The open-source world is a wonderful democracy and meritocracy of innovation, software elements, and applications. Its creativity is incorporated into countless (if not all) major applications across the tech arena. But with it comes complexities. And in this podcast, we get to speak to Brian Fox, the CTO & Co-founder of Sonatype, about those complexities. In particular, the worrying world of security. Sonatype runs the central repository of Maven, where the world gets its open-source Java. A kind of Center of the open-source universe. Or at least one of them. Sonatype also focuses on developing a smarter, faster, and more secure software development for the open-source world and its clients. Key takeaways from the podcast are: • The new attack vectors that hackers are using to get their grubby hands on your systems and data • Visual analogies for software development and the software supply chain and how they create clarity on the mistakes that are being made in the tech industry • The impact that the SolarWinds attack is having on the regulation and practices for the software development industry (especially for critical systems) Our Guest: Brian Fox LinkedIn: https://www.linkedin.com/in/brianefox/ Website: https://www.sonatype.com/ Twitter: https://twitter.com/sonatype Intro and background music: Craig MacArthur - Power Shutoff (https://www.youtube.com/watch?v=x74iB_jtauw)