Podcast Episodes
Back to Search
Apple vs NSO: What can copyright do for you?
Episode 300
the lawsuit is based on CFAA, not on copyright. We apologize for this enormous oversight.
Josh and Kurt talk about Apple suing NSO using a copyright …
4 years, 3 months ago
Experts From A World That No Longer Exists
Episode 299
Josh and Kurt talk about an article about how expertise has a limited lifetime. We are all experts in something, but some of us will find our expert …
4 years, 3 months ago
David A Wheeler discusses the OpenSSF
Episode 298
Josh and Kurt talk to David A. Wheeler about everything OpenSSF. The Open Source Security Foundation is part of the Linux Foundation, and there are 6…
4 years, 3 months ago
25 years of smashing stacks, fun, and profit
Episode 297
Josh and Kurt talk about the famous Phrack 49 article "Smashing the Stack for Fun and Profit" turning 25 years old. This paper created a massive amou…
4 years, 4 months ago
Is Trojan Source a vulnerability?
Episode 296
Josh and Kurt talk about the new Trojan Source bug. We don't always agree on if this is a vulnerability (it's not), but by the end we come to an agre…
4 years, 4 months ago
Open source security isn't free
Episode 295
Josh and Kurt talk about Josh's electric car and new job. We then talk about the recent UAParser.js malware incident. There have been a lot of calls …
4 years, 4 months ago
Chris Wysopal on the state of security education
Episode 294
Josh and Kurt talk to Chris Wysopal, AKA Weld Pond, about security education. We talk about the current state of how we are learning about security a…
4 years, 4 months ago
Scoring OpenSSF Security Scoring
Episode 293
Josh and Kurt talk about the release of OpenSSF Security Scorecards version 3. This is a great project that will probably make a huge difference. Mos…
4 years, 4 months ago
Apache RCE and Twitch epic pwn
Episode 292
Josh and Kurt talk about the recent Twitch hack and how in the modern age leaking source code almost certainly doesn't matter. The leaked data howeve…
4 years, 5 months ago
Everyone sucks at vulnerability disclosure
Episode 291
Josh and Kurt talk about recent events around Apple and Microsoft disclosing security vulnerabilities. Microsoft usually does a good job, but Apple h…
4 years, 5 months ago