<p dir="auto"><a href="https://infosec.exchange/@joshbressers" rel= "nofollow">Josh</a> and <a href= "https://infosec.exchange/@kurtseifried" rel="nofollow">Kurt</a> talk about the 2024 Tidelift maintainer report. The report is pretty big and covers a ton of ground. We focus in a few of the statistics that should worry anyone who uses open source. We've known for a while developers are struggling, and the numbers back that up. This one feels like the old "we've tried nothing and we're all out of ideas".</p> Show Notes <ul dir="auto"> <li><a href="https://explore.tidelift.com/2024-tidelift-survey" rel="nofollow">THE 2024 TIDELIFT STATE OF THE OPEN SOURCE MAINTAINER REPORT</a></li> <li><a href= "https://www.canada.ca/en/immigration-refugees-citizenship/services/canadian-passports/new-passport-features.html" rel="nofollow">Canadian passport</a></li> <li><a href= "https://changelog.com/news/open-source-not-open-contribution-QRO8" rel="nofollow">Changelog Interviews #433</a></li> <li><a href="https://github.com/thanhh23/CVE-2024-42992">Pandas CVE</a></li> </ul>

Episode 448 - What's wrong with CISA?

Open Source Security is a media project to help showcase and educate on open source security. Our goal is to give the community a platform educate both developers and users on how open source security works.

There's a lot of good work happening that doesn't get attention because there's no marketing department behind it, they don't have a developer relations team posting on LinkedIn every two hours. Let's focus on those people and teams then learn what they do and how they do it. The goal is to hear from the people doing the work, they know what's up, they have a lot to teach us. We just have to listen.