
I've
been
around
for
a
while
I
lead
a
few
projects
here:
ODT
I,
open
mainframe
for
a
little
while
longer
our
consortium
and
Academy
Software
Foundation
and
I
spend
a
lot
of
time
least
with
Academy
ODP
kind
of
mainframe
on
helping
sort
of
establishing
the
best
practices
within
the
communities.
And
it's
actually
one
of
my
goals
this
year
is
to
help
refine
some
of
the
practices
even
we're,
using
as
we're
helping.
B
Some
of
our
umbrella
project
have
been
going
so
and
talking
with
Kate,
which
I've
known
Cape
for
a
while.
She
said
you
didn't
really
get
involved
here.
Okay,
so
I
really
probably
going
to
sit
a
little
bit
as
a
lurker
and
just
really
try
to
learn
a
lot
and
so
don't
feel
offended
or
hopefully
I
don't
offend
by
not
contributing
a
lot
at
the
get-go
I'm.
A
B
Yeah
yeah,
one
of
my
projects
have
rolled
out
some
more
like
governance
process,
things
which
may
or
not
be
it
might
be
interesting
to
some
of
you
might
be
able
to
at
the
same
time,
but
when
I'm
really
kind
of
hoping
the
guarantor
is
ways
that
I
can
help
guide
them
on.
Are
they
being
successful?
Are
they
not
like
what
are
some
metrics
and
things
like
that?
B
D
B
B
A
B
D
B
A
So
I'll
it
for
anybody,
that's
kind
of
joining
joining
new.
If
you
have
questions,
obviously
just
interjected
any
time,
the
way
that
we
run
this
is
that
on
the
first,
the
first
of
the
first
Tuesday
of
the
month
is
a
more
formal
meeting,
and
these
are
just
a
little
bit
more
casual.
Sometimes
they
run
shorter.
Sometimes
they
run
a
little
longer.
A
One
is
in
all
there's
three
diversity
and
inclusion
and
growth,
maturity
and
decline,
and
those
working
groups
are
really
kind
of
developing
focus
areas,
addressing
problems
and
answering
questions
within
those
focus
areas
and
then
trying
to
determine
which
of
the
best
metrics
to
address
those
problems
right.
So
it's
kind
of
this
top-down.
What
are
the
problems
first
and
then
what
are
the
metrics
that
we
can
use
to
basically
address
those
problems?
A
The
the
metrics
repository
is
is
a
long
list
of
of
metrics
that
we've
just
really
kind
of
been
capturing
over
time
that
we've
just
heard
at
meetings
that
we've
heard
it
focus
groups
that
we've,
however,
we
have
come
across.
Those
people
have
contributed
and
we've
been
adding
them
here,
and
so
there
was
a
request
for
this.
To
do
a
couple
things
one
is
to
kind
of
go
through
the
list
itself
and
just
kind
of
take
a
look
at
the
list.
A
Take
a
look
at
at
the
type
the
names
of
the
things
take
a
look
at
that
this
question
description,
but
then
also
associate
the
metric
with
where
the
work
is
being
done
on
it.
So,
for
example,
right
now
a
list
of
licenses.
The
third
metric
on
that
list
is
not
being
addressed
by
any
of
the
working
groups,
although,
as
the
risk
working
group
moves
forward,
it's
quite
likely
that
that
would
live
in
the
risk
space
right.
So
so
what
this
has
done?
You
can
see
I've
tried
to
connect
all
of
the
DNI
stuff.
A
So
if
there
wasn't
anything
in
a
in
a
row
in
this
list,
the
D
and
I
was
working
on
I
added
it
here
and
I
also
tried
to
kind
of
align
the
questions
that
you
had
say
in
D
and
I
as
they're
represented
here.
So
this
is
kind
of
my
first
pass
at
it.
It's
not
perfect
by
any
means,
but
it
should
it
should
be
getting
there
right
now.
The
link,
if
you
click
on
the
link,
say
on
I,
don't
know
code,
review,
efficiency
and
GMD.
