OpenSSL Communities
Thu 5 Dec 2024 12:09PM

Corporation BAC: Election for Academics’ Delegate

EC Election Committee Public Seen by 20

Select the Academics’ Delegate for the Business Advisory Committee (BAC) of the OpenSSL Corporation. This advisory is important in enhancing our governance structure, ensuring that decisions reflect the diverse stakeholders involved and that our Mission and Values remain aligned with the community’s needs.

Each individual has a single vote. Your participation is essential in shaping OpenSSL’s future and ensuring that the voice of the academics is effectively represented.

EC

Poll Created Thu 5 Dec 2024 12:10PM

Corporation BAC Academics' Election Closed Sun 15 Dec 2024 11:00PM

Outcome
by Election Committee Mon 16 Dec 2024 10:11AM

Thank you to everyone who participated in the recent election. We’re pleased to announce that Billy Bob Brumley has been elected to an Academics seat in the OpenSSL Corporation BAC.

Congratulations to Billy!

Results

Results Option % of points Voters
Billy Bob Brumley - RIT 100.0% 5  
None of the Above 0.0% 0  
Undecided 0% 12  

5 of 17 people have participated (29%)

EC

Election Committee Thu 5 Dec 2024 12:12PM

Nominee: Billy Bob Brumley

Statement

I made my first contribution to OpenSSL around 2008 when I was a young, bright-eyed, bushy-tailed PhD student. Since that time, as an academic I’ve used OpenSSL as a basis for the vast majority of my research. Over the years, I’ve discovered and (responsibly) disclosed quite a few vulnerabilities in OpenSSL, most of which have CVEs assigned (grep around in CHANGES.md).

What separates me from most other academics who use OpenSSL in their research is, I typically contribute software patches for fixes myself, not just point out problems. I’ve also helped with API and functionality issues, particularly in the EC module. I also enjoy contributing to unit and regression testing, either porting public test cases to OpenSSL or designing my own, both positive and negative tests. For an academic, I consider myself pretty active on OpenSSL’s GitHub, submitting my own PRs and/or participating in discussions.

At RIT, I run a course called “Open Source Software Security” which I built on OpenSSL. My students are required to submit PRs to the project, and some of them even get merged :D

I feel like my current roles at RIT position me nicely to serve on the BAC. My leadership role in RIT’s GCI entails plenty of committee-based decision making, which is in fact quite abundant throughout academia at large. Topically, I bring not only my own state-of-the-art expertise in my academic discipline, but also exposure to RIT’s significantly broader academic community, packed with far more talented scholars than myself.

In summary, I’d be honored to serve on the BAC, allowing me to continue to contribute to OpenSSL, yet in a more formal way!