Dan Lorenc
where else to find them
what they talk about
all 8 in the filters
where they keep going back
no series more than once — all 12 in the filters
on a stage with
all 8 in the filters
who talks about the same things
- Santiago Torres-Arias14 talks
- Michael Lieberman36 talks
- John Kjell16 talks
- Brandon Lum23 talks
- Adrian Mouat20 talks
- Yash Pimple4 talks
| title | conference | date |
|---|---|---|
| Sponsored Demo: The True Cost of Building at Machine Speed | KubeCon + CloudNativeCon India 2026 | 2026-06-18 |
Frontier models are generating exploits at machine speed, producing 10-50x more code and finding roughly 20,000 high‑critical vulnerabilities with only ~6%… | ||
| Navigating the Open Source Policy Labyrinth: Unraveling Global Policy Efforts for a Secure Future | SOSS Fusion 2024 | 2024-10-22 |
Argues open source is measurably more secure but needs regulation because of concentration risk (one library everywhere), a steep rise in supply‑chain malware… | ||
| Keynote: Stop Peeing in the Pool! | SOSS Fusion 2024 | 2024-10-22 |
Argument that open source suffers a gradual brand erosion as companies relicense projects with near‑open but noncompliant terms, often adding clauses that bar… | ||
| Keynote: Navigating Turbulent Waters of AI: Building a Secure and Safe Foundation | AI_dev: Open Source GenAI & ML Summit Europe 2024 | 2024-06-19 |
Generative AI multiplies code volume and attack surface and attackers exploit vulnerabilities faster than defenders, so the claim is that teams must harden the… | ||
| Running in the Shadow: Perspectives on Securing the Software Supply Chain | RSA Conference 2023 | 2023-04-24 |
Panelists compare concrete fixes: federal policy uses NIST-based self‑attestation deadline for vendors, FedRAMP updates, and guidance aiming to shift liability… | ||
| Securing the Software Supply Chain with Open Source | Cloud Native Security Conference North America 2021 | 2021-10-12 |
Open source runs nearly everything (90–98% use open source) and apps pull in many dependencies (135 components average), and supply‑chain attacks spike… | ||
| Welcome and Kickoff! | SupplyChainSecurityCon North America 2021 | 2021-10-11 |
Event opens with logistics: mask policy, virtual moderator Kim relays chat questions, snack and lunch locations, and a mix of live and pre-recorded talks… | ||
| The State of SBOMs | SupplyChainSecurityCon North America 2021 | 2021-10-11 |
Cloud-native projects now produce SBOMs at build time and Kubernetes ships SBOMs in a recent release, using standards like CycloneDX and SPDX and tools such as… | ||
| Sigstore: How We Started, Where We Are, Where We are Headed | KubeCon + CloudNativeCon North America 2021 | 2021-10-11 |
Sigstore provides a free, automated code-signing service modeled after Let's Encrypt for code signing and already protects Kubernetes release images… | ||
| Zero-Trust Supply Chain Security with Sigstore, TektonCD and SPIFFE | Open Source Summit + Embedded Linux Conference + OSPOCon 2021 | 2021-09-27 |
Argues that supply-chain trust shifts from registries to verifiable provenance and demonstrates it end-to-end: TektonCD and GitHub Actions produce images whose… | ||
| The Dependency Jungle: Supply Chain Security and Kubernetes | GopherCon Europe 2021 | 2021-05-26 |
A Snyk-style sneak scan on the Kubernetes repo surfaces ~20 CVE hits and three high-severity ones that get targeted: an insecure randomness bug from go-uuid… | ||
| #7 Open Source Forum 2019 Dan Lorenc | Open Source Forum 2019 | 2019-12-16 |
Describes concrete supply‑chain failures and fixes: a recent attack removes 17 PyPI packages via typo‑squatting (jellyfish vs jellfish) that download payloads… | ||
| You Might Still Need Patches for Denim | BSidesSF 2019 | 2019-03-03 |
Argues that patching shifts from in-place fixes to rebuilding images, using Kubernetes, container registries and content-addressable container registry digests… | ||
| Minikube Intro | KubeCon + CloudNativeCon Europe 2018 | 2018-05-02 |
Local Kubernetes runtime that boots a VM, uses kubeadm to self‑host control plane components, and supports Docker, rkt and CRI‑O runtimes via the CRI. Started… | ||
| nothing matches | ||