Building upon existing technology is at the heart of much technical innovation and is the essence of open source culture, and embracing our history provides invaluable perspective. Kat Cosgrove, a lead developer advocate at Dell and Kubernetes release team member, joins us to talk DevOps culture, reinventing ourselves and our technology, and how to get involved in projects like… Continue reading Open At Intel: Kubernetes, DevOps and Reinventing Ourselves
Category: Open at Intel
Open At Intel: Securing Kubernetes
Cisco’s Michael Chenetz, host of the Cloud Unfiltered podcast, joins us to talk through security challenges unique to Kubernetes, and the journey to the cloud native ecosystem for everyone from beginners to veterans. Resources: Overview of Cloud Native Security
Open At Intel: Security and the OSPO
Jessica Marz, Director of Intel’s Open Source Program Office, discusses the role of the OSPO in securing the software supply chain and the role she plays in encouraging good open source citizenship.
Open At Intel: Open Source Isn’t Broken
The open source software ecosystem has always faced tough challenges related to community, governance, and scalability. More than ever before, much conversation about open source struggles is devoted to the security of the software supply chain, especially when considering the unique challenges of a distributed, often anonymous, community-based development team. Josh Bressers, VP of Security… Continue reading Open At Intel: Open Source Isn’t Broken
Open At Intel: Open Source: The Nerd Version of Formula One
Jorge Castro of the Cloud Native Computing Foundation joins us to geek out on taking the desktop cloud native with immutable Linux, talk open source community sustainability, and have a lot of fun along the way. Episode Transcript Resources: Universal Blue The Cloud Native Linux Desktop Model (video) Architecture Of The Immutable uBlue Linux (video) The Cloud Native Landscape
Open At Intel: Building Trust with Attestation
In this episode, we dive deep into the concept of attestation as it relates to building trust in our software and systems. Marcela Melara and Vinnie Scarlata take us on a technical tour of both software and remote attestation and how these relate to ideas we’ve covered previously with software supply chain security and confidential computing. We talk… Continue reading Open At Intel: Building Trust with Attestation
Open At Intel: Assessing Project Security with OpenSSF Scorecard
Evaluating security risk associated with open source software projects can be a complex or even daunting task, but an Open Source Security Foundation project called OpenSSF Scorecard helps put some order and automation into the process. In this episode, we chat with one of OpenSSF Scorecard’s contributors, Brian Russell of Google, and Ryan Ware, Director of Open Source Security… Continue reading Open At Intel: Assessing Project Security with OpenSSF Scorecard
Open At Intel: Consuming Open Source Software Securely
In this episode, we discuss best practices for evaluating and consuming open source software with Ryan Ware, director of open source security at Intel. Ryan will share his wisdom earned over decades working with open source software security.
Open at Intel: Scanning for Vulnerabilities with CVE Binary Tool
This episode explores an open source software vulnerability scanner called CVE Binary Tool, which scans binaries and component lists in your project and reports back known vulnerabilities based on data from NIST’s National Vulnerability Database (NVD) list of Common Vulnerabilities and Exposures (CVEs). My guest is Dr. Terry Oda, a security researcher at Intel and the lead maintainer of CVE Binary… Continue reading Open at Intel: Scanning for Vulnerabilities with CVE Binary Tool
Open at Intel: Securing Applications with Gramine
Mona Vij, principal engineer at Intel Labs, leads Intel’s efforts on the Gramine project, which is a library OS that allows for running unmodified applications and, among other things, solves the problem of running applications out-of-the-box on Intel SGX-enabled hardware. We’ll dive into Gramine, a Confidential Computing Consortium Project and discuss easing the path to running in a trusted… Continue reading Open at Intel: Securing Applications with Gramine