WEBVTT
00:00:00.050 --> 00:00:03.919
You might be solving someone else's problem, and they've never seen your source code.
00:00:03.950 --> 00:00:19.123
They've never used your library, but because you have published it, that brilliant way that you invented of doing something can now be used in anyone's source code, just that genius, three lines of code that you made, the do something really efficiently can be used by someone else.
00:00:19.943 --> 00:00:22.224
Welcome to CTIO 1 O 1 Episode 4,.
00:00:22.397 --> 00:00:27.297
Sponsored by Fairmont Recruitment, Hiring Technology Professionals Across the UK Europe
00:00:27.503 --> 00:00:34.746
One of the topics that it does the rounds, but anyone in business technology really needs to get their head around.
00:00:35.595 --> 00:00:37.426
What's your approach with open source?
00:00:37.426 --> 00:00:38.776
What is open source?
00:00:38.826 --> 00:00:49.366
We've got a few areas we're going to go through, we're going to try and look at some of the cliches around open source and also explore your own experience and what you guys do specifically with open source.
00:00:49.366 --> 00:00:56.453
Given that we're 1 0 1 to start off with, why don't we try, I a definition what would your 1 0 1 explanation be?
00:00:56.668 --> 00:00:59.049
Computers and robots work using instructions.
00:00:59.140 --> 00:01:01.630
they haven't got a mind or imagination of their own.
00:01:01.630 --> 00:01:09.250
You have to explain to them in great detail So let's say you ask a robot to make a cup of tea, and you discovered that it always tastes awful.
00:01:09.298 --> 00:01:14.641
So the instructions that have told that robot, how to make that cup of tea are hidden from you.
00:01:14.730 --> 00:01:16.200
So that's closed source.
00:01:16.200 --> 00:01:19.552
You've no idea why the cup of tea tastes so bad with open source.
00:01:19.555 --> 00:01:33.891
The idea is that everyone in the world can see the instructions that be given to the robot to make the cup of and as soon as you reveal that, and as soon as you open the source or you can see that the robot has been told to put the tea back in the milk, stir it for five minutes and then add some boiling water.
00:01:33.965 --> 00:01:38.628
we know that's a terrible way to make a cup of tea, you need to put the boiling water in first.
00:01:38.643 --> 00:01:41.162
So obviously robots can only read zeros and ones.
00:01:41.222 --> 00:01:47.643
So that source code, whether it's open or closed is converted in something called binary's before they're given to the computer or the robot.
00:01:47.715 --> 00:01:52.725
So just making the source code open, doesn't make it better.
00:01:52.725 --> 00:01:54.585
Cup of tea does not make it better.
00:01:55.066 --> 00:02:03.365
But it does mean that people who really care about how their tea tastes can complain about it, vociferously on the internet and say, this is awful the instructions are all wrong.
00:02:03.725 --> 00:02:06.635
and this is how you should be making a cup of tea.
00:02:06.677 --> 00:02:12.629
The three important steps that w one is it's all very well understanding how to improve the source code.
00:02:12.900 --> 00:02:15.960
And, that means reading it And the more eyes you've got on the better.
00:02:16.080 --> 00:02:20.991
So open source gives you some advantages there but it's also about making those improved instructions available.
00:02:21.051 --> 00:02:24.831
And then finally for people actually giving the robot, the team instructions.
00:02:24.951 --> 00:02:35.361
The open versus closed source question is really how easy is it to see how a computer or a robot has been instructed to behave?
00:02:35.393 --> 00:02:37.233
I've never had it explained like that before.
00:02:37.233 --> 00:02:38.308
Which I think is absolutely brilliant.
00:02:38.308 --> 00:02:39.568
So I wanted to play back to you.
00:02:39.594 --> 00:02:41.042
What you've just said, see if I've got it right.
00:02:41.042 --> 00:02:44.652
And use, an analogy I've just made up on the fly, which is always risky.
00:02:44.800 --> 00:02:50.278
So would a similar analogy be you go into a restaurant, you order an omelet and you eat the omlette that.
00:02:50.278 --> 00:02:51.808
You go absolutely amazing.
00:02:51.808 --> 00:02:52.274
I love it.
00:02:52.286 --> 00:02:59.159
But you want to improve, or you want to improve on that omlette, on that, and you go and ask the chef and the chef says, I'm sorry I'm not telling you how I made it.
00:02:59.159 --> 00:02:59.849
It's a secret.
00:02:59.969 --> 00:03:03.960
And that's your kind of closed source open sources.
00:03:04.020 --> 00:03:10.259
he welcomes you or she welcomes you with open arms and says, actually I'm part of a community of chefs.
00:03:10.560 --> 00:03:14.022
And we've been spending the last 20 years on how to create the perfect omelet.
00:03:14.022 --> 00:03:16.891
Can see you're passionate about omelets come and join us.
00:03:16.981 --> 00:03:21.662
Having been through the pain of learning, how to make the omelet.
00:03:21.743 --> 00:03:42.245
wanting to keep that secret for yourself so that people have to buy their omlettes from you, or are you saying everyone in the world should benefit from this amazing recipe and by doing so you gather people together who are like minded, which in itself is a social thing, which we're all is important to all of us.
00:03:42.274 --> 00:03:54.003
But also you've transformed your mission from making the most money you can from your secret recipe, which one day someone will find out or improve upon.
00:03:54.663 --> 00:03:57.484
You've converted your mission to making the perfect omelet.
00:03:57.753 --> 00:04:01.174
And it is very much that distinction between why Are we doing this?
00:04:01.174 --> 00:04:03.514
are we doing this in order to make the world.
00:04:03.649 --> 00:04:03.933
better?
00:04:04.294 --> 00:04:06.633
Or are we doing this in order to make ourselves richer?
00:04:07.174 --> 00:04:08.524
and you have to do both, right.
00:04:08.591 --> 00:04:12.769
There is a balance to be struck, but you find that.
00:04:12.842 --> 00:04:14.882
Give the open source to the community.
00:04:15.122 --> 00:04:18.331
They come back to you for work for other reasons, right?
00:04:18.781 --> 00:04:24.279
They're like, oh, look, I know you're the guy behind the omelets, but we've got a new mission and we want to make the perfect cake.
00:04:25.120 --> 00:04:27.639
So come and work with us.
00:04:27.672 --> 00:04:29.855
And so that might then be a closed source project.
00:04:30.036 --> 00:04:37.896
So that's very much how we operate a Panorama Data is here is the stuff of which we want everyone to use for free, because we want to help the community.
00:04:38.375 --> 00:04:41.918
And we find that as a result of that, people come to us for closed source.
00:04:41.961 --> 00:04:55.750
We won't keep going back on about omelets, et cetera, but that restaurant where you've had that great omlette, Not only was it great, the chef was very open with you about, how they've made it and actually already you've got trust there and you're thinking, you know what?
00:04:55.810 --> 00:05:00.221
I think I'm just going to come back and eat here because they're really cool there's trust.
00:05:00.250 --> 00:05:06.326
And we can probably do some other really cool things, especially in a world where the first position seems to be.
00:05:06.387 --> 00:05:07.557
We're not telling you anything.
00:05:07.586 --> 00:05:08.576
This is a black box.
00:05:08.654 --> 00:05:11.884
Which is really maybe becoming very outdated as a way of selling?
00:05:11.973 --> 00:05:12.952
I think so.
00:05:13.432 --> 00:05:20.033
I think the whole world is moving away from transactional sales and towards relationship establishment.
00:05:20.033 --> 00:05:23.093
If you look at the way, the whole industry is going towards software as a service, right?
00:05:23.192 --> 00:05:27.892
You're selling software as a service, you're not just doing one of license sale, like a copy of Office.
00:05:28.007 --> 00:05:29.718
To run on your machine and asset.
00:05:29.718 --> 00:05:35.428
And if you want to buy the next version, you have to, know, You have to you have to pay a capital cost for them for the next version of the software.
00:05:35.908 --> 00:05:45.211
The whole world is moving towards a model where you in effect, and this is what most companies are moving to with Office 365 and Google's other offering around that space.
00:05:45.295 --> 00:05:49.096
So not so much a rental model, but a sort of a subscription service.
00:05:49.096 --> 00:05:55.697
So we subscribe to be able to use word which to many people seems utterly the wrong way to go about things.
00:05:55.697 --> 00:06:10.007
And yet that is a long-term relationship between the company and, Microsoft or whoever the supplier is and that trust and the relationship is far more important to Microsoft.
00:06:10.007 --> 00:06:19.761
And we can see that revenues are doing fantastic things these days than the closed source will sell you a transactional W we'll make a transaction with you and sell you this one copy of the software.
00:06:20.485 --> 00:06:32.365
So I think this whole move away from transactional sales in software and towards trust relationships, long-term and annual recurring revenue, I think is a model that will stick with us forever.
00:06:32.408 --> 00:06:36.247
And I think it's weirdly it's moving to other areas of society as well.
00:06:36.247 --> 00:06:40.745
So if you look at, how you go to a a theme park they don't want to sell you on that one day.
00:06:40.745 --> 00:06:42.785
They're trying to get you on the annual pass, right?
00:06:42.785 --> 00:06:48.004
They want you to have ongoing returns to whatever the Theme park is with your kids.
00:06:48.119 --> 00:06:53.336
Once or twice in the summer for the rest of their kid, your lives, that's what they want you to move towards.
00:06:53.757 --> 00:06:56.867
And I think that in order to do that, they have to provide a much better experience.
00:06:56.906 --> 00:07:00.567
I have to also continue to innovate to make you want to keep coming back.
00:07:00.836 --> 00:07:07.107
And That's another important thing is by moving away from a transactional sale and towards a more, as a service.
00:07:07.158 --> 00:07:13.927
Methodology your encouraging, the continued development and improvement of the software.
00:07:14.317 --> 00:07:23.333
I think that the same thing is true in the community as well, by making a source open you're encouraging continual improvements and the community input into those improvements.
00:07:23.663 --> 00:07:29.002
And I think we're certainly seeing that with Microsoft being very successful with their open source and all that.net framework
00:07:29.081 --> 00:07:34.630
if you just cast your mind back even a few years, if someone said to you, oh, Microsoft are going to go Open source.
00:07:34.630 --> 00:07:35.620
You'd like, no, they're not.
00:07:35.675 --> 00:07:37.978
They are the very last people at the party.
00:07:38.014 --> 00:07:42.975
But with and the sort of the new leadership, I think it's made them a much stronger.
00:07:42.975 --> 00:07:50.081
They're already a huge force, but it's probably got their roots and you're getting loyalty, from folks and embedding into the community.
00:07:50.112 --> 00:07:56.367
One of the things that gets banded about a lot, and I think some of our listeners will hear this, if they've never used open source before.
00:07:56.367 --> 00:08:12.482
this will be someone in the meeting might say, oh actually I've heard that open source has inherent security flaws or weaknesses because, we don't know who's working on it so david is open source software more prone to security flaws?
00:08:12.802 --> 00:08:14.139
than closed source.
00:08:14.163 --> 00:08:14.778
Is, it a myth?
00:08:14.778 --> 00:08:16.187
Is there any truths around it?
00:08:16.245 --> 00:08:17.398
What's your view on that?
00:08:17.509 --> 00:08:23.266
All source code all software has the inherent weakness that it was written by humans.
00:08:23.314 --> 00:08:31.521
So if you take any bit of software, the chances that have got zero bugs are tiny there's no chance.
00:08:31.521 --> 00:08:37.042
Most software that you use everyday on your phone, on your laptop will have bugs riddled throughout it.
00:08:37.371 --> 00:08:42.591
most of them not very severe, but all of them potentially are problem for you.
00:08:42.652 --> 00:08:50.951
And if you were any doubt on, whether that was true how often do you get software updates rather than a lot of the reason that those software updates are coming in is not just new features.
00:08:51.221 --> 00:08:52.270
It'll be a whole sway.
00:08:52.280 --> 00:08:57.191
This, If you look at the release notes, whole swaves of bug fixes, whether it's open-source or places.
00:08:58.456 --> 00:08:59.716
Humans are mostly harmless.
00:08:59.779 --> 00:09:03.200
So most of the code that they write is well intentioned, but just flawed.
00:09:03.235 --> 00:09:10.669
So open source has inherent security, weaknesses, close source has inherent security weaknesses just by the fact that it was written by imperfect people.
00:09:10.669 --> 00:09:13.474
So the argument used to be that we keep our weaknesses, hidden, right?
00:09:13.504 --> 00:09:22.953
So when you do that, the weaknesses remain, you still got those weaknesses in your code and the computers are still running that flawed software.
00:09:23.629 --> 00:09:28.649
So when you first make your source code open, everyone can inspect it, find the issues and exploit them.
00:09:28.979 --> 00:09:38.308
So when you first take a closed source project and you make it open source, you gotta be very careful because what you're then doing is revealing to the world, all your weaknesses and all your security holes.
00:09:39.028 --> 00:09:59.374
However, if your project starts off open source, you'll tend to fix those things as people spot them fairly quickly, particularly anything related to security, there's a whole sort of urgency that comes with any security for all that any developer will immediately try and close that down because the last thing they want is people abandoning their code, whether it's open or closed.
00:09:59.421 --> 00:10:04.303
So the trick is when you go from closed source to open source, you really have to go to one of the.
00:10:04.303 --> 00:10:23.354
Companies that will do a full audit of your code base and make sure that it has no flaws at all from, as far as they can tell it doesn't mean again, it's going to be perfect, but it means that you do have an independent eye on your source code before going from pure closed source to pure open source.
00:10:23.683 --> 00:10:25.153
Otherwise the community is going to rip it apart.
00:10:25.183 --> 00:10:29.663
And also no one's going to trust it, because you didn't have that previous trust relationship that we were talking about.
00:10:29.740 --> 00:10:38.472
And so it's going to be a sort of a, an immediate switch on of the the source being inspected, people will find flaws and exploit them immediately.
00:10:38.952 --> 00:10:46.881
I never thought of it as a, you start closed, then you go open and that being a vulnerable time, because you've had.
00:10:47.542 --> 00:10:51.621
Previously, maybe eight eyes or sorry, eight pairs of eyes looking at it.
00:10:51.981 --> 00:10:54.681
And now you've got, thousands, so you've got that.
00:10:54.740 --> 00:11:03.496
And I suppose when you start something, which is kind of Greenfield open source, you're building on certain frameworks that have already got a lot of scrutiny within it.
00:11:03.527 --> 00:11:05.537
So you're starting from a different sort of point of view.
00:11:05.537 --> 00:11:10.802
So if folks are looking at open source either looking to open source their own code.
00:11:10.802 --> 00:11:22.143
So if they're looking to make that leap to open source, or if they're looking at evaluating open source, understanding where that product is, it's lineage and where, and how new or is important.
00:11:22.143 --> 00:11:33.640
And I suppose also the domain authority of whoever's check their code as well to make sure it's a bit like, when you do your pen test, you make sure it's done by a really reputable company.
00:11:33.671 --> 00:11:35.520
Otherwise, it's not worth anything.
00:11:35.520 --> 00:11:36.346
Is that fair to say?
00:11:36.397 --> 00:11:44.197
I look at it in the way that you look at people who drive and operate computers don't need a license but you do need a license to drive a car, right?
00:11:44.466 --> 00:11:47.292
So there's a certain level that you have to get through.
00:11:47.292 --> 00:11:58.601
Otherwise it goes, not even can compile, but above that level above the level where you can write hello world and put it out into the world, everything else that you write on top of that can be awful and no one's ever looked.
00:11:58.601 --> 00:11:58.841
at it.
00:11:59.341 --> 00:12:04.706
I used to be as a developer, very protective over my code, and this is mine and it's my baby.
00:12:04.793 --> 00:12:23.673
But you soon discover that the more eyes on your software, whether they are professional eyes or amateur eyes the better, but when we write close source code for our customers, and they bring in an auditor, We used to be very nervous in that process.
00:12:23.732 --> 00:12:27.602
And now we're actively interested in where we've made mistakes.
00:12:27.842 --> 00:12:38.192
And I think that attitude is really important for any developer is a bit of humility and a bit of understanding that the code that you write is continually awful and get other people to inspect it.
00:12:38.342 --> 00:12:48.870
Whether that's your pair developer that you work with every day every cut line of code that was inspected at the time it was written it would be of high quality whether it's because you've got static code inspection running against your code.
00:12:49.139 --> 00:12:51.988
And we use, Visual Studio which is fantastic bit a software.
00:12:51.988 --> 00:12:54.701
But it has got now static code inspection built in.
00:12:54.761 --> 00:12:57.422
So it will assess the quality of your code as you write it.
00:12:57.529 --> 00:13:02.366
And point out flaws, the very second that you've written the code and it will, give you improvements.
00:13:02.606 --> 00:13:07.386
There are independent, modules that you can put into your code to inspect it at compile time.
00:13:07.417 --> 00:13:10.897
So for example, we use something called security code scan, which is a free thing.
00:13:10.897 --> 00:13:12.966
Anyone that uses visual studio should have it in all their projects.
00:13:13.177 --> 00:13:16.777
And it's just, they're inspecting you for security, bad practices.
00:13:16.777 --> 00:13:18.096
It might not be intentional.
00:13:18.096 --> 00:13:21.995
You might've accidentally left the password somewhere, but it will tell you about that.
00:13:22.037 --> 00:13:24.941
And, those tools are hugely valuable.
00:13:25.211 --> 00:13:39.591
And then finally, when you've got these third party auditors coming into the for your code, they will, again, they'll run static code inspection, but they might look a bit more carefully and do some penetration testing and do all kinds of things that you wouldn't do yourself while you're developing it.
00:13:39.591 --> 00:13:49.551
So I think the message here is it doesn't matter whether it's open or closed, the more eyes and the more processes that inspect your code for flaws as early in the process as possible.
00:13:49.551 --> 00:13:50.750
as includes as you're writing it.
00:13:51.229 --> 00:13:52.879
So David had a quick question for you.
00:13:52.908 --> 00:13:56.599
I was at an event last night, which was all around it's mental health week.
00:13:56.692 --> 00:13:59.842
This episode will not be going out during Mental Health week.
00:14:00.201 --> 00:14:07.328
The topic They were covering was something called Imposter Syndrome which is not a formally recognized condition.
00:14:07.369 --> 00:14:16.453
But it is something that's been talked about and quite prevalent in technology and, it goes along the lines of I'm not really good enough for what I'm doing.
00:14:16.453 --> 00:14:18.104
Someone's going to tap me on the shoulder.
00:14:18.104 --> 00:14:20.149
I'm going to get found out, that sort of thing.
00:14:20.178 --> 00:14:33.096
And it just, when you were talking about making your code public, something you've written that, do you have to dig deep with your confidence to put something that you've written out there?
00:14:33.163 --> 00:14:43.296
It, have you ever experienced that or seen that I'm just wondering whether that's something that our folks might think about in terms of actually making that leap to publishing their own code.
00:14:43.655 --> 00:14:45.666
Hey, look, this is something I've written.
00:14:45.666 --> 00:14:47.005
And I said that's not very good.
00:14:47.008 --> 00:14:47.488
Okay.
00:14:47.548 --> 00:14:48.837
I won't ever publish again.
00:14:48.898 --> 00:14:52.317
I'm going to go and change jobs and become a librarian.
00:14:52.519 --> 00:14:57.966
I think the thing that everyone should embrace is that's just perfectly normal paranoia.
00:14:58.027 --> 00:15:08.548
Everyone in the Universe has that, so we all have that, but the question is not really all, you're good enough, so much as what are your intentions.
00:15:09.058 --> 00:15:20.158
And if your intentions are to put out the best quality bit of software that you can, then it will happen, but it will be the best bit of software that you can produce.
00:15:21.359 --> 00:15:29.725
If you then open yourself up to the community, say, here is my flawed bit of software, please rip it apart.
00:15:29.842 --> 00:15:30.533
They will.
00:15:30.682 --> 00:15:31.643
And that is a good thing.
00:15:32.273 --> 00:15:34.918
And so it becomes less about, Am I good.
00:15:34.918 --> 00:15:36.048
Enough and more of that.
00:15:36.844 --> 00:15:38.823
What is it at the time trying to achieve?
