#ossecurity — Public Fediverse posts

🥱 Joanna Rutkowska, after a 7-year hiatus, emerges with yet another blog, because the world was desperately missing a lecture on "paranoid-security" from 2009. But hey, if you're nostalgic for the good old days of OS security ramblings, this is your golden ticket! 🎟️
https://tracesofhumanity.org/hello-world/ #JoannaRutkowska #paranoidsecurity #nostalgia #OSsecurity #techblog #HackerNews #ngated

⏪ On September 24, OpenSSF hosted a Tech Talk with experts on securing the #AI/ML lifecycle. Recording & slides now available: https://openssf.org/resources/tech-talks/securing-the-ai-lifecycle-trust-transparency-tooling-in-open-source/

📖 Read the recap: https://openssf.org/blog/2025/10/02/recap-openssf-tech-talk-on-securing-the-ai-lifecycle/

#OSSecurity

Disaster is coming to #rustconf25… and you get to choose what happens next. 🧯

Join us for a hilarious #rustlang-themed cybersecurity tabletop exercise on September 4: https://rustconf.com/schedule/#1769

Register for #rustconf (Sept 2-5 in Seattle): https://ti.to/rustconf/2025?source=mastodon

#OSSecurity

📣 Register now for #SigstoreCon: Supply Chain Day at KubeCon NA 2024 in Salt Lake City! Dive into the latest on digital artifact signing, Sigstore, SLSA & more. Don't miss out on shaping the future of supply chain security! 🔗 Register here: https://events.linuxfoundation.org/sigstorecon-supply-chain-day/register/
#OSSecurity

📣 Register now for #SigstoreCon: Supply Chain Day at KubeCon NA 2024 in Salt Lake City! Dive into the latest on digital artifact signing, Sigstore, SLSA & more. Don't miss out on shaping the future of supply chain security! 🔗 Register here: https://events.linuxfoundation.org/sigstorecon-supply-chain-day/register/
#OSSecurity

Join us at the Open Source Security Meetup in Tokyo on Oct 3! Hear Taku Shimosawa's intro on SLSA & event highlights from SOSS Community Day Europe. Connect with the OSS security community! 🗓️ Oct 3, 6-8 PM JST 📍Renesas Electronics, Toyosu. Register here: https://www.linuxfoundation.jp/events/2024/09/join-us-at-the-oss-security-meetup-in-tokyo-on-october-3/
#OSSecurity

🚨 The 2024 Secure Software Development Education Survey by The Linux Foundation & OpenSSF reveals that 69% of professionals rely on on-the-job experience to learn secure software development. However, it often takes over 5 years to gain familiarity!

📚 Shorten your learning curve with LFD121: Developing Secure Software and start your journey today for FREE: https://hubs.la/Q02N_RB80
#OSSecurity

As businesses increasingly rely on Open Source Software (OSS), ensuring robust security practices by companies building software products becomes paramount to safeguarding customers.

Lisa Bradley, FIRST Member and Senior Director of Product & Application Security at Dell Technologies and Sarah Evans, Security Innovation Researcher at Dell Technologies teamed up today to explore the essential components of a mature OSS security practice and provided a comprehensive guide on enhancing customer protection through effective OSS management.

Be on the lookout for the video replay of their presentation, “A Roadmap for Your OSS Security Lifecycle Journey to Protect Customers."

#InfoSec #OSSecurity #security #VulnCon2024

Supply chain security is a critical consideration for open source projects. In this video, Mikael Barbero, Head of Security at Eclipse Foundation, discusses how the Foundation helps developers meet these important requirements.#opensource #OSsecurity https://hubs.la/Q01zT28s0

Supply chain security is a critical considerations for open source projects. @mbarbero , Head of Security at the #EclipseFdn, discusses how the Foundation helps developers meet these important requirements https://www.youtube.com/watch?v=2KHI5HFqIl8 #opensource #OSsecurity

Today we're proud to announce the release of version 1.0 of SLSA 🎉 Check out the press release: https://openssf.org/press-release/2023/04/19/openssf-announces-slsa-version-1-0-release/ #OSS #OSSecurity #SLSA #SoftwareSupplyChain #SoftwareSupplyChainSecurity

Check out the @linuxfoundation blog for some of the latest updates from the OpenSSF over the first quarter of this year https://www.linuxfoundation.org/blog/openssf-membership-growth-signals-technical-communities-continued-commitment-to-investing-in-security #OSSecurity