Liran Tal — Open Source Security — 5 Minute AppSec

Why should developers care about open source security when they already have features, testing, accessibility, and performance to manage? Liran Tal answers by framing security as part of the responsibility that comes with shipping software. Applications depend on libraries, protocols, and components that can age into exploitable weaknesses, so ownership extends beyond the code a team writes directly. Liran compares secure delivery to checking the doors and windows before leaving home: teams should consciously examine what they are putting into the world. This short episode argues that open source risk belongs inside the normal development workflow, even when its return on investment is difficult to quantify before an incident occurs.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Security Journey provides application security education for developers and everyone in the software development lifecycle.
→ Learn more about Security Journey

Connect with Liran Tal:
→ Liran Tal on LinkedIn
→ Liran Tal’s website

Mentioned in this episode:
→ Node.js Security Working Group

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Why developers should care about open source security
00:10 Security as developer responsibility
01:13 Vulnerable dependencies and outdated cryptography
02:26 Continue with the full interview