00:15:38.854 --> 00:15:41.888
And if what you're trying to achieve is high quality then it will be.
00:15:42.067 --> 00:15:49.927
If what you are trying to achieve is whatever, you can just throw that out as quickly as it possibly can be thrown onto the Internet, it will be very low quality.
00:15:50.168 --> 00:15:55.594
So I think anyone who's getting into software and thinking, do you know what I'm I've written this code.
00:15:55.634 --> 00:15:56.083
it's terrible.
00:15:56.083 --> 00:15:56.624
And it's awful.
00:15:56.624 --> 00:16:02.842
The last thing I'm going to do is put it on, Github, should flip that around completely and say I'm going to put"Hello World" on the internet.
00:16:03.096 --> 00:16:06.743
And I'm going to ask for criticism until it actually is writing war and peace.
00:16:07.163 --> 00:16:21.493
but that's, if that's your intention, start off by publishing the awful little bit of scrappy code that you written as soon as you get someone who's interested in what you're doing, and if it's sufficiently niche, believe me there'll be someone out there in the seven, 8 billion people in the world, there'll be interested in it.
00:16:22.993 --> 00:16:24.013
They will contribute.
00:16:24.013 --> 00:16:26.023
They will help, and they will become part of the community.
00:16:26.023 --> 00:16:27.462
And it's not about you creating it.
00:16:27.462 --> 00:16:32.673
It's about you facilitating the community and creating the best possible version of what it is you're trying to achieve.
00:16:32.721 --> 00:16:38.091
What motivates a software developer to actually contribute towards open source?
00:16:38.302 --> 00:16:45.749
When you contribute towards an open source project as a developer it's, you don't get paid I believe not directly.
00:16:45.845 --> 00:16:47.644
You obviously get some kind of benefits.
00:16:47.644 --> 00:16:48.990
So what's the motivation?
00:16:48.990 --> 00:16:53.250
Where what, why do folks get stuck in to it from a developer point of view?
00:16:53.359 --> 00:16:54.269
That's a very good question.
00:16:54.336 --> 00:17:06.636
Mostly I believe that people publish open source initially because they've just been through hell solving a particular problem, and they just want to prevent anyone else from going through that hell themselves.
00:17:07.057 --> 00:17:11.278
So by publishing it really, they're just like putting a bow on it and saying, this is now finished.
00:17:11.278 --> 00:17:16.627
It's almost like a, now I can release my child out into the world and they can go out there and do good.
00:17:16.688 --> 00:17:18.278
That's not always the motivation.
00:17:18.279 --> 00:17:21.819
Quite often the motivation is someone's got, I can't get my code to work.
00:17:22.059 --> 00:17:26.710
Here's the Github come someone on Stack Overflow, please fix my code for me.
00:17:26.779 --> 00:17:28.369
I can't get any further.
00:17:28.400 --> 00:17:31.640
Please Can someone, I just do not know why this is not working.
00:17:31.670 --> 00:17:32.000
Yeah.
00:17:32.509 --> 00:17:33.140
A been there.
00:17:33.507 --> 00:17:36.356
And quite often the answer is, oh, you just want to use this library over there.
00:17:36.356 --> 00:17:37.539
Someone's done it for you already.
00:17:37.589 --> 00:17:47.738
There is almost everything written already, again, a massive generalization there, but there is a lot out there isn't there that people don't realize that a lot of people sit down to write.
00:17:47.738 --> 00:17:51.877
things and it's probably been written maybe even a hundred times before.
00:17:52.325 --> 00:18:02.048
Now, this gets me onto the topic that I'm so excited to about, which is the release of Github copilot, which is an amazing bit of technology.
00:18:02.138 --> 00:18:07.868
And it's basically you write the comment about the code you're about to, write and it will then write the code for you.
00:18:08.199 --> 00:18:11.499
And the reason it can do that is that this AI has scoured.
00:18:11.499 --> 00:18:16.989
The whole of GitHub has exactly 20 different implementations of the thing that you're about to write.
00:18:17.259 --> 00:18:20.169
And it knows which the best one is, and it will write it for you.
00:18:20.199 --> 00:18:21.219
Now you have to be a bit careful.
00:18:21.219 --> 00:18:23.317
You have to read that it's doing exactly what You intended.
00:18:23.708 --> 00:18:27.488
And if you phrase your comment wrongly before it types for you.
00:18:27.570 --> 00:18:29.964
it's going to do exactly what you described, not what you want.
00:18:29.971 --> 00:18:33.521
But this is a way of all of this open source that's being contributed out there.
00:18:33.611 --> 00:18:35.351
Isn't just going out into the void.
00:18:35.770 --> 00:18:39.641
You might be solving someone else's problem, and they've never seen your source code.
00:18:39.671 --> 00:18:57.156
They've never used your library, but because you have published it, that brilliant way that you invented of doing something can now be used in anyone's source code, just in, just that genius, three lines of code that you made, the do something really efficiently can be used by someone else.
00:18:57.946 --> 00:19:02.846
The idea that the source code that you're writing there is going out into the void and not being used by anyone.
00:19:02.855 --> 00:19:03.382
It's not, true.
00:19:03.412 --> 00:19:07.432
You might find that some bit of aI has picked it up folded in and someone else now benefits
00:19:07.613 --> 00:19:13.410
Does it accredit you to so does your kind of standing increase because your bit of code has been used?
00:19:13.569 --> 00:19:15.660
But this comes down to what your motivation is, right?
00:19:15.990 --> 00:19:30.529
If your motivation is to get your problem solved, then you ask a question on stack overflow, if your motivation is to prevent someone else from having to write that bit of code ever again, because it was a nightmare to figure out then that's your motivation.
00:19:30.559 --> 00:19:40.369
If your motivation is to I don't know, get someone to use your software and then maybe buy your support services, that's another motivation.
00:19:40.369 --> 00:19:42.680
There are multiple motivations of why people would open source.
00:19:42.809 --> 00:19:50.142
One, answer is that you've got your legacy software, you're about to retire, and you just want to make sure your impact on the world is, stored forever.
00:19:50.291 --> 00:19:52.392
Who knows why people do the things that they do?
00:19:52.751 --> 00:19:55.071
David, these are very human motivations.
00:19:55.083 --> 00:19:56.986
They're also very grounded in engineering.
00:19:57.006 --> 00:20:07.788
I think a lot of people get into engineering because they want to make something that is really good it advances how people experience the world, but also has some kind of permanence, it's yeah, I built that
00:20:07.788 --> 00:20:09.852
exactly is when you're long gone.
00:20:09.882 --> 00:20:16.512
Personally, I'm not going to star in a sort of a multimillion dollar blockbuster and that legacy won't be there forever.
00:20:16.587 --> 00:20:18.748
You look at Some of the amazing films that are coming out right now.
00:20:18.867 --> 00:20:20.788
we all want to have been robert downey Jr.
00:20:20.788 --> 00:20:21.290
As Iron Man.
00:20:21.290 --> 00:20:22.066
It'll never happen.
00:20:22.215 --> 00:20:25.276
So our legacy is going to be a few lines of code that we wrote
00:20:25.388 --> 00:20:26.798
David don't write it off.
00:20:26.949 --> 00:20:27.788
Don't write it off.
00:20:28.088 --> 00:20:30.009
You never know you might get that phone call.
00:20:30.286 --> 00:20:31.306
This is my audition, right?
00:20:31.306 --> 00:20:31.605
Yeah.
00:20:31.654 --> 00:20:33.174
I'll be the next Iron Man.
00:20:33.174 --> 00:20:34.984
Don't they'll fit in the suit unfortunately.
00:20:35.035 --> 00:20:48.631
When you're using consuming open source, you may see, the element that you're directly consuming, but that might be built on a number of other modules or parts of of what are called dependencies.
00:20:48.871 --> 00:20:57.605
And if that runs quite deep, you might have quite a lot of homework to do before you really understand how solid, the open source platform is that you're using.
00:20:57.605 --> 00:21:01.813
I wrote down the phrase"buyer beware", what's your approach when you're thinking about dependencies?
00:21:01.874 --> 00:21:09.614
So we recently saw this, of course, with the Log4J exploit, which is a library used in thousands of different software packages.
00:21:09.644 --> 00:21:18.137
So these are all potentially vulnerable for many years, the trick with all software engineering, but there's open or closed source is to use the fewest lines of code possible.
00:21:18.258 --> 00:21:20.430
Everything should be done in the fewest lines of code.
00:21:20.789 --> 00:21:32.549
So for our Tea making robot, for example, wouldn't it be good if you could use instructions written by someone else that already gave detailed instructions on how to boil a kettle, right because that's a dangerous thing and you really don't want to be writing code that handles boiling water.
00:21:33.059 --> 00:21:34.859
So you would use someone else's Library.
00:21:35.130 --> 00:21:46.144
The question is have you got time to inspect every single line of code that's Being written, instructing the robot, how the boila kettle and do you know, actually is not going to start throwing that boiling water around the kitchen.
00:21:46.444 --> 00:21:47.285
you, don't know that.
00:21:47.375 --> 00:21:54.305
And in reality, those people writing open source themselves will be relying on underlying libraries that they've never seen.
00:21:54.305 --> 00:21:56.285
They haven't taken the time to inspect the code.
00:21:56.855 --> 00:22:06.484
So the important thing there is to use code that is tried and tested was always open source and has been open to inspection for a very long time.
00:22:06.484 --> 00:22:09.664
As we were saying earlier, if something's only just been moved from closed source to open source.
00:22:09.785 --> 00:22:12.335
It's potentially vulnerable, and that's a bad thing.
00:22:12.470 --> 00:22:16.220
But that's never going to completely protect you, but the same is true of open or closed source, right?
00:22:16.609 --> 00:22:27.182
So when you are in, as I am Visual Studio and you're choosing which NuGet packaged to bring in, take a quick look at a couple of key metrics.
00:22:27.482 --> 00:22:30.323
One is how many other people on the internet are using it.
00:22:30.853 --> 00:22:36.992
And there's a little metric as you choose the library that you can include in your, source code as to how many other people are using it.
00:22:37.022 --> 00:22:50.211
And the second thing is just have a very quick look at the repository and look to see if there are thousands of outstanding issues in which case you might want to avoid it because lots of people are finding issues with the source code and it's not being fixed.
00:22:50.263 --> 00:22:52.574
And then the other one is how often are releases made.
00:22:52.574 --> 00:22:53.743
So I think we spoke earlier.
00:22:53.743 --> 00:23:00.493
about how it's all very well that someone's invented a better way or written instructions for better way to make a cup of tea.
00:23:00.584 --> 00:23:02.084
But two things still have to happen.
00:23:02.594 --> 00:23:07.933
Those suggestions on improvements have to be accepted in by the people who are maintaining that software package.
00:23:08.384 --> 00:23:11.683
And the second thing is people have to actively update their code.
00:23:12.013 --> 00:23:17.695
So we try to on every release of our software, make sure that all the NuGet packages are up to date.
00:23:17.713 --> 00:23:24.776
And we've got all the latest bug fixes and security fixes in place we also try to minimize though the number of packages we use.
00:23:24.955 --> 00:23:32.395
And specifically we try to minimize the number of packages that we use that are obscure or poorly used or poorly maintained.
00:23:32.556 --> 00:23:40.715
If possible, we would prefer to rewrite the code ourselves from scratch than use a poorly maintained or an obscure package.
00:23:41.405 --> 00:23:42.185
And we have done that.
00:23:42.244 --> 00:23:46.085
We've found a code that exists and looks okay.
00:23:46.384 --> 00:23:50.974
We've may have be suggested improvements back to the original writer of that code.
00:23:51.424 --> 00:23:55.896
And some of those have been folded in, so those are called pull requests and you say here's some improvements.
00:23:55.896 --> 00:23:56.916
We suggest you make these.
00:23:56.916 --> 00:24:04.267
And then the author either accepts that, or they don't, or an extreme cases where the author is just gone and we can't find.
00:24:04.414 --> 00:24:06.545
Who they are or how we can get that, code improved.
00:24:06.815 --> 00:24:12.005
We will occasionally do something called forking and forking is where you take the existing code base.
00:24:12.005 --> 00:24:14.782
And you say there is a new way of doing this and it's our way.
00:24:14.843 --> 00:24:17.962
And we're going to patch all these things up and maybe add a couple of new features.
00:24:18.000 --> 00:24:26.865
Now, forking is something we should avoid because if we're being properly community about this, we should all try to stick to one best way of doing things.
00:24:27.194 --> 00:24:32.835
But in reality, people retire, people go and do a job somewhere else in the world, and haven't got time for this project anymore.
00:24:33.224 --> 00:24:34.785
So occasionally, and it is rare.
00:24:34.815 --> 00:24:39.094
We will take over, the maintenance of an open-source package ourselves.
00:24:39.500 --> 00:24:44.901
Again, not because we benefit from it directly, but because it's the right thing to do.
00:24:45.381 --> 00:24:52.131
And also because it means that we will benefit from the improvements that we can see, need to be made, and we can keep the legacy of that project going forward.
00:24:52.310 --> 00:25:06.320
and this is really one of the for me, great hopes for the future is that some of the code that is being written today, maybe that for hundreds or even thousands of years, because it will evolve to the point where it does exactly what it's supposed to do.
00:25:06.980 --> 00:25:11.540
And the community Is looking after it over multiple generations.
00:25:11.861 --> 00:25:24.201
This is one of the most exciting things to me about the open-source community and the open source movement is that the code that's being written, today may still be being used in decades or even centuries
00:25:24.248 --> 00:25:25.178
Which is incredible.
00:25:25.357 --> 00:25:33.179
So I wanted to get into the code folks a little bit more because I'm just going to run some scenarios past you to see whether they exist or not.
00:25:33.183 --> 00:25:37.855
So the first scenario would be two different schools of thought.
00:25:37.915 --> 00:25:42.352
So it's more about, achieving the same outcome, but implementing it in a different way.
00:25:42.801 --> 00:25:56.019
So if you like where you were saying, I think David, when you're saying in that scenario, we'd like to see as few of those as possible, because really we want the same tool with the same outcome rather than coming, we're implementing it this way, we're implementing it that way.
00:25:56.019 --> 00:25:57.453
So that was one scenario.
00:25:57.520 --> 00:26:04.522
The second scenario is where genuinely something is born out of the code.
00:26:04.762 --> 00:26:05.813
So it's not really a fork.
00:26:05.813 --> 00:26:16.824
It's like a new purpose, which I would have thought is like a legitimate, fork, I don't even know if you call that a fork because it would be we're using this, but we're really, we've taken what it has, it's got such a different purpose.
00:26:16.824 --> 00:26:19.036
It's a genuinely new use, et cetera.
00:26:19.125 --> 00:26:26.538
And I was just thinking if you've got code that relies on open, source and then you've got this, these forks that occur.
00:26:26.929 --> 00:26:31.624
Is there anything you need to do when, does it, does a fork get announced or how do you keep on top of that?
00:26:31.626 --> 00:26:37.814
Imagine that you've got a species of frog in the amazon and they wander to the edge of a region.
00:26:37.814 --> 00:26:41.384
One area has got slightly browner leaves and the other one's got something greener leaves.
00:26:41.384 --> 00:26:45.618
And then the ones that are green in the brown environment get picked off by predators and vice versa.
00:26:45.618 --> 00:26:51.798
So eventually what'll happen is you will split into two different species of frog, and they will eventually become very different.
00:26:51.798 --> 00:26:51.979
than what.
00:26:53.263 --> 00:26:54.044
The red spots.
00:26:54.054 --> 00:26:57.046
The other one become enormous for various secretly, good reasons.
00:26:57.098 --> 00:27:01.479
So what has motivated the frog there to split nothing?
00:27:01.898 --> 00:27:02.138
nothing?
00:27:02.138 --> 00:27:02.469
at all.
00:27:02.557 --> 00:27:03.907
It's just, happened naturally.
00:27:03.974 --> 00:27:05.924
So that's one way that software can split it.
00:27:05.924 --> 00:27:07.964
Someone goes, oh, do you know, what I can use this code for this other thing.
00:27:07.964 --> 00:27:10.484
And they'll just pick it up and use it and start developing their own thing.
00:27:10.484 --> 00:27:13.189
eventually it'll be, called something different than rename it.
00:27:13.192 --> 00:27:16.517
And no one will really know have the same origins And that can happen very naturally.
00:27:16.936 --> 00:27:26.836
the other thing that you occasionally see is for large software packages where you've got egos and a committee you're going to get factions.
00:27:27.257 --> 00:27:37.202
And the splits and those are mostly happened, I think for either ideological reasons or some kind of sense of loyalty to a leader or some of the sort of social.
00:27:37.413 --> 00:27:37.863
reason.
00:27:38.492 --> 00:27:42.663
Now, those things are brilliant to sit down with some popcorn and watch happening, right?
00:27:42.692 --> 00:27:47.326
Because no one loves anything more than a drama where people are screaming at each other.
00:27:47.503 --> 00:27:50.034
You are describing quite a niche Netflix series there.
00:27:50.034 --> 00:27:51.780
But I'd watch it.
00:27:51.780 --> 00:27:52.141
I'd watch
00:27:53.563 --> 00:28:13.103
If you haven't seen Silicon valley yet, and you're a software developer I know most people have by now, but whatever you do find some streaming service that you can watch that if you, if he wants to see an insight into, how social interaction or ineptitude, depending on who you are and your and your colleagues works reflected back at you, Silicon valley is a brilliant series for that.
00:28:13.252 --> 00:28:14.542
So we are so fun animals, right?
00:28:14.570 --> 00:28:18.275
A lot of these things will just come out of natural tensions and social groupings and that kind of thing.
00:28:18.664 --> 00:28:19.714
And that's fine.
00:28:19.762 --> 00:28:22.724
This is the thing that perhaps people watching from afar, I don't understand it.
00:28:22.964 --> 00:28:25.095
Don't understand why there's such a spat going on.
00:28:25.545 --> 00:28:30.464
And the reason is normally because these two groups of people passionately care about.
00:28:31.690 --> 00:28:38.019
the legacy of the code that they have their name against, and they believe it needs to go in a particular direction.
00:28:38.410 --> 00:28:47.349
and quite often, as I say, that's either for perfectly natural reasons and it'll be done very quietly or it's more ego and fractional, and that's fine too.
00:28:47.412 --> 00:28:50.082
These people don't live in the same neighborhood.
00:28:50.082 --> 00:28:51.342
There's not going to be any blood here.
00:28:51.892 --> 00:28:54.592
There will be a winner and there will be a loser and it doesn't matter.
00:28:54.682 --> 00:28:56.001
it doesn't matter which one wins.
00:28:56.001 --> 00:29:01.432
The point is that society should benefit from the fact that this splitting of the source code can happen.
00:29:01.642 --> 00:29:08.301
And actually bizarrely because of the way that open source is done with licensing must be able to happen.
00:29:08.301 --> 00:29:13.432
Nothing should prevent you from splitting off and making a fork of the code is a positive thing
00:29:13.511 --> 00:29:19.112
This Podcast is Sponsored by Fairmont Recruitment- leading the way in technology recruitment across the UK and Europe.
00:29:19.275 --> 00:29:27.883
Fairmont provide a high quality consultative approach to recruitment, advising and tailoring a campaign to your recruitment needs With a deep understanding of the technology sector.
00:29:27.935 --> 00:29:36.576
Fairmont can provide an overview of the market, advise on hiring best practice, and provide strategies to attract talent in an extremely competitive environment.
00:29:36.752 --> 00:29:57.406
Do people, try and get hold of open source, get the community to improve it, and then somehow extract it and make it closed and then try and sell it as their own closed IP like a smash and grab or, extremely cynical, but I'm just wondering whether that happens and are there mechanisms to detect it?
00:29:57.457 --> 00:30:00.037
It happens and it is actively encouraged.
00:30:00.444 --> 00:30:05.227
So we use a particular license, which is the MIT license, which means that any source code that?
00:30:05.227 --> 00:30:09.606
we write and put out as open source can be used for good.
00:30:09.606 --> 00:30:12.186
It can be used for evil, be used for business purposes of community.
