Collaborate Disseminate
This week a reader sent me a story about a CVE in Notepad++, and something isn’t quite right. The story is a DLL hijack, a technique where a legitimate program’s …read more Continue reading This Week in Security: CVSS 0, Chwoot, and Not in the Threat Model
This week Jonathan talks with Brandon and TC about Veilid, the peer-to-peer networking framework that takes inspiration from Tor, and VeilidChat, the encrypted messenger built on top of it. What …read more Continue reading FLOSS Weekly Episode 849: Veilid: Be a Brick
Randomness is hard. To be precise, without dedicated hardware, randomness is impossible for a computer. This is actually important to keep in mind when writing software. When there’s not hardware …read more Continue reading This Week in Security: Randomness is Hard, SNMP Shouldn’t Be Public, and GitHub Malware Delivery
This week Jonathan and Rob chat with Paulus Schoutsen about Home Assistant, ESPHome, and Music Assistant, all under the umbrella of the Open Home Foundation. Watch to see Paulus convince …read more Continue reading FLOSS Weekly Episode 848: Open the Podbay Doors, Siri
Hardly a week goes by that there isn’t a story to cover about malware getting published to a repository. Last week it was millions of downloads on NPM, but this …read more Continue reading This Week in Security: The Shai-Hulud Worm, ShadowLeak, and Inside the Great Firewall
This week Jonathan and Rob chat with Tom Herbert about XDP2! It’s the brand new framework for making networking really fast, making parsers really simple, and making hardware network acceleration …read more Continue reading FLOSS Weekly Episode 847: This is Networking
Two billion downloads per week. That’s the download totals for the NPM packages compromised in a supply-chain attack this week. Ninety-nine percent of the cloud depends on one of the …read more Continue reading This Week in Security: NPM, Kerbroasting, and The Rest of the Story
This week Jonathan and Dan chat with Frank Vasquez and Chris Simmonds about Embedded Linux, and the 4th edition of the Mastering Embedded Linux Programming book. How has this space …read more Continue reading FLOSS Weekly Episode 846: Mastering Embedded Linux Programming
Something rather significant happened on the Internet back in May, and it seems that someone only noticed it on September 3rd. [Youfu Zhang] dropped a note on one of the …read more Continue reading This Week in Security: DNS Oops, Novel C2s, and the Scam Becomes Real
This week Jonathan and Randal talk Flutter and Dart! Is Google killing Flutter? What’s the challenge Randal sees in training new senior developers, and what’s the solution? Listen to find …read more Continue reading FLOSS Weekly Episode 845: The Sticky Spaghetti Gauge