395 subscribers
התחל במצב לא מקוון עם האפליקציה Player FM !
CVE for EOL with Aaron Frost
Manage episode 476867163 series 1502626
Aaron Frost explores the overly complex world of vulnerability identifiers for end of life software. We discuss how incomplete CVE reporting creates blind spots for users while arming attackers with knowledge. The conversation uncovers the ethical tensions between resource constraints and security transparency, highlighting why the "vulnerable until proven otherwise" approach is the best path forward for end of life software.
The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2025/2025-04-cve_eol_aaron_frost/
488 פרקים
Manage episode 476867163 series 1502626
Aaron Frost explores the overly complex world of vulnerability identifiers for end of life software. We discuss how incomplete CVE reporting creates blind spots for users while arming attackers with knowledge. The conversation uncovers the ethical tensions between resource constraints and security transparency, highlighting why the "vulnerable until proven otherwise" approach is the best path forward for end of life software.
The show notes and blog post for this episode can be found at https://opensourcesecurity.io/2025/2025-04-cve_eol_aaron_frost/
488 פרקים
כל הפרקים
×

1 Open source microprocessors with Jan Pleskac 30:51


1 Package URLs with Philippe Ombredanne 36:48


1 Hobbyist Maintainers with Thomas DePierre 49:03


1 STIG automation with Aaron Lippold 33:28






1 Repository signing with Kairo De Araujo 33:29


1 Securing GitHub Actions with William Woodruff 31:50


1 Embedded Security with Paul Asadoorian 34:24


1 tj-actions with Endor Lab's Dimitri Stiliadis 32:39


1 Syft, Grype, and Grant with Alan Pope 31:04




1 cargo-semver-checks with Predrag Gruevski 33:35


1 Distributed CI and Git with Lars Wirzenius 27:27


1 FIDO authentication with William Brown 29:26
ברוכים הבאים אל Player FM!
Player FM סורק את האינטרנט עבור פודקאסטים באיכות גבוהה בשבילכם כדי שתהנו מהם כרגע. זה יישום הפודקאסט הטוב ביותר והוא עובד על אנדרואיד, iPhone ואינטרנט. הירשמו לסנכרון מנויים במכשירים שונים.