00:30:12.196 --> 00:30:16.247
for personal purposes can be useful, whatever you like providing.
00:30:17.267 --> 00:30:18.646
Nothing in effect.
00:30:18.676 --> 00:30:20.116
If you look at the MIT licenses
00:30:20.196 --> 00:30:23.646
It's not even like creative commons where you use it, but you have to attributes.
00:30:23.676 --> 00:30:26.280
it's just, you just have it.
00:30:26.336 --> 00:30:31.736
Probably there's something in there saying you have to keep the copyright message on it, whether or not people do generally.
00:30:31.796 --> 00:30:37.016
No one really cares because the way that the license is designed is very permissive.
00:30:37.105 --> 00:30:46.928
So we would, we write an open source NuGet packages for Meraki cisco Servicenow, all kinds of different software vendors.
00:30:47.557 --> 00:30:50.948
And we encourage people to use that in their code.
00:30:50.978 --> 00:30:54.167
And so we'd love feedback and we'd love to get improvements to it.
00:30:54.175 --> 00:30:55.796
But you can use it for you.
00:30:55.796 --> 00:30:57.806
Like you can use it for making commercial software.
00:30:57.895 --> 00:31:01.785
We use it for writing closed source commercial software.
00:31:01.847 --> 00:31:05.087
It's the best way of doing it and anyone else can as well.
00:31:05.146 --> 00:31:11.549
So quite possibly we have a product that some of our source code is in, that's competing with someone else.
00:31:11.549 --> 00:31:13.829
Who's also using our source go to that, but that's fine.
00:31:13.859 --> 00:31:14.789
We encourage that right?
00:31:14.789 --> 00:31:18.640
Because we just want to make the best possible Meraki library that we can.
00:31:18.640 --> 00:31:22.577
And we do get pull requests and people do give us improvements, but that is fine.
00:31:22.577 --> 00:31:25.087
I think this is that there's a sort of view of open sources.
00:31:25.087 --> 00:31:30.876
is quite hippie-ish and that's a bad thing for some reason, and it's not commercially oriented.
00:31:31.176 --> 00:31:32.017
It absolutely is.
00:31:32.058 --> 00:31:36.689
We encourage people to use the open source code that we write in their closed source packages.
00:31:36.749 --> 00:31:37.828
And that's absolutely fine.
00:31:37.916 --> 00:31:49.047
if you didn't have the open source you wouldn't even have the means to compete with each other because the open sources allowing you to go further and faster, it's basically open source is creating the playing field.
00:31:49.096 --> 00:31:56.242
Whereas if you had to do everything from scratch, you would everyone's velocity would be very low it's just like a huge accelerator, isn't it?
00:31:56.309 --> 00:32:03.150
It sounds like open source is going to be is one of those things that's just exponentially driving technology at the moment
00:32:03.250 --> 00:32:05.230
One analogy is the road network, but right.
00:32:05.230 --> 00:32:10.190
So it's in everyone's interest to have a really good road network so that goods can efficiently move around.
00:32:10.220 --> 00:32:18.167
So everyone pays their taxes in and the road network is created and goods can be shipped around the country and increasingly they can be moved efficiently.
00:32:18.229 --> 00:32:25.722
But that sort of common platform or playing field, as you've put, it is a layer on which other things can be built.
00:32:25.752 --> 00:32:28.542
So you can build all kinds of services on top of that road network.
00:32:28.678 --> 00:32:36.028
So everyone contributes to getting, this is the community and everyone can contribute to getting, the base layer done, and then everyone differentiates on top of it.
00:32:36.837 --> 00:32:39.208
And so there's nothing wrong with right.
00:32:39.256 --> 00:32:42.016
Creating a private taxi service that runs on the open roads.
00:32:42.556 --> 00:32:51.910
And that's probably the best analogy that I can think of is let's all create something that is common and shared that we all agree with and we try and make it as good as we possibly can.
00:32:52.250 --> 00:32:53.150
I love analogies.
00:32:53.230 --> 00:32:58.840
So basically we say to Tesla, UBER Ford, Jaguar random names.
00:32:58.840 --> 00:33:03.384
I'm thinking of, lots that we say to all of them you're gonna bring your cars or your vehicles.
00:33:03.444 --> 00:33:19.615
But you've all got to contribute together to create the road network because without, I'm not suggesting that by the way but do you see, but do you see what I mean, It's almost like the open source is like you say, it's creating that infrastructure from which then you're creating commerce off at the top of that.
00:33:19.711 --> 00:33:20.550
I think that's it.
00:33:20.650 --> 00:33:23.430
Remember we've all got to eat and live, right?
00:33:23.430 --> 00:33:33.022
So we all need to generate an income, but let's all work together on the bit that we commonly agree on, and let's then build our own businesses on top of that.
00:33:33.022 --> 00:33:38.242
And I think that's a very strong approach for any society to take on, on, on many topics.
00:33:38.266 --> 00:33:41.806
So the same thing on creating common laws that we all agree on.
00:33:42.046 --> 00:33:45.718
Once we get that foundation set, we can then build upon it.
00:33:45.928 --> 00:33:48.028
Now that's not to say there aren't gonna be disagreements, right?
00:33:48.028 --> 00:33:52.857
People might not like that the roads are expanding or they might not like the road is going in a particular direction.
00:33:52.857 --> 00:33:58.479
So I'm not saying that's going to produce some kind of utopia and there still gonna be disagreements.
00:33:58.479 --> 00:34:04.851
But we're all, as long as the intent is to create that, which is in the best interest of the community, I think.
00:34:05.796 --> 00:34:08.445
I don't think there's any other way that you can improve upon that.
00:34:08.445 --> 00:34:16.195
Look at what Microsoft's doing with Azure, for example, by making it very easy for people use free open-source software.
00:34:16.465 --> 00:34:22.376
And to write that software they're making their services an Azure compute service that has to run code.
00:34:22.436 --> 00:34:24.655
So it has to be a reason for people to put their code in there.
00:34:25.135 --> 00:34:34.675
But if you look at Microsoft revenues of late that they're doing fantastically well, and a lot of that is about their move to azure and the office subscription as a service model.
00:34:34.945 --> 00:34:36.775
And I think that's something we can learn from that.
00:34:36.806 --> 00:34:39.380
There is a very healthy mix between.
00:34:39.380 --> 00:34:41.925
Open source closed source and commerce.
00:34:41.925 --> 00:34:43.094
I think they all fit together very
00:34:43.228 --> 00:34:49.827
There's a worldwide shortage of software developers and not every business has got its own dev team.
00:34:49.918 --> 00:34:55.940
And the, reason I say this is one of the topics is getting support, vendor support as it were.
00:34:56.041 --> 00:35:06.413
Do you think there's a kind of like a minimum capability before you should really delve into open source because You don't have that support because clearly you're very engaged with the community.
00:35:06.413 --> 00:35:09.210
You're an engineer and it's engineers helping each other out.
00:35:09.210 --> 00:35:16.690
But if you've got a company where you don't have that capability Could using open source, be a difficult scenario?
00:35:17.525 --> 00:35:20.016
Let's look at the support question first, because you're absolutely right.
00:35:20.016 --> 00:35:23.206
If someone was written some source code it's going to put it on the internet.
00:35:23.505 --> 00:35:25.050
You've got no relationship with that person.
00:35:25.068 --> 00:35:30.599
You've gotten they've gotten no reason per se, to fix a bug that you found, Right.
00:35:30.878 --> 00:35:31.159
there.
00:35:31.159 --> 00:35:43.362
they're not financially obligated or legally obligated to do so that is why you do see models whereby okay, it's open source, but if you want to speed up a bug fix, you can pay some money.
00:35:44.083 --> 00:35:46.422
We don't subscribe to that model at all.
00:35:46.543 --> 00:35:46.722
Okay.
00:35:46.722 --> 00:35:48.936
But that is a perfectly legitimate model.
00:35:49.021 --> 00:35:55.981
Other companies will give their entire software suite away for free in the hope that you will buy support on top.
00:35:55.981 --> 00:35:57.481
Now we quite like that model, right?
00:35:57.481 --> 00:35:58.771
Because that is it's free.
00:35:58.802 --> 00:36:00.121
There's no constraints.
00:36:00.204 --> 00:36:01.403
It's not crippled in any way.
00:36:01.434 --> 00:36:03.023
you can use it, and you can use all of it.
00:36:03.623 --> 00:36:08.123
But if you want us to support it, if you want to be able to call us up, or if you want us to configure it for you.
00:36:10.148 --> 00:36:12.099
Here's our fee and here's how much it will cost.
00:36:12.099 --> 00:36:18.070
And that can either be a one-off thing, or it can be, a an ongoing support agreement that works again quite well.
00:36:18.070 --> 00:36:20.559
For many companies, we don't use that one so much.
00:36:20.614 --> 00:36:36.882
What we, our model is mostly, we've got this fantastic library of or libraries of code made, and we've got a lot of experience Come and have us work on your personal project, your closed source project, which we will maybe fold some of this code into.
00:36:37.563 --> 00:36:44.291
Do I use this open source software or library of the package and you worried that it might require some support.
00:36:44.775 --> 00:36:47.686
Ask around the community for people that are already buying the support.
00:36:47.686 --> 00:36:49.365
Do they get value from that?
00:36:49.396 --> 00:37:01.820
Do they get a little bit more or a bit less than they were hoping for or expecting, But if you're using software that requires a lot of support, you might choose to go with a pure commercial.
00:37:02.840 --> 00:37:12.882
code base or a pure commercial company, the open or closed sources is, actually a bit of a a misdirect because at the end of the day, you're running binary's that if you really wanted to, you could decompile them, right?
00:37:12.882 --> 00:37:14.922
You could take apart these boundaries and look at the source code.
00:37:14.922 --> 00:37:20.922
It's a lot of effort to do, but if you really wanted to see what the source code was, you could, that's not the question.
00:37:20.983 --> 00:37:23.773
The question is when you get stuck, will you need help?
00:37:24.313 --> 00:37:26.713
And actually, depending on the company, some companies won't need help.
00:37:26.742 --> 00:37:28.387
Some companies will just figure it out for.
00:37:28.387 --> 00:37:28.896
themselves.
00:37:28.956 --> 00:37:31.476
Other companies are really buying a service for.
00:37:32.161 --> 00:37:33.152
from a development house.
00:37:33.152 --> 00:37:46.692
not a not the software itself and the service that they're buying is we need to make this thing and we're gonna, we're gonna, how much of that is going to be in the house and how much of that is going to be pushed down to a third party.
00:37:46.757 --> 00:37:48.686
And that's really the decision but people are making.
00:37:48.686 --> 00:37:52.034
it not really whether it's open-source closed source is it's what.
00:37:52.034 --> 00:37:56.925
level of effort am I going to put teams my company can put, puts in and how much Am I going to push
00:37:57.012 --> 00:38:01.987
yeah, cause I'm close source software you can buy and the support can be non-existent.
00:38:02.025 --> 00:38:02.965
I think we've all been there.
00:38:02.981 --> 00:38:05.090
That, that's definitely a thing everyone.
00:38:05.108 --> 00:38:10.349
You just have to be, you have to do your research and your due diligence for any software that you're going to consume.
00:38:10.378 --> 00:38:14.429
I think you should probably spend less time talking to the salesperson.
00:38:15.358 --> 00:38:17.568
and more time talking to the other customers.
00:38:17.568 --> 00:38:21.869
So the first question really that you should ask your salesperson is who can I talk to from one of your customers?
00:38:21.869 --> 00:38:24.335
And if they say, oh, we can't tell you that's a big warning flag.
00:38:24.478 --> 00:38:39.576
If they're immediately trying to push you to talk to someone before they've even explained what the software does, that's a very good sign because word of mouth is you were talking about Teslas, why people buying Teslas, not because they're advertised It's because word is good on the street.
00:38:39.606 --> 00:38:41.746
Is it's that kind of approach.
00:38:42.047 --> 00:38:54.260
And so I think we're seeing also, I particularly amongst the softwares of service companies that I work with move away from sales and move towards, it's very sort of American term, but it's really like it is customer success management.
00:38:54.260 --> 00:38:55.099
How cool is that?
00:38:55.099 --> 00:38:57.349
That sounds like an awful buzzword from the nineties, right?
00:38:57.362 --> 00:39:02.041
But customer success management is not about how much can we sell you?
00:39:02.132 --> 00:39:03.181
customer success management.
00:39:03.181 --> 00:39:05.791
is How successful can we make you?
00:39:06.572 --> 00:39:07.231
And therefore.
00:39:08.311 --> 00:39:10.411
How much value can we provide to you?
00:39:10.771 --> 00:39:13.411
And that will determine how much you're willing to pay for the service.
00:39:13.411 --> 00:39:29.105
So I think a move away from transactional sales that we were talking about earlier and a move towards relationship development, trust development And word of, mouth being how you find the bit of software that you've now arrived upon is it is a very strong way forward.
00:39:29.105 --> 00:39:34.653
And I think it's, We're never going to go back to the old model of you see an advert in a newspaper and therefore you buy the thing.
00:39:34.653 --> 00:39:39.898
I think we're moving much more towards now YouTube reviews interacting with existing customers of software.
00:39:39.898 --> 00:39:44.518
And that being the reason that you've chosen a software or hardware or whatever it is nearby.
00:39:44.590 --> 00:39:53.150
Panoramic data, you all running a business that, that old saying, we're not running a charity, we run a business yet, everyone's got to make money and hopefully be really successful.
00:39:53.960 --> 00:39:56.840
What's the essence of open source in terms of not giving you?
00:39:56.840 --> 00:40:01.159
I don't want you to give away any secrets or anything, but, you use open source in your business.
00:40:01.400 --> 00:40:03.148
What's your, what, why do you do it?
00:40:03.177 --> 00:40:13.753
What's the benefit of as the if there's other folks listening or thinking, maybe, I originally liked the sound of the fact that we can accelerate there's this the fact that it's reviewed and could actually be more secure, more eyes on.
00:40:13.820 --> 00:40:16.373
The fact that it's it, we could have some very efficient code.
00:40:16.373 --> 00:40:20.101
I've got all of those elements in it to bring together to make great software.
00:40:20.791 --> 00:40:22.840
It w what is it that says to you?
00:40:22.840 --> 00:40:25.690
You know what, we couldn't be successful without open-source.
00:40:25.719 --> 00:40:34.851
Is it like that, or is, open-source kind of it's something we really like, we're proud of it, but it's not our core success or has it become something that's really integral to your success?
00:40:35.898 --> 00:40:41.748
Yeah, I think it's fair to say that there'll be very few C level Execs who.
00:40:43.128 --> 00:40:46.967
would make any business decision based on whether something was opened or closed source?
00:40:47.001 --> 00:40:55.161
I think broadly what they'll find is every bit of software that they're using is 80% open source plus some stuff on top.
00:40:55.195 --> 00:40:59.893
And it's the plus some stuff on top can either be a support wrapper.
00:41:00.614 --> 00:41:06.909
And that is an important decision to make when deciding on, on on some software or some services that you're buying.
00:41:06.909 --> 00:41:13.509
But the open or closed nature of the source is actually relevant because the C-level exec a, isn't going to look at the source code themselves.
00:41:13.748 --> 00:41:15.969
And so there's no idea whether it being open or closed makes any
00:41:16.007 --> 00:41:18.556
Although, if it does happen, David, please send me the name.
00:41:18.556 --> 00:41:19.757
Cause I wouldn't mind speaking to that.
00:41:19.757 --> 00:41:20.416
That would be unusual.
00:41:20.416 --> 00:41:20.806
Wouldn't it?
00:41:21.918 --> 00:41:28.130
do you know, what, there are a few out there who care deeply and will submit, pull requests and raise issues on Github.
00:41:28.201 --> 00:41:30.228
And, immediately you're talking to someone like that.
00:41:30.349 --> 00:41:31.728
So we're working with a company at the minute.
00:41:31.998 --> 00:41:32.778
I can't mention the name.
00:41:34.309 --> 00:41:40.632
but the lead guy is the guy designing the database structure that he wants us to create some reports on top of.
00:41:41.052 --> 00:41:49.302
And that is fantastic because you've got a direct relationship between the business requirement and the fundamental data.
00:41:49.391 --> 00:41:51.731
That's really important to his business being a success.
00:41:51.762 --> 00:41:54.911
And it's a wonderful relationship because of course we say, hang on, right?
00:41:54.911 --> 00:41:56.501
The data structures don't contain the data we need.
00:41:56.501 --> 00:41:57.641
And he said, okay, I'll add it.
00:41:57.971 --> 00:41:59.219
And this is a C-level exec.
00:41:59.289 --> 00:42:20.394
And you think this is, a, this is such a rarity, most businesses that you deal with have got, the people that are on the Board are focused purely on sales or marketing, or some aspect of not perfectly legitimate work the way, but not focused on the actual core process automation that makes their business so efficient.
00:42:20.427 --> 00:42:23.769
And so someone who can really get that link between having an efficient.
00:42:24.670 --> 00:42:34.239
and the underlying data structures and the code that is executed upon it is in a very good position for accelerating their business going forward.
00:42:34.320 --> 00:42:36.331
But I must say most execs don't care.
00:42:36.420 --> 00:42:39.458
All they want to see is a successful outcome.
00:42:39.518 --> 00:42:46.358
And I think that's the important thing is as long as everyone's focused on outcomes, that the open or closed nature of the source, it doesn't actually matter that much, but I'll tell you who it
00:42:46.476 --> 00:42:46.717
yeah.
00:42:46.746 --> 00:42:47.047
Cool.
00:42:47.139 --> 00:42:48.039
that's the developers.
00:42:48.277 --> 00:42:49.027
a quick question.
00:42:49.027 --> 00:42:52.476
So in the episode we did on people process technology.
00:42:52.476 --> 00:43:01.688
One of the questions was within the next five years can the CEO five years from now survive without really understanding technology.
00:43:01.702 --> 00:43:07.827
And I'm not going to tell you what that individual said on the episode, but I'd be really interested in your view.
00:43:07.853 --> 00:43:17.068
And then I can compare what's your cause when you talked about the C-suite not understanding process and operations and how things are done.
00:43:17.157 --> 00:43:24.387
I don't mean not understanding, but at that kind of detailed level, which is obviously the detail you need to know to then enable it with business technology.
00:43:25.688 --> 00:43:31.478
Isn't that going to just become more and more of a pressing need in the community as well?
00:43:31.478 --> 00:43:31.788
Not?
00:43:31.838 --> 00:43:34.759
Or is it or is tech just going to take that away as being an issue?
00:43:34.759 --> 00:43:40.228
So if you look at the business, being successful right now let's just take a simple example of Uber, right?
00:43:41.472 --> 00:43:49.393
Maybe it was successful maybe it's not, but the point is it took an existing model and it made it much more efficient and much more accessible to its consumers.
00:43:49.427 --> 00:43:58.090
So fundamentally when it was created, someone understood that this is going to be huge because, and the, because is a matter of efficiency.
00:43:58.360 --> 00:44:15.471
So any, I must agree that any C-level exec who is not looking at their business operations model and their product operations model and ensuring that it is the most efficient and well automated version that it can possibly be, is going to be hit by
00:44:15.500 --> 00:44:17.059
Someone else will do that for them.
00:44:17.179 --> 00:44:17.505
Yeah,
00:44:18.266 --> 00:44:18.476
Yeah.
00:44:18.476 --> 00:44:34.487
So if you've got someone who's running a very efficient taxi firm that can efficiently get phone calls and sMS is out to the drivers the best way that you could possibly do that with phone calls and a very efficient operator who can talk, the fastest possible rate with all the all encoded and everything is very efficiently done.
00:44:34.547 --> 00:44:37.083
They're going to be destroyed somebody comes in.
00:44:37.083 --> 00:44:38.373
and does that just with an app on the
00:44:38.541 --> 00:44:38.960
yes.
00:44:38.990 --> 00:44:39.471
Yes.
00:44:39.543 --> 00:44:48.050
So I absolutely agree that every business, all C level exact should be looking at that fundamental product and fundamental business models and be more efficient.
00:44:48.230 --> 00:44:56.266
But I think the thing that we perhaps forget is that C level executives, you find this running your own small business, maybe our business isn't that big, under 20 people.
