Collaborate Disseminate
Discord had a data breach back on September 20th, via an outsourced support contractor. It seems it was a Zendesk instance that was accessed for 58 hours through a compromised …read more Continue reading This Week in Security: ID Breaches, Code Smell, and Poetic Flows
This week Jonathan and Aaron chat with Piers Finlayson about One ROM! Why does the retro-computing world need a solution for replacement ROMs? How difficult was it to squeeze a …read more Continue reading FLOSS Weekly Episode 850: One ROM to Rule Them All
This week a reader sent me a story about a CVE in Notepad++, and something isn’t quite right. The story is a DLL hijack, a technique where a legitimate program’s …read more Continue reading This Week in Security: CVSS 0, Chwoot, and Not in the Threat Model
This week Jonathan talks with Brandon and TC about Veilid, the peer-to-peer networking framework that takes inspiration from Tor, and VeilidChat, the encrypted messenger built on top of it. What …read more Continue reading FLOSS Weekly Episode 849: Veilid: Be a Brick
Randomness is hard. To be precise, without dedicated hardware, randomness is impossible for a computer. This is actually important to keep in mind when writing software. When there’s not hardware …read more Continue reading This Week in Security: Randomness is Hard, SNMP Shouldn’t Be Public, and GitHub Malware Delivery
This week Jonathan and Rob chat with Paulus Schoutsen about Home Assistant, ESPHome, and Music Assistant, all under the umbrella of the Open Home Foundation. Watch to see Paulus convince …read more Continue reading FLOSS Weekly Episode 848: Open the Podbay Doors, Siri
Hardly a week goes by that there isn’t a story to cover about malware getting published to a repository. Last week it was millions of downloads on NPM, but this …read more Continue reading This Week in Security: The Shai-Hulud Worm, ShadowLeak, and Inside the Great Firewall
This week Jonathan and Rob chat with Tom Herbert about XDP2! It’s the brand new framework for making networking really fast, making parsers really simple, and making hardware network acceleration …read more Continue reading FLOSS Weekly Episode 847: This is Networking
Two billion downloads per week. That’s the download totals for the NPM packages compromised in a supply-chain attack this week. Ninety-nine percent of the cloud depends on one of the …read more Continue reading This Week in Security: NPM, Kerbroasting, and The Rest of the Story
This week Jonathan and Dan chat with Frank Vasquez and Chris Simmonds about Embedded Linux, and the 4th edition of the Mastering Embedded Linux Programming book. How has this space …read more Continue reading FLOSS Weekly Episode 846: Mastering Embedded Linux Programming