PSW #772 - Hal Pomeranz

<p>Linux systems are a collection of free and Open Source software-- some packaged by your distro, some built from source. How do you verify that your upstream isn't polluted by bad actors?</p> <p>Segment Resources:</p> <p><a href= "https://github.com/evilsocket/opensnitch">https://github.com/evilsocket/opensnitch</a></p> <p> <a href= "https://securityonionsolutions.com/software/">https://securityonionsolutions.com/software/</a></p> <p><a href= "https://deer-run.com/users/hal/">https://deer-run.com/users/hal/</a></p> <p> <a href= "https://archive.org/details/HalLinuxForensics">https://archive.org/details/HalLinuxForensics</a></p> <p> </p> <p>In the Security News: VMware and Ransomware makes you want to run some where, double-free your OpenSSH, download the RIGHT software, you have Docker, I have root, we don't talk about CORS, to vulnerability or not to vulnerability, vulnerability risk scoring, a matter of perspective, very persistent Cisco attacks, running UPNP without all the protections, overflowing a buffer in your bootloader over HTTP, C can be memory safe (but developers will still screw it up), and lasers, microwaves, satellites and the Sun! All that, and more, on this episode of Paul’s Security Weekly!</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/psw">https://www.securityweekly.com/psw</a> for all the latest episodes!</p> <p>Visit <a href= "https://securityweekly.com/acm">https://securityweekly.com/acm</a> to sign up for a demo or buy our AI Hunter!</p> <p>Follow us on Twitter: <a href= "https://www.twitter.com/securityweekly">https://www.twitter.com/securityweekly</a></p> <p>Like us on Facebook: <a href= "https://www.facebook.com/secweekly">https://www.facebook.com/secweekly</a></p> <p> </p> <p>Show Notes: <a href= "https://securityweekly.com/psw772">https://securityweekly.com/psw772</a></p>