Ode to Resilience

The WebPKI? Broken. PHP? Broken. GitLab? Broken. The security world is on fire as we are joined by standardisation expert and former engineering leader Aki Rose Braun. We go through the week’s calamities, from certificates with trivially guessable keys to 70% of the web being vulnerabile to remote code excution, and explore to what extent this week would have looked different if it had taken place after the CRA’s entry into effect. Ode to Resilience is hosted by Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage) and August Bournique: Silicon Valley technology lawyer, CRA consultant & Former Special Rapporteur for ETSI CRA standards (Linkedin | Webpage) You can reach out to us on: [email protected]

Piet and August are joined by Maarten Aertsen of NLnet Labs, who helped shape the CRA’s open source provisions. They unpack how the law defines free and open source software, the new role of the open source steward, and what manufacturers integrating open source still owe, including the Article 13(6) duty to report vulnerabilities upstream. Ode to Resilience is hosted by Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage) and August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage) You can reach out to us on: [email protected]

August and Piet discuss what Important and critical products are under the CRA, and to what extend that really matters for manufacturers.  Ode to Resilience is hosted by Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage) and August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage) You can reach out to us on: [email protected]

What exactly is the Product Liability Directive, and how does it interact with the CRA? Listen to this weeks' episode (starring the amazing Amelia Alder) to find out. We had some audio issues this week, please bear with us! Ode to Resilience is hosted by Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage) and August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage) You can reach out to us on: [email protected]

Piet and August discuss the reporting obligations in CRA article 14 that will enter into effect on the 11th of September. What are they? How serious are they? And is everyone ready? Find out in this exciting new episode! Ode to Resilience is hosted by Piet De Vaere: Electrical Engineer, CRA consultant & Member of the CRA Expert Group (Linkedin | Webpage) and August Bournique: Silicon Valley technology lawyer, CRA consultant & Special Rapporteur for ETSI CRA standards (Linkedin | Webpage) You can reach out to us on: [email protected]