Team of 30 million: Reducing Software Vulnerability at a Global Scale
summary
Claims a global patchwork of 30 million developers exists with ~1.2M added yearly and only ~2% on bleeding‑edge toolchains, and argues five concrete measures: tracing (map transitive dependencies via libraries.io), distancing (architecture + zero‑trust patterns, use Threat Dragon and the Threat Modeling Cookbook), testing pipeline changes (run OWASP OS dependency Checker, automated tests in CI and make it break), prevention for unpatchable legacy code (fork/fix or isolate), and application incident response playbooks.
AI-written summary · about
chapters (4)
related talks
22mGive up! Just stop patching vulnerabilities!
45mShifting from Syntax to Secure Software Development Processes
30mThe AppSec Error Loop: How We Can Stop Repeating Common Security Mistakes
25mYour Software Supply Chain is Only as Secure as its Weakest Link
16mKeynote: There Is Just One Way to Do Open Source Security: Together
51mBigger, Faster and More Secure
01h 06mEscaping Vulnerability Hell: Bridging the Gap Between Developers and Security Teams
45mBuilding Secure Software: Practical Strategies for Developers