Opensourcesecurity Domain Overview🔒 SSL Verified

Table of Contents

• ↓ The curl summer of Bliss with Daniel and Stefan
• ↓ CRA vulnerability reporting with Daniel Thompson
• ↓ Finding difficult vulnerabilities with Jaya Baloo from AISLE
• ↓ Sovereign Tech Agency with Erik Möller
• ↓ CVEs vs Advisories with Paul Asadoorian
• ↓ Maintaining EOL Open Source with Commonhaus and HeroDevs
• ↓ Top Alternatives to opensourcesecurity.io

6-Month Traffic Trend Estimate

Visual representation extracted from opensourcesecurity.io

Content Snippets from opensourcesecurity.io

"Josh chats with Daniel and Stefan from curl about their summer of bliss. Curl stopped taking vulnerability reports for a month and nothing much happened really. Daniel and Stefan have a really pragmatic view of all the new LLM powered vulnerability detection tools. The cost of finding a vulnerability has dropped dramatically, but the cost of fixing those bugs hasn’t changed. Taking some time off is important for anyone in the middle of these reports. Daniel and Stefan have some great experience and ideas on how to make this all happen. It’s great advice for anyone working on software, not just open source. ..."

"Josh welcomes back Daniel Thompson to explain what just happened regarding vulnerability reporting and the CRA on September 11. The very first CRA requirements kicked in, but what does it really mean? Daniel explains it’s not too bad. There are plenty more requirements coming, but this one feels very approachable. Episode Links Daniel Crab Nebula Comply.Land This episode is also available as a podcast, search for “Open Source Security” on your favorite podcast player. ..."

"Josh chats with Jaya Baloo from AISLE about their vulnerability scanner. If you follow open source vulnerabilities AISLE is a name you’ve seen popping up recently. They have a vulnerability scanner that is outperforming most of the existing scanners like Mythos. Jaya gives us some insight into how this all works and why they’re different. We also learn about some scary new attacks that can be conducted on LLM models. Jaya was a ton of fun and filled with insights. ..."

"Josh chats with Erik Möller from the Sovereign Tech Agency about what they’re doing. The Sovereign Tech Agency is doing some amazing work around funding open source maintainers and projects. Eric breaks down what they’re doing, how it works, and how you can apply for funding. We even learn about some similar projects happening in the EU. Hopefully in the near future we will see the work Sovereign Tech Agency is doing happening in every country. ..."

Key Topics & Focus Areas for opensourcesecurity.io:

The curl summer of Bliss with Daniel and Stefan

CRA vulnerability reporting with Daniel Thompson

Finding difficult vulnerabilities with Jaya Baloo from AISLE

Sovereign Tech Agency with Erik Möller

CVEs vs Advisories with Paul Asadoorian

Maintaining EOL Open Source with Commonhaus and HeroDevs