The Everything Feed - All Packet Pushers Pods NB523: CVE’s Reprieve, Google WAN For Sale, NVIDIA Pledges More US-Made Chips
10 snips
Apr 21, 2025 Jeremy Rosbach, Chief Technical Evangelist at Broadcom, dives into pressing cybersecurity shifts, spotlighting the CVE program's funding struggles and the implications of its future. He discusses Google’s new Cloud WAN service and reveals a critical vulnerability in D-Panel. The conversation also explores NVIDIA's response to geopolitical pressures in semiconductor manufacturing and the vital role of network observability in optimizing AI performance. Together, they unpack the emerging challenges in managing network infrastructures amid IT shortages.
AI Snips
Chapters
Transcript
Episode notes
Git’s Origin Story
- Andrew Trigel reverse engineered BitKeeper, which ended free usage for open source developers.
- This spurred Linus Torvalds to create Git in just a few weeks, shaping software version control history.
CVE Program’s Funding Crisis
- MITRE’s CVE program almost lost government funding, causing alarm in cybersecurity.
- CISA intervened to extend funding while a nonprofit CVE Foundation was created for program stability.
Fix D-Panel JWT Vulnerability
- Users of D-Panel must update to version 1.6 or replace hard-coded JWT secrets immediately.
- Leaving hard-coded secrets allows attackers to bypass authentication and take over hosts.