A
It
actually
takes
you
to
the
work,
that's
being
done
within
the
GMB
work
group.
Actually,
that
one
does
not.
That
takes
you
to
the
work,
that's
being
done
in
the
activity
metrics.
Let
me
pick
a
different
one:
I
say
collaboration
style
for
for
diversity
and
inclusion.
So
if
you
click
on
collaboration
style,
it
takes
you
to
the
work,
that's
being
done
on
collaboration
style
right.
D
Is
super
helpful
I
mean
for
the
semester
for
the
common
metrics
working
group,
because
then
this
gives
us
a
better
understanding
of
where
the,
where
the
gaps
are
so
I
think
that's
probably
going
to
be.
The
focus
of
the
next
meeting
is
looking
down
through
the
ones
that
aren't
being
addressed
by
either
GMD
or
DNI
and
trying
to
pull
out
some
of
the
ones
that
maybe
maybe
are
more
important
and
that
we
should
have
somebody
take
a
look
at
starting
to
define
those.
So
this
is
yeah.
This
is
incredibly
helpful.
Thank
you,
Matt.
You.
A
Bet
and
I'll
I'll
do
my
best
because
I
attend
both
the
GMP
and
the
DNI
meetings,
as
there's
changes,
I'll
make
sure
to
keep
those,
because
it's
just
kind
of
a
manual
process
here
at
the
moment
to
keep
these
things
aligned.
One
of
the
things
that
it
did
as
well
as
both
working
groups
should
notice
that
I
issued
a
I
added
a
few
issues
or
some
pull
requests
just
based
on
some
inconsistency
that
I
was
seeing
you
can.
A
You
can
just
toss
those
out
if
I,
don't
think
I
know
what
I'm
talking
about,
but
sometimes
little
things
like
there
was
one
in
I.
Don't
remember
what
the
issue
was,
but
in
the
DNI
group
you
had
the
same
metric
twice,
but
it
was
two
different
metrics
in
two
different
spots:
mm-hmm,
maybe
just
renaming
it
somewhere.
A
C
A
A
Sometimes
they
were
just
things
like
I.
Don't
know,
I
figured
what
they
were,
maybe
definition
name
I,
don't
know.
Sometimes
they
were
just.
They
were
almost
just
typos
and
I
didn't
feel
like
going
straight
into
the
workgroups
and
fixing
the
typo
or
fixing
the
I
know
what
it
was
sometimes
you're.
Sometimes
in
you
would
have
the
the
high-level
page
that
has
a
list
of
all
of
the
metrics
that
are
associated
with
a
focus
group.
You
know
what
I
mean
each
of
the
work
groups.
A
A
E
A
And
I
click
on
here
on
I'll
post
this,
so
basically
the
way
that
this
is
structured
to
move
within
each
working
group.
There
are
focus
areas
anywhere
but
say
two
to
three
in
the
GMD
area
right
now
and
then
maybe
five
in
DNI
five
or
six
in
DNI
mm-hmm.
So
each
one
of
the
focus
areas
has
this
table
so
and
in
the
link
that
I
just
sent,
they
have
collaboration,
style
contribution
type,
that's
one
of
the
ones
that
is
a
repeater
perceived
value
and
contributions
sentiment
and
sometimes
I'm,
not
saying
any
of
these.
A
If
you
click
on
contribution
style,
it
takes
you
to
the
detail
page
regarding
contribution
style.
Sometimes
the
name:
that's
in
this
list
is
different
than
the
name.
That's
the
title
of
the
detail
page.
Sometimes
those
are
different
so
like
in
the
list.
It
will
be
called
open
issues
and
on
the
detailed
page
it
will
be
called
issues
that
are
open
little
things,
yeah.
D
We'll
take
a
look
at
some
of
those
might
be
typos,
some
of
them
might
be.
We
decided
to
rename
it
and
just
forgot
to
rename
it
in
one
place
and
renamed
it
in
another,
so
yeah
well,
thank
you
for
doing
that.
