Who Built the Internet
You Live In?
The internet, the smartphone in your pocket, the maps you navigate by, the tools your children learn with — most of it was built on open source software. Code that anyone can use, study, change, and share. Code that was designed to belong to everyone.
But here's the question TCIA is asking: if the infrastructure is open, why do so few communities hold power over it? Who governs the algorithms shaping your housing application, your child's school software, your neighborhood's surveillance systems? Understanding open source history is not a tech lesson — it's a power lesson. Technological direction is a political choice, not a natural law.
- GNU Compiler Collection (GCC) — the compiler that builds nearly all open source software to this day
- GNU Emacs — a programmable text editor still in active use 40+ years later
- GNU Debugger (GDB), GNU Make, Bash shell — core developer toolchain
- Copyleft licensing concept — using copyright law to guarantee perpetual freedom
- GNU Public License (GPL) — the legal framework that protects billions of lines of open code
- GPL v1 (1989), v2 (1991), v3 (2007) — the world's most widely used free software license
- GNU Lesser GPL (LGPL) — allowing libraries to be used in proprietary code
- GNU Affero GPL (AGPL) — extending copyleft to network/cloud services
- Free Software Definition — canonical standard for what qualifies as free software
- GNU Savannah — hosting platform for thousands of free software projects
- Linux Kernel — powers Android (3B+ devices), 96.4% of top 1M web servers, all 500 of the world's top supercomputers
- Git (2005) — distributed version control system now used by 90%+ of developers worldwide
- Subsurface (2011) — dive logging software, open source
- Linux kernel patch review model — a meritocratic, email-based governance system adopted by thousands of projects
- HTTP — HyperText Transfer Protocol, the universal language of the web
- HTML — HyperText Markup Language, structural format of every web page
- URL/URI — Universal resource addressing system
- W3C (World Wide Web Consortium) — open standards body governing the web
- Solid — a decentralised web protocol giving users control of their own data (ongoing)
- fetchmail — widely used email retrieval tool, still in use
- Open Source Initiative (co-founder, 1998) — the canonical licensing body for open source
- Open Source Definition — the standard that defines what qualifies as open source
- Conceptual framework for distributed software development — influenced Agile, DevOps, and modern engineering culture
- Open Source Definition (OSD) — 10 criteria defining what qualifies as open source, still used today
- OSI license approval process — certifies licenses as open source compliant
- Reframing of "free software" to "open source" — enabling corporate participation and investment
- Debian Social Contract — a template for community governance adopted by many subsequent projects
- Creative Commons license suite (CC0, CC-BY, CC-SA etc.) — 2.5B+ works licensed globally
- Legal infrastructure for open access scientific publishing
- Wikipedia's licensing framework (CC-BY-SA) — 60M+ articles freely shared
- OpenStreetMap license basis — the open geography dataset used in humanitarian aid, disaster response, and urban planning
- Git — decentralised version control; every copy is a full repository with complete history
- Branching model — enables parallel development without central authority
- Infrastructure for GitHub, GitLab, Bitbucket — platforms hosting 500M+ repositories
- The pull-request workflow — now the global standard for collaborative code review
- GitHub — the world's largest open source code host (100M+ developers as of 2023)
- Pull Request workflow — now the universal pattern for code review and contribution
- GitHub Actions — CI/CD automation integrated into open source workflow
- GitHub Copilot — AI pair programmer trained on open source code (controversial)
- GitHub Sponsors — economic sustainability model for open source maintainers
- Docker — container runtime and image format; changed how every application is deployed globally
- Docker Hub — public registry of 8M+ container images
- OCI (Open Container Initiative) — open standard for container formats and runtimes
- Kubernetes (Google, 2014) — container orchestration platform now governing the majority of cloud workloads
- CNCF (Cloud Native Computing Foundation) — governs 170+ open source cloud-native projects
- TensorFlow — used to build image recognition, NLP, and medical diagnosis systems in 180+ countries
- Keras — high-level neural network API (now integrated into TensorFlow)
- PyTorch — dominant research framework; 80%+ of AI research papers use it
- TFHub / Hugging Face — model hubs enabling transfer learning without massive compute
- TensorFlow Lite / ONNX — enabling AI inference on low-power edge devices and smartphones
- Hugging Face Transformers library — 500K+ pre-trained models, 100K+ datasets freely accessible
- LLaMA / Llama 2 / Llama 3 — open weights LLMs enabling local inference without cloud dependency
- Mistral 7B, Mixtral — open source models competitive with proprietary frontier models
- PEFT / LoRA — parameter-efficient fine-tuning enabling model customisation on consumer hardware
- Inference on edge (Ollama, llama.cpp) — run powerful AI locally; no data leaves the device
- PyPSA — models entire national energy systems; used by Germany, South Africa, and the EU to plan renewable transitions
- OpenEMS — open energy management system for smart grids and microgrids
- OperatorFabric — open source platform for real-time power grid operations (RTE, France)
- Seapath — open source substation automation platform
- Open Climate Fix solar nowcasting — ML forecasting that reduces gas peaker plant usage by predicting solar output 4hrs ahead
D4PG turns it into power.
Every milestone on this tree is proof that communities — not corporations — built the most important infrastructure in human history. Now it's your turn.
Join TCIA at Data for Public Good 2026 to educate, equip, and activate.
Use the category filter to find tools relevant to your work.
- 🔒Privacy: No Google services by default; no telemetry; granular permission controls per app
- 🖥️UX/UI: Stock Android look; functional but requires manual setup; not beginner-friendly
- 🛡️Security: Monthly patches; exploit mitigations; SELinux enforcing; verified boot support
- 🎓Skill: Advanced — requires bootloader unlock, ADB commands, manual flashing via recovery
- 🌱Sustainability: Extends device lifespan 3–5 years beyond manufacturer EOL, directly reducing e-waste
- ✊Community power: Phone repair co-ops using LineageOS create local jobs and keep devices out of landfills — a Black/Brown community economic opportunity hiding in plain sight
- 🔒Privacy: Hardened memory allocator; sandboxed Google Play option; network/sensor permissions per-app; no identifiers
- 🖥️UX/UI: Clean AOSP UI; Pixel-exclusive; web-based installer greatly simplifies setup
- 🛡️Security: Strongest mobile OS security hardening available; used by journalists and activists globally
- 🎓Skill: Intermediate–Advanced; web installer reduces barrier but Pixel device required
- 🔒Privacy: Google collects usage data; location history enabled by default; requires manual opt-out of telemetry
- 🖥️UX/UI: Polished, familiar, massive app ecosystem — best day-one experience for new users
- 🛡️Security: Monthly patches on Pixel; slower on OEM devices; Play Protect provides baseline malware scanning
- 🎓Skill: Novice — zero setup required; works out of the box
- 🔒Privacy: Pre-installed spyware/adware; vendor telemetry; unremovable data-harvesting apps (e.g. some Xiaomi, Oppo builds)
- 🖥️UX/UI: Cluttered with bloatware; intrusive ads in system apps; slow UI due to heavy customisation
- 🛡️Security: Security patches delayed 6–18 months; often abandoned after 2 years despite devices remaining in use
- 🎓Skill: Novice — deceptively easy, but impossible to truly secure without rooting
- 🔒Privacy: Enhanced Tracking Protection blocks 1000s of trackers; no Google deal dependency; fully auditable source
- 🖥️UX/UI: Clean, customisable; rich extension ecosystem; excellent developer tools; cross-device sync via Firefox account
- 🛡️Security: Rapid patching; sandboxed processes; uBlock Origin blocks malvertising and script injection
- 🎓Skill: Novice-friendly install; install uBlock Origin from Add-ons in 30 seconds — zero configuration needed
- 🔒Privacy: Built-in ad/tracker blocking; fingerprint randomisation; Tor integration for private windows
- 🖥️UX/UI: Polished Chrome-like interface; fastest cold-start of major browsers; minimal learning curve
- 🛡️Security: Chromium base inherits V8 security; Brave Shields replaces uBlock for most users
- 🎓Skill: Novice — privacy-by-default; no extensions needed for basic protection
- ⚠️Caveat: Brave Rewards crypto system adds commercial layer; core browser remains open source (Apache 2.0)
- 🔒Privacy: Extensive Google telemetry; tied to Google account syncing; Manifest V3 weakens ad-blocking extensions
- 🖥️UX/UI: Excellent — the standard other browsers are measured against; best web app compatibility
- 🛡️Security: Fast patches; sandboxing good — but proprietary additions make full audit impossible
- 🎓Skill: Novice — near zero friction; but privacy trade-offs are invisible to most users
- 🔒Privacy: Fully offline — GPS used locally, no location data sent to servers; no account required
- 🖥️UX/UI: Powerful but dense interface; steep learning curve vs Google Maps; excellent for hiking/cycling routing
- 🛡️Security: GPLv2; no server-side attack surface; maps stored locally
- 🎓Skill: Beginner-to-intermediate; download maps region-by-region; plugin system adds complexity
- 🌱Sustainability: No data centre load for routing; offline maps work without mobile data — critical in areas with poor connectivity
- 🔒Privacy: Apache 2.0; zero tracking, zero ads, zero data collection — privacy by architecture
- 🖥️UX/UI: Clean, intuitive interface — the closest OSM app to Google Maps in user experience
- 🛡️Security: Fully offline; community-audited; F-Droid available avoiding Play Store
- 🎓Skill: Novice — installs like any app; download a region and go
- 🔒Privacy: Records your complete location timeline by default; used to build advertising profiles; shared with law enforcement via geofence warrants
- 🖥️UX/UI: Undeniably the best map UX on the market — live traffic, real-time transit, immersive view
- 🛡️Security: Proprietary server-side; cannot audit data handling; requires Google account
- 🎓Skill: Novice — instant usability; privacy costs invisible
- 🔒Privacy: Collects only your phone number; sealed sender; disappearing messages; no metadata stored on servers
- 🖥️UX/UI: Clean, fast; voice/video calls; stories; close to WhatsApp in experience
