Josh and Kurt talk to Dan Lorenc from Google about supply chain security. What’s currently going on in this space and what sort of new thing scan we look forward to? We discuss Google’s open source use, Project Sigstore, the SLSA framework and more. Show Notes Dan’s Twitter Sigstore SLSA Framework
Tag Archives: google
Episode 280 – The perils of Single Sign On
Josh and Kurt talk about what happens when you lose access to your Single Sign On provider. These providers have become critical to many of us, if we lose access to our SSO account we will lose access to many services. Show Notes Postbank
Episode 274 – Mr. Amazon’s Neighborhood
Josh and Kurt talk about Amazon sidewalk. There is a lot of attention, but how is this any different than the surveillance networks Apple and Google have built? Show Notes Amazon Sidewalk Ads and toothpaste Airtags and stalking
Episode 267 – Does 0day still mean 0day?
Josh and Kurt talk about 0day security vulnerabilities. What are they? What were they? And why the name has taken on a new meaning, and that’s OK. Show Notes Hacker History Podcast Chrome 0day NTFS Documentation
Episode 206 – Confidential Virtual Machines; The future of cloud computing
Josh and Kurt talk about Google’s new confidential VMs. The AMD Secure Encrypted Virtualization is the technology that makes it all possible. What is SEV, how does it work, and why should you care? This technology is going to be the future of the cloud. Show Notes Google confidential VMs AMD SEV SEV vs SGXContinue reading “Episode 206 – Confidential Virtual Machines; The future of cloud computing”
Episode 204 – What Would Apple Do?
Josh and Kurt talk about some recent security actions Apple has taken. Not all are good, but in general Apple is doing things to benefit their customers (their customers are not advertisers). We also discuss some of the challenges when your customers are advertisers. Show Notes Apple one year certificates Apple declines to implement 16Continue reading “Episode 204 – What Would Apple Do?”
Open Source Security 