I
mean
it's
always.
It's
always
interesting.
Every
time,
I'm
digging
through
the
repository
for
something
specific
I,
always
notice.
I
was
notice
other
things
because
exactly.
A
D
A
So
until
you
click
them,
you
won't
know,
and
the
same
would
hold
true
sometimes
on
the
questions.
Sometimes
in
those
tables,
you
would
have
the
question
so
like
again,
I'll
just
stick
with
that
same
contribution,
page
that
I
sent
out.
So
the
question
here
is
sometimes
different
than
the
question.
It's
on
the
detail
page,
you
don't
I
mean
so
the
name
is
a
little
bit
different,
sometimes
and
the
questions
a
little
bit
different.
A
A
A
So
again,
the
way
that
outreach
e
works
is
the
community
brings
dollars
forward
to
fund
the
student
for
the
summer,
and
there
has
been
at
least
in
some
past
talks,
I
think
recently,
some
potential
interest
in
supporting
an
Outreach
II
student
for
the
DNI
group.
So
again,
thanks
to
Georg
for
putting
this
together.
G
Okay,
so
the
idea
that
I
had
just
like
me
have
from
Google
Summer
of
Code
different
project
ideas,
and
so
I
came
up
with
three
project
ideas
of
where
the
DNI
workgroup
could
use
help.
One
of
them
is
implementing
metrics,
so
the
intern
would
learn
the
metrics
and
then
partner
with
projects
they
know
or
other
projects
to
drive
adoption
of
our
metrics
and
then
bring
back
the
feedback
and
lessons
learned.
The
second
idea
is
to
implement
metrics
and
make
the
data
collection
and
analysis
easier.
G
A
G
G
D
A
F
D
G
H
H
Right
because
they're
actually
working
on
that
diversity
and
inclusion
thing
within
the
with
Boston
University
and
some
of
their
AI
work,
because
I
just
taught
to
Langdon
and
his
new
intern,
Manny
and
I-
remember
two
kids,
last
name
anyway,
yeah
so
I
will.
Who
do
you
want
me
to
connect
you
or
a
Georg?
How
about
me
an
Georg
both
of
you
Tulane
got
it.
Thank
you.
No
money
needed.
A
A
I
guess,
while
I
still
am
chatting
and
then
I'll
turn
it
over
I'm
putting
together
for
those
of
you
that
are
on
the
board
I'm
putting
together
the
agenda
like
just
a
slide
deck
on
things
to
talk
about
so
I
make
a
call
here.
If
there
are
people
there
are
topics
that,
whether
on
the
board
or
not,
on
the
board
that
you
like
the
board
to
address
when
we
meet
at
the
open
source,
Leadership
Summit,
you
can
just
email
me
directly
and
my
email
address
is
here.
A
D
Give
a
super
quick
update
that
so
the
common
metrics
working
group
meets
every
other
week,
so
we
did
not
meet
last
week,
but
we
do
have
a
meeting
at.
Let's
see
8:00
a.m.
Pacific,
so
I
guess
that's
10:00
a.m.
central
4:00
p.m.
for
me
in
London,
so
I've
encouraged
people
to
attend.
That
wasn't
a
reminder
to
the
the
list.
With
all
of
the
details
tomorrow,.
H
D
G
So
it
looks
like
from
the
Linux
Foundation
there's
a
good
interest
in
piloting
the
DNI
metrics,
so
that'll
be
one
of
the
topics
at
the
Leadership
Summit,
okay
and
then
we
had
a
conversation
on
the
mailing
list
and
I
thought.
This
was
interesting
for
the
project
as
a
whole
about
how
we
can
be
more
inclusive
to
people
who
cannot
make
our
weekly
calls.
G
So
things
like
having
discussions
on
the
mailing
list
about
topics
you
can,
prime
them
here
on
the
call
and
then
post
a
short
primer
to
the
main
in
this
to
continue
the
conversation
there
and
include
more
people,
okay.
