Josh and Kurt talk about the recent OpenSSH vulnerability and the node-ip project owner taking their project private. They're quasi related in the context of two open source projects handled bugs very differently. The OpenSSH bug isn't really as serious… Read on blog or Reader Open Source Security Read on blog or Reader Episode 436 – OpenSSH and node-ip – it's all exponential growth By Josh Bressers on July 7, 2024 Josh and Kurt talk about the recent OpenSSH vulnerability and the node-ip project owner taking their project private. They're quasi related in the context of two open source projects handled bugs very differently. The OpenSSH bug isn't really as serious as it seems, but you still want to patch. The node-ip bug is a very different story. The relationship between users and open source developers is one experiencing more strain now than we've ever seen. It's a weird conversation and we don't have good answers. Security in general is a collection of unsolvable problems. Listen to the audio - Episode_436_OpenSSH_and_node-ip_its_all_exponential_growth.mp3 Show Notes Qualys security advisory Hacker News Discussion Security Cryptography Whatever Dev rejects CVE severity, makes his GitHub repo read-only Like

Open Source Security © 2024. Manage your email settings or unsubscribe. Get the Jetpack app Subscribe, bookmark, and get real‑time notifications - all from one app! Automattic, Inc. 60 29th St. #343, San Francisco, CA 94110