Open Source Security Podcast Por Josh Bressers arte de portada

Open Source Security

Open Source Security

De: Josh Bressers
Escúchala gratis

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works. There's a lot of good work happening that doesn't get attention because there's no marketing department behind it, they don't have a developer relations team posting on LinkedIn every two hours. Let's focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what's up, they have a lot to teach us. We just have to listen.This work is licensed under the Creative Commons Attribution 4.0 International License. To view a copy of this license, visit http://creativecommons.org/licenses/by/4.0/ or send a letter to Creative Commons, PO Box 1866, Mountain View, CA 94042, USA.
Episodios
  • Open Source Security at scale with Michael Wisner

    Open Source Security at scale with Michael Wisner
    Mar 30 2026

    Josh talks to Michael Wisner about a talk he gave at FOSDEM as well as his work on Alpha Omega at the Linux Foudnation. Michael is approaching open source security in a way that nobody has ever tried before. What if we could fund some really big, really hard projects? It's not cheap or easy, but he's getting it done. We spend a lot of the time discussing package registries, which are a huge topic. Michael is doing some amazing work helping package registries which is the first step in a very long journey.

    The show notes and blog post for this episode can be found at
    https://opensourcesecurity.io/2026/2026-03-michael-wisner/
    Más Menos
    43 m
  • 2026 State of the Software Supply Chain with Brian Fox

    2026 State of the Software Supply Chain with Brian Fox
    Mar 23 2026

    Josh chats with Brian Fox from Sonatype about their 2026 State of the Software Supply Chain report. Most of the number continue to grow at alarming rates, but there's some new interesting findings in this one. We discuss end of life and open source which is tough to define. We touch on what using AI with open source dependencies looks like (and why it's broken), and we discuss the challenge of upgrading your open source dependencies in a way that doesn't break everything. It's a great report and great discussion.

    The show notes and blog post for this episode can be found at
    https://opensourcesecurity.io/2026/2026-03-SOTSSC-Brian-Fox/
    Más Menos
    36 m
  • MCP and Agent security with Luke Hinds

    MCP and Agent security with Luke Hinds
    Mar 16 2026

    Josh talks to Luke Hinds, CEO of Always Further, about MCP and agent security. We start out talking about Luke's new tool, nono which is a sandboxing tool that has AI agents in mind as a use case. We explain what MCP and agents are doing as well as why it's so hard to secure them. It's not impossible, but it's not simple either. We end the show by discussing some of the more human aspects to security and how history may be repeating itself with security folks laughing at new users who don't know any better.

    The show notes and blog post for this episode can be found at
    https://opensourcesecurity.io/2026/2026-03-mcp-agent-luke/
    Más Menos
    36 m
Todavía no hay opiniones