Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

What's in the SOSS? An OpenSSF Podcast

内容由Omkhar Arasaratnam, OpenSSF and Omkhar Arasaratnam提供。所有播客内容（包括剧集、图形和播客描述）均由 Omkhar Arasaratnam, OpenSSF and Omkhar Arasaratnam 或其播客平台合作伙伴直接上传和提供。如果您认为有人在未经您许可的情况下使用您的受版权保护的作品，您可以按照此处概述的流程进行操作https://zh.player.fm/legal。

29d ago 12:16

MP3•单集首页

Episode description: Andrew Pollock is a Senior Software Engineer at Google, currently working on https://osv.dev. With a background as an Enterprise Security Engineer, he has extensive experience in large-scale Linux Systems Administration and GCP Security. Andrew is passionate about the human factors in security, focusing on scalable solutions, great user experiences and self-service opportunities. He has primarily worked in Linux/Unix environments as a Site Reliability Engineer or Security Engineer, with a strong interest in process improvement and automation.

00:52 - Andrew shares his background as a “mid-90s data nerd”
02:31 - Managing vulnerabilities in the open source ecosystem
03:57 - How to navigate inconsistent metadata
06:26 - The challenge of source attribution
07:54 - The rapid-fire round
09:15 - Andrew’s advice to open source developers
10:22 - Andrew’s call to action to developers

Episode links:

15集单集

#Tech #Omkhar Arasaratnam, Open SSF #Omkhar Arasaratnam #Open SSF