Security – Open Source Security

Episode 377 – The world is changing too fast for humans to understand

Josh and Kurt talk about PyPI suspending new accounts and packages for a day, and a 60 minutes story about deepfakes. The problems are mostly the same, but for very different reasons. The world is changing faster than we can keep up, so what is a human to do? Show Notes

Episode 376 – Open Source Summit, who built your open source, and AI

Josh and Kurt talk about the Open Source Summit in Vancouver. Josh was there and we pick on two observations. Firstly that security keeps trying to use fear as a feature, except it doesn’t work. Secondly we discuss AI and how people are talking about it. It is changing things, how much is yet toContinue reading “Episode 376 – Open Source Summit, who built your open source, and AI”

Episode 375 – The market forces of left-pad, Episode 77 remaster part 2

Josh and Kurt finish up the leftpad discussion. We spent a lot of time talking about how the market will respond to these sort of events, and the market did indeed speak; very little has changed. There is an aspect of all these security events where we need to understand the cost vs benefit justContinue reading “Episode 375 – The market forces of left-pad, Episode 77 remaster part 2”

Episode 374 – The event we called left-pad, Episode 77 remaster part 1

Josh and Kurt revisit Episode 77, which was named “npm and the supply chain” but was a discussion about the incident we all know now as “leftpad”. We didn’t understand what was happening at the time, but this would become an event we talk about for years to come. It’s shocking how many of theContinue reading “Episode 374 – The event we called left-pad, Episode 77 remaster part 1”

Episode 373 – HHGG security, Episode 42 remaster part 2

This is the second part of remastering Episode 42 which is all about the security in the Hitchhiker’s Guide to the Galaxy movie. It’s a fun show and it’s shocking how many of these security themes are still relevant today. Show Notes

Episode 372 – HHGG security, Episode 42 remaster part 1

The podcast is on a hiatus for a little while due to some personal matters, but that creates an opportunity to remaster some fun old episodes. These shows are REALLY hard to listen to at the current quality (tools and talent has come a long way in the last few years). This is a remasterContinue reading “Episode 372 – HHGG security, Episode 42 remaster part 1”

Episode 371 – pip install is the tool we deserve but not the tool we need

Josh and Kurt talk about a blog post about pip and virtual environments. This eventually turns into a larger conversation around packaging tools and how we see incremental changes over time. The package ecosystems were what we needed a few years ago, but our needs have changed. Show Notes

Episode 370 – Open Source is bigger than you can imagine

Josh and Kurt talk about some data on the size of NPM. Josh wrote a blog post and a report about the amount of SEO spam in NPM was released. Open source is enormous, and it’s mostly one person. It’s hard to imagine how this all works sometimes and this lack of understanding can createContinue reading “Episode 370 – Open Source is bigger than you can imagine”

Episode 369 – OpenAI broke ChatGPT then tried to blame open source

Josh and Kurt talk about OpenAI having a bug in ChatGPT, then they tried to blame open source. It didn’t go very well. In this episode Josh and Kurt argue a lot, maybe someday we’ll know who was the least wrong. Show Notes

Episode 368 – The Sovereign Tech Fund with Fiona Krakenbürger

Josh and Kurt talk to Fiona Krakenbürger about the Sovereign Tech Fund. This is a fund created by Germany to fund important open source projects. Fiona has amazing insight into how this fund was created, what it’s doing today to help fund open source. She discusses where we go from here and what the futureContinue reading “Episode 368 – The Sovereign Tech Fund with Fiona Krakenbürger”