IT News<p>Supply-chain attacks on open source software are getting out of hand - It has been a busy week for supply-chain attacks targeting o... - <a href="https://arstechnica.com/security/2025/07/open-source-repositories-are-seeing-a-rash-of-supply-chain-attacks/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">arstechnica.com/security/2025/</span><span class="invisible">07/open-source-repositories-are-seeing-a-rash-of-supply-chain-attacks/</span></a> <a href="https://schleuss.online/tags/supplychainattacks" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>supplychainattacks</span></a> <a href="https://schleuss.online/tags/repositories" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>repositories</span></a> <a href="https://schleuss.online/tags/opensource" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>opensource</span></a> <a href="https://schleuss.online/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>security</span></a> <a href="https://schleuss.online/tags/biz" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>biz</span></a>&it</p>
#repositories
0 posts0 participants0 posts today
New study: "#OpenAccess via #repositories (#GreenOA) correlates with higher citation counts and a lower probability of zero citations. In contrast, OA via the publisher's website without an explicit #OpenLicense (#BronzeOA) is associated with higher citation counts but also with a higher probability of zero citations."
https://arxiv.org/abs/2505.15384v1
arXiv.orgA two-stage model for factors influencing citation countsThis work aims to study a count response random variable, the number of citations of a research paper, affected by some explanatory variables through a suitable regression model. Due to the fact that the count variable exhibits substantial variation since the sample variance is larger than the sample mean, the classical Poisson regression model seems not to be appropriate. We concentrate attention on the negative binomial regression model, which allows the variance of each measurement to be a function of its predicted value. Nevertheless, the process of citations of papers may be divided into two parts. In the first stage, the paper has no citations, and the second part provides the intensity of the citations. A hurdle model for separating the documents with citations and those without citations is considered. The dataset for the empirical application consisted of 43,190 research papers in the field of Economics and Business from 2014-2021, obtained from The Lens database. Citation counts and social attention scores for each article were gathered from Altmetric database. The main findings indicate that both collaboration and funding have a positive impact on citation counts and reduce the likelihood of receiving zero citations. Higher journal impact factors lead to higher citation counts, while lower peer review ratings lead to fewer citations and a higher probability of zero citations. Mentions in news, blogs, and social media have varying but generally limited effects on citation counts. Open access via repositories (green OA) correlates with higher citation counts and a lower probability of zero citations. In contrast, OA via the publisher's website without an explicit open license (bronze OA) is associated with higher citation counts but also with a higher probability of zero citations.
New Findings From COAR: #Repositories are Being Profoundly Impacted by #AI Bots and Other Crawlers; & More Headlines https://www.infodocket.com/2025/04/30/ai-news-roundup-new-data-from-coar-repositories-are-being-profoundly-impacted-by-ai-bots-and-other-crawlers-springer-nature-donates-its-unique-ai-tool-that-identifies-problematic-text-to-publ/ #oa #scholcomm @coar_repositories
Hurtling to that #Lancaster on the West Coast Mainline. Attending the THE Digital Universities UK conference, and presenting on Wednesday about persistence of scholarly #repositories and the #persistence of their digital content.
Some fellow University of #Glasgow compadres will also be in attendance and presenting about interesting stuff too. Going to be at #THEdigitalUK ? Study the programme and make sure you join us! 
Continued thread
Update. "‘Omg, did #PubMed go dark?’ Blackout stokes fears about database’s future"
https://www.nature.com/articles/d41586-025-00674-3
"The NIH told Nature in an e-mail that, on 1 March 'some of NIH public-web services experienced service disruptions' but all services were restored on 2 March. 'NIH is committed to resilient and open access to PubMed and other NIH web services,' the team wrote. But [Krutika Kuppalli, an infectious-diseases physician] says any disruption — even if temporary — raises concerns about how researchers access essential scientific information. 'It also serves as a reminder of the need for contingency plans, such as alternative #repositories or offline access to critical research, to ensure that health-care providers and researchers are not left without crucial information when they need it most,' she says."
www.nature.com‘Omg, did PubMed go dark?’ Blackout stokes fears about database’s futureA brief outage has focused attention on scientists’ reliance on the US-government-funded website.
Replied in thread
@neuralreckoning @internetarchive
Sorry if you already know this. The #NelsonMemo described #GreenOA policies. It required deposit in OA #repositories, not submission to OA #journals. Some publishers told authors that they'd have to pay #APCs to comply with the policy. But that was deception and spin. Compliance with the policy was always free of charge. When journals charge APCs to publish fed-funded research, it was to publish in those journals, not to comply with federal policy.
