Open Source Security

A podcast by Josh Bressers - Mondays

Mondays

Categories:

475 Episodes

  1. Episode 454 - The state of open source with Brian Fox from Sonatype and Donald Fischer from Tidelift

    Published: 11/11/2024
  2. Episode 453 - Software Liability

    Published: 11/4/2024
  3. Episode 452 - All about Meshtastic

    Published: 10/28/2024
  4. Episode 451 - Python security with Seth Larson

    Published: 10/21/2024
  5. Episode 450 - What's Wrong With WordPress

    Published: 10/14/2024
  6. Episode 449 - The CUPSpocalypse

    Published: 10/7/2024
  7. Episode 448 - What's wrong with CISA?

    Published: 9/30/2024
  8. Episode 447 - The Tidelift 2024 open source maintainer report

    Published: 9/23/2024
  9. Episode 446 - Researchers took over .MOBI TLD

    Published: 9/16/2024
  10. Episode 445 - EPSS with Jay Jacobs

    Published: 9/9/2024
  11. Episode 444 - Open Source and End of Life

    Published: 9/2/2024
  12. Episode 443 - The Supply Chain Security Crisis

    Published: 8/26/2024
  13. Episode 442 - The foundation of society, TLS certificates are a mess

    Published: 8/19/2024
  14. Episode 441 - Is CWE useful?

    Published: 8/12/2024
  15. Episode 440 - "What is open source" talk Josh gave

    Published: 8/5/2024
  16. Episode 439 - Where are all the youth in open source?

    Published: 7/29/2024
  17. Episode 438 - CISA's bad OSS advice vs the Whitehouse good advice

    Published: 7/22/2024
  18. Episode 437 - CocoPods and proper funding for open source

    Published: 7/15/2024
  19. Episode 436 - OpenSSH and node-ip - it's all exponential growth

    Published: 7/8/2024
  20. Episode 435 - polyfill.io - open source is too big to fix

    Published: 7/1/2024

2 / 24

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works. There’s a lot of good work happening that doesn’t get attention because there’s no marketing department behind it, they don’t have a developer relations team posting on LinkedIn every two hours. Let’s focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what’s up, they have a lot to teach us. We just have to listen.