Open Source Security

A podcast by Josh Bressers - Mondays

Mondays

Categories:

475 Episodes

  1. Episode 415 - Reducing attack surface for less security

    Published: 2/12/2024
  2. Episode 414 - The exploited ecosystem of open source

    Published: 2/5/2024
  3. Episode 413 - PyTorch and NPM get attacked, but it's OK

    Published: 1/29/2024
  4. Episode 412 - Blame the users for bad passwords!

    Published: 1/22/2024
  5. Episode 411 - The security tools that started it all

    Published: 1/15/2024
  6. Episode 410 - Package identifiers are really hard

    Published: 1/8/2024
  7. Episode 409 - You wouldn't hack a train?

    Published: 1/1/2024
  8. Episode 408 - Does Kubernetes need long term support?

    Published: 12/25/2023
  9. Episode 407 - Should Santa use AI?

    Published: 12/18/2023
  10. Episode 406 - The security of radio

    Published: 12/11/2023
  11. Episode 405 - Modding games isn't cheating and security isn't fair

    Published: 12/4/2023
  12. Episode 403 - Does the government banning apps work?

    Published: 11/27/2023
  13. Episode 402 - The EU's eIDAS regulation is a terrible idea

    Published: 11/20/2023
  14. Episode 401 - Security skills shortage - We've tried nothing and the same thing keeps happening

    Published: 11/13/2023
  15. Episode 400 - When can the government hack a victim?

    Published: 11/6/2023
  16. Episode 399 - Curl, Security, and Daniel Stenberg

    Published: 10/30/2023
  17. Episode 398 - Is only 11% of open source maintained?

    Published: 10/23/2023
  18. Episode 397 - The curl and glibc vulnerabilities

    Published: 10/16/2023
  19. Episode 396 - CLAs are bad, Mkay?

    Published: 10/9/2023
  20. Episode 395 - Uncertainty, trust, and security

    Published: 10/2/2023

4 / 24

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works. There’s a lot of good work happening that doesn’t get attention because there’s no marketing department behind it, they don’t have a developer relations team posting on LinkedIn every two hours. Let’s focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what’s up, they have a lot to teach us. We just have to listen.