Artwork

Content provided by Open Source Security Podcast, Josh Bressers, and Kurt Seifried. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Open Source Security Podcast, Josh Bressers, and Kurt Seifried or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.
Player FM - Aplicație Podcast
Treceți offline cu aplicația Player FM !

Episode 348 - OpenSSL is the new lead paint

33:55
 
Distribuie
 

Manage episode 346295975 series 1502626
Content provided by Open Source Security Podcast, Josh Bressers, and Kurt Seifried. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Open Source Security Podcast, Josh Bressers, and Kurt Seifried or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.

Josh and Kurt talk about the recent OpenSSL nothingburger. OpenSSL got everyone whipped into a frenzy over a critical vulnerability, then changed the severity to high. The correct solution to this whole problem is to stop using a TLS library written in C, we need to be using memory safe languages. Don't migrate from OpenSSL 1 to 3, migrate from OpenSSL 1 to Rustls.

Show Notes

Image Credit

  continue reading

425 episoade

Artwork
iconDistribuie
 
Manage episode 346295975 series 1502626
Content provided by Open Source Security Podcast, Josh Bressers, and Kurt Seifried. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Open Source Security Podcast, Josh Bressers, and Kurt Seifried or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://ro.player.fm/legal.

Josh and Kurt talk about the recent OpenSSL nothingburger. OpenSSL got everyone whipped into a frenzy over a critical vulnerability, then changed the severity to high. The correct solution to this whole problem is to stop using a TLS library written in C, we need to be using memory safe languages. Don't migrate from OpenSSL 1 to 3, migrate from OpenSSL 1 to Rustls.

Show Notes

Image Credit

  continue reading

425 episoade

Toate episoadele

×
 
Loading …

Bun venit la Player FM!

Player FM scanează web-ul pentru podcast-uri de înaltă calitate pentru a vă putea bucura acum. Este cea mai bună aplicație pentru podcast și funcționează pe Android, iPhone și pe web. Înscrieți-vă pentru a sincroniza abonamentele pe toate dispozitivele.

 

Ghid rapid de referință