<p dir="auto"><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href="https://twitter.com/kurtseifried" rel="nofollow">Kurt</a> talk about the recent National Defense Authorization Act that requires security vulnerabilities to be fixed. What does this mean for us, is it as bad as some people are claiming it is? It's actually not a huge deal, for most of us it's really just time to deal with product security.</p> Show Notes <ul dir="auto"> <li><a href="https://thehackermind.com/" rel="nofollow">The Hacker Mind</a></li> <li><a href="https://podcast.linuxfoundation.org/" rel= "nofollow">The Untold Stories of Open Source</a></li> <li><a href= "https://www.congress.gov/bill/117th-congress/house-bill/7900" rel= "nofollow">H.R.7900 - National Defense Authorization Act for Fiscal Year 2023</a></li> <li><a href= "https://cloudsecurityalliance.org/blog/2022/08/22/writing-good-legislation-is-hard/" rel="nofollow">Kurt's blog post</a></li> </ul>

Episode 339 - Is a network problem a security vulnerability

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works.

There's a lot of good work happening that doesn't get attention because there's no marketing department behind it, they don't have a developer relations team posting on LinkedIn every two hours. Let's focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what's up, they have a lot to teach us. We just have to listen.