Liran Tal — Open Source Security — 5 Minute AppSec

Why should developers care about open source security when they already have features, testing, accessibility, and performance to manage? Liran Tal answers by framing security as part of the responsibility that comes with shipping software. Applications depend on libraries, protocols, and components that can age into exploitable weaknesses, so ownership extends beyond the code a team writes directly. Liran compares secure delivery to checking the doors and windows before leaving home: teams should consciously examine what they are putting into the world. This short episode argues that open source risk belongs inside the normal development workflow, even when its return on investment is difficult to quantify before an incident occurs.The Application Security Podcast is brought to you by Security Journey.About Security JourneySecurity Journey provides application security education for developers and everyone in the software development lifecycle.→ Learn more about Security JourneyConnect with Liran Tal:→ Liran Tal on LinkedIn→ Liran Tal’s websiteMentioned in this episode:→ Node.js Security Working GroupFollow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Why developers should care about open source security00:10 Security as developer responsibility01:13 Vulnerable dependencies and outdated cryptography02:26 Continue with the full interview