Podcast Episodes
Back to Search
Santa's Supply Chain Security
Episode 460
Josh and Kurt talk about the supply chain of Santa. Does he purchase all those things? Are they counterfeit goods? Are they acquired some other way? …
1 year, 2 months ago
CWE Top 25 List
Episode 459
Josh and Kurt talk about a CWE Top 25 list from MITRE. The list itself is fine, but we discuss why the list looks the way it does (it's because of Wo…
1 year, 3 months ago
FBI endorses E2E encryption
Episode 458
Josh and Kurt talk about the FBI telling everyone to use end to end encrypted messengers. This is a pretty drastic deviation from messages in the pas…
1 year, 3 months ago
The D-Link D-bacle
Episode 457
Josh and Kurt talk about a serious D-Link security vulnerability in a bunch of end of life products. The crux of the discussion focuses on D-Link, bu…
1 year, 3 months ago
What if XZ happened to a company? The openness of open source
Episode 456
Josh and Kurt embark on a thought experiment to discuss how a commercial entity would handle something like the xz incident. It was very specific and…
1 year, 3 months ago
Wordpress plugin security
Episode 455
Josh and Kurt talk about the way Wordpress vets their plugins. While Wordpress has been in the news lately, they do some clever things to get plugins…
1 year, 3 months ago
Episode 454 - The state of open source with Brian Fox from Sonatype and Donald Fischer from Tidelift
Episode 454
Josh and Kurt talk to Brian Fox from Sonatype and Donald Fischer from Tidelift about their recent reports as well as open source. There are really in…
1 year, 4 months ago
Software Liability
Episode 453
Josh and Kurt talk about three government activities happening around security. CISA has a request for comment, and an international strategic plan a…
1 year, 4 months ago
All about Meshtastic
Episode 452
Josh and Kurt talk about the Meshtastic open source project. It's a really slick mesh radio system that runs on very cheap radio equipment. This epis…
1 year, 4 months ago
Python security with Seth Larson
Episode 451
Josh and Kurt talk to Seth Larson from the Python Software Foundation about security the Python ecosystem. Seth is an employee of the PSF and is doin…
1 year, 4 months ago