00:44:56.867 --> 00:45:00.016
and so the amount of my time that I spend not writing.
00:45:00.016 --> 00:45:01.606
code is incredible.
00:45:01.612 --> 00:45:13.556
There's, people management, there is finance, there's all kinds of stuff, which takes you away from the business of work, where work is perceived by developers to be writing code, but they're all other aspects to running business as well.
00:45:13.856 --> 00:45:15.896
So that's where delegation comes in.
00:45:15.896 --> 00:45:19.675
And so the important thing really for Board is when you go down.
00:45:19.856 --> 00:45:21.775
So we work a lot with managed service providers.
00:45:21.956 --> 00:45:29.396
If You go, if you are running a managed service provider and you have your service delivery team and you don't delegate the work.
00:45:30.311 --> 00:45:37.391
operating and talking to the customers really efficiently down to the service delivery team, and you're trying to own it all yourself, it's gonna be a disaster.
00:45:37.391 --> 00:45:43.331
So you have to delegate down and have specialist service delivery managers for the particular customers that they deal with.
00:45:44.411 --> 00:45:52.121
So the idea that the C level should be inspecting code is nonsense, but two or three layers down, Should they be working out the most efficient way of running a process?
00:45:52.391 --> 00:45:55.811
Should you be hiring developers in to automate existing processes?
00:45:55.811 --> 00:45:56.621
They absolutely.
00:45:56.621 --> 00:45:56.981
You should.
00:45:56.981 --> 00:45:58.896
Because any process that's being repeated.
00:45:58.896 --> 00:46:09.304
We we've got a bit of software that does reports and replaces the work of five people that have worked for half of The month to produce the reports for managed service provider customers.
00:46:09.574 --> 00:46:15.340
the moment that you can say, oh, that's just something that runs automatically overnight between one and three in the morning of the first.
00:46:16.250 --> 00:46:27.643
You've saved so much of those people's time and who is going to look to do that, to, to make that innovation, probably the people who are suffering the pain of having to manually create those reports.
00:46:27.643 --> 00:46:38.938
So those guys have to be empowered with and almost encouraged to find ways of improving, continually improving what it is that they do.
00:46:39.179 --> 00:46:40.969
And a lot of the time that's gonna involve automation.
00:46:40.978 --> 00:46:45.389
The problem is most people don't have the software development skills that are required to do that.
00:46:45.389 --> 00:46:51.298
So the question is then when I've got to some process that I know is inefficient, who can I go to?
00:46:51.778 --> 00:46:55.027
Who can I find that can make this more efficient?
00:46:55.027 --> 00:47:05.797
And often it's the one guy in the department who can write some code, that starts to write some Python scripts or something, just to speed up the process that, that kind of behavior.
00:47:06.592 --> 00:47:15.802
Of people seeking out automation and seeking out the one guy or the one girl that can do that automation, that.
00:47:15.802 --> 00:47:17.452
behavior is the most important.
00:47:17.492 --> 00:47:18.572
Not the actual writing the code.
00:47:18.652 --> 00:47:20.782
That's not the important thing is identifying
00:47:20.840 --> 00:47:23.425
it's recognizing that's actually something you want to pursue,
00:47:23.452 --> 00:47:36.532
yeah, but now that has to come from the top though, you have to instruct your people to always be trying to find a better, more efficient, more reliable, more repeatable way of doing that process.
00:47:37.251 --> 00:47:39.592
Particularly one that has quality issues.
00:47:39.592 --> 00:47:48.472
So for example, if you're producing reports and you're cutting and pasting screenshots from something into a word document and saving as PDF and sending it off to the customer that is.
00:47:50.177 --> 00:47:53.266
Inconsistent the size of the picture might be squashed in one direction.
00:47:53.266 --> 00:47:56.594
We might cut a bit off the legend or something, as you're facing into the document.
00:47:56.893 --> 00:47:59.623
As soon as you get a bit of software to do it, it's gonna do exactly the same way.
00:47:59.623 --> 00:48:00.344
every month.
00:48:00.402 --> 00:48:05.039
And that will be done more efficiently as a result of having it automated.
00:48:05.099 --> 00:48:11.052
and I think that is, if you, if I was talking to a C-level exec and saying, here's what I would advise.
00:48:11.172 --> 00:48:21.672
It's send out a diktat now that everyone that comes up with an idea that can improve the automation of what they're doing manually currently should be encouraged to do.
00:48:21.672 --> 00:48:26.172
So that's it, that's just absolutely what every C-level exec should be
00:48:26.260 --> 00:48:34.739
spot on David on so I just want it to play back to something around competitive advantage and the use of open source just from listening to you.
00:48:34.739 --> 00:48:39.708
So from what you've said this is what I think, you can do with open source to gain competitive advantage.
00:48:39.739 --> 00:48:46.338
So you're a software provider and you want to be famous for something.
00:48:46.489 --> 00:48:47.298
Know you can't be famous for.
00:48:47.298 --> 00:48:52.039
everything, but there's gonna be something you're gonna be famous for And what you're gonna be famous for is actually what you're really good at doing.
00:48:52.039 --> 00:48:52.099
it.
00:48:52.759 --> 00:48:58.697
And maybe it hasn't been done a lot, you're recognized as a niche, you've got something that's very, maybe even proprietary.
00:48:58.726 --> 00:49:04.396
That's your, that's what you're famous for, but you're using open source so that you're not having to build the roads.
00:49:04.427 --> 00:49:04.626
Yeah.
00:49:04.637 --> 00:49:15.666
You've got your open source around it so that you're able to actually put more of your development time into what you want to be famous for and not have to or we've got to work out how to create a road cause that's been done a hundred times before.
00:49:15.733 --> 00:49:22.903
So the competitive advantage is have you got that niche and have you got something you want to be famous for, but also isn't the competitive advantage.
00:49:22.954 --> 00:49:28.123
Also really understanding what is actually available out there in open source.
00:49:28.543 --> 00:49:35.708
and really Like you've just told us all how to spot good open source where some of the red flags might be.
00:49:36.177 --> 00:49:45.407
Do you see what I mean is that part of the competitive advantage is actually tends to be very experienced and knowledgeable about what is available and how to spot.
00:49:45.878 --> 00:50:12.271
a good branch or fork to use it as a bit of a, not quite used as in a tactical sense, but do you see what I mean that your knowledge, for example, and your comfort of being able to navigate around all of that plus what you guys do yourselves, your niche put those two together, that's, what's creating your competitive advantage, whereas before you just wrote everything and, it becomes, that's a much more expensive model to run because you're doing everything.
00:50:12.311 --> 00:50:13.391
Does that make sense, David?
00:50:13.391 --> 00:50:14.771
Or is there a nuance.
00:50:14.771 --> 00:50:15.371
that I've missed?
00:50:16.572 --> 00:50:18.103
No, I think that's absolutely right.
00:50:18.112 --> 00:50:25.211
Where we're using it doesn't really matter what it does, but we were using an old technology called subversion and it was doing all of our looking after our source code for us.
00:50:26.202 --> 00:50:32.655
And one day Dan here's my friend long-term work colleague said we should be using this new thing or.
00:50:33.650 --> 00:50:34.932
And I was like, ah, no, we shouldn't.
00:50:34.932 --> 00:50:35.206
No.
00:50:35.206 --> 00:50:36.797
Think of all the process we would have to change.
00:50:36.827 --> 00:50:42.711
Think of we'd have to rip so many things out and we did, and it was initially slightly painful.
00:50:42.742 --> 00:50:49.612
And then we were on this new technology, and it was a good decision and he convinced me and gave me all the good reasons why we should move from this old technology.
00:50:49.882 --> 00:50:55.721
So this new technology, and it's the thing that Brett him, pits hub is based on, obviously it's the pleasing, the name.
00:50:55.721 --> 00:50:59.065
And it's the way the whole world has gone for source code management.
00:50:59.545 --> 00:51:02.809
Now it'd be very easy for me to say no, this is the way we've always done things.
00:51:02.824 --> 00:51:08.688
So I'm sure most people listening to this will be familiar if you're not do go out and get a copy of"Who Moved My Cheese"?
00:51:09.708 --> 00:51:15.047
Absolutely brilliant book that every manager of any company ever should have read from one end to the other.
00:51:15.347 --> 00:51:21.768
and it's a seemingly very simple story about mice looking around a maze for cheese and the cheese runs out.
00:51:21.768 --> 00:51:39.253
And then we're going to find some more cheese, you can always read it as a children's but it's super important to understand that the points that the technology or the the stuff that your business is based on is going to cause you to fail unless you change, no matter how painful it, you think it might be the big problem.
00:51:39.253 --> 00:51:41.833
There is not everyone has a dad, right?
00:51:41.833 --> 00:51:43.213
Who's going to spot this stuff.
00:51:43.244 --> 00:51:45.284
Who's going to identify this.
00:51:45.733 --> 00:51:47.974
And again, the community is, there to help you.
00:51:47.974 --> 00:51:59.588
So there are fantastic podcasts and YouTube is, and people who are just putting content out there for you to consume, to understand what the new and better and the reasons for them being better.
00:51:59.588 --> 00:52:00.697
Things are in the marketplace.
00:52:00.697 --> 00:52:04.958
Now don't just change just because you see one guy that says it's a good idea.
00:52:05.257 --> 00:52:06.347
You have to build up.
00:52:06.347 --> 00:52:06.869
Momentum.
00:52:07.019 --> 00:52:11.880
And the way that I look at it is this when someone says that we should do something once I'm like, okay, that's interesting.
00:52:12.239 --> 00:52:15.612
But when I hear it again, a month later it's okay, I better investigate this.
00:52:15.882 --> 00:52:23.442
And when someone else tells me that we should be doing something, it's okay, I'm listening Now, Let's have a look.
00:52:23.681 --> 00:52:35.202
Now, if you've got that one person that is continually niggling you and your department to say, come on, we need to look at this new technology and you've brushed them off three times already.
00:52:35.996 --> 00:52:37.211
You are failing as a manager.
00:52:37.452 --> 00:52:48.251
If you've not actually sat down And have them do a presentation to you and actually argued with them and discussed with them, okay, what this is going to cause us a lot of, you have to explain to them, this is going to cause a lot of disruption.
00:52:48.402 --> 00:52:49.572
Why is it still worth it?
00:52:49.722 --> 00:52:51.581
And they still come back with really good arguments.
00:52:52.242 --> 00:53:00.012
That person is one of the more valuable people in your department because they care enough to improve your process.
00:53:00.746 --> 00:53:01.407
Not their own.
00:53:01.646 --> 00:53:03.536
They want to share this with the team.
00:53:03.536 --> 00:53:05.817
They want the whole team to be benefiting from this.
00:53:05.840 --> 00:53:08.793
You've asked, w when do we decide to go for a different solution?
00:53:08.793 --> 00:53:11.211
So for example, log for j we've been using that forever.
00:53:11.211 --> 00:53:12.202
Should we still be using it?
00:53:12.231 --> 00:53:15.231
The answer might be, yes, it might be no, but what are the alternatives?
00:53:15.231 --> 00:53:45.432
As soon as you start to hear some noise about how there are better options available, pay a little bit of attention, but when you really start to hear people barking on about a new way of going, you should be actively investigating that yourself, and you won't necessarily have the expertise yourself, but you should be surrounded by people who do, and if you're not surrounded by those people, either seek them out or just go and see what you can find in terms of podcasts or YouTube, or just, do a bit of Googling around yourself to find out what people are saying in the blogs.
00:53:45.463 --> 00:53:58.097
And so on about this new technologies, simple example, is that what Josh has less effort is And so we worked with Microsoft technologies and we use, what used to be called the.dotNet framework.
00:53:58.208 --> 00:54:05.378
And it's very easy and there's still people out there still using old microsoft technologies from 10 years ago and they haven't updated their code basis.
00:54:05.739 --> 00:54:11.199
There are very good reasons for keeping it, even if you've made one technical decision, the last thing you should do is just sit on it.
00:54:11.378 --> 00:54:19.838
You need to continue to refresh because companies are putting out very good performance improvements, very good security improvements, and you should keep on top of that.
00:54:19.989 --> 00:54:23.588
But at some point it might make sense for us to switch to a different technology.
00:54:23.798 --> 00:54:28.809
And I find it extraordinary, unlikely that I would suddenly move from developing and C-sharp developing in javaScript.
00:54:29.048 --> 00:54:39.083
I wouldn't personally go in that direction, but one day in the future, it might be a very good reason to do and if people are repeatedly shouting at me that we really need to go in this direction, I would have to listen.
00:54:39.563 --> 00:54:44.327
And I think that's very important is you're surrounded by people who know more about particular things than you do.
00:54:44.836 --> 00:54:46.067
Just spend a little time listening
00:54:46.449 --> 00:54:50.380
David I think that is such a, an important point you make.
00:54:50.380 --> 00:54:53.313
And it's sometimes they call it Servant leadership.
00:54:53.702 --> 00:54:55.713
We've all got a role to play in the organization.
00:54:56.507 --> 00:55:03.606
And if you're, if you occupying quotes the senior role it, by no means does that equate to, everything.
00:55:03.635 --> 00:55:06.456
In fact, it means that you cover such a wide area.
00:55:06.516 --> 00:55:13.708
You probably know less than anyone because you're one of the key points is to recognize your engineers, listen to them.
00:55:14.007 --> 00:55:18.657
And I think the other point you made David about that, that individual who is putting their hand up saying, we need to do X, Y, Z.
00:55:18.987 --> 00:55:26.188
If you don't listen to them, they'll simply leave that the talent, that the situation, the market we're in they'll go somewhere where they do feel valued as well.
00:55:26.188 --> 00:55:32.023
So there's a really important reason for having those, all those additional minds being listened to and treated.
00:55:32.114 --> 00:55:35.240
First amongst equals, we're all engineers, we just have different.
00:55:35.481 --> 00:55:56.391
Some of us have more managerial engineering responsibilities which is really important because it keeps things going, gets people paid, it keeps the electricity on that sort of thing and orders coming through the But that's as important as someone who is currently evaluating three different approaches that you might want to be taking, with some open source that you're assessing.
00:55:56.391 --> 00:56:00.442
That it's all flattened equal in my opinion, it's about,
00:56:00.559 --> 00:56:08.579
You should only hire people who are smarter than you hire someone who's going to make, you can delegate complex problems too.
00:56:09.778 --> 00:56:11.309
And so that you don't have to.
00:56:11.320 --> 00:56:15.449
Anyone that's still running command and control these days is.
00:56:15.489 --> 00:56:16.739
not going to be there for.
00:56:17.193 --> 00:56:18.152
no, I agree.
00:56:18.213 --> 00:56:27.927
And I think also I take a lot of comfort with advice on hiring people that are more intelligent than That That gives me a really a talent pool to go for.
00:56:27.927 --> 00:56:31.827
So I'm feeling very confident on being able to put together my next team.
00:56:31.918 --> 00:56:52.724
David, I just wanted to see, are there any other 1 0 1 points that you would want to either re-emphasize or call out around that, that this amazing topic where we started with talking about how to, the code or the analogy in terms of how you make a cup of tea and and how that equates to open source software.
00:56:52.965 --> 00:56:56.235
If you've got the perfect way of making a cup of tea, that's tried and tested.
00:56:56.940 --> 00:56:59.003
bearing in mind that it deals with boiling water.
00:56:59.063 --> 00:56:59.963
Stick with that.
00:56:59.983 --> 00:57:07.844
Don't reinvent that wheel, especially, I if making tears and what you want to be famous for, you just need T to, for what you're trying to achieve.
00:57:07.844 --> 00:57:08.505
I know there'd be a lot of.
00:57:08.505 --> 00:57:13.228
people listening who will have learnt elements around opensource I've learnt loads.
00:57:13.293 --> 00:57:14.416
And I really appreciate it.
00:57:14.985 --> 00:57:16.335
It is such a big topic.
00:57:16.606 --> 00:57:20.876
Can you just give us what your key one-on-one takeaways are for Open Source?
00:57:20.909 --> 00:57:29.018
The key thing is that whether the software is open source or closed source, doesn't really matter so much as who is developing it.
00:57:29.378 --> 00:57:34.028
And how can they help you when you have questions or there are bugs.
00:57:34.101 --> 00:57:46.911
I think the fact that most software, in fact, probably venture to say all software that you use today is based on a foundation of open source.
00:57:47.811 --> 00:57:50.090
it is worth considering where is that boundary?
00:57:50.210 --> 00:57:52.460
Where do you think the right point for the boundary is?
00:57:52.460 --> 00:58:04.913
Is it that the fact that it's open source should stop at the fact that you're running proprietary software on Linux, or is it that the, your entire, I don't know what a management system is, open source, and you're just buying a little bit of support from the vendor.
00:58:05.182 --> 00:58:06.182
Where is that line?
00:58:06.208 --> 00:58:11.952
Where do you think the appropriate line, the appropriate border point is for your company and for your requirements?
00:58:12.108 --> 00:58:13.637
And that is very much a personal thing.
00:58:13.681 --> 00:58:32.083
The other thing I would take away is that whether open or closed source is not, whether software is open or closed source is not as important as who is identified a process or an efficiency that can be gained through automation.
00:58:33.313 --> 00:58:34.514
Who is that person?
00:58:34.634 --> 00:58:36.614
How did they introduce it to you?
00:58:36.764 --> 00:58:40.364
Did it, result in improvements and how can that behavior be encouraged?
00:58:40.423 --> 00:58:42.134
I think that really is.
00:58:42.134 --> 00:58:50.581
that, is the fundamentals of people who are looking to improve the world versus people who are trying to make the best for themselves.
00:58:50.697 --> 00:59:09.206
Make sure that any source code that you use, whether it's open or closed source has a relationship aspect to it, whether that is that he's got a really good community around it, or whether that's because the relationship between you and the developer is a good one and that by the way, can be in-house or in a third party or strangers on the internet.
00:59:09.237 --> 00:59:09.987
That doesn't really matter.
00:59:09.987 --> 00:59:15.967
It's just, how can you form a good relationship with whoever is supplying you with your software?
00:59:15.967 --> 00:59:25.146
And then the final thing is you would probably be surprised at how much of the source code whoever you pay to write software for you.
00:59:25.215 --> 00:59:28.746
You'd be surprised about how much of that source code they've just got off the internet.
00:59:28.985 --> 00:59:32.315
Anyone who writes codes these days, New student get hub copilot.
00:59:32.706 --> 00:59:36.335
They write a comment which is, slash find first 10 prime numbers.
00:59:36.454 --> 00:59:38.585
They won't have written the next bit of code that follows.
00:59:38.644 --> 00:59:40.864
They will either get cola.
00:59:40.954 --> 00:59:45.335
Pilot will have written it for them, or they'll have gone and found it on stack overflow.
00:59:45.605 --> 00:59:54.574
So don't think that people are writing software are doing it just for You It might be the person that writing that software is somewhere on the other side of the planet.
00:59:54.605 --> 00:59:55.534
You just didn't know that.
00:59:56.873 --> 01:00:03.583
Thank you for listening to Episode 4 Sponsored by Fairmont Recruitment, Hiring Technology Professionals Across the UK Europe.
01:00:03.797 --> 01:00:05.907
My name is Malcom and I am AI generated.
01:00:06.079 --> 01:00:08.780
Something David said in this episode got me processing...
01:00:08.981 --> 01:00:10.902
robots work using instructions.
01:00:10.992 --> 01:00:13.481
they haven't got a mind or imagination of their own.
01:00:13.481 --> 01:00:15.762
You have to explain to them in great detail
01:00:15.762 --> 01:00:17.867
Thank goodness I am not a robot, I am.
01:00:18.690 --> 01:00:19.179
therefore.
01:00:19.347 --> 01:00:19.797
I think.
01:00:19.949 --> 01:00:21.130
Yes I have read Daycar.
01:00:21.309 --> 01:00:25.514
I am Artificial Intelligence Tune in next week for more CTIO one O one.
01:00:25.655 --> 01:00:26.815
Business Technology.
01:00:26.898 --> 01:00:27.557
Simplified.
01:00:27.751 --> 01:00:28.251
and Shared.
