Sign up to save your podcasts
Or
Share Episode 343 - Stop trying to fix the open source software supply chain
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 343 - Stop trying to fix the open source software supply chain
Josh and Kurt talk about a blog post that explains there isn't really an open source software supply chain. The whole idea of open source being one thing is incorrect, open source is really a lot of little things put together. A lot of companies and organizations get this wrong.
Show Notes- Iliana's Twitter
- There is no “software supply chain”
- Google supply chain blog
- GitHub ansi_term advisory
- PyPI 2FA Dashboard
- tarfile issue rediscovered in 2022
View all episodes
By Josh Bressers
4.6
4141 ratings
Josh and Kurt talk about a blog post that explains there isn't really an open source software supply chain. The whole idea of open source being one thing is incorrect, open source is really a lot of little things put together. A lot of companies and organizations get this wrong.
Show Notes- Iliana's Twitter
- There is no “software supply chain”
- Google supply chain blog
- GitHub ansi_term advisory
- PyPI 2FA Dashboard
- tarfile issue rediscovered in 2022
More shows like Open Source Security
View all
Risky Business
361 Listeners
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
627 Listeners
Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec
363 Listeners
LINUX Unplugged
265 Listeners
Hacked
183 Listeners
CyberWire Daily
1,003 Listeners
Late Night Linux
154 Listeners
Smashing Security
311 Listeners
Click Here
399 Listeners
CISO Series Podcast
187 Listeners
Hacking Humans
314 Listeners
Defense in Depth
76 Listeners
Self-Hosted
135 Listeners
2.5 Admins
92 Listeners
Risky Bulletin
33 Listeners