Supply Chain Blunders and Surprise Features
summary
The talk examines software supply chain attacks, naming examples like Log4j, us-parser-js, colors and faker, and explains how these incidents have become more frequent and brazen. It covers what this trend means for software development and looks at notable case studies and practical responses developers can take.
AI-written summary · about
chapters (14)
- 0:00Introduction to supply chain
- 3:37Introduction
- 7:39Trust in IT ecosystem
- 9:06iChip case study
- 13:41Log4j and China policy
- 17:11JavaScript ecosystem issues
- 21:30left-pad package removal
- 24:17Mark Szyper protestware
- 28:15Blender war protest
- 31:55ua-parser-js vulnerability
- 35:13Other supply chain blunders
- 38:03Protection tools and solutions
- 41:56Hidden threat landscape
- 43:01Summary and future
related talks
39mSoftware Supply Chain Security
37mSupply Chain Attacks and the Future of Software Delivery
25mSupply Chain Attacks
36mBuilding a Trusted and Resilient Software Supply Chain
30mLearning from Supply Chain Failures and Best Practices in Other Industries
38mSupply Chain Security & the Real World: Lessons From Incidents
33mIn the Trenches During a Software Supply Chain Attack
41mSponsored Session: Software Supply Chain Threat Landscapes: A Moving Target