►
From YouTube: Education SIG (May 30, 2023)
Description
Agenda – https://docs.google.com/document/d/18GBwvQJNcPnwxKrnp43DhBZC7K1JM0xzGkDoKh5mu8U/edit#
Slack – https://openssf.slack.com/archives/C03FW3YGXH9
Mailing List – https://lists.openssf.org/g/openssf-sig-education
Git Repo - https://github.com/ossf/education
B
A
B
B
D
B
D
B
Issue
72.,
so
do
we
think
this
would
be
something
interesting
for
us
to
work
on,
while
we
wait
for
my
friends
at
Intel
to
deliver
the
developer
manager
class
or
are
there
other
topics
we
would
like
to
explore
and
work
on?
First
I
know
that
the
E
and
I
the
committee
has
a
couple
targets
of
things
they
would
like
to
start
doing.
Do
we
want
to
bring
some
of
that
back
here
to
this
group
or
do
we
want?
Are
there
other
topics?
We
would
like
to
talk
about.
D
B
You
know,
and
ideally
this
would
end
with
them,
starting
with
their
very
first
PR
on
a
project
they
wanted
to
participate
in
and
then
Max
went
through
and
expanded
it
into
kind
of
explaining
what
is
open,
source
ways
of
working,
your
toolkit
and
then
getting
started
and
Dr
Wheeler
pointed
out.
There
may
be
a
class
about
this
already.
B
B
There
are
some
classes
in
particular,
they
have
ldf-102
I,
just
don't
know
if
it
really
I
haven't
had
the
time
to
take
it
since
I
just
discovered
this
morning
since
I
read
Wheeler's
comment,
so
I
don't
know
if
this
class
addresses
that
concern
or
not
it
might,
and
maybe
we
just
want
to
submit
some
PRS
to
improve
that
class,
or
maybe
our
idea
is
unique
enough
and
would
add
value.
We
want
to
do
our
own
thing.
Randall.
F
I
spoke
to
some
of
the
people
around
me
at
LF,
training
and
certification,
and
it
was
of
the
opinion
that
we
don't
have
one
class.
We
have
several
classes
that
cover
that
in
different
varying
degrees
of
intricacy
and
kind
of
what
you're
looking
to
do.
They
kind
of
have
a
learning
path,
which
is
not
the
greatest
thing.
The
learning
paths
on
the
LF
platform
are
somewhat
rigid,
but
they
did
put
it.
F
They
did
put
a
learning
path
together
and
there
is
some
concern
about
adding
another
class
to
maintain
because
currently
they're
trying
to
contract
their
footprint
to
the
most
essential
things.
So
the
the
question
that
you're
going
to
run
into
on
the
left
side
and
creating
a
new
course
is
what
would
be
the
actual
tangible
demand
for
this
course.
B
I
can
state
that,
with
our
first
couple
Deni
office
hour
efforts,
we
had
people
that
were
new
to
the
trade
were
interested
and
didn't
know
exactly
where
to
start
I've
had
that
expressed
to
me
at
like
openssf
day.
People
are
curious.
They
would
like
to
jump
on,
but
they're
not
sure
how
again
I
don't
know
if
the
existing
102
class
meets
that
need
or
if
we
want
to
potentially
contribute
and
make
it
better.
E
F
There's
also
like
a
welcome
to
Linux
class
there's
like
a
get
class.
There's
a
few
things
in
there.
That
kind
of
I
think
that
I
think.
Overall,
we
probably
have
all
the
content.
It
would
just
be
a
matter
of
whether
or
not
it's
organized
appropriately
and
that's
actually
a
very
valid
thing,
because
that's
something
that
we've
found
in
a
lot
of
LF
courses
that,
for
example,
we
go
from
zero
to
like
25
to
100..
F
So
that
could
be
a
very
valid
thing
that
they
just
need
to
be
better
organized
so,
but
and
also
going
back
to
tangible
demand.
They
would
be
looking
for
like
even
if
I
were
to
tell
them
that
there's
like
10
000
people
interested
that's
still
a
pretty
low
number
for
them.
It
needs
to
be
like
an
actual
tangible
number
where
it
would
be
worth
it
to
like,
maintain
the
course
invest
and
all
that
different
type
of
stuff.
F
F
Then
that
is
a
possibility,
but
then
that
would
be
something
that
we
would
have
to
talk
to
Clyde
about
what
the
cost
there
would
be
and
stuff
like
that.
But
I
don't
think
that
as
far
as
on
our
side,
there
would
be
very
much
objection
to
that.
But
I
know
that
there's
economics
that
I
don't
understand.
Yet
if
you
will
yeah.
F
C
E
B
F
D
B
B
G
E
Yeah
I
think
kind
of
like
a
Hands-On
type
of
class
that
you
can.
Somebody
can
take
an
export
and
teach
is
useful
because,
like
I
I
used
to
do
stuff
like
this
for
different
audiences,
all
the
time
whether
it
was
people
who
are
in
education
who
are
going
out
to
teach
their
like
and
what
is
open
social
somebody
who
knows
nothing
about
open
source
like
teachers
or
University
students
or
just
anything
from
the
beginning.
