<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Blog: Independence &amp; Open Source on Digital Independence</title><link>https://www.digital-independence.org/posts/</link><description>Recent content in Blog: Independence &amp; Open Source on Digital Independence</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 26 Mar 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://www.digital-independence.org/posts/index.xml" rel="self" type="application/rss+xml"/><item><title>Digital Sovereignty: Why Now</title><link>https://www.digital-independence.org/posts/digital-sovereignty-why-now/</link><pubDate>Thu, 26 Mar 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/digital-sovereignty-why-now/</guid><description>&lt;p>A mid-sized German manufacturer receives a routine audit request from a state agency. The request arrives as a &lt;code>.odf&lt;/code> file. The manufacturer&amp;rsquo;s IT department cannot open it properly — their Microsoft Office installation renders the tables incorrectly. They send back a &lt;code>.xlsx&lt;/code>. The agency returns it: wrong format, please resubmit.&lt;/p>
&lt;p>This is not a story about file formats. It is a story about a shift that has already begun — one that is turning digital sovereignty from a policy debate into an IT planning factor for organisations of all sizes.&lt;/p></description></item><item><title>Germany Mandates Open Formats</title><link>https://www.digital-independence.org/posts/germany-odf-mandate/</link><pubDate>Wed, 25 Mar 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/germany-odf-mandate/</guid><description>&lt;p>Somewhere in a German federal ministry, a civil servant opens a spreadsheet. The file extension reads &lt;code>.xlsx&lt;/code>. She has done this thousands of times — it is the default, the thing you never think about. But as of &lt;a href="https://www.it-planungsrat.de/aktuelles/details/verwaltungsdigitalisierung-deutschland-stack-gemeinsames-portfolio-und-neue-foederale-steuerung-beschlossen" title="IT-Planungsrat: Decision on Deutschland-Stack binding standards (March 2026)" target="_blank" rel="noopener">March 18, 2026&lt;/a>, that default has an expiry date.&lt;/p>
&lt;p>Germany&amp;rsquo;s &lt;span class="tt" data-tt="• Joint body of federal and state governments • Coordinates public sector IT • Decisions are binding across all administrative levels • Constitutional basis: Article 91c Basic Law">IT-Planungsrat&lt;/span> — the body where federal and state governments coordinate digital infrastructure — ruled that all German public institutions must switch to &lt;span class="tt" data-tt="• Open Document Format, ISO/IEC 26300 • Vendor-neutral, internationally standardised • Native format of LibreOffice, supported by most office suites • Not controlled by any single company">ODF&lt;/span> for editable documents and PDF for final documents. Microsoft&amp;rsquo;s &lt;code>.docx&lt;/code>, &lt;code>.xlsx&lt;/code>, and &lt;code>.pptx&lt;/code> are not on the list.&lt;/p></description></item><item><title>Technology as Geopolitical Leverage</title><link>https://www.digital-independence.org/posts/technology-as-leverage/</link><pubDate>Tue, 03 Mar 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/technology-as-leverage/</guid><description>&lt;p>Friday, 27 February 2026. Just before five.&lt;/p>
&lt;p>In a negotiation room at the &lt;span class="tt" data-tt="• United States Department of War (formerly Department of Defense) • Headquartered at the Pentagon, Arlington, Virginia • World's largest employer (approx.&amp;nbsp;2.85&amp;nbsp;million personnel) • FY2026 budget: approx.&amp;nbsp;$895&amp;nbsp;billion">Pentagon&lt;/span>, a compromise was on the table. AI company &lt;span class="tt" data-tt="• US-based AI company, founded in 2021 by former OpenAI researchers • Developer of Claude • Long considered the most safety-conscious player in the industry • Valued at approx.&amp;nbsp;$380&amp;nbsp;billion (Feb. 2026)">Anthropic&lt;/span> had drawn two red lines: no &lt;span class="tt" data-tt="• Weapons systems that decide on the use of lethal force without human control • Also known as LAWS (Lethal Autonomous Weapon Systems) • The Pentagon budgeted $13.4&amp;nbsp;billion for autonomous systems in FY2026 • Internationally contested, no binding prohibition to date">autonomous weapons&lt;/span>, no mass surveillance. The Pentagon had yielded on autonomous weapons — the phrase &amp;ldquo;as appropriate&amp;rdquo;, the loophole that would have permitted deployment of Anthropic&amp;rsquo;s AI model &lt;span class="tt" data-tt="• AI assistant developed by Anthropic • One of the most capable language models worldwide • Used for text analysis, programming, research, and decision