I’ve been thinking lately (always a mistake) about all the cultural works to which we don't have access. Everything removed from streaming; everything locked behind DRM so that most libraries and archives won't have copies which can redundantly survive disruption. Sometimes I get real sad about the future readers and historians and others who just won't be able to find copies of the incredible things made during the current digital dark age.
As ever, I try to let this radicalize me rather than lead me into despair. I know that there are lots of horrors worth raging against, but this is one I feel well-positioned to work against. It's low-stakes enough that I won't feel self-loathing if I burn out or need to take a break. It's no secret that I like to read and organize books so this is a topic close to my heart and one which can bring me joy and allow me to share it with those around me too. There is a fair bit of tech nerd stuff to it, enough that I have an opportunity to learn & practice new things, but not so much that I’m totally out of my depth. And there are plenty of communities out there to help and share strategies.
But the big thing I see missing from my understanding and many of the conversations about shadow libraries and unauthorized archivism is the social and professional practice of librarianship rather than mechanical practice of data storage. I don't have space to go to library school, but I could definitely stand to read (and archive) introductory books on the topic, or take an online class. Friends who know: what are some of the better places to get started with an introduction to library & information science and archive science? #libraries #librarian #archivist #archives #archivism #archivist #libraryScience #informationScience #archiveScience #culture #repositories
Infosec.TownTilde Lowengrimm (@tilde)Corporations hoard & suppress culture. They try to lock the collected art of the last century behind DRM & streaming. They want us to own nothing & have no rights. Pay and consume; never create, never control. These artificial psychopaths (run by ordinary human sociopaths) are parasites. They know the price of everything and the value of nothing. Art and culture are just tools for profit, not things which hold meaning, tell stories, or inspire. They have no respect for the society which supports them or for the people who create. We should have just as much respect for them.
Simultaneously, the LLM-purveyors want to vacuum up every scrap of writing and every video & picture & podcast to replace human creation with synthetic slop. It's already ruined search & wordfreq. If the art-stealing robots are allowed to "train on" all art & culture so that they can churn out trash, then you sure as heck deserve to re-watch your own re-runs whenever you feel like it. Not just because it might inspire you to make something better than corporate synthetic dumbasses. But because you're a human person and that's a good enough reason to deserve a personal archive of all art and knowledge.
The only obstacles to this are corporate & capitalist. Dust off your tricorn hat & update your NAS. Make local copies of the art which matters to you. Actual files on a physical hard drive or SD card in your hand. Back up your bookmarks offline — the web rots and that one post with the answer might not be there next time you need it. Don't rely on the Internet Archive; it's under attack and may not survive. Share with others; rebuild Alexandria.
This is not a new thought. I wasn't the first to say it; I won't be the last. But it bears repeating. This is not a post about tools or tactics; it's about outrage and action, resilience and community. But I'd love to hear your suggestions. What's your favorite tool for guerilla archivism? How do you keep backups of your bookmarks? What should aspiring archivists know?
Just for those who don't know what Infoseepage is talkn bout there is:
#Kiwix is a project to make large #information #repositories available in compact #offline forms - https://kiwix.org/en/ in various languages.
Several of their downloadable #libraries are subsets and snapshots of #Wikipedia. https://library.kiwix.org/#lang=eng&q=Wikipedia
The "flagship" all-six-million-en_US article module of Wikipedia is ~110GB and I seed this torrent.
KiwixNo Internet? No ProblemDownload and browse Wikipedia along with hundreds of educational websites. Free knowledge anytime, anywhere, without an internet connection.
Good news from the US Repository Network (#USRN):
https://sparcopen.org/wp-content/uploads/2023/12/Outcomes-of-the-USRN-Discovery-Pilot-Project.pdf
"At the beginning of the project, about half of the #repositories did not have their #OAIPMH interface properly configured and, therefore, could not be indexed by external discovery systems. After just over a year of the pilot, all but one repositories are now OAI-PMH compliant. This has resulted in a 50% increase in indexed content, with 728,770 new records now publicly accessible."
A recent survey of faculty at an R1 #university (with most respondents from the social sciences) revealed strong objections to #APCs at #OA #journals and deep ignorance of OA #repositories.
https://www.iastatedigitalpress.com/jlsc/article/17647/galley/16356/view/
The survey did not ask whether respondents were familiar with no-APC (#DiamondOA) OA journals.
Replied in thread
Under the 2022 #OSTP #NelsonMemo, US federal funding agencies must make agency-funded research #OpenAccess in "agency-designated" #repositories. The same was true under the 2013 #HoldrenMemo. This is the first time that any federal agency has designated a repository neither built nor hosted by government agencies — an important milestone for #GreenOA. Kudos to #KnowledgeCommons (@hello).