Episode 215 - Real security is boring

<p><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href="https://twitter.com/kurtseifried" rel="nofollow">Kurt</a> talk about attacking open source. How serious is the threat of developers being targeted or a git repo being watched for secret security fixes? The reality of it all is there are many layers in a security journey, the most important things you can do are also the least exciting.</p> <p><strong>Show Notes</strong></p> <ul> <li><a href= "https://www.theregister.com/2020/09/04/disclosure_developer_targeting/" rel="nofollow">Targeting developers</a></li> <li><a href="https://xkcd.com/2347/" rel="nofollow">XKCD Infrastructure comic</a></li> <li><a href= "https://www.theregister.com/2020/09/04/linux_kernel_flaw_detection/" rel="nofollow">Hiding security flaws in git</a></li> <li><a href= "https://www.usenix.org/system/files/1401_08-12_mickens.pdf" rel= "nofollow">Mossad vs Not-Mossad (PDF warning)</a></li> </ul>