Episode 343 - Stop trying to fix the open source software supply chain

Josh and Kurt talk about a blog post that explains there isn't really an open source software supply chain. The whole idea of open source being one thing is incorrect, open source is really a lot of little things put together. A lot of companies and organizations get this wrong. Show Notes Iliana's Twitter There is no "software supply chain" Google supply chain blog GitHub ansi_term advisory PyPI 2FA Dashboard tarfile issue rediscovered in 2022

Episode metadata supplied by the publisher feed · Published Oct 3, 2022

Embed this episode

Attribution link and audio player

Ready to play

Episode 343 - Stop trying to fix the open source software supply chain

0:00 32:24

1×

No transcript for this episode yet

We transcribe on demand. Request one and we'll notify you when it's ready — usually under 10 minutes.

Share this episode

Similar Episodes

No similar episodes found.

Similar Podcasts

The Red Room Redacted Information Security The show where red team stories from around the world are explored by the guys at Redacted Information Security, and new techniques and tools are pulled apart and discussed. Explicit

Frequently Asked Questions

How long is this episode of Open Source Security?

This episode is 32 minutes long.

When was this Open Source Security episode published?

This episode was published on October 3, 2022.

Can I download this Open Source Security episode?

Yes. Use the download control on the episode player to save the publisher-provided media file.

URL copied to clipboard!