Open Source Security Podcast

Jun 27, 2022

Josh and Kurt talk about what the actual purpose of signing artifacts is. This is one of those spaces where the chain of custody for signing content is a lot more complicated than it sometimes seems to be. Is delivering software over https just as good as using a detached signature? How did we end up here, what do we...

Jun 20, 2022

Josh and Kurt talk about the security of employees leaving jobs. Be it a voluntary departure or in the context of the current layoffs we see, what are the security implications of having to remove access for one or more people departing their job?

Show Notes

• Tesla Layoffs
• Coinbase...

Jun 13, 2022

Josh and Kurt talk about a funny GitHub reply that notified 400,000 people. It's fun to laugh at this, but it's an easy open to discussing alert fatigue and why it's important to be very mindful of our communications.

Show Notes

• GitHub 400K notifications Hacker News thread
• Reddit user TV...

Jun 6, 2022

Josh and Kurt talk about containers. There are a lot of opinions around what type of containers is best. Back when it all started there were only huge distro sized containers. Now we have a world with many different container types and sizes. Is one better?

Show Notes

• Programming in the Apocalypse
• Bob Diachenko