E
But
it
always
worked
well
and
sort
of
like
a
Hands-On
lab
type
of
environment
because
they
weren't
going
to
go,
read
something
and
do
it
unless
they
were
motivated
enough
as
part
of
another
course
like.
If
they're
going
to
be
part
of
Alpha
Omega
and
they
needed
to
know
the
basics.
And
they
wanted
to
do
it
on
their
own
time
and
get
comfortable
before
that's
the
kind
of
thing
that
they
might
be
motivated
to
look
into.
B
And
I
think
part
of
what
the
motivation
why
Max
went
through
and
kind
of
fleshed
out.
The
initial
I
very
brief
idea
was
that
he's
seeing
a
lot
of
new
graduates
that
don't
necessarily
have
the
appropriate
skills
to
get
there
and
Jump
Right
In
and
be
able
to
start
contributing
to
open
source
projects.
They
just
don't
understand
the
terminology
or
the
tools.
E
E
Nah
and
and
the
way
we
used
to
do
it
sometimes
is.
We
would
take
a
couple
of
like
projects
that
we
owned
and
then
we
would
sometimes
intentionally
introduce
a
lot
of
typos
to
it
or
find
a
lot
of
typos
or
code
comments
that
were
typos
and
then
list
them
all
the
positions
and
then
have
people
in
a
room
and
actually
walk
them
through,
like
picking
one
of
those
issues
and
actually
walking
through
them,
and
that
was
like
a
low
risk
low.
E
B
Yeah,
that's
absolutely
something
we
could
get
set
up
in
any
any
one
of
the
open.
Ssf
repos
is
set
up.
How
you
know
an
issue
that
needs
help
a
good
first
contribution
to
kind
of
helped
get
the
tags
set
up.
It
helps
stage
it
so
that
somebody
could
come
in
and
you
know,
walk
through
the
eye.
I
love
that
idea.
F
F
F
A
F
F
So
he's
like
you,
gotta
come
at
me
with
like
legitimate
defined
needs
and
then
I
will
I
will
schedule
and
I'll
have
Randall
schedule
him
and
basically
yeah
like
that's.
That's
where
we're
at
so
we
could
definitely
talk
to
Tim
would
definitely
be
the
point
of
contact
and
we
wanted
to
make
a
course.
It
would
have
to
go
through
Tim.
G
E
D
I
also
have
a
a
workbook
that
I
created
for
all
the
Assurance
testing
conference
that
goes
through
and
implements
all
of
the
GitHub
security
features
kind
of
walking
through
how
to
do
it,
and
then
there's
a
few
like
vulnerabilities
in
the
source
code
that
lets
them
like
actually
see
how
the
vulnerabilities
like
alert
and
then
patching
it.
It
could
be
something
also
I'm
willing
to
contribute.
B
C
C
B
I
think
we
should
edit
the
current
issue.
I
agree
this
absolutely.
We
need
to
have
some
type
of
security
Focus,
because
that's
what's
missing
in
a
lot
of
the
curriculum
is
that
a
CS
or
Ms
class
might
have
a
security
class
on
your
senior
year.
But
it's
not
really
a
focus
from
the
beginning.
We
want
to
try
to
capture
people
as
soon
as
possible
to
have
expose
them
to
the
concepts
and
start
to
get
build.
Those
habits
for
them
and.
B
D
C
D
D
C
D
D
D
D
B
D
B
Any
questions
so
for
the
open
source,
the
open
source,
Summit
Europe,
there
is
going
to
be
a
open
ssf
day.
So
if
anyone
has
the
ability
and
interest
to
travel
to
Spain,
they
will
be
a
cfp
opening
for
that
and
then
the
Japan
one
they
just
announced.
So
that's
very
you
could
actually
apply
for
the
main
conference
if
you're
interested
and
then
there
will
be
a
follow-on,
open,
ssf.
One
I
would
anticipate
that'll,
probably
be
later
sometime
mid-summer
that
they
would
open
that
up.
D
E
A
B
A
B
All
right
well,
thank
you.
Everybody
I'm,
going
to
make
a
note
to
go
bother
my
Intel
friends
about
the
manager
class
to
kind
of
see
where
that
is
I.
Think
I
have
a
call
with
them
later
this
week,
and
hopefully,
we'll
have
some
content
there
to
start
to
be
able
to
work
on
and
then,
as
we
learn
about
102,
to
see.
If
that's
something
we
want
to
try
to
augment
or
kind
of
roll
around
yeah.
G
G
No,
no,
no
well
so
in
in
Java.
The
the
joke
is
that
Java
classes
have
to
tend
to
be
very,
very
long.
It's
like
the
the
manager
delegate.
You
know
you
know
the
the
service
manager
delegate,
you
know
Factory
is
like
you
know.
All
of
that
and,
like
you
know,
and
it's
like
you
know-
API
service
manager,
delegate
right,
like
that's
the
name
of
the
class,
and
it's
like
this
very.
Like
long
and
descriptive
thing,
it's
that's
a
Java
thing,
so
I
figured
I'd
yeah
well,.