Episode 332 - PyPI: 2FA or not 2FA, that is the question - Open Source Security

Om avsnittet

Josh and Kurt talk about PyPI mandating two factor authentication for the top 1% of projects. It feels like a simple idea, but it's not when you start to think about it. What problems does 2FA solve? How common are these attacks? What are the second and third order effects of mandating 2FA? This episode should have something for everyone on all sides of this discussion to violently disagree with.

Show Notes

PyPI announcement
NPM expired domains
Morten Linderud Tweet
Congratulations: We Now Have Opinions on Your Open Source Contributions

Episode 332 - PyPI: 2FA or not 2FA, that is the question

Om avsnittet

Fler avsnitt

The curl summer of Bliss with Daniel and Stefan

CRA vulnerability reporting with Daniel Thompson

Finding difficult vulnerabilities with Jaya Baloo from AISLE

Sovereign Tech Agency with Erik Möller

CVEs vs Advisories with Paul Asadoorian

Maintaining EOL Open Source with Commonhaus and HeroDevs

Cleanup, Speedup, Levelup open source at e18e

VulnCheck's State of Exploitation Report with Patrick Garrity

Securing critical infrastructure with Josh Corman

Abandoned open source with Josh Marpet