Kind listens

 Listen

Listened to simplyblock's Cloud Commute - Access Policy Management at Cloud-Scale with Anders Eknert from Styra | RSS.com
Post details
The podcast episode of simplyblock's Cloud Commute features Chris Engelbert interviewing Anders Eknert. They discuss Anders' background and current role at Styra, the company behind the Open Policy Agent (OPA) project. Anders lives and works in Stockholm, Sweden, and has been involved with Styra for about three and a half years. He shares how his previous work led him to OPA due to a need for managing complex authorization requirements across diverse environments.Styra, founded by the creators of OPA, focuses entirely on the OPA ecosystem. They offer two main products: Styra DAS (Declarative Authorization Service) and an enterprise version of OPA. Styra DAS helps manage OPA at scale, providing a control plane for policy management, lifecycle, and auditing. The enterprise OPA offers enhanced performance, lower memory usage, and direct integrations with data sources.OPA itself is a policy engine that enables policies as code, allowing for decoupled and centralized policy management. Common use cases include authorization and infrastructure policies, where OPA acts as a layer between services to make policy decisions. The discussion highlights the importance of treating policy like any other code, allowing for testing, reviewing, and versioning.Chris and Anders also discuss the functionality of OPA from a developer's perspective, explaining how it integrates with services to enforce policies. They touch on the broader benefits of a unified policy management system and how OPA and Styra DAS facilitate this at scale, ensuring consistency and control across complex environments.If you have questions for Anders, you can find him here:Blog: https://www.eknert.com/LinkedIn: https://www.linkedin.com/in/anderseknertX/Twitter: https://twitter.com/anderseknertMastodon: https://hachyderm.io/GitHub: https://github.com/anderseknert/Styra and the Open Policy Agent can be found here:Styra Website: https://www.styra.com/Styra LinkedIn https://www.linkedin.com/company/styra/Styra X/Twitter: https://twitter.com/styraincOPA Website: https://www.openpolicyagent.org/OPA X/Twitter: https://twitter.com/openpolicyagentOPA GitHub: https://github.com/open-policy-agent/opaThe Cloud Commute Podcast is presented by simplyblock (https://www.simplyblock.io)

 Listen

Listened to Legacy Code Rocks: Quality-Check of External Dependencies with Feross Aboukhadijeh
Post details
Many of the largest companies rely on third-party code to run critical parts of their software. However, there's often little focus on ensuring the quality of these external dependencies. Today we speak with Feross Aboukhadijeh, CEO and founder of , a developer-first security platform. Socket helps developers and security teams release software faster and reduce time spent on security busywork. Feross is also a lecturer at Stanford, where he teaches CS233 Web Security. We discuss why the quality of third-party dependencies matters, when to start addressing this issue, how to handle unmaintained dependencies, and what tools are available for managing third-party dependencies. After listening to the episode, be sure to visit the connect with Feross on , and check out his . Mentioned in this episode: Socket at   Feross on X at   Feross website at:  

 Listen

Listened to Red Hat CentOS Stream vs HashiCorp BSL: the view from downstream | IT Ops Query by PodBean Development 
Post details
Josh Koenig and David Strauss are co-founders at Pantheon, a platform for building and operating websites. Josh is the chief strategy officer, and David is the CTO. Open source software is a big part of the web, and Pantheon is a downstream user as well as a contributor to several open source projects. David is an early contributor to systemd, a component of Linux distributions, a member of the Drupal security team, and was a founding member of the first Fedora Server working group in 2011. Josh and David share their views as downstream consumers of open source software as well as members of the community, touching on why enterprises don't contribute more to open source, the approach to open source policy and licensing changes by two different major vendors in Red Hat and HashiCorp, efforts to shore up the security of the web by moving to memory-safe languages, and more. Come for the industry insights, and stay for the many colorful analogies in this discussion, from tugboats to tofurkey. Editor's Note: This episode was recorded before IBM agreed to acquire HashiCorp.

 Listen

Listened to Is it too late to opt out of AI? featuring our favorite tech lawyer, Luis Villa (Changelog & Friends #46)
Post details
Tech lawyer Luis Villa returns to answer our most pressing questions: what’s up with all these new content deals? How did Google think it was a good idea to ship AI Summaries in its current state? Is it too late to opt out of AI? We also discuss AI in Hollywood (spoilers!), positive things we’re seeing (or hoping for) ...

 Listen

Listened to Weighing open source project funding options, from taxes to anarchy | IT Ops Query by PodBean Development 
Post details
Justin Warren is founder and principal analyst at PivotNine, a technology consulting and analyst firm based in Melbourne, Australia. Until 2023, he was a board member at Electronic Frontiers Australia, a non-profit national organization representing Internet users. At KubeCon North America last year, he asked a press conference panel of enterprise IT leaders what they were doing to compensate open source maintainers "so they don't starve to death."A self-described "filthy socialist," Warren favors a tax or tax-like system for funding open source libraries that are widely used but not full-fledged products -- especially when the alternative is an offer from a malicious actor maintainers can't refuse. Together, Warren and Beth explore various approaches to shoring up the maintenance, security and sustainability of open source software and discuss the future outlook for the industry in this episode.

 Listen

Listened to Why speed of iteration made buying incident.io the right choice with John Paris of Skyscanner by The Debrief by incident.io
Post details
This week, we're sharing an extra special episode. It's no secret that the decision to buy or build isn't exactly a straightforward one. And the decision you make can be influenced by a ton of factors. But the fact is that in some instances, buying can make more sense than building, and in others, building can make more sense than buying. In this episode, you'll hear from John Paris, Principal Engineer at Skyscanner, to get the story behind their build versus buy journey. Joining him as the host for this episode is none other than the CPO of incident IO, Chris Evans. In their conversation, Chris and John discuss Skyscanner's setup before adopting incident.io, what life has been like after adopting the platform, and a whole lot more.

 Listen

Listened to Open Source Security Podcast: Episode 429 - The autonomy of open source developers
Post details
and talk about open source and autonomy. This is even related to some recent return to office news. The conversation weaves between a few threads, but fundamentally there's some questions about why do people do what they do, especially in the world of open source. This also is a problem we see in security, security people love to tell developers what to do. Developers don't like being told what to do. Show Notes

 Listen

Listened to Emily Fox, Red Hat | IT Ops Query by PodBean Development 
Post details
Emily Fox has held multiple roles at household-name organizations in her 13-year IT career and is currently senior principal software engineer at Red Hat. Previously, she worked as an engineer at Apple, and DevOps Security Lead at the National Security Agency. She also serves as chair of the CNCF's technical oversight committee and is involved in a variety of open source communities and activities. From her unique vantage point, she addresses the delicate balance the CNCF must strike between enterprises, open source maintainers and open product companies; growing awareness about open source sustainability issues; and how all of that feeds into a general "crisis of conscience" going on in cybersecurity.

 Listen

Listened to "Tiffany Haddish Returns" on Conan O'Brien Needs a Friend
Post details
<p>Actress and comedian Tiffany Haddish feels exuberated about being Conan O’Brien’s friend.</p><p> </p><p>Tiffany sits down with Conan once again to discuss her new memoir I Curse You With Joy, her surprisingly scandalous association with the movie Face/Off, working background on every show imaginable, re-investing in South Central LA properties, and more.</p><p> </p><p>For Conan videos, tour dates and more visit <a href="http://TeamCoco.com">TeamCoco.com</a>.</p><p>Got a question for Conan? Call our voicemail: (669) 587-2847.</p>