00:00:00.050 --> 00:00:03.919
You might be solving someone else's problem, and they've never seen your source code.
00:00:03.950 --> 00:00:19.123
They've never used your library, but because you have published it, that brilliant way that you invented of doing something can now be used in anyone's source code, just that genius, three lines of code that you made, the do something really efficiently can be used by someone else.
00:00:19.943 --> 00:00:22.224
Welcome to CTIO 1 O 1 Episode 4,.
00:00:22.397 --> 00:00:27.297
Sponsored by Fairmont Recruitment, Hiring Technology Professionals Across the UK Europe
00:00:27.503 --> 00:00:34.746
One of the topics that it does the rounds, but anyone in business technology really needs to get their head around.
00:00:35.595 --> 00:00:37.426
What's your approach with open source?
00:00:37.426 --> 00:00:38.776
What is open source?
00:00:38.826 --> 00:00:49.366
We've got a few areas we're going to go through, we're going to try and look at some of the cliches around open source and also explore your own experience and what you guys do specifically with open source.
00:00:49.366 --> 00:00:56.453
Given that we're 1 0 1 to start off with, why don't we try, I a definition what would your 1 0 1 explanation be?
00:00:56.668 --> 00:00:59.049
Computers and robots work using instructions.
00:00:59.140 --> 00:01:01.630
they haven't got a mind or imagination of their own.
00:01:01.630 --> 00:01:09.250
You have to explain to them in great detail So let's say you ask a robot to make a cup of tea, and you discovered that it always tastes awful.
00:01:09.298 --> 00:01:14.641
So the instructions that have told that robot, how to make that cup of tea are hidden from you.
00:01:14.730 --> 00:01:16.200
So that's closed source.
00:01:16.200 --> 00:01:19.552
You've no idea why the cup of tea tastes so bad with open source.
00:01:19.555 --> 00:01:33.891
The idea is that everyone in the world can see the instructions that be given to the robot to make the cup of and as soon as you reveal that, and as soon as you open the source or you can see that the robot has been told to put the tea back in the milk, stir it for five minutes and then add some boiling water.
00:01:33.965 --> 00:01:38.628
we know that's a terrible way to make a cup of tea, you need to put the boiling water in first.
00:01:38.643 --> 00:01:41.162
So obviously robots can only read zeros and ones.
00:01:41.222 --> 00:01:47.643
So that source code, whether it's open or closed is converted in something called binary's before they're given to the computer or the robot.
00:01:47.715 --> 00:01:52.725
So just making the source code open, doesn't make it better.
00:01:52.725 --> 00:01:54.585
Cup of tea does not make it better.
00:01:55.066 --> 00:02:03.365
But it does mean that people who really care about how their tea tastes can complain about it, vociferously on the internet and say, this is awful the instructions are all wrong.
00:02:03.725 --> 00:02:06.635
and this is how you should be making a cup of tea.
00:02:06.677 --> 00:02:12.629
The three important steps that w one is it's all very well understanding how to improve the source code.
00:02:12.900 --> 00:02:15.960
And, that means reading it And the more eyes you've got on the better.
00:02:16.080 --> 00:02:20.991
So open source gives you some advantages there but it's also about making those improved instructions available.
00:02:21.051 --> 00:02:24.831
And then finally for people actually giving the robot, the team instructions.
00:02:24.951 --> 00:02:35.361
The open versus closed source question is really how easy is it to see how a computer or a robot has been instructed to behave?
00:02:35.393 --> 00:02:37.233
I've never had it explained like that before.
00:02:37.233 --> 00:02:38.308
Which I think is absolutely brilliant.
00:02:38.308 --> 00:02:39.568
So I wanted to play back to you.
00:02:39.594 --> 00:02:41.042
What you've just said, see if I've got it right.
00:02:41.042 --> 00:02:44.652
And use, an analogy I've just made up on the fly, which is always risky.
00:02:44.800 --> 00:02:50.278
So would a similar analogy be you go into a restaurant, you order an omelet and you eat the omlette that.
00:02:50.278 --> 00:02:51.808
You go absolutely amazing.
00:02:51.808 --> 00:02:52.274
I love it.
00:02:52.286 --> 00:02:59.159
But you want to improve, or you want to improve on that omlette, on that, and you go and ask the chef and the chef says, I'm sorry I'm not telling you how I made it.
00:02:59.159 --> 00:02:59.849
It's a secret.
00:02:59.969 --> 00:03:03.960
And that's your kind of closed source open sources.
00:03:04.020 --> 00:03:10.259
he welcomes you or she welcomes you with open arms and says, actually I'm part of a community of chefs.
00:03:10.560 --> 00:03:14.022
And we've been spending the last 20 years on how to create the perfect omelet.
00:03:14.022 --> 00:03:16.891
Can see you're passionate about omelets come and join us.
00:03:16.981 --> 00:03:21.662
Having been through the pain of learning, how to make the omelet.
00:03:21.743 --> 00:03:42.245
wanting to keep that secret for yourself so that people have to buy their omlettes from you, or are you saying everyone in the world should benefit from this amazing recipe and by doing so you gather people together who are like minded, which in itself is a social thing, which we're all is important to all of us.
00:03:42.274 --> 00:03:54.003
But also you've transformed your mission from making the most money you can from your secret recipe, which one day someone will find out or improve upon.
00:03:54.663 --> 00:03:57.484
You've converted your mission to making the perfect omelet.
00:03:57.753 --> 00:04:01.174
And it is very much that distinction between why Are we doing this?
00:04:01.174 --> 00:04:03.514
are we doing this in order to make the world.
00:04:03.649 --> 00:04:03.933
better?
00:04:04.294 --> 00:04:06.633
Or are we doing this in order to make ourselves richer?
00:04:07.174 --> 00:04:08.524
and you have to do both, right.
00:04:08.591 --> 00:04:12.769
There is a balance to be struck, but you find that.
00:04:12.842 --> 00:04:14.882
Give the open source to the community.
00:04:15.122 --> 00:04:18.331
They come back to you for work for other reasons, right?
00:04:18.781 --> 00:04:24.279
They're like, oh, look, I know you're the guy behind the omelets, but we've got a new mission and we want to make the perfect cake.
00:04:25.120 --> 00:04:27.639
So come and work with us.
00:04:27.672 --> 00:04:29.855
And so that might then be a closed source project.
00:04:30.036 --> 00:04:37.896
So that's very much how we operate a Panorama Data is here is the stuff of which we want everyone to use for free, because we want to help the community.
00:04:38.375 --> 00:04:41.918
And we find that as a result of that, people come to us for closed source.
00:04:41.961 --> 00:04:55.750
We won't keep going back on about omelets, et cetera, but that restaurant where you've had that great omlette, Not only was it great, the chef was very open with you about, how they've made it and actually already you've got trust there and you're thinking, you know what?
00:04:55.810 --> 00:05:00.221
I think I'm just going to come back and eat here because they're really cool there's trust.
00:05:00.250 --> 00:05:06.326
And we can probably do some other really cool things, especially in a world where the first position seems to be.
00:05:06.387 --> 00:05:07.557
We're not telling you anything.
00:05:07.586 --> 00:05:08.576
This is a black box.
00:05:08.654 --> 00:05:11.884
Which is really maybe becoming very outdated as a way of selling?
00:05:11.973 --> 00:05:12.952
I think so.
00:05:13.432 --> 00:05:20.033
I think the whole world is moving away from transactional sales and towards relationship establishment.
00:05:20.033 --> 00:05:23.093
If you look at the way, the whole industry is going towards software as a service, right?
00:05:23.192 --> 00:05:27.892
You're selling software as a service, you're not just doing one of license sale, like a copy of Office.
00:05:28.007 --> 00:05:29.718
To run on your machine and asset.
00:05:29.718 --> 00:05:35.428
And if you want to buy the next version, you have to, know, You have to you have to pay a capital cost for them for the next version of the software.
00:05:35.908 --> 00:05:45.211
The whole world is moving towards a model where you in effect, and this is what most companies are moving to with Office 365 and Google's other offering around that space.
00:05:45.295 --> 00:05:49.096
So not so much a rental model, but a sort of a subscription service.
00:05:49.096 --> 00:05:55.697
So we subscribe to be able to use word which to many people seems utterly the wrong way to go about things.
00:05:55.697 --> 00:06:10.007
And yet that is a long-term relationship between the company and, Microsoft or whoever the supplier is and that trust and the relationship is far more important to Microsoft.
00:06:10.007 --> 00:06:19.761
And we can see that revenues are doing fantastic things these days than the closed source will sell you a transactional W we'll make a transaction with you and sell you this one copy of the software.
00:06:20.485 --> 00:06:32.365
So I think this whole move away from transactional sales in software and towards trust relationships, long-term and annual recurring revenue, I think is a model that will stick with us forever.
00:06:32.408 --> 00:06:36.247
And I think it's weirdly it's moving to other areas of society as well.
00:06:36.247 --> 00:06:40.745
So if you look at, how you go to a a theme park they don't want to sell you on that one day.
00:06:40.745 --> 00:06:42.785
They're trying to get you on the annual pass, right?
00:06:42.785 --> 00:06:48.004
They want you to have ongoing returns to whatever the Theme park is with your kids.
00:06:48.119 --> 00:06:53.336
Once or twice in the summer for the rest of their kid, your lives, that's what they want you to move towards.
00:06:53.757 --> 00:06:56.867
And I think that in order to do that, they have to provide a much better experience.
00:06:56.906 --> 00:07:00.567
I have to also continue to innovate to make you want to keep coming back.
00:07:00.836 --> 00:07:07.107
And That's another important thing is by moving away from a transactional sale and towards a more, as a service.
00:07:07.158 --> 00:07:13.927
Methodology your encouraging, the continued development and improvement of the software.
00:07:14.317 --> 00:07:23.333
I think that the same thing is true in the community as well, by making a source open you're encouraging continual improvements and the community input into those improvements.
00:07:23.663 --> 00:07:29.002
And I think we're certainly seeing that with Microsoft being very successful with their open source and all that.net framework
00:07:29.081 --> 00:07:34.630
if you just cast your mind back even a few years, if someone said to you, oh, Microsoft are going to go Open source.
00:07:34.630 --> 00:07:35.620
You'd like, no, they're not.
00:07:35.675 --> 00:07:37.978
They are the very last people at the party.
00:07:38.014 --> 00:07:42.975
But with and the sort of the new leadership, I think it's made them a much stronger.
00:07:42.975 --> 00:07:50.081
They're already a huge force, but it's probably got their roots and you're getting loyalty, from folks and embedding into the community.
00:07:50.112 --> 00:07:56.367
One of the things that gets banded about a lot, and I think some of our listeners will hear this, if they've never used open source before.
00:07:56.367 --> 00:08:12.482
this will be someone in the meeting might say, oh actually I've heard that open source has inherent security flaws or weaknesses because, we don't know who's working on it so david is open source software more prone to security flaws?
00:08:12.802 --> 00:08:14.139
than closed source.
00:08:14.163 --> 00:08:14.778
Is, it a myth?
00:08:14.778 --> 00:08:16.187
Is there any truths around it?
00:08:16.245 --> 00:08:17.398
What's your view on that?
00:08:17.509 --> 00:08:23.266
All source code all software has the inherent weakness that it was written by humans.
00:08:23.314 --> 00:08:31.521
So if you take any bit of software, the chances that have got zero bugs are tiny there's no chance.
00:08:31.521 --> 00:08:37.042
Most software that you use everyday on your phone, on your laptop will have bugs riddled throughout it.
00:08:37.371 --> 00:08:42.591
most of them not very severe, but all of them potentially are problem for you.
00:08:42.652 --> 00:08:50.951
And if you were any doubt on, whether that was true how often do you get software updates rather than a lot of the reason that those software updates are coming in is not just new features.
00:08:51.221 --> 00:08:52.270
It'll be a whole sway.
00:08:52.280 --> 00:08:57.191
This, If you look at the release notes, whole swaves of bug fixes, whether it's open-source or places.
00:08:58.456 --> 00:08:59.716
Humans are mostly harmless.
00:08:59.779 --> 00:09:03.200
So most of the code that they write is well intentioned, but just flawed.
00:09:03.235 --> 00:09:10.669
So open source has inherent security, weaknesses, close source has inherent security weaknesses just by the fact that it was written by imperfect people.
00:09:10.669 --> 00:09:13.474
So the argument used to be that we keep our weaknesses, hidden, right?
00:09:13.504 --> 00:09:22.953
So when you do that, the weaknesses remain, you still got those weaknesses in your code and the computers are still running that flawed software.
00:09:23.629 --> 00:09:28.649
So when you first make your source code open, everyone can inspect it, find the issues and exploit them.
00:09:28.979 --> 00:09:38.308
So when you first take a closed source project and you make it open source, you gotta be very careful because what you're then doing is revealing to the world, all your weaknesses and all your security holes.
00:09:39.028 --> 00:09:59.374
However, if your project starts off open source, you'll tend to fix those things as people spot them fairly quickly, particularly anything related to security, there's a whole sort of urgency that comes with any security for all that any developer will immediately try and close that down because the last thing they want is people abandoning their code, whether it's open or closed.
00:09:59.421 --> 00:10:04.303
So the trick is when you go from closed source to open source, you really have to go to one of the.
00:10:04.303 --> 00:10:23.354
Companies that will do a full audit of your code base and make sure that it has no flaws at all from, as far as they can tell it doesn't mean again, it's going to be perfect, but it means that you do have an independent eye on your source code before going from pure closed source to pure open source.
00:10:23.683 --> 00:10:25.153
Otherwise the community is going to rip it apart.
00:10:25.183 --> 00:10:29.663
And also no one's going to trust it, because you didn't have that previous trust relationship that we were talking about.
00:10:29.740 --> 00:10:38.472
And so it's going to be a sort of a, an immediate switch on of the the source being inspected, people will find flaws and exploit them immediately.
00:10:38.952 --> 00:10:46.881
I never thought of it as a, you start closed, then you go open and that being a vulnerable time, because you've had.
00:10:47.542 --> 00:10:51.621
Previously, maybe eight eyes or sorry, eight pairs of eyes looking at it.
00:10:51.981 --> 00:10:54.681
And now you've got, thousands, so you've got that.
00:10:54.740 --> 00:11:03.496
And I suppose when you start something, which is kind of Greenfield open source, you're building on certain frameworks that have already got a lot of scrutiny within it.
00:11:03.527 --> 00:11:05.537
So you're starting from a different sort of point of view.
00:11:05.537 --> 00:11:10.802
So if folks are looking at open source either looking to open source their own code.
00:11:10.802 --> 00:11:22.143
So if they're looking to make that leap to open source, or if they're looking at evaluating open source, understanding where that product is, it's lineage and where, and how new or is important.
00:11:22.143 --> 00:11:33.640
And I suppose also the domain authority of whoever's check their code as well to make sure it's a bit like, when you do your pen test, you make sure it's done by a really reputable company.
00:11:33.671 --> 00:11:35.520
Otherwise, it's not worth anything.
00:11:35.520 --> 00:11:36.346
Is that fair to say?
00:11:36.397 --> 00:11:44.197
I look at it in the way that you look at people who drive and operate computers don't need a license but you do need a license to drive a car, right?
00:11:44.466 --> 00:11:47.292
So there's a certain level that you have to get through.
00:11:47.292 --> 00:11:58.601
Otherwise it goes, not even can compile, but above that level above the level where you can write hello world and put it out into the world, everything else that you write on top of that can be awful and no one's ever looked.
00:11:58.601 --> 00:11:58.841
at it.
00:11:59.341 --> 00:12:04.706
I used to be as a developer, very protective over my code, and this is mine and it's my baby.
00:12:04.793 --> 00:12:23.673
But you soon discover that the more eyes on your software, whether they are professional eyes or amateur eyes the better, but when we write close source code for our customers, and they bring in an auditor, We used to be very nervous in that process.
00:12:23.732 --> 00:12:27.602
And now we're actively interested in where we've made mistakes.
00:12:27.842 --> 00:12:38.192
And I think that attitude is really important for any developer is a bit of humility and a bit of understanding that the code that you write is continually awful and get other people to inspect it.
00:12:38.342 --> 00:12:48.870
Whether that's your pair developer that you work with every day every cut line of code that was inspected at the time it was written it would be of high quality whether it's because you've got static code inspection running against your code.
00:12:49.139 --> 00:12:51.988
And we use, Visual Studio which is fantastic bit a software.
00:12:51.988 --> 00:12:54.701
But it has got now static code inspection built in.
00:12:54.761 --> 00:12:57.422
So it will assess the quality of your code as you write it.
00:12:57.529 --> 00:13:02.366
And point out flaws, the very second that you've written the code and it will, give you improvements.
00:13:02.606 --> 00:13:07.386
There are independent, modules that you can put into your code to inspect it at compile time.
00:13:07.417 --> 00:13:10.897
So for example, we use something called security code scan, which is a free thing.
00:13:10.897 --> 00:13:12.966
Anyone that uses visual studio should have it in all their projects.
00:13:13.177 --> 00:13:16.777
And it's just, they're inspecting you for security, bad practices.
00:13:16.777 --> 00:13:18.096
It might not be intentional.
00:13:18.096 --> 00:13:21.995
You might've accidentally left the password somewhere, but it will tell you about that.
00:13:22.037 --> 00:13:24.941
And, those tools are hugely valuable.
00:13:25.211 --> 00:13:39.591
And then finally, when you've got these third party auditors coming into the for your code, they will, again, they'll run static code inspection, but they might look a bit more carefully and do some penetration testing and do all kinds of things that you wouldn't do yourself while you're developing it.
00:13:39.591 --> 00:13:49.551
So I think the message here is it doesn't matter whether it's open or closed, the more eyes and the more processes that inspect your code for flaws as early in the process as possible.
00:13:49.551 --> 00:13:50.750
as includes as you're writing it.
00:13:51.229 --> 00:13:52.879
So David had a quick question for you.
00:13:52.908 --> 00:13:56.599
I was at an event last night, which was all around it's mental health week.
00:13:56.692 --> 00:13:59.842
This episode will not be going out during Mental Health week.
00:14:00.201 --> 00:14:07.328
The topic They were covering was something called Imposter Syndrome which is not a formally recognized condition.
00:14:07.369 --> 00:14:16.453
But it is something that's been talked about and quite prevalent in technology and, it goes along the lines of I'm not really good enough for what I'm doing.
00:14:16.453 --> 00:14:18.104
Someone's going to tap me on the shoulder.
00:14:18.104 --> 00:14:20.149
I'm going to get found out, that sort of thing.
00:14:20.178 --> 00:14:33.096
And it just, when you were talking about making your code public, something you've written that, do you have to dig deep with your confidence to put something that you've written out there?
00:14:33.163 --> 00:14:43.296
It, have you ever experienced that or seen that I'm just wondering whether that's something that our folks might think about in terms of actually making that leap to publishing their own code.
00:14:43.655 --> 00:14:45.666
Hey, look, this is something I've written.
00:14:45.666 --> 00:14:47.005
And I said that's not very good.
00:14:47.008 --> 00:14:47.488
Okay.
00:14:47.548 --> 00:14:48.837
I won't ever publish again.
00:14:48.898 --> 00:14:52.317
I'm going to go and change jobs and become a librarian.
00:14:52.519 --> 00:14:57.966
I think the thing that everyone should embrace is that's just perfectly normal paranoia.
00:14:58.027 --> 00:15:08.548
Everyone in the Universe has that, so we all have that, but the question is not really all, you're good enough, so much as what are your intentions.
00:15:09.058 --> 00:15:20.158
And if your intentions are to put out the best quality bit of software that you can, then it will happen, but it will be the best bit of software that you can produce.
00:15:21.359 --> 00:15:29.725
If you then open yourself up to the community, say, here is my flawed bit of software, please rip it apart.
00:15:29.842 --> 00:15:30.533
They will.
00:15:30.682 --> 00:15:31.643
And that is a good thing.
00:15:32.273 --> 00:15:34.918
And so it becomes less about, Am I good.
00:15:34.918 --> 00:15:36.048
Enough and more of that.
00:15:36.844 --> 00:15:38.823
What is it at the time trying to achieve?