So
that
was
something
that
I
thought
is
interesting,
because
I
sometimes
feel
like.
We
have
a
lot
of
really
good
conversations
here
and
then
they
don't
continue
or
spread
beyond
the
group.
That's
on
the
call
so.
G
G
E
Then
the
case
of
Jim,
then
we
decided
on
launch
about
you,
know,
do
most
of
the
work
using
issues
and
publicists
and
medians
are
basically
going
to
known
issues
and
interests
so
that
people
are
wanting
to
walk
is
infinitely.
They
can
and
then
the
meetings.
What
we're
trying
to
do
is
to
get
concerns
with
some
change
that
maybe
we
don't
be
doing,
or
it
was
not
dear-
that
we
are
doing
on
the
issue
itself,
so
I
think
it's
the
designation,
complexioned
again
I
think
that
instead
of
you
know,
Elise
really
knowledge
so.
E
A
And
believe
it
and
as
I
was
going
through
that
metrics
list,
one
of
the
one
of
the
metrics
is
providing
an
audio
or
a
transcribed
output
from
the
meeting.
So
I
I'm
happy
to
do
that.
I'm.
Not
quite
sure,
do
you
think
I
should
post
it
perhaps
with
the
video
I
just
post
the
videos
right
every
week,
so
as
they're
recorded
as
they
are
now
they
just
show
up
in
my
email,
I,
just
download
them
and
I
just
toss
them
up
on
the
chaos
site.
E
E
A
G
It'll
be
an
improvement
over
the
current
state
by
the
way.
What
do
you
mean?
So,
even
if
the
transcript
is
not
good,
I
know
that
zoom
does
not
differentiate
between
speakers
and
it
looks
pretty
choppy
because
the
format
it
comes
in
is
supposed
to
become
zoomed
by
software
that
creates
subtitles
or
the
closed
captioning
within
the
video.
So
it
doesn't
look
super
user-friendly
from
what
I've
seen.
Okay.
A
A
I
F
A
Right
now,
look
into
that
yeah,
okay,
cool
great,
very
anything
else
from
DNA
Georg,
Don.
I
E
A
I
E
E
A
E
A
A
I
I
There's
some
badging
that
matt
has
started
messin
alistair
and
implement
inside
of
augur
as
well
as
looking
for
the
license.
You
know
we're
scanning
we're
doing
some
license
file
scanning
under
risk
now
as
well
and
I'm
Jessica.
If
you
on
it
I,
don't
you
want
to
introduce
yourself
or
your
or
your
interest
in
the
risk
area
to
the
rule
you
introduced
yourself,
but
yeah
I
can.
C
So
the
risk
metrics
are
particularly
interesting
for
me
with
a
little
bit
of
necessary
background.
I
just
came
from
the
United
States
Congress
at
the
beginning
of
the
year,
where
I
had
been
working
on
a
lot
of
healthcare,
cybersecurity
policy
issues
and
one
of
the
things
that's
coming
up.
A
lot
in
healthcare
Security's,
especially
around
medical
devices,
is
the
medical
device.
Community
is
getting
ready
to
deploy
software,
build
materials
across
pretty
much
all
of
their
products.
A
C
That
one
is
actually
being
solved
elsewhere.
The
national
telecommunications
infrastructure
Association
is
leading
a
process.
That's
going
to
spit
that
out
for
them.
What
they
need
is
that
secondary
step
of
once
I
do
have
their
software
build
materials
once
I
have
their
materials
identified,
they
need
to
be
able
to
make
value
judgments
trustworthy
value
judgments
about
those
different
components
that,
frankly,
the
entire
industry
can
agree
upon.
If
they
don't
find
something
like
chaos
or
are
not
using,
are
not
able
to
leverage
chaos
effectively.
They're
gonna
have
to
design
it
on
their
own.
C
A
C
What
they
need
to
do
is
take
the
output
of
whatever
the
bilham's
of
materials
is
so
when
it
says
you
know,
you're
using
OpenSSL,
whatever
you're
using
I,
can't
even
think
of
anything
right
now,
but
look
once
they
have
that
list.
