Open Source Security

Auteur(s): Josh Bressers
Écouter gratuitement

  • Résumé

  • Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works. There’s a lot of good work happening that doesn’t get attention because there’s no marketing department behind it, they don’t have a developer relations team posting on LinkedIn every two hours. Let’s focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what’s up, they have a lot to teach us. We just have to listen.
    This work is licensed under the Creative Commons Attribution 4.0 International License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/ or send a letter to Creative Commons, PO Box 1866, Mountain View, CA 94042, USA.
    Voir plus Voir moins
Voir plus Voir moins
Épisodes
  • Patching EOL Open Source with Aaron Frost

    Patching EOL Open Source with Aaron Frost
    Feb 17 2025

    In this episode, Open Source Security chats with Aaron Frost, CEO of Hero Devs about the world of maintaining end-of-life open source software. Aaron explains how EOL versions of open source work and how backporting security fixes can help maintaining compliance. In the discussion we cover the "just upgrade" mentality, how backporting works, why it's hard, and why it matters. We also cover some oddities the world of CVE brings to the discussion.

    The blog post for this episode can be found at
    https://opensourcesecurity.io/2025/2025-02-patching_EOL_OSS_aaron_frost/
    Voir plus Voir moins
    23 min
  • Why do we keep ignoring CI security with François Proulx

    Why do we keep ignoring CI security with François Proulx
    Feb 10 2025

    François Proulx, a supply chain security researcher at Boost Security, discusses how continuous integration (CI) and build pipeline security represents a critical and overlooked hole in our supply chain security. It seems like most supply chain compromises are actually from CI system breaches rather than direct code compromise, yet we seem to obsess over everything on either side of the CI system. François has a bunch of really good practical suggestions for how we can start to improve our CI security today.

    The blog post for this episode can be found at
    https://opensourcesecurity.io/2025/2025-02-ignoring_ci_security_francois_proulx/
    Voir plus Voir moins
    24 min
  • Modern day authentication with Marc Boorshtein

    Modern day authentication with Marc Boorshtein
    Feb 3 2025

    In this discussion with Tremolo Security CTO Marc Boorshtein, we explore what modern day Single Sign-On (SSO) looks like. Everyone likes to talk about zero trust, but how does that work? We talk about some of the history of authentication that got us here, and some technical details on how you should be implementing authentication into your application. We finish up with some passkey details and realize every authentication discussion really just turns into complaining how hard identity is.

    The blog post for this episode can be found at

    https://opensourcesecurity.io/2025/2025-02-modern_day_authentication_with_marc_boorshtein/
    Voir plus Voir moins
    26 min

Ce que les auditeurs disent de Open Source Security

Moyenne des évaluations de clients

Évaluations – Cliquez sur les onglets pour changer la source des évaluations.

Évaluations sur Audible.ca

Évaluations sur Amazon.ca
Il n'y a pas encore de critiques pour ce titre.