Who Built The Internet
You Live In?
The internet, the smartphone in your pocket, the maps you navigate by, the tools your children learn with β most of it was built on open source software. Code that anyone can use, study, change, and share. Code that was designed to belong to everyone.
But here's the question TCIA is asking: if the infrastructure is open, why do so few communities hold power over it? Who governs the algorithms shaping your housing application, your child's school software, your neighborhood's surveillance systems? Understanding open source history is not a tech lesson β it's a power lesson. Technological direction is a political choice, not a natural law.
- GNU Compiler Collection (GCC) β the compiler that builds nearly all open source software to this day
- GNU Emacs β a programmable text editor still in active use 40+ years later
- GNU Debugger (GDB), GNU Make, Bash shell β core developer toolchain
- Copyleft licensing concept β using copyright law to guarantee perpetual freedom
- GNU Public License (GPL) β the legal framework that protects billions of lines of open code
- GPL v1 (1989), v2 (1991), v3 (2007) β the world's most widely used free software license
- GNU Lesser GPL (LGPL) β allowing libraries to be used in proprietary code
- GNU Affero GPL (AGPL) β extending copyleft to network/cloud services
- Free Software Definition β canonical standard for what qualifies as free software
- GNU Savannah β hosting platform for thousands of free software projects
- Linux Kernel β powers Android (3B+ devices), 96.4% of top 1M web servers, all 500 of the world's top supercomputers
- Git (2005) β distributed version control system now used by 90%+ of developers worldwide
- Subsurface (2011) β dive logging software, open source
- Linux kernel patch review model β a meritocratic, email-based governance system adopted by thousands of projects
- HTTP β HyperText Transfer Protocol, the universal language of the web
- HTML β HyperText Markup Language, structural format of every web page
- URL/URI β Universal resource addressing system
- W3C (World Wide Web Consortium) β open standards body governing the web
- Solid β a decentralised web protocol giving users control of their own data (ongoing)
- fetchmail β widely used email retrieval tool, still in use
- Open Source Initiative (co-founder, 1998) β the canonical licensing body for open source
- Open Source Definition β the standard that defines what qualifies as open source
- Conceptual framework for distributed software development β influenced Agile, DevOps, and modern engineering culture
- Open Source Definition (OSD) β 10 criteria defining what qualifies as open source, still used today
- OSI license approval process β certifies licenses as open source compliant
- Reframing of "free software" to "open source" β enabling corporate participation and investment
- Debian Social Contract β a template for community governance adopted by many subsequent projects
- Creative Commons license suite (CC0, CC-BY, CC-SA etc.) β 2.5B+ works licensed globally
- Legal infrastructure for open access scientific publishing
- Wikipedia's licensing framework (CC-BY-SA) β 60M+ articles freely shared
- OpenStreetMap license basis β the open geography dataset used in humanitarian aid, disaster response, and urban planning
- Git β decentralised version control; every copy is a full repository with complete history
- Branching model β enables parallel development without central authority
- Infrastructure for GitHub, GitLab, Bitbucket β platforms hosting 500M+ repositories
- The pull-request workflow β now the global standard for collaborative code review
- GitHub β the world's largest open source code host (100M+ developers as of 2023)
- Pull Request workflow β now the universal pattern for code review and contribution
- GitHub Actions β CI/CD automation integrated into open source workflow
- GitHub Copilot β AI pair programmer trained on open source code (controversial)
- GitHub Sponsors β economic sustainability model for open source maintainers
- Docker β container runtime and image format; changed how every application is deployed globally
- Docker Hub β public registry of 8M+ container images
- OCI (Open Container Initiative) β open standard for container formats and runtimes
- Kubernetes (Google, 2014) β container orchestration platform now governing the majority of cloud workloads
- CNCF (Cloud Native Computing Foundation) β governs 170+ open source cloud-native projects
- TensorFlow β used to build image recognition, NLP, and medical diagnosis systems in 180+ countries
- Keras β high-level neural network API (now integrated into TensorFlow)
- PyTorch β dominant research framework; 80%+ of AI research papers use it
- TFHub / Hugging Face β model hubs enabling transfer learning without massive compute
- TensorFlow Lite / ONNX β enabling AI inference on low-power edge devices and smartphones
- Hugging Face Transformers library β 500K+ pre-trained models, 100K+ datasets freely accessible
- LLaMA / Llama 2 / Llama 3 β open weights LLMs enabling local inference without cloud dependency
- Mistral 7B, Mixtral β open source models competitive with proprietary frontier models
- PEFT / LoRA β parameter-efficient fine-tuning enabling model customisation on consumer hardware
- Inference on edge (Ollama, llama.cpp) β run powerful AI locally; no data leaves the device
- PyPSA β models entire national energy systems; used by Germany, South Africa, and the EU to plan renewable transitions
- OpenEMS β open energy management system for smart grids and microgrids
- OperatorFabric β open source platform for real-time power grid operations (RTE, France)
- Seapath β open source substation automation platform
- Open Climate Fix solar nowcasting β ML forecasting that reduces gas peaker plant usage by predicting solar output 4hrs ahead
D4PG turns it into power.
