Open Source Security

By Josh BressersTechnology

Open Source Security episodes

June 11, 2018 Episode 100 - You're bad at buying security, we can help!
Josh and Kurt talk about how to be a smart security buyer. We have guest Steve Mayzak walk us through how a the buying process works as well as giving out a ton of great advice. Even if you're experienced with how to buy security technology you should give this a listen.
36 min
June 04, 2018 Episode 99 - Consumer security is too broken to fix, and it doesn't matter
Josh and Kurt talk about a number of consumer security issues. The FBI told everyone to reboot their routers which they won't do. The .app top level domain is a cesspool of malware. Everyone has a cell phone and won't update them properly. None of this probably matters though. Unless there are real measurable tragedies caused by this tech, people tend not to really care.
35 min
May 28, 2018 Episode 98 - When IT decisions kill people
Josh and Kurt talk about the NTSB report from the fatal Uber crash and what happened with Amazon's Alexa recording then emailing a private conversation. IT decisions now have real world consequences like never before.
35 min
May 20, 2018 Episode 97 - Automation: Humans are slow and dumb
Josh and Kurt talk about the security of automation as well as automating security. The only way automation will really work long term is full automation. Humans can't be trusted enough to rely on them to do things right.
34 min
May 11, 2018 Episode 96 - Are legal backdoors a good idea?
Josh and Kurt talk about backdoors in code and products that have been put there on purpose. We talk about unlocking phones. Encryption backdoors with a focus on why they won't work.
33 min
May 07, 2018 Episode 95 - Twitter passwords and npm backdoors
Josh and Kurt talk about Twitter doing the right thing when they logged a lot of passwords and the npm malicious getcookies package and how backdoors work in code.
30 min
April 30, 2018 Episode 94 - DNSSEC, BGP, and reality
Josh and Kurt talk about the Amazon Route 53 incident and what it really means for the modern infrastructure. Complaining nobody is using DNSSEC or securing BGP aren't the right conversations to be having. Reality must be considered in any honest conversation about these topics.
29 min
April 15, 2018 Episode 93 - Security flaws in beep and patch, how did we get here?
Josh and Kurt talk about security flaws in beep and patch. How on earth were there security flaws in beep and patch?
37 min
April 15, 2018 Episode 92 - Chat with Rami Saas the CEO of WhiteSource
Josh and Kurt talk to Rami Saas, the CEO of WhiteSource about 3rd party open source security as well as open source licensing.
34 min
April 08, 2018 Episode 91 - Security lessons from a 7 year old
Josh and Kurt talk to a 7 year old about security. We cover Minecraft security, passwords, hacking, and many many other nuggets of wisdom.
20 min

About Open Source Security

From the publisher's feed

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works.