Episodes

Podcast: Play in new window | Download (Duration: 30:54 — 56.9MB)

Subscribe: Apple Podcasts | Spotify | RSS

Open-Source is great – with code being open, everyone has access to it. That means that the code can be audited – and that makes it more secure, right? Well, possibly. In the recent talk “The Code is Open, But Who’s Looking at it?” Joao discusses the concept in detail. This talk was recorded at OSAD 2022. New episodes of Enterprise Linux Security will resume after the holidays. But for now, enjoy the talk!

Download Links

• MP3 version
• MP3 version (lower bitrate, smaller file)
• Ogg version

Podcast: Play in new window | Download (Duration: 32:26 — 59.7MB)

Subscribe: Apple Podcasts | Spotify | RSS

Supply chain attacks in open source software projects are a real possibility. In fact, we’ve covered actual incidents in previous episodes of this podcast. In this episode, Jay and Joao discuss developing legislation that will require the components within open source projects to be a part of a bill of materials (among other requirements). This is definitely something you’ll want to be aware of if your organization produces open-source software, but even non-developers should be aware of it as well.

Relevant Articles

• Gov’t Adds Open Source Security to Software Supply Chain
• 20-page PDF with more specific details on the bill

Download Links

• MP3 Version (normal quality)
• MP3 version (lower quality, smaller file)
• Ogg version

Podcast: Play in new window | Download (Duration: 35:40 — 65.6MB)

Subscribe: Apple Podcasts | Spotify | RSS

As if Wi-Fi couldn’t get anymore tedious, five (yes, FIVE) vulnerabilities were discovered in the Linux mac80211 framework, which can potentially impact literally anyone that uses Wi-Fi. Thankfully, patches are already out to fix these vulnerabilities, but there’s important lessons to be learned here that this recent incident makes incredibly clear. Also, the ongoing White House security directive saga continues with some adjustments that broaden its scope.

Note: Enterprise Linux Security will return to its live format in November.

Relevant Articles

• The (Updated) White House security directive
• Linux dodges serious Wi-Fi security exploits

Download Links

• MP3 version (normal quality)
• MP3 version (lower quality, smaller file)
• Ogg version (normal quality)

Podcast: Play in new window | Download (Duration: 1:07:10 — 123.3MB)

Subscribe: Apple Podcasts | Spotify | RSS

Recent news of Patreon firing their security team is making the rounds online, and in this episode, Jay and Joao will talk about this very strange story and some takeaways from it.

Relevant Links

• Patreon confirms security team layoffs
• 7 Patreon Alternatives to Keep Your Crowdfunding Income Secure
• Patreon Lays Off 17% of Employees

Download Links

• MP3 version
• MP3 version (low)
• Ogg version

Podcast: Play in new window | Download (Duration: 44:57 — 82.7MB)

Subscribe: Apple Podcasts | Spotify | RSS

What are some of the important areas that a Chief Information Security Officer should focus on? In this episode, Jay and Joao discuss a recent article where Aman Sood (a CISO for Jimdo) discusses important aspects of the job to pay attention to. This information from the perspective of an actual CISO offers a unique lens through which to look at these critical focus areas.

Relevant links

• The thinking of a CISO at the front end of the cyber threat landscape

Download links

• MP3 version
• MP3 version (low)
• Ogg version