Guest: <ul> <li style="font-weight: 400;" aria-level="1"><a href= "https://www.linkedin.com/in/nickyringland/">Dr Nicky Ringland</a>, Product Manager for <a href="https://deps.dev/">Open Source Insights</a>, Google</li> </ul> Topics: <ul> <li style="font-weight: 400;" aria-level="1">Let's talk Open Source Software - are all these dependencies dependable?</li> <li style="font-weight: 400;" aria-level="1">Why was log4j such a big thing - at a whole ecosystem level?</li> <li style="font-weight: 400;" aria-level="1">Was it actually a Java / Maven problem? Are other languages “better” or more secure?</li> <li style="font-weight: 400;" aria-level="1">Is another log4j inevitable? What can organizations to minimise their own risks?</li> </ul>  Resources: <ul> <li style="font-weight: 400;" aria-level="1"><a href= "https://cloud.withgoogle.com/next">Google Cloud Next 2022</a></li> <li style="font-weight: 400;" aria-level="1">Open Source Insights at <a href= "https://deps.dev">deps.dev</a></li> <li style="font-weight: 400;" aria-level="1">Blog at <a href= "https://blog.deps.dev">blog.deps.dev</a> with posts on <a href= "https://blog.deps.dev/log4j/">Understanding the Impact of Apache Log4j Vulnerability</a> and what happens <a href= "https://blog.deps.dev/after-the-advisory/">After the Advisory</a></li> <li style="font-weight: 400;" aria-level="1"><a href= "https://cloud.google.com/blog/products/identity-security/introducing-assured-open-source-software-service"> Assured Open Source Software service</a></li> </ul>

Next 2022 Improving Browser Security in the New Era of Work

Cloud Security Podcast by Google focuses on security in the cloud, delivering security from the cloud, and all things at the intersection of security and cloud. Of course, we will also cover what we are doing in Google Cloud to help keep our users' data safe and workloads secure. 

We’re going to do our best to avoid security theater, and cut to the heart of real security questions and issues. Expect us to question threat models and ask if something is done for the data subject’s benefit or just for organizational benefit. 

We hope you’ll join us if you’re interested in where technology overlaps with process and bumps up against organizational design. We’re hoping to attract listeners who are happy to hear conventional wisdom questioned, and who are curious about what lessons we can and can’t keep as the world moves from on-premises computing to cloud computing.