Episode 385 - Is open source an insider threat?

<p dir="auto"><a href="https://mastodon.social/@joshbressers" rel= "nofollow">Josh</a> and <a href= "https://mastodon.social/@kurtseifried" rel="nofollow">Kurt</a> talk about insider threats, but not quite in the way one would expect. The potential for insider threats is possibly higher than usual right now, but what about open source? Are open source developers insider threats for your organization? Have you ever thought about this before?</p> <h2 dir="auto">Show Notes</h2> <ul dir="auto"> <li><a href= "https://www.cisa.gov/topics/physical-security/insider-threat-mitigation/defining-insider-threats" rel="nofollow">CISA insider threats</a></li> <li><a href= "https://infosec.exchange/@hacks4pancakes/110458032018997985" rel= "nofollow">hacks4pancakes toot</a></li> <li><a href= "https://analyticsindiamag.com/dont-trust-a-programmer-who-knows-c/" rel="nofollow">Don’t Trust a Programmer Who Knows C++</a></li> <li><a href= "https://www.cisa.gov/topics/physical-security/insider-threat-mitigation" rel="nofollow">CISA Insider Threat Mitigation</a></li> </ul>