Episode 296 - Is Trojan Source a vulnerability?

Josh and Kurt talk about the new Trojan Source bug. We don't always agree on if this is a vulnerability (it's not), but by the end we come to an agreement that ASCII is out, Unicode is in. We don't live in a world where you can make a realistic suggestion to return to using only ASCII. There are a lot of weird moving parts with this one.

Show Notes

• Trojan Source
• oss-security message
• GitHub example