support • The only AI model previously cleared for use on US classified networks">Claude&lt;/span> in weapons systems, was to be removed. Anthropic had offered in return to work with the &lt;span class="tt" data-tt="• National Security Agency — US foreign intelligence service for signals intelligence • Responsible for monitoring electronic communications • Operates global surveillance programmes (including PRISM, XKeyscore) • Brought into public focus by the Snowden revelations in 2013" data-gl="snowden">NSA&lt;/span> on data collected under judicial oversight pursuant to the &lt;span class="tt" data-tt="• Foreign Intelligence Surveillance Act (1978) • Permits surveillance of non-US persons for foreign intelligence purposes • Requires authorisation by a special court (FISC) • Heavily criticised since the Snowden revelations">FISA&lt;/span> Act.&lt;/p></description></item><item><title>The World Map of Digital Dependency</title><link>https://www.digital-independence.org/posts/global-digital-dependencies/</link><pubDate>Tue, 03 Mar 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/global-digital-dependencies/</guid><description>&lt;p>Five companies — Microsoft, Apple, Google, Amazon, Meta — form the digital foundation for most of the world. But not all of it. And the exceptions are as revealing as the rule.&lt;/p>
&lt;p>In China, payments run on &lt;span class="tt" data-tt="• Mobile payment service of the Ant Group (Alibaba) • Over 1.3&amp;nbsp;bn users worldwide • Together with WeChat Pay dominates China's payment market • Works via QR codes, not card networks">Alipay&lt;/span> and &lt;span class="tt" data-tt="• Payment function within the WeChat platform (Tencent) • Over 800&amp;nbsp;mn active users (2019) • As ubiquitous for everyday payments in China as cash • Works via QR codes, deeply integrated into the WeChat ecosystem">WeChat Pay&lt;/span>, not Visa. In India, &lt;span class="tt" data-tt="• Unified Payments Interface, launched 2016 • Developed by NPCI (National Payments Corporation of India) • Processes over 16&amp;nbsp;bn transactions per month (2024) • Government infrastructure, open to all banks and payment providers • Free for end users">UPI&lt;/span> processes more transactions than Visa and Mastercard combined — on its own infrastructure. In Kenya, sending money requires not a bank account but a mobile phone with &lt;span class="tt" data-tt="• Mobile payment service, launched 2007 in Kenya (Safaricom/Vodafone) • Over 50&amp;nbsp;mn active users in East Africa • Enables payments, transfers and microloans via SMS • Has given millions of unbanked people access to financial services">M-Pesa&lt;/span>.&lt;/p></description></item><item><title>AI Safety Under Pressure</title><link>https://www.digital-independence.org/posts/ai-safety-under-pressure/</link><pubDate>Thu, 26 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/ai-safety-under-pressure/</guid><description>&lt;p>In September 2023, &lt;span class="tt" data-tt="• US-based AI company, founded in 2021 by former OpenAI researchers • Developer of Claude, one of the most capable AI models worldwide • Long considered the most safety-conscious player in the industry • Valued at $380 billion (Feb. 2026)">Anthropic&lt;/span> published a document that was hailed as a landmark in the AI industry: the &lt;span class="tt" data-tt="• Voluntary commitment to limit AI risks • Defines capability thresholds beyond which development must be paused until safety is guaranteed • Was considered the strictest safety framework in the industry • First published in September 2023">Responsible Scaling Policy&lt;/span> (RSP). Its core promise was unusually clear: if an &lt;span class="tt" data-tt="• AI model pre-trained on large datasets that can be used for a wide range of tasks • Examples: GPT-4, Claude, Gemini, Llama, Mistral • Training costs often run into hundreds of millions of dollars" data-gl="foundation-model">AI model&lt;/span> exceeded certain capability thresholds, development would be paused — until safety could be demonstrably guaranteed. OpenAI and &lt;span class="tt" data-tt="• Google's AI research lab, formed in 2023 by merging Google Brain and DeepMind • Develops Gemini, Google's most capable AI model • One of the three leading AI labs worldwide alongside OpenAI and Anthropic">Google DeepMind&lt;/span> adopted similar frameworks shortly after.