Episode 24: Securing the FOSS Ecosystem with Gareth Rushgrove

<center> <small>Sponsored By:</small> <a href="https://promo.linode.com/sustain/" target="_blank"><img src="https://files.fireside.fm/file/fireside-uploads/images/2/27729c65-f4a6-4496-8c86-820e7f13b285/_xSnMSeA.png" width="150px" heigh="47px"></a> </center> Panelists Eric Berry | Justin Dorfman | Richard Littauer | Allen “Gunner” Gunn Guest Gareth Rushgrove (https://twitter.com/garethr) Snyk Show Notes In this episode, we talk with Gareth Rushgrove, from Cambridge, UK, Director of Project Management at a security software startup called Snyk. He has spoken at a number of international technology conferences over the past few years, including FOSDEM (http://www.slideshare.net/garethr/config-managament-for-development-environments-6836888), RAMP (https://speakerdeck.com/garethr/the-unavoidable-big-bang), BACON (https://speakerdeck.com/garethr/monitoring-sucks), QCon (https://speakerdeck.com/garethr/clouds-in-government-perils-of-portability), PuppetConf (https://speakerdeck.com/garethr/puppet-module-reusability), Monitorama (https://speakerdeck.com/garethr/security-monitoring-penetration-testing-meets-monitoring), GOTO (https://speakerdeck.com/garethr/if-government-can-do-it-dot-dot-dot) and Velocity. Security and Open Source don’t often go together, in this episode we explore the topic and more. 01:20 Gareth explains that Snyk provides tools for developers who use Open Source Software and help them stay secure. He also expands on vulnerability landscapes. 02:10 Justin asks Gareth at what point does he think the collective community decided that we need to start digging into security holes within our software and he answers the question. 04:00 One of the guys asks Gareth if security is a passion of his and if he joined the company because that’s what he loves or was it more for Open Source. 05:30 The guys talk about Guy Podjarney (a.k.a Guypod) and Steve Souders and how they started the web performance movement. 07:30 Richard states Snyk has 400,000 users on the website and three times more vulnerability than a