Artwork

Content provided by Open Source Security Podcast, Josh Bressers, and Kurt Seifried. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Open Source Security Podcast, Josh Bressers, and Kurt Seifried or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.
Player FM - Podcast App
Go offline with the Player FM app!

Episode 436 - OpenSSH and node-ip - it's all exponential growth

32:10
 
Share
 

Manage episode 427764516 series 1502626
Content provided by Open Source Security Podcast, Josh Bressers, and Kurt Seifried. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Open Source Security Podcast, Josh Bressers, and Kurt Seifried or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Josh and Kurt talk about the recent OpenSSH vulnerability and the node-ip project owner taking their project private. They're quasi related in the context of two open source projects handled bugs very differently. The OpenSSH bug isn't really as serious as it seems, but you still want to patch.

The node-ip bug is a very different story. The relationship between users and open source developers is one experiencing more strain now than we've ever seen. It's a weird conversation and we don't have good answers. Security in general is a collection of unsolvable problems.

Show Notes
  continue reading

437 episodes

Artwork
iconShare
 
Manage episode 427764516 series 1502626
Content provided by Open Source Security Podcast, Josh Bressers, and Kurt Seifried. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Open Source Security Podcast, Josh Bressers, and Kurt Seifried or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

Josh and Kurt talk about the recent OpenSSH vulnerability and the node-ip project owner taking their project private. They're quasi related in the context of two open source projects handled bugs very differently. The OpenSSH bug isn't really as serious as it seems, but you still want to patch.

The node-ip bug is a very different story. The relationship between users and open source developers is one experiencing more strain now than we've ever seen. It's a weird conversation and we don't have good answers. Security in general is a collection of unsolvable problems.

Show Notes
  continue reading

437 episodes

All episodes

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Quick Reference Guide