Podcast Episodes
Back to Search
What's Wrong With WordPress
Episode 450
Josh and Kurt talk about the current Wordpress / WP Engine mess. In what is certainly a supply chain attack, the Advanced Custom Fields forking. This…
1 year, 5 months ago
The CUPSpocalypse
Episode 449
Josh and Kurt talk about the recent CUPS issue. The vulnerability itself wasn't all that exciting, but the whole disclosure process was wild. There's…
1 year, 5 months ago
What's wrong with CISA?
Episode 448
Josh and Kurt talk about a few things that have recently come out of CISA. They seem to be blaming the vendors for a lot of the problems, but there's…
1 year, 5 months ago
The Tidelift 2024 open source maintainer report
Episode 447
Josh and Kurt talk about the 2024 Tidelift maintainer report. The report is pretty big and covers a ton of ground. We focus in a few of the statistic…
1 year, 5 months ago
Episode 446 - Researchers took over .MOBI TLD
Episode 446
Josh and Kurt talk about some security researchers sort of taking over the .MOBI whois server. The story is a bit sensational, but we ask if it reall…
1 year, 6 months ago
EPSS with Jay Jacobs
Episode 445
Josh and Kurt talk to Jay Jacobs about Exploit Prediction Scoring System (EPSS). EPSS is a new way to view vulnerabilities. It's a metric for the lik…
1 year, 6 months ago
Open Source and End of Life
Episode 444
Josh and Kurt talk about Chrome unexpectedly going EOL on Ubuntu 18. Keeping old things alive is really hard to do, and in open source it's becoming …
1 year, 6 months ago
The Supply Chain Security Crisis
Episode 443
Josh and Kurt talk about a story that discusses a story from Black Hat that references supply chains. There's a ton of doom and gloom around our soft…
1 year, 6 months ago
The foundation of society, TLS certificates are a mess
Episode 442
Josh and Kurt talk about a few stories around the TLS CA certificate world. It's all pretty dire sounding. There's not a lot of organization or proce…
1 year, 6 months ago
Is CWE useful?
Episode 441
Josh and Kurt talk about CWE. What is it, and why does it matter. We cover some history, some shortcomings, and some ideas on how CWE could be used t…
1 year, 7 months ago