Sustainable Funding of Open Source Tools - Simon Bennetts, Mark Curphey - ASW #282

Application Security Weekly (Video)

English - April 23, 2024 15:43 - 39 minutes - 171 MB Video - ★★★★ - 5 ratings
Technology News Tech News devops applicationsecurityweekly appsec asw keithhoodlet paulasadoorian sdlcsecurity technology video Homepage Download Apple Podcasts Google Podcasts Overcast Castro Pocket Casts RSS feed

Previous Episode: Arg Parsing in Rust, End of Life Hardware, CSRB & MS, Chrome’s V8 Sandbox - ASW #281

Next Episode: XZ & Open Source, PuTTY's Private Keys, LeakyCLI, LLMs Writing Exploits - ASW #282

How can open source projects find a funding model that works for them? What are the implications with different sources of funding? Simon Bennetts talks about his stewardship of Zed Attack Proxy and its journey from OWASP to OpenSSF to an Open Source Fellowship with Crash Override. Mark Curphy adds how his experience with OWASP and the appsec community motivated him to create Crash Override and help projects like ZAP gain the support they deserve.

Segment resources:

https://crashoverride.com/blog/welcome-zap-to-the-open-source-fellowship https://www.zaproxy.org https://crashoverride.com/blog/are-there-too-many-bubbles-of-similar-security-efforts

Show Notes: https://securityweekly.com/asw-282