A Lawyer and an Engineer Walk Into a Bar and Talk Open Source
summary
Enterprise case study from Northwestern Mutual shows adoption stats (90% enterprises use OSS, 96% of codebases include it) and that fewer than 50% have formal programs. Claims: unpatched Apache Struts causes the Equifax breach (150 million records, $1.4B) and the ecosystem sees 25,000 vulnerabilities in 2022 (~68/day). Implements inventory, SBOM (SPDX), CI/CD dependency scanning, dependency proxying (GitLab/Artifactory), and OSSF Scorecard to block unhealthy libs. Outcome: governance plus automation reduces risk; manual review alone fails.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 2:03Benefits of using Open Source
- 8:00Problems with using Open Source
- 11:34Implementation of Open Source
- 18:28Solutions
- 23:01Legal Aspects
related talks
41mManaging the risk and growth of using Open Source Software
33mThe Cathedral, the Bazaar, and the Coffee House
33mOpen-Source Maturity in a 160-year-old organization: Technical and Legal hurdles
38mApplication Security in the age of Open Source
20mOpen source in the enterprise
52mOSS Security Maturity: Time to Put on Your Big Boy Pants!
19mResponsible consumption of open source
50mHow to talk your lawyer about FOSS