Episode 164 - DNS over HTTPS: Probably not the end of the world
Josh and Kurt about DNS over HTTPS and how it may or may not destroy civilization. We also discuss the disruption of cloud in the context of security and touch on the news that GitHub is now a CVE CNA...
7 Okt 201930min
Episode 163 - Death to Python 2
Josh and Kurt about the upcoming Python 2 EOL. What does it mean, why does it matter, and what you can you do? Show Notes Python Clock Python's statement about sunsetting Python 2 wifi 6
30 Sep 201933min
Episode 162 - SBOM with Allan Friedman
Josh and Kurt speak with Allan Friedman of the US National Telecommunications and Information Administration about Software Bill of Materials. Where are we today, where are things going, and how you c...
23 Sep 201930min
Episode 161 - Human nature and ad powered open source
Josh and Kurt start out discussing human nature and how it affects how we view security. A lot of things that look easy are actually really hard. We also talk about the npm library Standard showing co...
16 Sep 201929min
Episode 160 - Disclosing security issues is insanely complicated: Part 2
Josh and Kurt talk about disclosing security flaws in open source. This is part two of a discussion around how to disclose security issues. This episode focuses on some expectations and behaviors for ...
9 Sep 201931min
Episode 159 - Disclosing security issues is insanely complicated: Part 1
Josh and Kurt talk about disclosing security flaws. It's a topic that's come up a few times in the last few weeks and it's more complicated than it's ever been. We certainly ask more questions than we...
2 Sep 201929min
Episode 158 - The mess that we call credit agencies in the US
Josh and Kurt talk about the current state of credit security freezes in the US. We recount a thrilling tale of all the things Josh had to do to get new Internet service. It was all quite silly really...
26 Aug 201927min
Episode 157 - Backdoors and snake oil in our cryptography
Josh and Kurt talk about snakeoil cryptography at Black Hat and the new backdoored cryptography fight. Both of these problems will be with us for a very long time. These are fights worth fighting beca...
19 Aug 201930min
