Open source verification with Sal Kimmich

Open source verification with Sal Kimmich

Josh chats with Sal Kimmich about the current state of everything, and what we can expect next. Sal has some incredible insight into what we can expect to see due to the current wave of security bugs and incidents. There are some new features we will need in both our hardware and software to ward off the state of things. Since those features are years away, what we need in the short term is shoring up our SDLC programs. Sal has some really good medical examples and analogies for this one. It's a huge problem but not insurmountable.

The show notes and blog post for this episode can be found at
https://opensourcesecurity.io/2026/2026-06-verification-sal-kimmich/

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(542)

Maintaining EOL Open Source with Commonhaus and HeroDevs

Maintaining EOL Open Source with Commonhaus and HeroDevs

Josh chats with Erin Schnabel and Rob Nalen about a new effort from Commonhaus and HeroDevs for maintaining end of life open source. This project, the Open Source Sustainability Initiative is a clever...

17 Elo 34min

Cleanup, Speedup, Levelup open source at e18e

Cleanup, Speedup, Levelup open source at e18e

Josh chats with James from e18e. This is a project that is working on improving Javascript packages by cleaning up, speeding up, and leveling up the dependencies. The way the e18e project handles this...

10 Elo 35min

VulnCheck's State of Exploitation Report with Patrick Garrity

VulnCheck's State of Exploitation Report with Patrick Garrity

Josh chats with Patrick Garrity about the VulnCheck State of Exploitation 1H-2026 report. Patrick explains the current trends we are seeing around vulnerabilities right now. While the number of CVEs i...

3 Elo 36min

Securing critical infrastructure with Josh Corman

Securing critical infrastructure with Josh Corman

Open Source Security welcomes Josh Corman to talk about the challenges around securing our critical infrastructure. Specifically the discussion centers around our water supplies. There are a lot of re...

27 Heinä 35min

Abandoned open source with Josh Marpet

Abandoned open source with Josh Marpet

Josh welcomes Josh Marpet for a discussion about abandoned open source packages. Josh Marpet has a foundation called Value Chain Risk Institute that has a report discussion how to start measuring if a...

20 Heinä 34min

Red Hat's Project Lightwell with Mo Duffy

Red Hat's Project Lightwell with Mo Duffy

Josh welcomes Mo Duffy from Red Hat to chat about project Lightwell. The idea is to leverage the resources and understanding Red Hat has built up over the years to help deal with the deluge of vulnera...

13 Heinä 32min

Rust Foundation Maintainers Fund with Lori and Niko

Rust Foundation Maintainers Fund with Lori and Niko

Josh chats with Lori Lorusso and Niko Matsakis about the Rust Foundation Maintainers Fund. This is a new project the Rust Foundation has create to help fund Rust maintainers. It's a great discussion w...

6 Heinä 32min

AIBOM, CBOM, and HBOM with Allan Friedman

AIBOM, CBOM, and HBOM with Allan Friedman

Josh chats with Allan Friedman about all things Bill of Materials. Allan did a ton of work to help turn SBOM into what it is today. He has many thoughts and ideas around the new types of BOMs, a conce...

29 Kesä 34min