Linux and FOSS Supply Chain Issues - Hal Pomeranz - PSW #772

<p>Linux systems are a collection of free and Open Source software-- some packaged by your distro, some built from source. How do you verify that your upstream isn't polluted by bad actors?</p> <p>Segment Resources:</p> <p><a href= "https://github.com/evilsocket/opensnitch">https://github.com/evilsocket/opensnitch</a></p> <p> <a href= "https://securityonionsolutions.com/software/">https://securityonionsolutions.com/software/</a></p> <p><a href= "https://deer-run.com/users/hal/">https://deer-run.com/users/hal/</a></p> <p> <a href= "https://archive.org/details/HalLinuxForensics">https://archive.org/details/HalLinuxForensics</a></p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/psw">https://www.securityweekly.com/psw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/psw772">https://securityweekly.com/psw772</a></p>