They
need
to
be
able
to
then
go
okay.
How
healthy
is
OpenSSL
V,
whatever?
How
healthy
is
component
X?
How
healthy
is
component
Y
they're
gonna
be
able
to
they're
going
to
need
to
do
that
at
merger
and
acquisition
time.
C
C
The
risk
metrics
could
help
them
make
informed
decisions
about
what
components
to
include
on
the
front
end
and
then
on
the
back
end,
when
they're
looking
at
either
acquiring
two
things
or
they're
looking
at
partnering
with
people,
they
can
then
take
a
look
at
somebody
else's
build
materials
and
make
informed
judgments
about
how
healthy
that
partners
confer
I'm.
Sorry,
okay,
I.
A
I
A
Oh
well
like
there
will
be
a
number
of
different
pieces
of
information
kind
of
coming
together,
so
it
may
be,
am
I
taking
it
a
little
while
to
get
my
head
around
like
it
just
like
what
fuss
ology
is
producing
and
then
is
that
a
like
a
tag
file
that
gets
sucked
up
by
something?
Or
is
the
intention
like
what
we've
been
doing
to
try
to
have
say
the
normal
scanners
as
part
of
a
roller
yeah.
C
I'm
sorry
I
think
I
just
put
together
where
maybe
I
was
not
explaining
something
very
well
I
I
think
you're
you're,
looking
very
you're
looking
farther
ahead
than
I
am
looking
in
that,
so
that
you
can
have
some
kind
of
software
tool
that
takes
maybe
a
software
build
materials
and
an
input
and
then
spits
out
something
to
do
with
the
metrics.
Yes,
that
would
be
great
but
I
think
to
be
blunt,
the
healthcare
community
that
would
be
looking
to
leverage
these
things
probably
aren't
even
mature
enough
to
be
able
to
get
there.
Yet.
C
A
C
A
A
Is
good
stuff
I,
you
know,
I
know
that
DNI
rotates
there.
People
who
lead
the
calls-
and
this
is
what
I
was
asking
Don
about
earlier.
If
she's
gonna
leave
the
calls
for
comment
and
that
might
rotate,
do
you
ever
want
to
rotate
this
one
I
think
by
default
I
just
kind
of
end
up
being
the
first
hello?
We
are
more
than
welcome
to
rotate
it,
and
should
we
get
more
formal
on
note-taking
on
the
weeklies
any
thoughts
on
this?
G
I
I
think
I,
guess
I'm
small
item
eyes
list
of
what
we
discussed
would
be
helpful:
okay,
yeah,
especially
if
folks
can't
make
the
call-
and
they
at
least
know
the
content
of
what
they
missed
and
they
might
help
them
decide
if
they
want
to
watch
the
video.
Even
just
high-level,
okay,
yeah
I
think
you
can
be
super
high
level.
Okay,.
A
I
G
A
A
A
So
happy
to
contribute
minutes.
Next
I
would
like
to
do
that.
That
would
be
love
it
and
then,
from
there
we
can
kind
of
start
at
least
rotating.
As
other
people
lead.
We
can
change
that
didn't.
Maybe
we
just
do
rotation
on
the
leads
for
the
monthly.
You
know
what
I
mean
alright
cool
and
then
we've
had
them
kind
of
just
one.
Last
thing:
we've
had
an
ongoing
discussion
about
versioning.
Is
it
that
gone
anywhere?
At
this
point?
Has
there
been
any
movement
on
that
I.
I
G
D
E
G
Will
have
that?
Okay,
thank
you.
You
have
one
infrastructure
proposal
on
how
to
do
it.
That's
the
one
we
developed
with
Toby.
If
I
remember
correctly.
Last
week,
they
said
it
would
be
good
to
have
another
proposal
fleshed
out
so
that
when
we
get
to
the
board
meeting,
you
already
have
different
proposals
to
work
with
and
don't
have
to
start
from
scratch
and.