00:15:38.854 --> 00:15:41.888
And if what you're trying to achieve is high quality then it will be.
00:15:42.067 --> 00:15:49.927
If what you are trying to achieve is whatever, you can just throw that out as quickly as it possibly can be thrown onto the Internet, it will be very low quality.
00:15:50.168 --> 00:15:55.594
So I think anyone who's getting into software and thinking, do you know what I'm I've written this code.
00:15:55.634 --> 00:15:56.083
it's terrible.
00:15:56.083 --> 00:15:56.624
And it's awful.
00:15:56.624 --> 00:16:02.842
The last thing I'm going to do is put it on, Github, should flip that around completely and say I'm going to put"Hello World" on the internet.
00:16:03.096 --> 00:16:06.743
And I'm going to ask for criticism until it actually is writing war and peace.
00:16:07.163 --> 00:16:21.493
but that's, if that's your intention, start off by publishing the awful little bit of scrappy code that you written as soon as you get someone who's interested in what you're doing, and if it's sufficiently niche, believe me there'll be someone out there in the seven, 8 billion people in the world, there'll be interested in it.
00:16:22.993 --> 00:16:24.013
They will contribute.
00:16:24.013 --> 00:16:26.023
They will help, and they will become part of the community.
00:16:26.023 --> 00:16:27.462
And it's not about you creating it.
00:16:27.462 --> 00:16:32.673
It's about you facilitating the community and creating the best possible version of what it is you're trying to achieve.
00:16:32.721 --> 00:16:38.091
What motivates a software developer to actually contribute towards open source?
00:16:38.302 --> 00:16:45.749
When you contribute towards an open source project as a developer it's, you don't get paid I believe not directly.
00:16:45.845 --> 00:16:47.644
You obviously get some kind of benefits.
00:16:47.644 --> 00:16:48.990
So what's the motivation?
00:16:48.990 --> 00:16:53.250
Where what, why do folks get stuck in to it from a developer point of view?
00:16:53.359 --> 00:16:54.269
That's a very good question.
00:16:54.336 --> 00:17:06.636
Mostly I believe that people publish open source initially because they've just been through hell solving a particular problem, and they just want to prevent anyone else from going through that hell themselves.
00:17:07.057 --> 00:17:11.278
So by publishing it really, they're just like putting a bow on it and saying, this is now finished.
00:17:11.278 --> 00:17:16.627
It's almost like a, now I can release my child out into the world and they can go out there and do good.
00:17:16.688 --> 00:17:18.278
That's not always the motivation.
00:17:18.279 --> 00:17:21.819
Quite often the motivation is someone's got, I can't get my code to work.
00:17:22.059 --> 00:17:26.710
Here's the Github come someone on Stack Overflow, please fix my code for me.
00:17:26.779 --> 00:17:28.369
I can't get any further.
00:17:28.400 --> 00:17:31.640
Please Can someone, I just do not know why this is not working.
00:17:31.670 --> 00:17:32.000
Yeah.
00:17:32.509 --> 00:17:33.140
A been there.
00:17:33.507 --> 00:17:36.356
And quite often the answer is, oh, you just want to use this library over there.
00:17:36.356 --> 00:17:37.539
Someone's done it for you already.
00:17:37.589 --> 00:17:47.738
There is almost everything written already, again, a massive generalization there, but there is a lot out there isn't there that people don't realize that a lot of people sit down to write.
00:17:47.738 --> 00:17:51.877
things and it's probably been written maybe even a hundred times before.
00:17:52.325 --> 00:18:02.048
Now, this gets me onto the topic that I'm so excited to about, which is the release of Github copilot, which is an amazing bit of technology.
00:18:02.138 --> 00:18:07.868
And it's basically you write the comment about the code you're about to, write and it will then write the code for you.
00:18:08.199 --> 00:18:11.499
And the reason it can do that is that this AI has scoured.
00:18:11.499 --> 00:18:16.989
The whole of GitHub has exactly 20 different implementations of the thing that you're about to write.
00:18:17.259 --> 00:18:20.169
And it knows which the best one is, and it will write it for you.
00:18:20.199 --> 00:18:21.219
Now you have to be a bit careful.
00:18:21.219 --> 00:18:23.317
You have to read that it's doing exactly what You intended.
00:18:23.708 --> 00:18:27.488
And if you phrase your comment wrongly before it types for you.
00:18:27.570 --> 00:18:29.964
it's going to do exactly what you described, not what you want.
00:18:29.971 --> 00:18:33.521
But this is a way of all of this open source that's being contributed out there.
00:18:33.611 --> 00:18:35.351
Isn't just going out into the void.
00:18:35.770 --> 00:18:39.641
You might be solving someone else's problem, and they've never seen your source code.
00:18:39.671 --> 00:18:57.156
They've never used your library, but because you have published it, that brilliant way that you invented of doing something can now be used in anyone's source code, just in, just that genius, three lines of code that you made, the do something really efficiently can be used by someone else.
00:18:57.946 --> 00:19:02.846
The idea that the source code that you're writing there is going out into the void and not being used by anyone.
00:19:02.855 --> 00:19:03.382
It's not, true.
00:19:03.412 --> 00:19:07.432
You might find that some bit of aI has picked it up folded in and someone else now benefits
00:19:07.613 --> 00:19:13.410
Does it accredit you to so does your kind of standing increase because your bit of code has been used?
00:19:13.569 --> 00:19:15.660
But this comes down to what your motivation is, right?
00:19:15.990 --> 00:19:30.529
If your motivation is to get your problem solved, then you ask a question on stack overflow, if your motivation is to prevent someone else from having to write that bit of code ever again, because it was a nightmare to figure out then that's your motivation.
00:19:30.559 --> 00:19:40.369
If your motivation is to I don't know, get someone to use your software and then maybe buy your support services, that's another motivation.
00:19:40.369 --> 00:19:42.680
There are multiple motivations of why people would open source.
00:19:42.809 --> 00:19:50.142
One, answer is that you've got your legacy software, you're about to retire, and you just want to make sure your impact on the world is, stored forever.
00:19:50.291 --> 00:19:52.392
Who knows why people do the things that they do?
00:19:52.751 --> 00:19:55.071
David, these are very human motivations.
00:19:55.083 --> 00:19:56.986
They're also very grounded in engineering.
00:19:57.006 --> 00:20:07.788
I think a lot of people get into engineering because they want to make something that is really good it advances how people experience the world, but also has some kind of permanence, it's yeah, I built that
00:20:07.788 --> 00:20:09.852
exactly is when you're long gone.
00:20:09.882 --> 00:20:16.512
Personally, I'm not going to star in a sort of a multimillion dollar blockbuster and that legacy won't be there forever.
00:20:16.587 --> 00:20:18.748
You look at Some of the amazing films that are coming out right now.
00:20:18.867 --> 00:20:20.788
we all want to have been robert downey Jr.
00:20:20.788 --> 00:20:21.290
As Iron Man.
00:20:21.290 --> 00:20:22.066
It'll never happen.
00:20:22.215 --> 00:20:25.276
So our legacy is going to be a few lines of code that we wrote
00:20:25.388 --> 00:20:26.798
David don't write it off.
00:20:26.949 --> 00:20:27.788
Don't write it off.
00:20:28.088 --> 00:20:30.009
You never know you might get that phone call.
00:20:30.286 --> 00:20:31.306
This is my audition, right?
00:20:31.306 --> 00:20:31.605
Yeah.
00:20:31.654 --> 00:20:33.174
I'll be the next Iron Man.
00:20:33.174 --> 00:20:34.984
Don't they'll fit in the suit unfortunately.
00:20:35.035 --> 00:20:48.631
When you're using consuming open source, you may see, the element that you're directly consuming, but that might be built on a number of other modules or parts of of what are called dependencies.
00:20:48.871 --> 00:20:57.605
And if that runs quite deep, you might have quite a lot of homework to do before you really understand how solid, the open source platform is that you're using.
00:20:57.605 --> 00:21:01.813
I wrote down the phrase"buyer beware", what's your approach when you're thinking about dependencies?
00:21:01.874 --> 00:21:09.614
So we recently saw this, of course, with the Log4J exploit, which is a library used in thousands of different software packages.
00:21:09.644 --> 00:21:18.137
So these are all potentially vulnerable for many years, the trick with all software engineering, but there's open or closed source is to use the fewest lines of code possible.
00:21:18.258 --> 00:21:20.430
Everything should be done in the fewest lines of code.
00:21:20.789 --> 00:21:32.549
So for our Tea making robot, for example, wouldn't it be good if you could use instructions written by someone else that already gave detailed instructions on how to boil a kettle, right because that's a dangerous thing and you really don't want to be writing code that handles boiling water.
00:21:33.059 --> 00:21:34.859
So you would use someone else's Library.
00:21:35.130 --> 00:21:46.144
The question is have you got time to inspect every single line of code that's Being written, instructing the robot, how the boila kettle and do you know, actually is not going to start throwing that boiling water around the kitchen.
00:21:46.444 --> 00:21:47.285
you, don't know that.
00:21:47.375 --> 00:21:54.305
And in reality, those people writing open source themselves will be relying on underlying libraries that they've never seen.
00:21:54.305 --> 00:21:56.285
They haven't taken the time to inspect the code.
00:21:56.855 --> 00:22:06.484
So the important thing there is to use code that is tried and tested was always open source and has been open to inspection for a very long time.
00:22:06.484 --> 00:22:09.664
As we were saying earlier, if something's only just been moved from closed source to open source.
00:22:09.785 --> 00:22:12.335
It's potentially vulnerable, and that's a bad thing.
00:22:12.470 --> 00:22:16.220
But that's never going to completely protect you, but the same is true of open or closed source, right?
00:22:16.609 --> 00:22:27.182
So when you are in, as I am Visual Studio and you're choosing which NuGet packaged to bring in, take a quick look at a couple of key metrics.
00:22:27.482 --> 00:22:30.323
One is how many other people on the internet are using it.
00:22:30.853 --> 00:22:36.992
And there's a little metric as you choose the library that you can include in your, source code as to how many other people are using it.
00:22:37.022 --> 00:22:50.211
And the second thing is just have a very quick look at the repository and look to see if there are thousands of outstanding issues in which case you might want to avoid it because lots of people are finding issues with the source code and it's not being fixed.
00:22:50.263 --> 00:22:52.574
And then the other one is how often are releases made.
00:22:52.574 --> 00:22:53.743
So I think we spoke earlier.
00:22:53.743 --> 00:23:00.493
about how it's all very well that someone's invented a better way or written instructions for better way to make a cup of tea.
00:23:00.584 --> 00:23:02.084
But two things still have to happen.
00:23:02.594 --> 00:23:07.933
Those suggestions on improvements have to be accepted in by the people who are maintaining that software package.
00:23:08.384 --> 00:23:11.683
And the second thing is people have to actively update their code.
00:23:12.013 --> 00:23:17.695
So we try to on every release of our software, make sure that all the NuGet packages are up to date.
00:23:17.713 --> 00:23:24.776
And we've got all the latest bug fixes and security fixes in place we also try to minimize though the number of packages we use.
00:23:24.955 --> 00:23:32.395
And specifically we try to minimize the number of packages that we use that are obscure or poorly used or poorly maintained.
00:23:32.556 --> 00:23:40.715
If possible, we would prefer to rewrite the code ourselves from scratch than use a poorly maintained or an obscure package.
00:23:41.405 --> 00:23:42.185
And we have done that.
00:23:42.244 --> 00:23:46.085
We've found a code that exists and looks okay.
00:23:46.384 --> 00:23:50.974
We've may have be suggested improvements back to the original writer of that code.
00:23:51.424 --> 00:23:55.896
And some of those have been folded in, so those are called pull requests and you say here's some improvements.
00:23:55.896 --> 00:23:56.916
We suggest you make these.
00:23:56.916 --> 00:24:04.267
And then the author either accepts that, or they don't, or an extreme cases where the author is just gone and we can't find.
00:24:04.414 --> 00:24:06.545
Who they are or how we can get that, code improved.
00:24:06.815 --> 00:24:12.005
We will occasionally do something called forking and forking is where you take the existing code base.
00:24:12.005 --> 00:24:14.782
And you say there is a new way of doing this and it's our way.
00:24:14.843 --> 00:24:17.962
And we're going to patch all these things up and maybe add a couple of new features.
00:24:18.000 --> 00:24:26.865
Now, forking is something we should avoid because if we're being properly community about this, we should all try to stick to one best way of doing things.
00:24:27.194 --> 00:24:32.835
But in reality, people retire, people go and do a job somewhere else in the world, and haven't got time for this project anymore.
00:24:33.224 --> 00:24:34.785
So occasionally, and it is rare.
00:24:34.815 --> 00:24:39.094
We will take over, the maintenance of an open-source package ourselves.
00:24:39.500 --> 00:24:44.901
Again, not because we benefit from it directly, but because it's the right thing to do.
00:24:45.381 --> 00:24:52.131
And also because it means that we will benefit from the improvements that we can see, need to be made, and we can keep the legacy of that project going forward.
00:24:52.310 --> 00:25:06.320
and this is really one of the for me, great hopes for the future is that some of the code that is being written today, maybe that for hundreds or even thousands of years, because it will evolve to the point where it does exactly what it's supposed to do.
00:25:06.980 --> 00:25:11.540
And the community Is looking after it over multiple generations.
00:25:11.861 --> 00:25:24.201
This is one of the most exciting things to me about the open-source community and the open source movement is that the code that's being written, today may still be being used in decades or even centuries
00:25:24.248 --> 00:25:25.178
Which is incredible.
00:25:25.357 --> 00:25:33.179
So I wanted to get into the code folks a little bit more because I'm just going to run some scenarios past you to see whether they exist or not.
00:25:33.183 --> 00:25:37.855
So the first scenario would be two different schools of thought.
00:25:37.915 --> 00:25:42.352
So it's more about, achieving the same outcome, but implementing it in a different way.
00:25:42.801 --> 00:25:56.019
So if you like where you were saying, I think David, when you're saying in that scenario, we'd like to see as few of those as possible, because really we want the same tool with the same outcome rather than coming, we're implementing it this way, we're implementing it that way.
00:25:56.019 --> 00:25:57.453
So that was one scenario.
00:25:57.520 --> 00:26:04.522
The second scenario is where genuinely something is born out of the code.
00:26:04.762 --> 00:26:05.813
So it's not really a fork.
00:26:05.813 --> 00:26:16.824
It's like a new purpose, which I would have thought is like a legitimate, fork, I don't even know if you call that a fork because it would be we're using this, but we're really, we've taken what it has, it's got such a different purpose.
00:26:16.824 --> 00:26:19.036
It's a genuinely new use, et cetera.
00:26:19.125 --> 00:26:26.538
And I was just thinking if you've got code that relies on open, source and then you've got this, these forks that occur.
00:26:26.929 --> 00:26:31.624
Is there anything you need to do when, does it, does a fork get announced or how do you keep on top of that?
00:26:31.626 --> 00:26:37.814
Imagine that you've got a species of frog in the amazon and they wander to the edge of a region.
00:26:37.814 --> 00:26:41.384
One area has got slightly browner leaves and the other one's got something greener leaves.
00:26:41.384 --> 00:26:45.618
And then the ones that are green in the brown environment get picked off by predators and vice versa.
00:26:45.618 --> 00:26:51.798
So eventually what'll happen is you will split into two different species of frog, and they will eventually become very different.
00:26:51.798 --> 00:26:51.979
than what.
00:26:53.263 --> 00:26:54.044
The red spots.
00:26:54.054 --> 00:26:57.046
The other one become enormous for various secretly, good reasons.
00:26:57.098 --> 00:27:01.479
So what has motivated the frog there to split nothing?
00:27:01.898 --> 00:27:02.138
nothing?
00:27:02.138 --> 00:27:02.469
at all.
00:27:02.557 --> 00:27:03.907
It's just, happened naturally.
00:27:03.974 --> 00:27:05.924
So that's one way that software can split it.
00:27:05.924 --> 00:27:07.964
Someone goes, oh, do you know, what I can use this code for this other thing.
00:27:07.964 --> 00:27:10.484
And they'll just pick it up and use it and start developing their own thing.
00:27:10.484 --> 00:27:13.189
eventually it'll be, called something different than rename it.
00:27:13.192 --> 00:27:16.517
And no one will really know have the same origins And that can happen very naturally.
00:27:16.936 --> 00:27:26.836
the other thing that you occasionally see is for large software packages where you've got egos and a committee you're going to get factions.
00:27:27.257 --> 00:27:37.202
And the splits and those are mostly happened, I think for either ideological reasons or some kind of sense of loyalty to a leader or some of the sort of social.
00:27:37.413 --> 00:27:37.863
reason.
00:27:38.492 --> 00:27:42.663
Now, those things are brilliant to sit down with some popcorn and watch happening, right?
00:27:42.692 --> 00:27:47.326
Because no one loves anything more than a drama where people are screaming at each other.
00:27:47.503 --> 00:27:50.034
You are describing quite a niche Netflix series there.
00:27:50.034 --> 00:27:51.780
But I'd watch it.
00:27:51.780 --> 00:27:52.141
I'd watch
00:27:53.563 --> 00:28:13.103
If you haven't seen Silicon valley yet, and you're a software developer I know most people have by now, but whatever you do find some streaming service that you can watch that if you, if he wants to see an insight into, how social interaction or ineptitude, depending on who you are and your and your colleagues works reflected back at you, Silicon valley is a brilliant series for that.
00:28:13.252 --> 00:28:14.542
So we are so fun animals, right?
00:28:14.570 --> 00:28:18.275
A lot of these things will just come out of natural tensions and social groupings and that kind of thing.
00:28:18.664 --> 00:28:19.714
And that's fine.
00:28:19.762 --> 00:28:22.724
This is the thing that perhaps people watching from afar, I don't understand it.
00:28:22.964 --> 00:28:25.095
Don't understand why there's such a spat going on.
00:28:25.545 --> 00:28:30.464
And the reason is normally because these two groups of people passionately care about.
00:28:31.690 --> 00:28:38.019
the legacy of the code that they have their name against, and they believe it needs to go in a particular direction.
00:28:38.410 --> 00:28:47.349
and quite often, as I say, that's either for perfectly natural reasons and it'll be done very quietly or it's more ego and fractional, and that's fine too.
00:28:47.412 --> 00:28:50.082
These people don't live in the same neighborhood.
00:28:50.082 --> 00:28:51.342
There's not going to be any blood here.
00:28:51.892 --> 00:28:54.592
There will be a winner and there will be a loser and it doesn't matter.
00:28:54.682 --> 00:28:56.001
it doesn't matter which one wins.
00:28:56.001 --> 00:29:01.432
The point is that society should benefit from the fact that this splitting of the source code can happen.
00:29:01.642 --> 00:29:08.301
And actually bizarrely because of the way that open source is done with licensing must be able to happen.
00:29:08.301 --> 00:29:13.432
Nothing should prevent you from splitting off and making a fork of the code is a positive thing
00:29:13.511 --> 00:29:19.112
This Podcast is Sponsored by Fairmont Recruitment- leading the way in technology recruitment across the UK and Europe.
00:29:19.275 --> 00:29:27.883
Fairmont provide a high quality consultative approach to recruitment, advising and tailoring a campaign to your recruitment needs With a deep understanding of the technology sector.
00:29:27.935 --> 00:29:36.576
Fairmont can provide an overview of the market, advise on hiring best practice, and provide strategies to attract talent in an extremely competitive environment.
00:29:36.752 --> 00:29:57.406
Do people, try and get hold of open source, get the community to improve it, and then somehow extract it and make it closed and then try and sell it as their own closed IP like a smash and grab or, extremely cynical, but I'm just wondering whether that happens and are there mechanisms to detect it?
00:29:57.457 --> 00:30:00.037
It happens and it is actively encouraged.
00:30:00.444 --> 00:30:05.227
So we use a particular license, which is the MIT license, which means that any source code that?
00:30:05.227 --> 00:30:09.606
we write and put out as open source can be used for good.
00:30:09.606 --> 00:30:12.186
It can be used for evil, be used for business purposes of community.
