Open Source Security Podcast

Search This Blog

Episode 44 - Bug Bounties vs Pen Testing

Posted by Josh Bressers on April 25, 2017

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Josh and Kurt discuss Lego, bug bounties, pen testing, thought leadership, cars, lemons, entropy, and CVE.

Show Notes

Josh's Blog on Bug Bounties
A Security Market for Lemons

Join our Facebook Group

Comment on Twitter with the #osspodcast hashtag

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Episode 174 - GitHub turns security up to 11; A discussion with Rob Schultheis

Josh and Kurt talk to Rob Schultheis from GitHub about some of the amazing projects GitHub is working on. We discuss GitHub security advisories, getting a CVE from GitHub, and what the new GitHub Security Lab is doing. It's a great conversation about how GitHub is working to make security better for all of us.

Show NotesGitHub Security Advisories GitHub CVE requests GitHub Security Lab GitHub Security Lab Slack GitHub Security Lab Twitter
Comment on Twitter with the #osspodcast hashtag

Episode 162 - SBOM with Allan Friedman

Josh and Kurt speak with Allan Friedman of the US National Telecommunications and Information Administration about Software Bill of Materials. Where are we today, where are things going, and how you can help.

Show NotesAllan Friedman NTIA NTIA Software Component Transparency
Comment on Twitter with the #osspodcast hashtag

Episode 159 - Disclosing security issues is insanely complicated: Part 1

Josh and Kurt talk about disclosing security flaws. It's a topic that's come up a few times in the last few weeks and it's more complicated than it's ever been. We certainly ask more questions than we answer in this episode, there will be a part 2 that focuses on open source disclosure.

Show NotesLock Picking Lawyer Tavis' Windows flaw
Comment on Twitter with the #osspodcast hashtag