Every milestone on this tree is proof that communities β not corporations β built the most important infrastructure in human history. Now it's your turn.
Join TCIA at Data for Public Good 2026 to educate, equip, and activate.
Use the category filter to find tools relevant to your work.
- πPrivacy: No Google services by default; no telemetry; granular permission controls per app
- π₯οΈUX/UI: Stock Android look; functional but requires manual setup; not beginner-friendly
- π‘οΈSecurity: Monthly patches; exploit mitigations; SELinux enforcing; verified boot support
- πSkill: Advanced β requires bootloader unlock, ADB commands, manual flashing via recovery
- π±Sustainability: Extends device lifespan 3β5 years beyond manufacturer EOL, directly reducing e-waste
- βCommunity power: Phone repair co-ops using LineageOS create local jobs and keep devices out of landfills β a Black/Brown community economic opportunity hiding in plain sight
- πPrivacy: Hardened memory allocator; sandboxed Google Play option; network/sensor permissions per-app; no identifiers
- π₯οΈUX/UI: Clean AOSP UI; Pixel-exclusive; web-based installer greatly simplifies setup
- π‘οΈSecurity: Strongest mobile OS security hardening available; used by journalists and activists globally
- πSkill: IntermediateβAdvanced; web installer reduces barrier but Pixel device required
- πPrivacy: Google collects usage data; location history enabled by default; requires manual opt-out of telemetry
- π₯οΈUX/UI: Polished, familiar, massive app ecosystem β best day-one experience for new users
- π‘οΈSecurity: Monthly patches on Pixel; slower on OEM devices; Play Protect provides baseline malware scanning
- πSkill: Novice β zero setup required; works out of the box
- πPrivacy: Pre-installed spyware/adware; vendor telemetry; unremovable data-harvesting apps (e.g. some Xiaomi, Oppo builds)
- π₯οΈUX/UI: Cluttered with bloatware; intrusive ads in system apps; slow UI due to heavy customisation
- π‘οΈSecurity: Security patches delayed 6β18 months; often abandoned after 2 years despite devices remaining in use
- πSkill: Novice β deceptively easy, but impossible to truly secure without rooting
- πPrivacy: Enhanced Tracking Protection blocks 1000s of trackers; no Google deal dependency; fully auditable source
- π₯οΈUX/UI: Clean, customisable; rich extension ecosystem; excellent developer tools; cross-device sync via Firefox account
- π‘οΈSecurity: Rapid patching; sandboxed processes; uBlock Origin blocks malvertising and script injection
- πSkill: Novice-friendly install; install uBlock Origin from Add-ons in 30 seconds β zero configuration needed
- πPrivacy: Built-in ad/tracker blocking; fingerprint randomisation; Tor integration for private windows
- π₯οΈUX/UI: Polished Chrome-like interface; fastest cold-start of major browsers; minimal learning curve
- π‘οΈSecurity: Chromium base inherits V8 security; Brave Shields replaces uBlock for most users
- πSkill: Novice β privacy-by-default; no extensions needed for basic protection
- β οΈCaveat: Brave Rewards crypto system adds commercial layer; core browser remains open source (Apache 2.0)
- πPrivacy: Extensive Google telemetry; tied to Google account syncing; Manifest V3 weakens ad-blocking extensions
- π₯οΈUX/UI: Excellent β the standard other browsers are measured against; best web app compatibility
- π‘οΈSecurity: Fast patches; sandboxing good β but proprietary additions make full audit impossible
- πSkill: Novice β near zero friction; but privacy trade-offs are invisible to most users
- πPrivacy: Fully offline β GPS used locally, no location data sent to servers; no account required
- π₯οΈUX/UI: Powerful but dense interface; steep learning curve vs Google Maps; excellent for hiking/cycling routing
- π‘οΈSecurity: GPLv2; no server-side attack surface; maps stored locally
- πSkill: Beginner-to-intermediate; download maps region-by-region; plugin system adds complexity
- π±Sustainability: No data centre load for routing; offline maps work without mobile data β critical in areas with poor connectivity
- πPrivacy: Apache 2.0; zero tracking, zero ads, zero data collection β privacy by architecture
- π₯οΈUX/UI: Clean, intuitive interface β the closest OSM app to Google Maps in user experience
- π‘οΈSecurity: Fully offline; community-audited; F-Droid available avoiding Play Store
- πSkill: Novice β installs like any app; download a region and go
- πPrivacy: Records your complete location timeline by default; used to build advertising profiles; shared with law enforcement via geofence warrants
- π₯οΈUX/UI: Undeniably the best map UX on the market β live traffic, real-time transit, immersive view
- π‘οΈSecurity: Proprietary server-side; cannot audit data handling; requires Google account
- πSkill: Novice β instant usability; privacy costs invisible
- πPrivacy: Collects only your phone number; sealed sender; disappearing messages; no metadata stored on servers
- π₯οΈUX/UI: Clean, fast; voice/video calls; stories; close to WhatsApp in experience
