Keynote: There Is Just One Way to Do Open Source Security: Together
summary
Claims concrete outcomes and numbers: the platform reports one critical vulnerability every hour fixed for customers, and a community of 2 million ethical hackers used for coordinated testing; a supply chain scan finds half a million malicious packages since November 2023. Emphasizes speed over single tools, promotes layered “defense in collaboration” with bug bounties feeding fixes back into design, cites tests of 100 AI vendor sites showing most publish little or no safety detail, and urges open, testable software and shared vulnerability disclosure.
AI-written summary · about
chapters (9)
- 0:00Introduction and keynote opening
- 1:04Why security must be together
- 2:54Cyber security as a math game
- 4:40Defense in collaboration model
- 6:48Open source security layers
- 8:35Bug bounty success in open source
- 10:02AI security challenges today
- 12:33Radical software candor concept
- 14:43Public scrutiny improves security
related talks
11mKeynote: Securing Open Source
05mKeynote: OpenSearch, Open Security: Bringing Transparency to Our Security Processes
39mOpen source security: who’s responsible?
13mKeynote: Hacking the OSS Supply Chain
52mCollaborating to Improve Open Source Security: How the Ecosystem Is Stepping Up
47m11,000 Voices: Experts Shed Light on 4-Year Open Source & AppSec Survey
44mOpen Source Security: The World Needs Our Help
40mSecurity: Why It _has_to Be Open Source