Open Source Security

Josh Bressers

Podcast

Episodes

Latest Episodes

How to actually test a disaster plan with David Bernstein

5/4/2026 • 34 min

Josh and David finish up the disaster recovery and emergency planning trilogy. In this one David tells us how to test the plan he told us how to build in the last episode. There are some great ideas in this one about how to test the process not the people. How to construct the plan, and even some tips to go from a plan to some actual real world testing. It's ano… Play episode

Open Source Pledge with Vlad-Stefan Harbuz
Building a plan for disaster with David Bernstein
Open Source Malware with Paul McCarty
Package management challenges with Andrew Nesbitt
Open Source Security at scale with Michael Winser
2026 State of the Software Supply Chain with Brian Fox
MCP and Agent security with Luke Hinds
The State of OpenSSL for pyca/cryptography with Alex Gaynor and Paul Kehrer
Rust coreutils with Sylvestre Ledru
Goose and the Agentic AI Foundation with Brad Axen
The Global Vulnerability Intelligence Platform with Olle E. Johansson
Digital Sovereignty and Nextcloud with Frank Karlitschek
The Art of Crisis Management with David Bernstein
WTF is a passkey with William Brown
All about Suricata with Victor Julien
Iocaine poisons bots with Gergely Nagy
Anubis with Xe Iaso
Rustls with Dirkjan and Joe
Daniel Thompson answers: Does the CRA apply to Santa?
Linux Foundation Europe with Gabriele Columbro
Updating open source dependencies with Jamie Tanna
TARmageddon with Alex Zenla
Python Security with Seth Larson
Linux Vendor Firmware Service with Richard Hughes
NPM supply chain attacks with Charlie Eriksen
Detecting XZ in Debian with Otto Kekäläinen
Eclipse Foundation SBOMs with Mikael Barbero
Actually finding vulnerabilities using AI with Joshua Rogers
Sustaining Package Repositories with Brian Fox
Arch Linux Security with Foxboron and Anthraxx
OpenSSL with Hana Andersen and Anton Arapov
The Python Software Foundation with Deb Nicholson
Using Mercator to map assets with Didier Barzin
Talos Linux security with Andrey Smirnov
Discussing the Open Source, Open Threats? paper with Behzad and Ali
crates.io trusted publishing with Tobias Bieniek
CVE update with Patrick Garrity
GCVE with Cédric Bonhomme and Alexandre Dulaunoy
EU Regulations will change everything with Daniel Thompson
Open source microprocessors with Jan Pleskac
Package URLs with Philippe Ombredanne
Hobbyist Maintainers with Thomas DePierre
STIG automation with Aaron Lippold
Ecosyste.ms with Andrew Nesbitt
Curl vs AI with Daniel Stenberg
Repository signing with Kairo De Araujo
Securing GitHub Actions with William Woodruff
Embedded Security with Paul Asadoorian
tj-actions with Endor Lab's Dimitri Stiliadis

Open Source Security RSS Feed

Share: Twitter • Facebook • Embed

Copy embed code: