Listen Score
LS 39
Global Rank
TOP 2%

ABOUT THIS PODCAST 🔗

Update frequency:
weekly
Average audio length:
34 minutes
English
United States
551 episodes
since Sept. 6, 2016
episodic

AUDIENCE OF THIS PODCAST 🔗

~48.21% of listeners are from United States.
🇺🇸
US
48.21%
🇷🇺
RU
19.93%
🇦🇺
AU
4.36%
🇪🇸
ES
3.23%
🇩🇪
DE
3.04%
🇨🇦
CA
2.11%
🇸🇬
SG
1.92%
🇫🇮
FI
1.92%
🇬🇧
GB
1.54%
🇫🇷
FR
1.45%
🇩🇰
DK
1.36%
🇸🇪
SE
1.07%
🇮🇳
IN
1.03%
🇯🇵
JP
0.93%
🇦🇪
AE
0.84%
🇳🇱
NL
0.65%
🇸🇦
SA
0.65%
🇨🇿
CZ
0.56%
🇳🇴
NO
0.46%
🇳🇿
NZ
0.32%
🇮🇪
IE
0.32%
🇦🇹
AT
0.28%
🇵🇱
PL
0.28%
🇨🇭
CH
0.28%
🇵🇹
PT
0.23%
🇧🇬
BG
0.18%
🇮🇹
IT
0.18%
🇭🇺
HU
0.18%
🇸🇮
SI
0.18%
🇮🇱
IL
0.14%
🇨🇱
CL
0.14%
🇽🇰
XK
0.14%
🇷🇸
RS
0.14%
Others
1.75%
* Data source: directly measured on Listen Notes. real-time

LATEST EPISODE 🔗

Josh talks to Keith Hoodlet about a research project he co-authored about the success rate of AI generated vulnerability patches. Keith has a very scientific approach to this paper and does a great job of breaking down all the data and outcomes. There isn't a lot of AI research that takes this appr…

SEARCH PAST EPISODES

Search past episodes of Open Source Security.

PREVIOUS EPISODES

Josh chats with Jeff Matchett from Cloudsmith about a new report they put out. It has some scary looking statistics in it about how organizations are using dependencies. There are some surprising numbers in there, but the story is really one of defense in depth. There's no single thing we can do he…
Josh welcomes Amanda Brock from OpenUK to chat about sovereignty, policy, open source, and a whole host of other topics. Amanda has front row seat into how sovereignty decisions can affect a county and its open source. It seems sometimes like open source is a global phenomenon, but there are always…
Josh chats with Daniel and Stefan from curl about their summer of bliss. Curl stopped taking vulnerability reports for a month and nothing much happened really. Daniel and Stefan have a really pragmatic view of all the new LLM powered vulnerability detection tools. The cost of finding a vulnerabili…
Josh welcomes back Daniel Thompson to explain what just happened regarding vulnerability reporting and the CRA on September 11. The very first CRA requirements kicked in, but what does it really mean? Daniel explains it's not too bad. There are plenty more requirements coming, but this one feels ve…
Josh chats with Jaya Baloo from AISLE about their vulnerability scanner. If you follow open source vulnerabilities AISLE is a name you've seen popping up recently. They have a vulnerability scanner that is outperforming most of the existing scanners like Mythos. Jaya gives us some insight into how …
Josh chats with Erik Möller from the Sovereign Tech Agency about what they're doing. The Sovereign Tech Agency is doing some amazing work around funding open source maintainers and projects. Eric breaks down what they're doing, how it works, and how you can apply for funding. We even learn about so…
Josh chats with Paul Asadoorian about a tool he wrote called fettle and a recent report Paul published on CVEs. Fettle is a tool to help update and manage Linux systems. The big sell on this one is checking if your firmware is out of date. We then talk about a report Paul created that doesn't obses…
Josh chats with Erin Schnabel and Rob Nalen about a new effort from Commonhaus and HeroDevs for maintaining end of life open source. This project, the Open Source Sustainability Initiative is a clever way to bring corporations and projects together for maintenance of new and old versions of open so…
Josh chats with James from e18e. This is a project that is working on improving Javascript packages by cleaning up, speeding up, and leveling up the dependencies. The way the e18e project handles this work is very human open source. It's all about building up connections and trust with the package …
Disclaimer: The podcast and artwork embedded on this page are from Josh Bressers, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.