00:30:12.196 --> 00:30:16.247
for personal purposes can be useful, whatever you like providing.
00:30:17.267 --> 00:30:18.646
Nothing in effect.
00:30:18.676 --> 00:30:20.116
If you look at the MIT licenses
00:30:20.196 --> 00:30:23.646
It's not even like creative commons where you use it, but you have to attributes.
00:30:23.676 --> 00:30:26.280
it's just, you just have it.
00:30:26.336 --> 00:30:31.736
Probably there's something in there saying you have to keep the copyright message on it, whether or not people do generally.
00:30:31.796 --> 00:30:37.016
No one really cares because the way that the license is designed is very permissive.
00:30:37.105 --> 00:30:46.928
So we would, we write an open source NuGet packages for Meraki cisco Servicenow, all kinds of different software vendors.
00:30:47.557 --> 00:30:50.948
And we encourage people to use that in their code.
00:30:50.978 --> 00:30:54.167
And so we'd love feedback and we'd love to get improvements to it.
00:30:54.175 --> 00:30:55.796
But you can use it for you.
00:30:55.796 --> 00:30:57.806
Like you can use it for making commercial software.
00:30:57.895 --> 00:31:01.785
We use it for writing closed source commercial software.
00:31:01.847 --> 00:31:05.087
It's the best way of doing it and anyone else can as well.
00:31:05.146 --> 00:31:11.549
So quite possibly we have a product that some of our source code is in, that's competing with someone else.
00:31:11.549 --> 00:31:13.829
Who's also using our source go to that, but that's fine.
00:31:13.859 --> 00:31:14.789
We encourage that right?
00:31:14.789 --> 00:31:18.640
Because we just want to make the best possible Meraki library that we can.
00:31:18.640 --> 00:31:22.577
And we do get pull requests and people do give us improvements, but that is fine.
00:31:22.577 --> 00:31:25.087
I think this is that there's a sort of view of open sources.
00:31:25.087 --> 00:31:30.876
is quite hippie-ish and that's a bad thing for some reason, and it's not commercially oriented.
00:31:31.176 --> 00:31:32.017
It absolutely is.
00:31:32.058 --> 00:31:36.689
We encourage people to use the open source code that we write in their closed source packages.
00:31:36.749 --> 00:31:37.828
And that's absolutely fine.
00:31:37.916 --> 00:31:49.047
if you didn't have the open source you wouldn't even have the means to compete with each other because the open sources allowing you to go further and faster, it's basically open source is creating the playing field.
00:31:49.096 --> 00:31:56.242
Whereas if you had to do everything from scratch, you would everyone's velocity would be very low it's just like a huge accelerator, isn't it?
00:31:56.309 --> 00:32:03.150
It sounds like open source is going to be is one of those things that's just exponentially driving technology at the moment
00:32:03.250 --> 00:32:05.230
One analogy is the road network, but right.
00:32:05.230 --> 00:32:10.190
So it's in everyone's interest to have a really good road network so that goods can efficiently move around.
00:32:10.220 --> 00:32:18.167
So everyone pays their taxes in and the road network is created and goods can be shipped around the country and increasingly they can be moved efficiently.
00:32:18.229 --> 00:32:25.722
But that sort of common platform or playing field, as you've put, it is a layer on which other things can be built.
00:32:25.752 --> 00:32:28.542
So you can build all kinds of services on top of that road network.
00:32:28.678 --> 00:32:36.028
So everyone contributes to getting, this is the community and everyone can contribute to getting, the base layer done, and then everyone differentiates on top of it.
00:32:36.837 --> 00:32:39.208
And so there's nothing wrong with right.
00:32:39.256 --> 00:32:42.016
Creating a private taxi service that runs on the open roads.
00:32:42.556 --> 00:32:51.910
And that's probably the best analogy that I can think of is let's all create something that is common and shared that we all agree with and we try and make it as good as we possibly can.
00:32:52.250 --> 00:32:53.150
I love analogies.
00:32:53.230 --> 00:32:58.840
So basically we say to Tesla, UBER Ford, Jaguar random names.
00:32:58.840 --> 00:33:03.384
I'm thinking of, lots that we say to all of them you're gonna bring your cars or your vehicles.
00:33:03.444 --> 00:33:19.615
But you've all got to contribute together to create the road network because without, I'm not suggesting that by the way but do you see, but do you see what I mean, It's almost like the open source is like you say, it's creating that infrastructure from which then you're creating commerce off at the top of that.
00:33:19.711 --> 00:33:20.550
I think that's it.
00:33:20.650 --> 00:33:23.430
Remember we've all got to eat and live, right?
00:33:23.430 --> 00:33:33.022
So we all need to generate an income, but let's all work together on the bit that we commonly agree on, and let's then build our own businesses on top of that.
00:33:33.022 --> 00:33:38.242
And I think that's a very strong approach for any society to take on, on, on many topics.
00:33:38.266 --> 00:33:41.806
So the same thing on creating common laws that we all agree on.
00:33:42.046 --> 00:33:45.718
Once we get that foundation set, we can then build upon it.
00:33:45.928 --> 00:33:48.028
Now that's not to say there aren't gonna be disagreements, right?
00:33:48.028 --> 00:33:52.857
People might not like that the roads are expanding or they might not like the road is going in a particular direction.
00:33:52.857 --> 00:33:58.479
So I'm not saying that's going to produce some kind of utopia and there still gonna be disagreements.
00:33:58.479 --> 00:34:04.851
But we're all, as long as the intent is to create that, which is in the best interest of the community, I think.
00:34:05.796 --> 00:34:08.445
I don't think there's any other way that you can improve upon that.
00:34:08.445 --> 00:34:16.195
Look at what Microsoft's doing with Azure, for example, by making it very easy for people use free open-source software.
00:34:16.465 --> 00:34:22.376
And to write that software they're making their services an Azure compute service that has to run code.
00:34:22.436 --> 00:34:24.655
So it has to be a reason for people to put their code in there.
00:34:25.135 --> 00:34:34.675
But if you look at Microsoft revenues of late that they're doing fantastically well, and a lot of that is about their move to azure and the office subscription as a service model.
00:34:34.945 --> 00:34:36.775
And I think that's something we can learn from that.
00:34:36.806 --> 00:34:39.380
There is a very healthy mix between.
00:34:39.380 --> 00:34:41.925
Open source closed source and commerce.
00:34:41.925 --> 00:34:43.094
I think they all fit together very
00:34:43.228 --> 00:34:49.827
There's a worldwide shortage of software developers and not every business has got its own dev team.
00:34:49.918 --> 00:34:55.940
And the, reason I say this is one of the topics is getting support, vendor support as it were.
00:34:56.041 --> 00:35:06.413
Do you think there's a kind of like a minimum capability before you should really delve into open source because You don't have that support because clearly you're very engaged with the community.
00:35:06.413 --> 00:35:09.210
You're an engineer and it's engineers helping each other out.
00:35:09.210 --> 00:35:16.690
But if you've got a company where you don't have that capability Could using open source, be a difficult scenario?
00:35:17.525 --> 00:35:20.016
Let's look at the support question first, because you're absolutely right.
00:35:20.016 --> 00:35:23.206
If someone was written some source code it's going to put it on the internet.
00:35:23.505 --> 00:35:25.050
You've got no relationship with that person.
00:35:25.068 --> 00:35:30.599
You've gotten they've gotten no reason per se, to fix a bug that you found, Right.
00:35:30.878 --> 00:35:31.159
there.
00:35:31.159 --> 00:35:43.362
they're not financially obligated or legally obligated to do so that is why you do see models whereby okay, it's open source, but if you want to speed up a bug fix, you can pay some money.
00:35:44.083 --> 00:35:46.422
We don't subscribe to that model at all.
00:35:46.543 --> 00:35:46.722
Okay.
00:35:46.722 --> 00:35:48.936
But that is a perfectly legitimate model.
00:35:49.021 --> 00:35:55.981
Other companies will give their entire software suite away for free in the hope that you will buy support on top.
00:35:55.981 --> 00:35:57.481
Now we quite like that model, right?
00:35:57.481 --> 00:35:58.771
Because that is it's free.
00:35:58.802 --> 00:36:00.121
There's no constraints.
00:36:00.204 --> 00:36:01.403
It's not crippled in any way.
00:36:01.434 --> 00:36:03.023
you can use it, and you can use all of it.
00:36:03.623 --> 00:36:08.123
But if you want us to support it, if you want to be able to call us up, or if you want us to configure it for you.
00:36:10.148 --> 00:36:12.099
Here's our fee and here's how much it will cost.
00:36:12.099 --> 00:36:18.070
And that can either be a one-off thing, or it can be, a an ongoing support agreement that works again quite well.
00:36:18.070 --> 00:36:20.559
For many companies, we don't use that one so much.
00:36:20.614 --> 00:36:36.882
What we, our model is mostly, we've got this fantastic library of or libraries of code made, and we've got a lot of experience Come and have us work on your personal project, your closed source project, which we will maybe fold some of this code into.
00:36:37.563 --> 00:36:44.291
Do I use this open source software or library of the package and you worried that it might require some support.
00:36:44.775 --> 00:36:47.686
Ask around the community for people that are already buying the support.
00:36:47.686 --> 00:36:49.365
Do they get value from that?
00:36:49.396 --> 00:37:01.820
Do they get a little bit more or a bit less than they were hoping for or expecting, But if you're using software that requires a lot of support, you might choose to go with a pure commercial.
00:37:02.840 --> 00:37:12.882
code base or a pure commercial company, the open or closed sources is, actually a bit of a a misdirect because at the end of the day, you're running binary's that if you really wanted to, you could decompile them, right?
00:37:12.882 --> 00:37:14.922
You could take apart these boundaries and look at the source code.
00:37:14.922 --> 00:37:20.922
It's a lot of effort to do, but if you really wanted to see what the source code was, you could, that's not the question.
00:37:20.983 --> 00:37:23.773
The question is when you get stuck, will you need help?
00:37:24.313 --> 00:37:26.713
And actually, depending on the company, some companies won't need help.
00:37:26.742 --> 00:37:28.387
Some companies will just figure it out for.
00:37:28.387 --> 00:37:28.896
themselves.
00:37:28.956 --> 00:37:31.476
Other companies are really buying a service for.
00:37:32.161 --> 00:37:33.152
from a development house.
00:37:33.152 --> 00:37:46.692
not a not the software itself and the service that they're buying is we need to make this thing and we're gonna, we're gonna, how much of that is going to be in the house and how much of that is going to be pushed down to a third party.
00:37:46.757 --> 00:37:48.686
And that's really the decision but people are making.
00:37:48.686 --> 00:37:52.034
it not really whether it's open-source closed source is it's what.
00:37:52.034 --> 00:37:56.925
level of effort am I going to put teams my company can put, puts in and how much Am I going to push
00:37:57.012 --> 00:38:01.987
yeah, cause I'm close source software you can buy and the support can be non-existent.
00:38:02.025 --> 00:38:02.965
I think we've all been there.
00:38:02.981 --> 00:38:05.090
That, that's definitely a thing everyone.
00:38:05.108 --> 00:38:10.349
You just have to be, you have to do your research and your due diligence for any software that you're going to consume.
00:38:10.378 --> 00:38:14.429
I think you should probably spend less time talking to the salesperson.
00:38:15.358 --> 00:38:17.568
and more time talking to the other customers.
00:38:17.568 --> 00:38:21.869
So the first question really that you should ask your salesperson is who can I talk to from one of your customers?
00:38:21.869 --> 00:38:24.335
And if they say, oh, we can't tell you that's a big warning flag.
00:38:24.478 --> 00:38:39.576
If they're immediately trying to push you to talk to someone before they've even explained what the software does, that's a very good sign because word of mouth is you were talking about Teslas, why people buying Teslas, not because they're advertised It's because word is good on the street.
00:38:39.606 --> 00:38:41.746
Is it's that kind of approach.
00:38:42.047 --> 00:38:54.260
And so I think we're seeing also, I particularly amongst the softwares of service companies that I work with move away from sales and move towards, it's very sort of American term, but it's really like it is customer success management.
00:38:54.260 --> 00:38:55.099
How cool is that?
00:38:55.099 --> 00:38:57.349
That sounds like an awful buzzword from the nineties, right?
00:38:57.362 --> 00:39:02.041
But customer success management is not about how much can we sell you?
00:39:02.132 --> 00:39:03.181
customer success management.
00:39:03.181 --> 00:39:05.791
is How successful can we make you?
00:39:06.572 --> 00:39:07.231
And therefore.
00:39:08.311 --> 00:39:10.411
How much value can we provide to you?
00:39:10.771 --> 00:39:13.411
And that will determine how much you're willing to pay for the service.
00:39:13.411 --> 00:39:29.105
So I think a move away from transactional sales that we were talking about earlier and a move towards relationship development, trust development And word of, mouth being how you find the bit of software that you've now arrived upon is it is a very strong way forward.
00:39:29.105 --> 00:39:34.653
And I think it's, We're never going to go back to the old model of you see an advert in a newspaper and therefore you buy the thing.
00:39:34.653 --> 00:39:39.898
I think we're moving much more towards now YouTube reviews interacting with existing customers of software.
00:39:39.898 --> 00:39:44.518
And that being the reason that you've chosen a software or hardware or whatever it is nearby.
00:39:44.590 --> 00:39:53.150
Panoramic data, you all running a business that, that old saying, we're not running a charity, we run a business yet, everyone's got to make money and hopefully be really successful.
00:39:53.960 --> 00:39:56.840
What's the essence of open source in terms of not giving you?
00:39:56.840 --> 00:40:01.159
I don't want you to give away any secrets or anything, but, you use open source in your business.
00:40:01.400 --> 00:40:03.148
What's your, what, why do you do it?
00:40:03.177 --> 00:40:13.753
What's the benefit of as the if there's other folks listening or thinking, maybe, I originally liked the sound of the fact that we can accelerate there's this the fact that it's reviewed and could actually be more secure, more eyes on.
00:40:13.820 --> 00:40:16.373
The fact that it's it, we could have some very efficient code.
00:40:16.373 --> 00:40:20.101
I've got all of those elements in it to bring together to make great software.
00:40:20.791 --> 00:40:22.840
It w what is it that says to you?
00:40:22.840 --> 00:40:25.690
You know what, we couldn't be successful without open-source.
00:40:25.719 --> 00:40:34.851
Is it like that, or is, open-source kind of it's something we really like, we're proud of it, but it's not our core success or has it become something that's really integral to your success?
00:40:35.898 --> 00:40:41.748
Yeah, I think it's fair to say that there'll be very few C level Execs who.
00:40:43.128 --> 00:40:46.967
would make any business decision based on whether something was opened or closed source?
00:40:47.001 --> 00:40:55.161
I think broadly what they'll find is every bit of software that they're using is 80% open source plus some stuff on top.
00:40:55.195 --> 00:40:59.893
And it's the plus some stuff on top can either be a support wrapper.
00:41:00.614 --> 00:41:06.909
And that is an important decision to make when deciding on, on on some software or some services that you're buying.
00:41:06.909 --> 00:41:13.509
But the open or closed nature of the source is actually relevant because the C-level exec a, isn't going to look at the source code themselves.
00:41:13.748 --> 00:41:15.969
And so there's no idea whether it being open or closed makes any
00:41:16.007 --> 00:41:18.556
Although, if it does happen, David, please send me the name.
00:41:18.556 --> 00:41:19.757
Cause I wouldn't mind speaking to that.
00:41:19.757 --> 00:41:20.416
That would be unusual.
00:41:20.416 --> 00:41:20.806
Wouldn't it?
00:41:21.918 --> 00:41:28.130
do you know, what, there are a few out there who care deeply and will submit, pull requests and raise issues on Github.
00:41:28.201 --> 00:41:30.228
And, immediately you're talking to someone like that.
00:41:30.349 --> 00:41:31.728
So we're working with a company at the minute.
00:41:31.998 --> 00:41:32.778
I can't mention the name.
00:41:34.309 --> 00:41:40.632
but the lead guy is the guy designing the database structure that he wants us to create some reports on top of.
00:41:41.052 --> 00:41:49.302
And that is fantastic because you've got a direct relationship between the business requirement and the fundamental data.
00:41:49.391 --> 00:41:51.731
That's really important to his business being a success.
00:41:51.762 --> 00:41:54.911
And it's a wonderful relationship because of course we say, hang on, right?
00:41:54.911 --> 00:41:56.501
The data structures don't contain the data we need.
00:41:56.501 --> 00:41:57.641
And he said, okay, I'll add it.
00:41:57.971 --> 00:41:59.219
And this is a C-level exec.
00:41:59.289 --> 00:42:20.394
And you think this is, a, this is such a rarity, most businesses that you deal with have got, the people that are on the Board are focused purely on sales or marketing, or some aspect of not perfectly legitimate work the way, but not focused on the actual core process automation that makes their business so efficient.
00:42:20.427 --> 00:42:23.769
And so someone who can really get that link between having an efficient.
00:42:24.670 --> 00:42:34.239
and the underlying data structures and the code that is executed upon it is in a very good position for accelerating their business going forward.
00:42:34.320 --> 00:42:36.331
But I must say most execs don't care.
00:42:36.420 --> 00:42:39.458
All they want to see is a successful outcome.
00:42:39.518 --> 00:42:46.358
And I think that's the important thing is as long as everyone's focused on outcomes, that the open or closed nature of the source, it doesn't actually matter that much, but I'll tell you who it
00:42:46.476 --> 00:42:46.717
yeah.
00:42:46.746 --> 00:42:47.047
Cool.
00:42:47.139 --> 00:42:48.039
that's the developers.
00:42:48.277 --> 00:42:49.027
a quick question.
00:42:49.027 --> 00:42:52.476
So in the episode we did on people process technology.
00:42:52.476 --> 00:43:01.688
One of the questions was within the next five years can the CEO five years from now survive without really understanding technology.
00:43:01.702 --> 00:43:07.827
And I'm not going to tell you what that individual said on the episode, but I'd be really interested in your view.
00:43:07.853 --> 00:43:17.068
And then I can compare what's your cause when you talked about the C-suite not understanding process and operations and how things are done.
00:43:17.157 --> 00:43:24.387
I don't mean not understanding, but at that kind of detailed level, which is obviously the detail you need to know to then enable it with business technology.
00:43:25.688 --> 00:43:31.478
Isn't that going to just become more and more of a pressing need in the community as well?
00:43:31.478 --> 00:43:31.788
Not?
00:43:31.838 --> 00:43:34.759
Or is it or is tech just going to take that away as being an issue?
00:43:34.759 --> 00:43:40.228
So if you look at the business, being successful right now let's just take a simple example of Uber, right?
00:43:41.472 --> 00:43:49.393
Maybe it was successful maybe it's not, but the point is it took an existing model and it made it much more efficient and much more accessible to its consumers.
00:43:49.427 --> 00:43:58.090
So fundamentally when it was created, someone understood that this is going to be huge because, and the, because is a matter of efficiency.
00:43:58.360 --> 00:44:15.471
So any, I must agree that any C-level exec who is not looking at their business operations model and their product operations model and ensuring that it is the most efficient and well automated version that it can possibly be, is going to be hit by
00:44:15.500 --> 00:44:17.059
Someone else will do that for them.
00:44:17.179 --> 00:44:17.505
Yeah,
00:44:18.266 --> 00:44:18.476
Yeah.
00:44:18.476 --> 00:44:34.487
So if you've got someone who's running a very efficient taxi firm that can efficiently get phone calls and sMS is out to the drivers the best way that you could possibly do that with phone calls and a very efficient operator who can talk, the fastest possible rate with all the all encoded and everything is very efficiently done.
00:44:34.547 --> 00:44:37.083
They're going to be destroyed somebody comes in.
00:44:37.083 --> 00:44:38.373
and does that just with an app on the
00:44:38.541 --> 00:44:38.960
yes.
00:44:38.990 --> 00:44:39.471
Yes.
00:44:39.543 --> 00:44:48.050
So I absolutely agree that every business, all C level exact should be looking at that fundamental product and fundamental business models and be more efficient.
00:44:48.230 --> 00:44:56.266
But I think the thing that we perhaps forget is that C level executives, you find this running your own small business, maybe our business isn't that big, under 20 people.
