Episode 324 - WTF is up with WFH
Josh and Kurt talk about the whole work from home debate. It seems like there are a lot of very silly excuses why working from home is bad. We've both been working from home for a long time and have a...
23 Maj 202235min
Episode 323 - The fake 7-Zip vulnerability and SBOM
Josh and Kurt talk about a fake 7-Zip security report. It's pretty clear that everyone is running open source all the time. We end on some thoughts around what SBOM is good for, and who should be resp...
16 Maj 202238min
Episode 322 - Adam Shostack on the security of Star Wars
Josh and Kurt talk to Adam Shostack about his new book "Threats: What Every Engineer Should Learn From Star Wars". We discuss some of the lessons and threats in the Star Wars universe, it's an old cod...
9 Maj 202233min
Episode 321 - Relativistic Security: Project Zero on 0day
Josh and Kurt talk about the Google Project Zero blog post about 0day vulnerabilities in 2021. There were a lot more than ever before, but why? Part of the challenge is the whole industry is expanding...
2 Maj 202234min
Episode 320 - Security Twitter is not the real world
Josh and Kurt talk about a survey about a TuxCare patch management and vulnerability detection. Sometimes our security bubble makes us forget what it's like in the real world for the people who keep o...
25 Apr 202232min
Episode 319 - Patch Tuesday with a capital T
Josh and Kurt talk about a lot of security vulnerabilities in this month's Patch Tuesday. There's also a new Git vulnerability. This sparks the age old question of how fast to patch? The answer isn't ...
18 Apr 202230min
Episode 318 - Social engineering and why zlib got a 2018 CVE ID
Josh and Kurt talk about hackers using emergency data requests to gain access to sensitive data. The argument that somehow backdoors can be protected falls under this problem. We don't yet have the te...
11 Apr 202230min
Episode 317 - The lack of compromise in security
Josh and Kurt talk about the binary nature of security. Many of our ideas are yes or no, there's not much in the middle. The conversation ends up derailed due to a Twitter thread about pinning depende...
4 Apr 202232min
