Josh Bressers / is on Nostr

VP of Security at Anchore - Podcaster (http://opensourcesecuritypodcast.com http://hackerhistory.com) - Blogger (http://opensourcesecurity.io) - He/Him

Last Notes

2025-02-27 02:21:15

Is there a web browser that won’t try to shiv me in my sleep?
#askingforafriend

2025-02-24 15:33:34

This episode #OpenSourceSecurity talks to @nprofile…5kdd about forking open source projects
It's a lot more complicated than you think it is, and Sheogorath has some first hand experience from one of the most complicated forks I've ever seen in HedgeDoc
It's a fun chat filled with lessons
https://opensourcesecurity.io/2025/2025-02-fork_open_source_sheogorath/

2025-02-15 14:38:24

- reply

@nprofile…d2rl @nprofile…kjz2 @nprofile…h0jl I mean, that’s the first step
I worked in a paper mill while in college, and the first lesson was you bring in pizza or donuts if you want any of your machine tests to not fail

2025-02-15 14:29:24

- reply

@nprofile…d2rl @nprofile…kjz2 @nprofile…h0jl
The answer about repairing the relationship between security and ops is so good

2025-01-23 12:54:09

- reply

@nprofile…x3yv @nprofile…kxk4 CVE won, that’s why curl and Linux became CNAs, an alternate system isn’t a practical option (it’s been tried, nobody cares enough to help)
And unfortunately the criticism from curl, and everyone else, falls on deaf ears

2024-12-17 22:21:48

- reply

@nprofile…kxk4 @nprofile…ydm9 But think of all the time you'll save NVD by setting all your CVSS scores to a 10 :)

2024-03-14 11:47:43

Has anyone tried telling developers to stop writing insecure code?
It worked for phishing