&lt;/p></description></item><item><title>Digital Risk Audit</title><link>https://www.digital-independence.org/posts/digital-risk-audit/</link><pubDate>Thu, 26 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/digital-risk-audit/</guid><description>&lt;p>A French judge at the International Criminal Court tries to book a hotel room. He hands over his credit card. Declined. The second card. Declined. Both cards from European banks, both accounts funded — but payment processing runs through &lt;span class="tt" data-tt="• US payment network (San Francisco, est. 1958) • Together with Mastercard processes the majority of European card payments • Subject to US sanctions law: OFAC compliance can block transactions in third countries • European alternative for transfers and direct debits: SEPA">Visa&lt;/span> and &lt;span class="tt" data-tt="• US payment network (Purchase, NY, est. 1966) • Second-largest card network in the world after Visa • Subject to US sanctions law — transactions can be blocked worldwide • European card alternative in development: European Payments Initiative (EPI)">Mastercard&lt;/span>. American networks. American rules.&lt;/p></description></item><item><title>Pentagon vs. Anthropic</title><link>https://www.digital-independence.org/posts/pentagon-vs-anthropic/</link><pubDate>Wed, 25 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/pentagon-vs-anthropic/</guid><description>&lt;p>In February 2026, the US Department of Defense issues an ultimatum to AI company Anthropic. The demand: unrestricted access to Anthropic&amp;rsquo;s AI models &amp;ndash; including applications that Anthropic&amp;rsquo;s own terms of service explicitly prohibit. The threat: a war-production law dating from 1950.&lt;/p>
&lt;p>Seven months earlier, the same company had signed a $200 million contract with the same Department of Defense. Anthropic has made responsible AI development a founding principle &amp;ndash; and was, at the same time, the first AI company cleared for deployment on classified military networks.&lt;/p></description></item><item><title>Copilot Bypasses DLP, Leaks Emails</title><link>https://www.digital-independence.org/posts/copilot-dlp-bypass/</link><pubDate>Sat, 21 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/copilot-dlp-bypass/</guid><description>&lt;p>In January 2026, organisations using Microsoft 365 discovered that &lt;strong>Copilot Chat was summarising emails marked as confidential&lt;/strong> — even when Data Loss Prevention (DLP) policies were explicitly configured to prevent it. The bug was reported by customers on 21 January. Microsoft acknowledged it in early February in a notice tracked as &lt;a href="https://www.theregister.com/2026/02/18/microsoft_copilot_data_loss_prevention/" title="The Register: Copilot spills the beans, summarizing emails it&amp;#39;s not supposed to read (February 2026)" target="_blank" rel="noopener">CW1226324&lt;/a>.&lt;/p>
&lt;h2 id="what-happened">What happened&lt;/h2>
&lt;p>Microsoft 365 uses &lt;strong>sensitivity labels&lt;/strong> (e.g. &amp;ldquo;Confidential&amp;rdquo;, &amp;ldquo;Highly Confidential&amp;rdquo;) and DLP policies via Microsoft Purview to control how data flows within an organisation. The expectation: if an email is labelled confidential, AI tools should not process it.&lt;/p></description></item><item><title>Grist Joins France's Suite Numérique</title><link>https://www.digital-independence.org/posts/grist-joins-lasuite/</link><pubDate>Sat, 21 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/grist-joins-lasuite/</guid><description>&lt;p>France&amp;rsquo;s sovereign productivity suite — the &lt;strong>Suite Numérique&lt;/strong>, formerly known as &lt;span class="tt" data-tt="• Sovereign digital workplace of French public administration (DINUM) • Open-source modules: messaging, video conferencing, document editor • Can federate with openDesk" data-gl="lasuite">LaSuite&lt;/span> — has added another component: &lt;a href="https://www.getgrist.com/" target="_blank" rel="noopener">&lt;strong>Grist&lt;/strong>&lt;/a>, an &lt;span class="tt" data-tt="• Term coined 1998 by Christine Peterson • OSI maintains the official definition • Powers 90&amp;nbsp;%+ of cloud infrastructure worldwide" data-gl="open-source">open-source&lt;/span> tool that combines the accessibility of a spreadsheet with the structure of a relational database and a no-code app builder.&lt;/p></description></item><item><title>Sovereignty Washing Explained</title><link>https://www.digital-independence.org/posts/sovereignty-washing/</link><pubDate>Sat, 21 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/sovereignty-washing/</guid><description>&lt;p>Germany&amp;rsquo;s flagship sovereign technology platform, the &lt;strong>Deutschland-Stack&lt;/strong>, is supposed to give the public sector a digital infrastructure it actually controls. The ambition is real: a national platform for federal, state, and municipal IT, built on open standards, reducing dependency on US hyperscalers.&lt;/p>
