Open Source Security Podcast

Mar 29, 2021

Josh and Kurt talk to Mark Loveless from GitLab. We touch on DevSecOps, what GitLab is doing, threat modeling, and the time Mark tested positive for TNT at the airport. It's a great conversation.

Show Notes

• Mark Loveless Twitter
• GitLab
• GitLab Handbook
• How we approach open source security
• PASTA threat modeling
• GitLab...

Mar 22, 2021

Josh and Kurt talk about how terrible daylight savings is. GitHub yanking some exploit code. And the Linux Foundation new project to sign all the things.

Show Notes

• Researcher Publishes Code to Exploit Microsoft Exchange Vulnerabilities on Github
• GitHub content restrictions
• Reproducing the Microsoft Exchange...

Mar 15, 2021

Josh and Kurt talk to Loris Degioanni and Dan from Sysdig. Sysdig are the minds behind Falco, an amazing open source runtime security engine. We talk about where their technology came from, they huge code donation to the CNCF and what securing a modern infrastructure looks like today.

Show Notes

• Sysdig
• Falco

Mar 8, 2021

Josh and Kurt talk about DWF. It's back and the intention is to have real community driven security identifiers!

Show Notes

• Committee vs Community
• dwflist repo
• dwf-request tooling repo
• dwf-workflow policy repo
• CVE plateua graph

Mar 1, 2021

Josh and Kurt talk with Dave Jevans CEO of CipherTrace and chairman of the anti-phishing working group about the challenges of keeping track of cryptocurrency in the modern age.

Show Notes

• Dave's Twitter
• CipherTrace
• Anti Phishing Working...