- π‘οΈSecurity: AGPLv3; double-ratchet E2EE; audited by independent security researchers; used by UN, journalists, activists
- πSkill: Novice β install from App Store / Play Store in 2 minutes
- πPrivacy: Federated, self-hostable; E2EE by default in DMs; choose your own server or run your own
- π₯οΈUX/UI: Feature-rich (threads, spaces, bridges to Slack/Discord); interface can feel complex for new users
- π‘οΈSecurity: Apache 2.0; independent security audits; used by French government (matrix.org)
- πSkill: Intermediate β register on matrix.org is easy; self-hosting requires server admin knowledge
- πPrivacy: Metadata harvested by Meta (who contacts, when, where, how often); 2021 TOS forces data sharing with Facebook
- π₯οΈUX/UI: Best-in-class UX; 2B users globally; unavoidable social pressure
- π‘οΈSecurity: Uses Signal Protocol for E2EE content, but backup encryption and metadata handling remain opaque
- πSkill: Novice β zero friction but zero transparency
- πPrivacy: Fully offline; no telemetry by default; documents stay on your machine
- π₯οΈUX/UI: Familiar ribbon-style UI; imports/exports DOCX, XLSX, PPTX; macro support; less polished than MS Office
- π‘οΈSecurity: MPL 2.0; community patches; no subscription lock-in; ODF format is ISO standard β no vendor lock
- πSkill: Novice β anyone familiar with Word/Excel can use it within minutes
- ποΈGovernment Use: Italy, France, Germany, Brazil β officially deployed across public sector
- πPrivacy: You own your data entirely β cloud sync with zero third-party access; E2EE option available
- π₯οΈUX/UI: Google Drive-like web UI; mobile apps; collaborative document editing via Collabora/OnlyOffice integration
- π‘οΈSecurity: AGPLv3; 2FA; LDAP integration; audit logs; HiTrust-eligible when self-hosted
- πSkill: Intermediate β self-hosting requires a VPS or home server; managed Nextcloud providers available for novices
- πPrivacy: All documents stored on corporate servers; Google/Microsoft scan document content for AI training and advertising signals
- π₯οΈUX/UI: Best-in-class collaboration tools; real-time co-editing; AI integration β unmatched convenience
- π‘οΈSecurity: SOC2 compliant but proprietary β you trust their security claims, you cannot verify them
- πSkill: Novice β zero barrier; but vendor lock-in grows invisibly over time
- πPrivacy: VLC sends zero telemetry; PeerTube is federated with no central algorithm manipulation
- π₯οΈUX/UI: VLC: clean, plays everything; PeerTube: YouTube-like UI; smaller content library
- π‘οΈSecurity: GPLv2; no account required for VLC; PeerTube instances independently administered
- πSkill: Novice for VLC; beginner-to-intermediate for navigating PeerTube federation
- πPrivacy: Watch history, search, and engagement data used to build behavioural advertising profiles and recommendation algorithms
- π₯οΈUX/UI: World's best video platform β unrivalled content breadth; use with uBlock Origin + Firefox as mitigation
- π‘οΈSecurity: Proprietary; account required for full use; centralised content moderation with opaque appeals
- πSkill: Novice β but mitigating privacy risks (Invidious, NewPipe, uBlock) requires beginnerβintermediate skill
- πPrivacy: Wikipedia is CC-BY-SA, publicly readable with no account; Kiwix provides fully offline access β zero network calls
- π₯οΈUX/UI: Clean, fast, consistent; Kiwix app makes offline Wikipedia available in classrooms without internet access
- π‘οΈSecurity: GPLv2 (MediaWiki); no login required to read; HTTPS enforced sitewide
- πSkill: Novice β use Wikipedia as a web page; Kiwix download is a one-click install + ZIM file download
- π±Sustainability: Wikimedia Foundation runs entirely on renewable energy; Kiwix enables education in off-grid communities
- πPrivacy: Self-hosted; patient data stays in-country; HIPAA/GDPR-compatible deployment patterns; audit trails built-in
- π₯οΈUX/UI: Functional clinical workflow UI; requires training; new 3.x UI is significantly improved
- π‘οΈSecurity: MPL 2.0; FHIR R4 interoperability standard ensures no proprietary lock-in for patient records
- πSkill: Advanced for deployment (Java, MySQL, server admin); clinical users need structured training
- π±Sustainability: Replaces paper-based records in 40+ countries β measurably improves health outcomes without proprietary licence costs
- πPrivacy: Proprietary data formats; patient data can be sold to third parties under terms unreadable to patients; interoperability legally blocked in some contracts
- π₯οΈUX/UI: Costly, training-intensive; UX notoriously poor despite high licence costs β contributing to clinician burnout
- π‘οΈSecurity: Cannot audit source code; multiple major EHR breaches (Change Healthcare 2024 β 100M records exposed)
- πSkill: Intermediate β requires expensive vendor training; data cannot be freely migrated
Join TCIA at Data for Public Good β July 15β17, 2026 β to go deeper on every tool in this guide with fellow community members, educators, organizers, and technologists.