&lt;p>But the &lt;a href="https://osb-alliance.de/wp-content/uploads/2026/02/2026-02-13_Deutschland-Stack_Konsultation_OSBA.pdf" title="OSBA position paper on Deutschland-Stack consultation (February 2026)" target="_blank" rel="noopener">Open Source Business Alliance (OSBA)&lt;/a> warns that the current draft opens a dangerous loophole. The revised specification states that &amp;ldquo;solutions from European sovereign providers&amp;rdquo; may be used alongside open-source offerings. That sounds reasonable — until you consider what it means in practice.&lt;/p></description></item><item><title>AI Sovereignty: Who Owns the Models</title><link>https://www.digital-independence.org/posts/ai-sovereignty/</link><pubDate>Wed, 18 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/ai-sovereignty/</guid><description>&lt;p>AI is rapidly becoming critical infrastructure — for code generation, document processing, customer interaction, decision support. Most organisations today rely on US providers for these capabilities: OpenAI, Google, Anthropic. These providers lead for good reasons — mature &lt;span class="tt" data-tt="• Term from 1968, REST paradigm since 2000 (Roy Fielding) • Open APIs enable interoperability • Proprietary APIs = primary lock-in mechanism" data-gl="api">APIs&lt;/span>, frontier model performance, massive investment in safety research. But the concentration carries familiar risks: jurisdictional exposure, &lt;span class="tt" data-tt="• Switching costs: typically 2–10× original investment • EU Commission flagged as key risk (2020) • Main drivers: proprietary formats, APIs, contracts" data-gl="vendor-lock-in">vendor lock-in&lt;/span>, and the assumption that the current balance of power is permanent.&lt;/p></description></item><item><title>Europe's Cloud: Sovereignty vs. Scale</title><link>https://www.digital-independence.org/posts/cloud-sovereignty/</link><pubDate>Wed, 18 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/cloud-sovereignty/</guid><description>&lt;p>In the global cloud infrastructure market, three companies hold approximately 65–70 % market share: Amazon Web Services, Microsoft Azure, and Google Cloud Platform. All three are US companies, subject to US law — including the &lt;span class="tt" data-tt="• Signed March 2018 under Trump (omnibus bill) • Bipartisan support in Congress • UK signed first bilateral agreement 2019 • Providers can challenge orders in court" data-gl="cloud-act">CLOUD Act&lt;/span> (Clarifying Lawful Overseas Use of Data Act, 2018), which allows US authorities to compel US-based providers, via warrant or subpoena, to produce data — regardless of where that data is physically stored. Providers can challenge such orders in court, but the jurisdictional exposure remains.&lt;/p></description></item><item><title>Sovereign Workplace vs. Microsoft 365</title><link>https://www.digital-independence.org/posts/sovereign-workplace/</link><pubDate>Wed, 18 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/sovereign-workplace/</guid><description>&lt;p>Microsoft 365 has over &lt;a href="https://www.microsoft.com/en-us/investor/" title="Microsoft FY2025 earnings: 400M&amp;#43; paid Microsoft 365 seats" target="_blank" rel="noopener">400 million paid seats&lt;/a> worldwide. In European public administration, its market share is even more dominant — estimates run north of 80 %. Email, calendar, documents, video conferencing, messaging: the entire daily workflow of most European civil servants runs on a US platform, under US jurisdiction, governed by &lt;span class="tt" data-tt="• End User Licence Agreement • Typically contains US export control compliance clauses • Allows unilateral termination by the vendor">licence terms&lt;/span> that include compliance with US export control laws.&lt;/p></description></item><item><title>The Limits of Digital Independence</title><link>https://www.digital-independence.org/posts/limits-of-digital-independence/</link><pubDate>Wed, 18 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/limits-of-digital-independence/</guid><description>&lt;p>In January 2022, a German district administration — roughly 800 employees, two full-time IT staff — migrated its email from Microsoft 365 to a self-hosted &lt;span class="tt" data-tt="• Open-source email, calendar, and collaboration platform • Widely used by ISPs and hosting providers • Headquartered in Germany" data-gl="open-xchange">Open-Xchange&lt;/span> installation. The migration was technically clean. Six months later, a TLS certificate expired unnoticed — the IT team was firefighting a simultaneous storage failure. Outbound email silently failed for three days. Contracts went unsigned. A procurement deadline passed. Nobody knew until a supplier called to ask why they hadn&amp;rsquo;t received the bid.