- wöchentlichErscheinungsrhythmus
- 35 mintypische Länge
- vor 3 Tagenletzte Folge
Folgenzu den neuesten
Episode 459 - CWE Top 25 List
Josh (https://infosec.exchange/@joshbressers) and Kurt talk about a CWE Top 25 list from MITRE. The list itself is fine, but we discuss why the list looks the way it does (it's because of WordPress). We also discuss why Josh hates lists lik
Episode 458 - FBI endorses E2E encryption
Josh (https://infosec.exchange/@joshbressers) and Kurt talk about the FBI telling everyone to use end to end encrypted messengers. This is a pretty drastic deviation from messages in the past. The reason for this is it appears the US teleph
Episode 457 - The D-Link D-bacle
Josh (https://infosec.exchange/@joshbressers) and Kurt talk about a serious D-Link security vulnerability in a bunch of end of life products. The crux of the discussion focuses on D-Link, but the reality is almost all consumer gear you plug
Episode 456 - What if XZ happened to a company? The openness of open source
Josh (https://infosec.exchange/@joshbressers) and Kurt embark on a thought experiment to discuss how a commercial entity would handle something like the xz incident. It was very specific and difficult to understand. It's easy to claim just
Episode 455 - Wordpress plugin security
Josh (https://infosec.exchange/@joshbressers) and Kurt talk about the way Wordpress vets their plugins. While Wordpress has been in the news lately, they do some clever things to get plugins approved. There's a static analyzer that runs aga
Episode 454 - The state of open source with Brian Fox from Sonatype and Donald Fischer from Tidelift
Josh (https://infosec.exchange/@joshbressers) and Kurt talk to Brian Fox from Sonatype and Donald Fischer from Tidelift about their recent reports as well as open source. There are really interesting connections between the two reports. The
Episode 453 - Software Liability
Josh (https://infosec.exchange/@joshbressers) and Kurt talk about three government activities happening around security. CISA has a request for comment, and an international strategic plan around cybersecurity. These are both good ideas, an
Episode 452 - All about Meshtastic
Josh (https://infosec.exchange/@joshbressers) and Kurt talk about the Meshtastic open source project. It's a really slick mesh radio system that runs on very cheap radio equipment. This episode isn't very security related (there are a few t
Episode 451 - Python security with Seth Larson
Josh (https://infosec.exchange/@joshbressers) and Kurt talk to Seth Larson from the Python Software Foundation about security the Python ecosystem. Seth is an employee of the PSF and is doing some amazing work. Seth is showing what can be a
Episode 450 - What's Wrong With WordPress
Josh (https://infosec.exchange/@joshbressers) and Kurt talk about the current Wordpress / WP Engine mess. In what is certainly a supply chain attack, the Advanced Custom Fields forking. This whole saga is weird and filled with chaos and stu
