Open Source Security

A podcast by Josh Bressers - Mondays

Mondays

Categories:

Technology

475 Episodes

  1. Episode 334 - Leap seconds break everything

    Published: 8/1/2022

  2. Episode 333 - Open Source is unfair

    Published: 7/25/2022

  3. Episode 332 - PyPI: 2FA or not 2FA, that is the question

    Published: 7/18/2022

  4. Episode 331 - GPG, but nothing makes sense

    Published: 7/11/2022

  5. Episode 330 - The sliding scale of risk: seeing the forest for the trees

    Published: 7/4/2022

  6. Episode 329 - Signing (What is it good for)

    Published: 6/27/2022

  7. Episode 328 - The Security of Jobs or Job Security

    Published: 6/20/2022

  8. Episode 327 - The security of alert fatigue

    Published: 6/13/2022

  9. Episode 326 - Big fat containers

    Published: 6/6/2022

  10. Episode 325 - Is one open source maintainer enough?

    Published: 5/30/2022

  11. Episode 324 - WTF is up with WFH

    Published: 5/23/2022

  12. Episode 323 - The fake 7-Zip vulnerability and SBOM

    Published: 5/16/2022

  13. Episode 322 - Adam Shostack on the security of Star Wars

    Published: 5/9/2022

  14. Episode 321 - Relativistic Security: Project Zero on 0day

    Published: 5/2/2022

  15. Episode 320 - Security Twitter is not the real world

    Published: 4/25/2022

  16. Episode 319 - Patch Tuesday with a capital T

    Published: 4/18/2022

  17. Episode 318 - Social engineering and why zlib got a 2018 CVE ID

    Published: 4/11/2022

  18. Episode 317 - The lack of compromise in security

    Published: 4/4/2022

  19. Episode 316 - You have to use open source

    Published: 3/28/2022

  20. Episode 315 - Who even makes all these terrible decisions?

    Published: 3/21/2022

8 / 24

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works. There’s a lot of good work happening that doesn’t get attention because there’s no marketing department behind it, they don’t have a developer relations team posting on LinkedIn every two hours. Let’s focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what’s up, they have a lot to teach us. We just have to listen.