Open Source Security
Teknologia

Open Source Security

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works. There's a lot of good work happening that doesn't get attention because there's no marketing department behind it, they don't have a developer relations team posting on LinkedIn every two hours. Let's focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what's up, they have a lot to teach us. We just have to listen.

Jaksot(527)

Episode 398 - Is only 11% of open source maintained?

Episode 398 - Is only 11% of open source maintained?

Josh and Kurt talk about Sonatype's 9th Annual State of the Software Supply Chain. There's a ton of data in the report, but the thing we want to talk about is the statistic that only 11% of open sourc...

23 Loka 202336min

Episode 397 - The curl and glibc vulnerabilities

Episode 397 - The curl and glibc vulnerabilities

Josh and Kurt talk about a curl and glibc bug. The bugs themselves aren't super interesting, but there are other conversations around the bugs that are interesting. Why don't we just rewrite everythin...

16 Loka 202334min

Episode 396 - CLAs are bad, Mkay?

Episode 396 - CLAs are bad, Mkay?

Josh and Kurt talk about contributor license agreements (CLAs). CLAs used to be seen as a necessary evil, but they're almost certainly bad now. We're seeing CLAs being abused, it's clear now anything ...

9 Loka 202335min

Episode 395 - Uncertainty, trust, and security

Episode 395 - Uncertainty, trust, and security

Josh and Kurt talk about uncertainty. There are a bunch of stories in the news lately that really just boil down to uncertainty. Uncertainty is incredibly dangerous for everyone. We are afraid of unce...

2 Loka 202333min

Episode 394 - The lie anyone can contribute to open source

Episode 394 - The lie anyone can contribute to open source

Josh and Kurt talk about filing bugs for software. There's the old saying that anyone can file bugs and submit patches for open source, but the reality is most people can't. Filing bugs for both close...

25 Syys 202335min

Episode 393 - Can you secure something you don't own?

Episode 393 - Can you secure something you don't own?

Josh and Kurt talk about the weird world we live in how where we can't control a lot of our hardware. We don't really have control over most devices we interact with on a daily basis. The conversation...

18 Syys 202333min

Episode 392 - Curl and the calamity of CVE

Episode 392 - Curl and the calamity of CVE

Josh and Kurt talk about why CVE is making the news lately. Things are not well in the CVE program, and it's not looking like anything will get fixed anytime soon. Josh and Kurt have a unique set of k...

11 Syys 202346min

Episode 391 - The Wordpress 100 year disaster recovery problem

Episode 391 - The Wordpress 100 year disaster recovery problem

Josh and Kurt talk about wordpress selling web services with a 100 year lifespan. Will WordPress still be around in 100 years? What would 100 years of disaster recovery look like? Most of us will neve...

4 Syys 202339min