Episode 338 - The government didn't make vulnerabilities illegal. Yet.

<p dir="auto"><a href="https://twitter.com/joshbressers" rel= "nofollow">Josh</a> and <a href="https://twitter.com/kurtseifried" rel="nofollow">Kurt</a> talk about the recent National Defense Authorization Act that requires security vulnerabilities to be fixed. What does this mean for us, is it as bad as some people are claiming it is? It's actually not a huge deal, for most of us it's really just time to deal with product security.</p> <h2 dir="auto">Show Notes</h2> <ul dir="auto"> <li><a href="https://thehackermind.com/" rel="nofollow">The Hacker Mind</a></li> <li><a href="https://podcast.linuxfoundation.org/" rel= "nofollow">The Untold Stories of Open Source</a></li> <li><a href= "https://www.congress.gov/bill/117th-congress/house-bill/7900" rel= "nofollow">H.R.7900 - National Defense Authorization Act for Fiscal Year 2023</a></li> <li><a href= "https://cloudsecurityalliance.org/blog/2022/08/22/writing-good-legislation-is-hard/" rel="nofollow">Kurt's blog post</a></li> </ul>