&lt;/p></description></item><item><title>Who Controls Your Login?</title><link>https://www.digital-independence.org/posts/identity-sovereignty/</link><pubDate>Wed, 18 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/identity-sovereignty/</guid><description>&lt;p>Every time an employee clicks &amp;ldquo;Sign in with Google&amp;rdquo; or &amp;ldquo;Sign in with Microsoft,&amp;rdquo; a small but significant thing happens: a US company learns when, where, and to which service that person authenticated. The identity provider — the system that confirms &amp;ldquo;yes, this person is who they claim to be&amp;rdquo; — sits at the centre of every digital interaction. It sees everything.&lt;/p>
&lt;p>For organisations, the &lt;span class="tt" data-tt="• 'Sign in with Google' = Google knows every service you use and when • Self-hosted alternative: Keycloak (full control) • Common protocols: SAML, OpenID Connect, OAuth 2.0" data-gl="idp">identity provider&lt;/span> is the most strategically important piece of infrastructure most IT departments never think about. It controls who can access what. It determines whether an ex-employee&amp;rsquo;s access is revoked within minutes or lingers for weeks. It is the single point of control — and, potentially, the single point of failure.&lt;/p></description></item><item><title>Subscribe to Our Blog via RSS</title><link>https://www.digital-independence.org/posts/rss-setup/</link><pubDate>Tue, 17 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/rss-setup/</guid><description>&lt;h2 id="what-is-rss">What is RSS?&lt;/h2>
&lt;p>RSS (Really Simple Syndication) is an open standard that lets websites publish new content in a machine-readable format. Instead of visiting a website regularly, you subscribe to its RSS feed — and new articles arrive automatically, without an account, without an email address, without tracking.&lt;/p>
&lt;p>RSS has been around since 1999 and still works reliably. It&amp;rsquo;s the opposite of algorithm-driven timelines: you get exactly what you subscribed to, in chronological order.&lt;/p></description></item><item><title>Digital Sovereignty: Status Quo 2026</title><link>https://www.digital-independence.org/posts/digital-sovereignty-europe/</link><pubDate>Mon, 16 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/digital-sovereignty-europe/</guid><description>&lt;p>On 22 January 2026, the European Parliament voted 471 to 68 for a resolution calling on Europe to break free from US tech dependency. EPP, Social Democrats, Liberals, Greens — all in favour. Polish MEP Michał Kobosko put it bluntly: &lt;em>&amp;ldquo;If we do not act now, we risk becoming a digital colony.&amp;rdquo;&lt;/em> The rhetoric is political, but the underlying concern is structural: 70 % market share by three providers under a single jurisdiction is, by any definition, a concentration risk.&lt;/p></description></item><item><title>Linux in the Public Sector</title><link>https://www.digital-independence.org/posts/linux-public-sector/</link><pubDate>Mon, 16 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/linux-public-sector/</guid><description>&lt;p>In October 2019, Adobe shut off all its services in Venezuela — overnight, without warning, following a US executive order. No transition period. No alternative. Every Venezuelan business, government office, and freelancer that depended on Adobe&amp;rsquo;s cloud simply lost access.&lt;/p>
&lt;p>Three years later, the pattern repeated at a larger scale. When the Russia sanctions hit in 2022, Microsoft suspended sales, Oracle ceased cloud operations, and SAP halted distribution. Entire countries discovered what dependency on US software means when the political wind changes.&lt;/p></description></item><item><title>Why digital-independence.org?</title><link>https://www.digital-independence.org/posts/why-digital-independence/</link><pubDate>Fri, 13 Feb 2026 00:00:00 +0000</pubDate><guid>https://www.digital-independence.org/posts/why-digital-independence/</guid><description>&lt;p>A CTO at a mid-sized company searches for &amp;ldquo;alternatives to Microsoft 365.&amp;rdquo; The first page of results: ten listicles, eight with affiliate links, all recommending the same five tools with the same star ratings. None of them mention that Nextcloud&amp;rsquo;s collaborative editing is not yet at Google Docs level. None explain that &lt;a href="https://www.digital-independence.org/posts/sovereign-workplace/#opendesk-the-german-approach">openDesk&lt;/a> integrates six independent projects and the seams show. None ask the question that actually matters: what specific problem are you solving, and at what cost?&lt;/p></description></item></channel></rss>