- 🛡️Security: AGPLv3; double-ratchet E2EE; audited by independent security researchers; used by UN, journalists, activists
- 🎓Skill: Novice — install from App Store / Play Store in 2 minutes
- 🔒Privacy: Federated, self-hostable; E2EE by default in DMs; choose your own server or run your own
- 🖥️UX/UI: Feature-rich (threads, spaces, bridges to Slack/Discord); interface can feel complex for new users
- 🛡️Security: Apache 2.0; independent security audits; used by French government (matrix.org)
- 🎓Skill: Intermediate — register on matrix.org is easy; self-hosting requires server admin knowledge
- 🔒Privacy: Metadata harvested by Meta (who contacts, when, where, how often); 2021 TOS forces data sharing with Facebook
- 🖥️UX/UI: Best-in-class UX; 2B users globally; unavoidable social pressure
- 🛡️Security: Uses Signal Protocol for E2EE content, but backup encryption and metadata handling remain opaque
- 🎓Skill: Novice — zero friction but zero transparency
- 🔒Privacy: Fully offline; no telemetry by default; documents stay on your machine
- 🖥️UX/UI: Familiar ribbon-style UI; imports/exports DOCX, XLSX, PPTX; macro support; less polished than MS Office
- 🛡️Security: MPL 2.0; community patches; no subscription lock-in; ODF format is ISO standard — no vendor lock
- 🎓Skill: Novice — anyone familiar with Word/Excel can use it within minutes
- 🏛️Government Use: Italy, France, Germany, Brazil — officially deployed across public sector
- 🔒Privacy: You own your data entirely — cloud sync with zero third-party access; E2EE option available
- 🖥️UX/UI: Google Drive-like web UI; mobile apps; collaborative document editing via Collabora/OnlyOffice integration
- 🛡️Security: AGPLv3; 2FA; LDAP integration; audit logs; HiTrust-eligible when self-hosted
- 🎓Skill: Intermediate — self-hosting requires a VPS or home server; managed Nextcloud providers available for novices
- 🔒Privacy: All documents stored on corporate servers; Google/Microsoft scan document content for AI training and advertising signals
- 🖥️UX/UI: Best-in-class collaboration tools; real-time co-editing; AI integration — unmatched convenience
- 🛡️Security: SOC2 compliant but proprietary — you trust their security claims, you cannot verify them
- 🎓Skill: Novice — zero barrier; but vendor lock-in grows invisibly over time
- 🔒Privacy: VLC sends zero telemetry; PeerTube is federated with no central algorithm manipulation
- 🖥️UX/UI: VLC: clean, plays everything; PeerTube: YouTube-like UI; smaller content library
- 🛡️Security: GPLv2; no account required for VLC; PeerTube instances independently administered
- 🎓Skill: Novice for VLC; beginner-to-intermediate for navigating PeerTube federation
- 🔒Privacy: Watch history, search, and engagement data used to build behavioural advertising profiles and recommendation algorithms
- 🖥️UX/UI: World's best video platform — unrivalled content breadth; use with uBlock Origin + Firefox as mitigation
- 🛡️Security: Proprietary; account required for full use; centralised content moderation with opaque appeals
- 🎓Skill: Novice — but mitigating privacy risks (Invidious, NewPipe, uBlock) requires beginner–intermediate skill
- 🔒Privacy: Wikipedia is CC-BY-SA, publicly readable with no account; Kiwix provides fully offline access — zero network calls
- 🖥️UX/UI: Clean, fast, consistent; Kiwix app makes offline Wikipedia available in classrooms without internet access
- 🛡️Security: GPLv2 (MediaWiki); no login required to read; HTTPS enforced sitewide
- 🎓Skill: Novice — use Wikipedia as a web page; Kiwix download is a one-click install + ZIM file download
- 🌱Sustainability: Wikimedia Foundation runs entirely on renewable energy; Kiwix enables education in off-grid communities
- 🔒Privacy: Self-hosted; patient data stays in-country; HIPAA/GDPR-compatible deployment patterns; audit trails built-in
- 🖥️UX/UI: Functional clinical workflow UI; requires training; new 3.x UI is significantly improved
- 🛡️Security: MPL 2.0; FHIR R4 interoperability standard ensures no proprietary lock-in for patient records
- 🎓Skill: Advanced for deployment (Java, MySQL, server admin); clinical users need structured training
- 🌱Sustainability: Replaces paper-based records in 40+ countries — measurably improves health outcomes without proprietary licence costs
- 🔒Privacy: Proprietary data formats; patient data can be sold to third parties under terms unreadable to patients; interoperability legally blocked in some contracts
- 🖥️UX/UI: Costly, training-intensive; UX notoriously poor despite high licence costs — contributing to clinician burnout
- 🛡️Security: Cannot audit source code; multiple major EHR breaches (Change Healthcare 2024 — 100M records exposed)
- 🎓Skill: Intermediate — requires expensive vendor training; data cannot be freely migrated
Join TCIA at Data for Public Good — July 15–17, 2026 — to go deeper on every tool in this guide with fellow community members, educators, organizers, and technologists.