Forking Open Source Projects with Sheogorath
In this episode Open Source Security chats with Sheogorath about HedgeDoc project's journey from HackMD to CodiMD and finally to HedgeDoc. We learn what forking a project looks like, including license...
24 Feb 202522min
Patching EOL Open Source with Aaron Frost
In this episode, Open Source Security chats with Aaron Frost, CEO of Hero Devs about the world of maintaining end-of-life open source software. Aaron explains how EOL versions of open source work and ...
17 Feb 202522min
Why do we keep ignoring CI security with François Proulx
François Proulx, a supply chain security researcher at Boost Security, discusses how continuous integration (CI) and build pipeline security represents a critical and overlooked hole in our supply cha...
10 Feb 202523min
Modern day authentication with Marc Boorshtein
In this discussion with Tremolo Security CTO Marc Boorshtein, we explore what modern day Single Sign-On (SSO) looks like. Everyone likes to talk about zero trust, but how does that work? We talk about...
3 Feb 202526min
Open Source Maintenance with Gary Kramlich
In this episode, Gary Kramlich, the lead developer of Pidgin discusses the challenges and strategies of maintaining a 26-year-old open source messaging client.Gary tell us all about how a small team m...
20 Jan 202527min
Safety vs Security with Thomas Depierre
In this episode of Open Source Security, Josh welcomes Thomas Depierre, a Site Reliability Engineer and open source maintainer, to discuss the intersection of safety and security. Thomas explains why ...
13 Jan 202521min
The Future of Open Source Security
It's a new year and time for some changes to the opensourcesecurity.io website. It's time to retire the podcast, but that's to make way for something new and hopefully better. You can read the detai...
1 Jan 20254min
Episode 461 - The new NIST password guidance
Josh and Kurt talk about new NIST password guidance. There's some really good stuff in this new document. Ideas like usability and equity show up (which is amazing). There's more strict guidance again...
30 Dec 202436min
