Open source software is a massive contribution that provides everything from foundational frameworks to tiny single-purpose libraries. We walk through the dimensions of trust and provenance in the software supply chain with Janet Worthington. And we discuss how even with new code generated by LLMs and new terms like slopsquatting, a lot of the most effective solutions are old techniques. Resources     Show Notes:

The Future of Supply Chain Security - Janet Worthington - ASW #343

Information security news, hacking, interviews, podcasts, live Internet TV, cocktails, and more!

Hack naked.

The Future of Supply Chain Security - Janet Worthington - ASW #343

Security Weekly