Episode 246 - Door 21: Bug bounties
Josh and Kurt talk about bug bounties https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_246_Door_21_Bug_bounties.mp3
Posts
Episode 245 - Door 20: Is SMS 2FA better than no 2FA?
Josh and Kurt talk about if SMS 2 factor auth is better than no 2FA https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_245_Door_20_Is_SMS_2FA_better_than_no_2FA.mp3 Links Cyber deepfaked their host
Episode 244 - Door 19: TLS certificate trust
Josh and Kurt talk about modern TLS certificate trust https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_244_Door_19_TLS_certificate_trust.mp3
Episode 243 - Door 18: Don't roll your own crypto or auth
Josh and Kurt talk about why it’s a horrible idea to roll your own crypto or auth https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_243_Door_18_Dont_roll_your_own_crypto_or_auth.mp3
Episode 242 - Door 17: Vulnerability response
Josh and Kurt talk about vulnerability response. What is it, what does it mean, how does it work https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_242_Door_17_Vulnerability_response.mp3
Episode 241 - Door 16: 16 bits of change
Josh and Kurt talk about the switch from 16 to 32 to 64 bit and even the changes from Intel to ARM https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_241_Door_16_16_bits_of_change.mp3
Episode 240 - Door 15: Supplier compliance
Josh and Kurt talk about supplier compliance https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_240_Door_15_Supplier_compliance.mp3 Links Annex A.15.1 of ISO 27001:2013 Episode 162 – SBOM with Allan Friedman
Committee or Community: Slowing down the future
I wrote a blog post about looking back, and I have a bit of snark in there where I talk about slowing down the future. I wanted to explain this a bit more and give everyone some food for thought around how we used to do things and how we should do them moving forward. There are groups and people that exist to slow things down. Sometimes that’s on purpose for good reasons, sometimes it’s on purpose for bad reasons, sometimes it’s not on purpose at all. ...
Episode 239 - Door 14: Backdoors
Josh and Kurt talk about backdoors in open source software https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_239_Door_14_Backdoors.mp3
Episode 238 - Door 13: Unlucky or survivor bias?
Josh and Kurt talk about the unluckiest man in the world and survivor bias https://traffic.libsyn.com/secure/opensourcesecuritypodcast/Episode_238_Door_13_Unlucky_or_survivor_bias.mp3 Links Unluckiest man in the world