Risky Biz Podcast: How Shifts in Open Source Made It a Prime...

The Risky Biz podcast episode features a conversation between host Tom Uren and Socket founder Feross Aboukhadijeh, addressing the increasing vulnerabilities in open source software due to shifts in development practices. They highlight the risks posed by the rise of small, hyper-specific open source packages and the shift toward individual maintainers, which have expanded the attack surface for supply chain attacks. Feross explains how previous incidents, such as the XZ-utils and Event-Stream attacks, inspired the creation of Socket, a tool designed to detect and prevent such threats by monitoring software package changes. Despite the impracticality of developers reviewing every line of code, malicious actors exploit this gap to launch sophisticated attacks that static analysis might miss. To combat this, Socket uses LLMs for deep analysis, aiming to identify subtle attack signals. With open source code comprising 90% of most applications, the unchecked volume has heightened the risk of supply chain attacks, underscoring the need for tools like Socket to bolster security.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.