What's in the SOSS? An OpenSSF Podcast
Eric Brewer and the Future of Open Source Security
May 21, 2024
Professor Eric Brewer discusses improving security in corporate vs. open source environments, advancements in open source, making software repositories more secure, and the next big hurdle in open source security. He also shares rapid-fire answers about food preferences and tech tools, along with advice for aspiring security professionals.
16:09
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Improving supply chain security in open source projects is crucial, emphasizing trustworthy software and addressing dependencies and supply chain risks.
- Addressing challenges in build services and automated testing is essential for open source security, with a focus on reducing financial costs and leveraging machine learning for test case generation.
Deep dives
Focus on Supply Chain Security
The discussion highlights the importance of improving supply chain security in open source projects. Eric Brewer from Google emphasizes the need for a shift towards ensuring software is built correctly and trustworthy. The complexity and risks associated with dependencies and supply chain issues are outlined, signaling a wake-up call for the industry to address these challenges. Brewer emphasizes the industry-wide nature of the problem, advocating for solutions that enhance security across the board.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
