@josh.bressers.name
Mostly on Mastodon - Open Source Security https://opensourcesecurity.io - Hacker History http://hackerhistory.com - He/Him
@josh.bressers.nameI had a chat with Keith Hoodlet on #OpenSourceSecurity about a recent research paper titled "Why AI-generated vulnerability patches still require expert human review"
While AI can find security vulnerabilities at an alarming rate, it's not so great at fixing them
@josh.bressers.nameThis week on #OpenSourceSecurity I chat with
@amandabrock.bsky.social from @openuk.bsky.social
The open source world used to ignore topics like policy and government, but that's not really practical anymore. The world of open source, sovereignty, and politics is colliding
@josh.bressers.nameThe first #CRA requirements started a few days ago. I chatted with Danial Thompson about what that means and what comes next
Daniel has a ton of CRA knowledge, this first step isn't going to change a ton, but what's coming next will
@josh.bressers.nameI had a chat with Jaya Baloo from AISLE about why they seem to be finding vulnerabilities even when the new fancy tools aren't finding anything The answer is unsurprisingly "engineering" Jaya has a ton of interesting insight, including how to work with open source projects and what's coming next
@josh.bressers.nameI had a chat with Erik Möller from @sovereign.tech about what they're doing in the universe of funding open source Eric breaks down what they're doing, how it works, and how you can apply for funding. We even learn about some similar projects happening in the EU
@josh.bressers.nameThis week on #OpenSourceSecurity I had a chat with Paul Kehrer and Alex Gaynor about the statement they published discussing the challenges posed by modern OpenSSL for the python cryptography module
