Castuner
Gehitu podcast bat

Open Source Security

Josh Bressers

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works.There's a lot of good work happening that doesn't get attention because there's no marketing department behind it, they don't have a developer relations team posting on LinkedIn every two hours. Let's focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what's up, they have a lot to teach us. We just have to listen.

Podcastaren webgunea

Entzun zure aplikazioan

Atalak

550 atal

  1. Finding missing security backports with Roi Nisimi 29:34
  2. Dependency attacks in 2026 with James Matchett 32:03
  3. Sovereignty, policy, and OpenUK with Amanda Brock 34:44
  4. The curl summer of Bliss with Daniel and Stefan 33:26
  5. CRA vulnerability reporting with Daniel Thompson 40:40
  6. Finding difficult vulnerabilities with Jaya Baloo from AISLE 29:13
  7. Sovereign Tech Agency with Erik Möller 36:17
  8. CVEs vs Advisories with Paul Asadoorian 38:07
  9. Maintaining EOL Open Source with Commonhaus and HeroDevs 34:24
  10. Cleanup, Speedup, Levelup open source at e18e 35:08
  11. VulnCheck's State of Exploitation Report with Patrick Garrity 36:45
  12. Securing critical infrastructure with Josh Corman 35:38
  13. Abandoned open source with Josh Marpet 34:16
  14. Red Hat's Project Lightwell with Mo Duffy 32:32
  15. Rust Foundation Maintainers Fund with Lori and Niko 32:46
  16. AIBOM, CBOM, and HBOM with Allan Friedman 34:38
  17. Packagist and Composer security with Jordi Boggiano 34:48
  18. Sustaining Open VSX with Mike and Thabang 36:53
  19. Hacking your CI/CD with François Proulx 35:37
  20. Open source verification with Sal Kimmich 31:54
  21. Vulnerability disclosure with Casey Ellis 37:49
  22. F-Droid the open app store with Hans 36:47
  23. Open source is critical infrastructure with Kat Cosgrove 38:01
  24. How to actually test a disaster plan with David Bernstein 34:58
  25. Open Source Pledge with Vlad-Stefan Harbuz 34:56
  26. Building a plan for disaster with David Bernstein 39:19
  27. Open Source Malware with Paul McCarty 38:23
  28. Package management challenges with Andrew Nesbitt 36:08
  29. Open Source Security at scale with Michael Winser 42:30
  30. 2026 State of the Software Supply Chain with Brian Fox 35:48
  31. MCP and Agent security with Luke Hinds 35:36
  32. The State of OpenSSL for pyca/cryptography with Alex Gaynor and Paul Kehrer 33:34
  33. Rust coreutils with Sylvestre Ledru 31:06
  34. Goose and the Agentic AI Foundation with Brad Axen 29:53
  35. The Global Vulnerability Intelligence Platform with Olle E. Johansson 34:24
  36. Digital Sovereignty and Nextcloud with Frank Karlitschek 32:26
  37. The Art of Crisis Management with David Bernstein 35:32
  38. WTF is a passkey with William Brown 1:02:55
  39. All about Suricata with Victor Julien 32:11
  40. Iocaine poisons bots with Gergely Nagy 40:07
  41. Anubis with Xe Iaso 33:37
  42. Rustls with Dirkjan and Joe 29:41
  43. Daniel Thompson answers: Does the CRA apply to Santa? 47:29
  44. Linux Foundation Europe with Gabriele Columbro 32:56
  45. Updating open source dependencies with Jamie Tanna 29:31
  46. TARmageddon with Alex Zenla 42:39
  47. Python Security with Seth Larson 31:44
  48. Linux Vendor Firmware Service with Richard Hughes 35:46
  49. NPM supply chain attacks with Charlie Eriksen 34:31
  50. Detecting XZ in Debian with Otto Kekäläinen 31:48