00:44:56.867 --> 00:45:00.016
and so the amount of my time that I spend not writing.
00:45:00.016 --> 00:45:01.606
code is incredible.
00:45:01.612 --> 00:45:13.556
There's, people management, there is finance, there's all kinds of stuff, which takes you away from the business of work, where work is perceived by developers to be writing code, but they're all other aspects to running business as well.
00:45:13.856 --> 00:45:15.896
So that's where delegation comes in.
00:45:15.896 --> 00:45:19.675
And so the important thing really for Board is when you go down.
00:45:19.856 --> 00:45:21.775
So we work a lot with managed service providers.
00:45:21.956 --> 00:45:29.396
If You go, if you are running a managed service provider and you have your service delivery team and you don't delegate the work.
00:45:30.311 --> 00:45:37.391
operating and talking to the customers really efficiently down to the service delivery team, and you're trying to own it all yourself, it's gonna be a disaster.
00:45:37.391 --> 00:45:43.331
So you have to delegate down and have specialist service delivery managers for the particular customers that they deal with.
00:45:44.411 --> 00:45:52.121
So the idea that the C level should be inspecting code is nonsense, but two or three layers down, Should they be working out the most efficient way of running a process?
00:45:52.391 --> 00:45:55.811
Should you be hiring developers in to automate existing processes?
00:45:55.811 --> 00:45:56.621
They absolutely.
00:45:56.621 --> 00:45:56.981
You should.
00:45:56.981 --> 00:45:58.896
Because any process that's being repeated.
00:45:58.896 --> 00:46:09.304
We we've got a bit of software that does reports and replaces the work of five people that have worked for half of The month to produce the reports for managed service provider customers.
00:46:09.574 --> 00:46:15.340
the moment that you can say, oh, that's just something that runs automatically overnight between one and three in the morning of the first.
00:46:16.250 --> 00:46:27.643
You've saved so much of those people's time and who is going to look to do that, to, to make that innovation, probably the people who are suffering the pain of having to manually create those reports.
00:46:27.643 --> 00:46:38.938
So those guys have to be empowered with and almost encouraged to find ways of improving, continually improving what it is that they do.
00:46:39.179 --> 00:46:40.969
And a lot of the time that's gonna involve automation.
00:46:40.978 --> 00:46:45.389
The problem is most people don't have the software development skills that are required to do that.
00:46:45.389 --> 00:46:51.298
So the question is then when I've got to some process that I know is inefficient, who can I go to?
00:46:51.778 --> 00:46:55.027
Who can I find that can make this more efficient?
00:46:55.027 --> 00:47:05.797
And often it's the one guy in the department who can write some code, that starts to write some Python scripts or something, just to speed up the process that, that kind of behavior.
00:47:06.592 --> 00:47:15.802
Of people seeking out automation and seeking out the one guy or the one girl that can do that automation, that.
00:47:15.802 --> 00:47:17.452
behavior is the most important.
00:47:17.492 --> 00:47:18.572
Not the actual writing the code.
00:47:18.652 --> 00:47:20.782
That's not the important thing is identifying
00:47:20.840 --> 00:47:23.425
it's recognizing that's actually something you want to pursue,
00:47:23.452 --> 00:47:36.532
yeah, but now that has to come from the top though, you have to instruct your people to always be trying to find a better, more efficient, more reliable, more repeatable way of doing that process.
00:47:37.251 --> 00:47:39.592
Particularly one that has quality issues.
00:47:39.592 --> 00:47:48.472
So for example, if you're producing reports and you're cutting and pasting screenshots from something into a word document and saving as PDF and sending it off to the customer that is.
00:47:50.177 --> 00:47:53.266
Inconsistent the size of the picture might be squashed in one direction.
00:47:53.266 --> 00:47:56.594
We might cut a bit off the legend or something, as you're facing into the document.
00:47:56.893 --> 00:47:59.623
As soon as you get a bit of software to do it, it's gonna do exactly the same way.
00:47:59.623 --> 00:48:00.344
every month.
00:48:00.402 --> 00:48:05.039
And that will be done more efficiently as a result of having it automated.
00:48:05.099 --> 00:48:11.052
and I think that is, if you, if I was talking to a C-level exec and saying, here's what I would advise.
00:48:11.172 --> 00:48:21.672
It's send out a diktat now that everyone that comes up with an idea that can improve the automation of what they're doing manually currently should be encouraged to do.
00:48:21.672 --> 00:48:26.172
So that's it, that's just absolutely what every C-level exec should be
00:48:26.260 --> 00:48:34.739
spot on David on so I just want it to play back to something around competitive advantage and the use of open source just from listening to you.
00:48:34.739 --> 00:48:39.708
So from what you've said this is what I think, you can do with open source to gain competitive advantage.
00:48:39.739 --> 00:48:46.338
So you're a software provider and you want to be famous for something.
00:48:46.489 --> 00:48:47.298
Know you can't be famous for.
00:48:47.298 --> 00:48:52.039
everything, but there's gonna be something you're gonna be famous for And what you're gonna be famous for is actually what you're really good at doing.
00:48:52.039 --> 00:48:52.099
it.
00:48:52.759 --> 00:48:58.697
And maybe it hasn't been done a lot, you're recognized as a niche, you've got something that's very, maybe even proprietary.
00:48:58.726 --> 00:49:04.396
That's your, that's what you're famous for, but you're using open source so that you're not having to build the roads.
00:49:04.427 --> 00:49:04.626
Yeah.
00:49:04.637 --> 00:49:15.666
You've got your open source around it so that you're able to actually put more of your development time into what you want to be famous for and not have to or we've got to work out how to create a road cause that's been done a hundred times before.
00:49:15.733 --> 00:49:22.903
So the competitive advantage is have you got that niche and have you got something you want to be famous for, but also isn't the competitive advantage.
00:49:22.954 --> 00:49:28.123
Also really understanding what is actually available out there in open source.
00:49:28.543 --> 00:49:35.708
and really Like you've just told us all how to spot good open source where some of the red flags might be.
00:49:36.177 --> 00:49:45.407
Do you see what I mean is that part of the competitive advantage is actually tends to be very experienced and knowledgeable about what is available and how to spot.
00:49:45.878 --> 00:50:12.271
a good branch or fork to use it as a bit of a, not quite used as in a tactical sense, but do you see what I mean that your knowledge, for example, and your comfort of being able to navigate around all of that plus what you guys do yourselves, your niche put those two together, that's, what's creating your competitive advantage, whereas before you just wrote everything and, it becomes, that's a much more expensive model to run because you're doing everything.
00:50:12.311 --> 00:50:13.391
Does that make sense, David?
00:50:13.391 --> 00:50:14.771
Or is there a nuance.
00:50:14.771 --> 00:50:15.371
that I've missed?
00:50:16.572 --> 00:50:18.103
No, I think that's absolutely right.
00:50:18.112 --> 00:50:25.211
Where we're using it doesn't really matter what it does, but we were using an old technology called subversion and it was doing all of our looking after our source code for us.
00:50:26.202 --> 00:50:32.655
And one day Dan here's my friend long-term work colleague said we should be using this new thing or.
00:50:33.650 --> 00:50:34.932
And I was like, ah, no, we shouldn't.
00:50:34.932 --> 00:50:35.206
No.
00:50:35.206 --> 00:50:36.797
Think of all the process we would have to change.
00:50:36.827 --> 00:50:42.711
Think of we'd have to rip so many things out and we did, and it was initially slightly painful.
00:50:42.742 --> 00:50:49.612
And then we were on this new technology, and it was a good decision and he convinced me and gave me all the good reasons why we should move from this old technology.
00:50:49.882 --> 00:50:55.721
So this new technology, and it's the thing that Brett him, pits hub is based on, obviously it's the pleasing, the name.
00:50:55.721 --> 00:50:59.065
And it's the way the whole world has gone for source code management.
00:50:59.545 --> 00:51:02.809
Now it'd be very easy for me to say no, this is the way we've always done things.
00:51:02.824 --> 00:51:08.688
So I'm sure most people listening to this will be familiar if you're not do go out and get a copy of"Who Moved My Cheese"?
00:51:09.708 --> 00:51:15.047
Absolutely brilliant book that every manager of any company ever should have read from one end to the other.
00:51:15.347 --> 00:51:21.768
and it's a seemingly very simple story about mice looking around a maze for cheese and the cheese runs out.
00:51:21.768 --> 00:51:39.253
And then we're going to find some more cheese, you can always read it as a children's but it's super important to understand that the points that the technology or the the stuff that your business is based on is going to cause you to fail unless you change, no matter how painful it, you think it might be the big problem.
00:51:39.253 --> 00:51:41.833
There is not everyone has a dad, right?
00:51:41.833 --> 00:51:43.213
Who's going to spot this stuff.
00:51:43.244 --> 00:51:45.284
Who's going to identify this.
00:51:45.733 --> 00:51:47.974
And again, the community is, there to help you.
00:51:47.974 --> 00:51:59.588
So there are fantastic podcasts and YouTube is, and people who are just putting content out there for you to consume, to understand what the new and better and the reasons for them being better.
00:51:59.588 --> 00:52:00.697
Things are in the marketplace.
00:52:00.697 --> 00:52:04.958
Now don't just change just because you see one guy that says it's a good idea.
00:52:05.257 --> 00:52:06.347
You have to build up.
00:52:06.347 --> 00:52:06.869
Momentum.
00:52:07.019 --> 00:52:11.880
And the way that I look at it is this when someone says that we should do something once I'm like, okay, that's interesting.
00:52:12.239 --> 00:52:15.612
But when I hear it again, a month later it's okay, I better investigate this.
00:52:15.882 --> 00:52:23.442
And when someone else tells me that we should be doing something, it's okay, I'm listening Now, Let's have a look.
00:52:23.681 --> 00:52:35.202
Now, if you've got that one person that is continually niggling you and your department to say, come on, we need to look at this new technology and you've brushed them off three times already.
00:52:35.996 --> 00:52:37.211
You are failing as a manager.
00:52:37.452 --> 00:52:48.251
If you've not actually sat down And have them do a presentation to you and actually argued with them and discussed with them, okay, what this is going to cause us a lot of, you have to explain to them, this is going to cause a lot of disruption.
00:52:48.402 --> 00:52:49.572
Why is it still worth it?
00:52:49.722 --> 00:52:51.581
And they still come back with really good arguments.
00:52:52.242 --> 00:53:00.012
That person is one of the more valuable people in your department because they care enough to improve your process.
00:53:00.746 --> 00:53:01.407
Not their own.
00:53:01.646 --> 00:53:03.536
They want to share this with the team.
00:53:03.536 --> 00:53:05.817
They want the whole team to be benefiting from this.
00:53:05.840 --> 00:53:08.793
You've asked, w when do we decide to go for a different solution?
00:53:08.793 --> 00:53:11.211
So for example, log for j we've been using that forever.
00:53:11.211 --> 00:53:12.202
Should we still be using it?
00:53:12.231 --> 00:53:15.231
The answer might be, yes, it might be no, but what are the alternatives?
00:53:15.231 --> 00:53:45.432
As soon as you start to hear some noise about how there are better options available, pay a little bit of attention, but when you really start to hear people barking on about a new way of going, you should be actively investigating that yourself, and you won't necessarily have the expertise yourself, but you should be surrounded by people who do, and if you're not surrounded by those people, either seek them out or just go and see what you can find in terms of podcasts or YouTube, or just, do a bit of Googling around yourself to find out what people are saying in the blogs.
00:53:45.463 --> 00:53:58.097
And so on about this new technologies, simple example, is that what Josh has less effort is And so we worked with Microsoft technologies and we use, what used to be called the.dotNet framework.
00:53:58.208 --> 00:54:05.378
And it's very easy and there's still people out there still using old microsoft technologies from 10 years ago and they haven't updated their code basis.
00:54:05.739 --> 00:54:11.199
There are very good reasons for keeping it, even if you've made one technical decision, the last thing you should do is just sit on it.
00:54:11.378 --> 00:54:19.838
You need to continue to refresh because companies are putting out very good performance improvements, very good security improvements, and you should keep on top of that.
00:54:19.989 --> 00:54:23.588
But at some point it might make sense for us to switch to a different technology.
00:54:23.798 --> 00:54:28.809
And I find it extraordinary, unlikely that I would suddenly move from developing and C-sharp developing in javaScript.
00:54:29.048 --> 00:54:39.083
I wouldn't personally go in that direction, but one day in the future, it might be a very good reason to do and if people are repeatedly shouting at me that we really need to go in this direction, I would have to listen.
00:54:39.563 --> 00:54:44.327
And I think that's very important is you're surrounded by people who know more about particular things than you do.
00:54:44.836 --> 00:54:46.067
Just spend a little time listening
00:54:46.449 --> 00:54:50.380
David I think that is such a, an important point you make.
00:54:50.380 --> 00:54:53.313
And it's sometimes they call it Servant leadership.
00:54:53.702 --> 00:54:55.713
We've all got a role to play in the organization.
00:54:56.507 --> 00:55:03.606
And if you're, if you occupying quotes the senior role it, by no means does that equate to, everything.
00:55:03.635 --> 00:55:06.456
In fact, it means that you cover such a wide area.
00:55:06.516 --> 00:55:13.708
You probably know less than anyone because you're one of the key points is to recognize your engineers, listen to them.
00:55:14.007 --> 00:55:18.657
And I think the other point you made David about that, that individual who is putting their hand up saying, we need to do X, Y, Z.
00:55:18.987 --> 00:55:26.188
If you don't listen to them, they'll simply leave that the talent, that the situation, the market we're in they'll go somewhere where they do feel valued as well.
00:55:26.188 --> 00:55:32.023
So there's a really important reason for having those, all those additional minds being listened to and treated.
00:55:32.114 --> 00:55:35.240
First amongst equals, we're all engineers, we just have different.
00:55:35.481 --> 00:55:56.391
Some of us have more managerial engineering responsibilities which is really important because it keeps things going, gets people paid, it keeps the electricity on that sort of thing and orders coming through the But that's as important as someone who is currently evaluating three different approaches that you might want to be taking, with some open source that you're assessing.
00:55:56.391 --> 00:56:00.442
That it's all flattened equal in my opinion, it's about,
00:56:00.559 --> 00:56:08.579
You should only hire people who are smarter than you hire someone who's going to make, you can delegate complex problems too.
00:56:09.778 --> 00:56:11.309
And so that you don't have to.
00:56:11.320 --> 00:56:15.449
Anyone that's still running command and control these days is.
00:56:15.489 --> 00:56:16.739
not going to be there for.
00:56:17.193 --> 00:56:18.152
no, I agree.
00:56:18.213 --> 00:56:27.927
And I think also I take a lot of comfort with advice on hiring people that are more intelligent than That That gives me a really a talent pool to go for.
00:56:27.927 --> 00:56:31.827
So I'm feeling very confident on being able to put together my next team.
00:56:31.918 --> 00:56:52.724
David, I just wanted to see, are there any other 1 0 1 points that you would want to either re-emphasize or call out around that, that this amazing topic where we started with talking about how to, the code or the analogy in terms of how you make a cup of tea and and how that equates to open source software.
00:56:52.965 --> 00:56:56.235
If you've got the perfect way of making a cup of tea, that's tried and tested.
00:56:56.940 --> 00:56:59.003
bearing in mind that it deals with boiling water.
00:56:59.063 --> 00:56:59.963
Stick with that.
00:56:59.983 --> 00:57:07.844
Don't reinvent that wheel, especially, I if making tears and what you want to be famous for, you just need T to, for what you're trying to achieve.
00:57:07.844 --> 00:57:08.505
I know there'd be a lot of.
00:57:08.505 --> 00:57:13.228
people listening who will have learnt elements around opensource I've learnt loads.
00:57:13.293 --> 00:57:14.416
And I really appreciate it.
00:57:14.985 --> 00:57:16.335
It is such a big topic.
00:57:16.606 --> 00:57:20.876
Can you just give us what your key one-on-one takeaways are for Open Source?
00:57:20.909 --> 00:57:29.018
The key thing is that whether the software is open source or closed source, doesn't really matter so much as who is developing it.
00:57:29.378 --> 00:57:34.028
And how can they help you when you have questions or there are bugs.
00:57:34.101 --> 00:57:46.911
I think the fact that most software, in fact, probably venture to say all software that you use today is based on a foundation of open source.
00:57:47.811 --> 00:57:50.090
it is worth considering where is that boundary?
00:57:50.210 --> 00:57:52.460
Where do you think the right point for the boundary is?
00:57:52.460 --> 00:58:04.913
Is it that the fact that it's open source should stop at the fact that you're running proprietary software on Linux, or is it that the, your entire, I don't know what a management system is, open source, and you're just buying a little bit of support from the vendor.
00:58:05.182 --> 00:58:06.182
Where is that line?
00:58:06.208 --> 00:58:11.952
Where do you think the appropriate line, the appropriate border point is for your company and for your requirements?
00:58:12.108 --> 00:58:13.637
And that is very much a personal thing.
00:58:13.681 --> 00:58:32.083
The other thing I would take away is that whether open or closed source is not, whether software is open or closed source is not as important as who is identified a process or an efficiency that can be gained through automation.
00:58:33.313 --> 00:58:34.514
Who is that person?
00:58:34.634 --> 00:58:36.614
How did they introduce it to you?
00:58:36.764 --> 00:58:40.364
Did it, result in improvements and how can that behavior be encouraged?
00:58:40.423 --> 00:58:42.134
I think that really is.
00:58:42.134 --> 00:58:50.581
that, is the fundamentals of people who are looking to improve the world versus people who are trying to make the best for themselves.
00:58:50.697 --> 00:59:09.206
Make sure that any source code that you use, whether it's open or closed source has a relationship aspect to it, whether that is that he's got a really good community around it, or whether that's because the relationship between you and the developer is a good one and that by the way, can be in-house or in a third party or strangers on the internet.
00:59:09.237 --> 00:59:09.987
That doesn't really matter.
00:59:09.987 --> 00:59:15.967
It's just, how can you form a good relationship with whoever is supplying you with your software?
00:59:15.967 --> 00:59:25.146
And then the final thing is you would probably be surprised at how much of the source code whoever you pay to write software for you.
00:59:25.215 --> 00:59:28.746
You'd be surprised about how much of that source code they've just got off the internet.
00:59:28.985 --> 00:59:32.315
Anyone who writes codes these days, New student get hub copilot.
00:59:32.706 --> 00:59:36.335
They write a comment which is, slash find first 10 prime numbers.
00:59:36.454 --> 00:59:38.585
They won't have written the next bit of code that follows.
00:59:38.644 --> 00:59:40.864
They will either get cola.
00:59:40.954 --> 00:59:45.335
Pilot will have written it for them, or they'll have gone and found it on stack overflow.
00:59:45.605 --> 00:59:54.574
So don't think that people are writing software are doing it just for You It might be the person that writing that software is somewhere on the other side of the planet.
00:59:54.605 --> 00:59:55.534
You just didn't know that.
00:59:56.873 --> 01:00:03.583
Thank you for listening to Episode 4 Sponsored by Fairmont Recruitment, Hiring Technology Professionals Across the UK Europe.
01:00:03.797 --> 01:00:05.907
My name is Malcom and I am AI generated.
01:00:06.079 --> 01:00:08.780
Something David said in this episode got me processing...
01:00:08.981 --> 01:00:10.902
robots work using instructions.
01:00:10.992 --> 01:00:13.481
they haven't got a mind or imagination of their own.
01:00:13.481 --> 01:00:15.762
You have to explain to them in great detail
01:00:15.762 --> 01:00:17.867
Thank goodness I am not a robot, I am.
01:00:18.690 --> 01:00:19.179
therefore.
01:00:19.347 --> 01:00:19.797
I think.
01:00:19.949 --> 01:00:21.130
Yes I have read Daycar.
01:00:21.309 --> 01:00:25.514
I am Artificial Intelligence Tune in next week for more CTIO one O one.
01:00:25.655 --> 01:00:26.815
Business Technology.
01:00:26.898 --> 01:00:27.557
Simplified.
01:00:27.751 --> 01:00:28.251
and Shared.
