Brian Fox
where else to find them
no profile links on file
what they talk about
all 4 in the filters
where they keep going back
no series more than once — all 7 in the filters
on a stage with
all 5 in the filters
who talks about the same things
- Dan Lorenc21 talks
- Jeffrey Borek16 talks
- Adrian Diglio4 talks
- Josh Bressers9 talks
- Yash Pimple4 talks
- Mackenzie Jackson17 talks
| title | conference | date |
|---|---|---|
| Your Silent Software Saboteur: Open Source Malware | Open Source Summit North America 2025 | 2025-06-23 |
Open source repositories are flooded with intentional malicious packages — about 850,000+ malicious packages detected versus ~762,000 actively used components… | ||
| Open Source Malware or a Vulnerability? The Philosophical Debate and How To Mitigate | KubeCon + CloudNativeCon Europe 2025 | 2025-04-01 |
Claims that the ecosystem already hosts 828,000 malicious components and that attackers publish about 18,000 new packages per week (mostly npm, then Python)… | ||
| Terraforming ArgoCD: The GitOps Bridge | cdCon + GitOpsCon 2023 | 2023-05-08 |
Uses the Terraform provider for ArgoCD to bridge existing Terraform pipelines and Argo CD so clusters, projects, tokens and applications get provisioned in the… | ||
| Open Source Supply Chain Threat Landscape - A Moving Target | Open Source in Finance Forum New York 2022 | 2022-12-08 |
Sonatype runs Maven Central and observes enormous scale — Maven Central (≈700 billion downloads/year) — which exposes three attack phases: longstanding bugs… | ||
| It’s Not Open Source, It’s You. Where Open Source Risk Comes From | DevOps Enterprise Summit 2022 | 2022-10-18 |
Sonatype uses Maven Central telemetry to show concrete failures and remedies: 35–38% of log4j downloads remain vulnerable even after a spike to 60–68% updated… | ||
| Sponsored Session: Software Supply Chain Threat Landscapes: A Moving Target | SupplyChainSecurityCon at Open Source Summit North America 2022 | 2022-06-21 |
Open source consumption hits billions of downloads (Maven Central ~600 billion) and attackers move from exploiting old CVEs to typosquatting and attacking dev… | ||
| Meet The Company | All Things Open 2020 | 2020-10-19 |
Company describes concrete hiring plan (about 60 hires in the next few months), product focus (repository manager and a new Lifecycle product) and engineering… | ||
| nothing matches | ||