DiscoverWhat's in the SOSS? An OpenSSF PodcastGoogle’s Andrew Pollock and Addressing Open Source Vulnerabilities
Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

Update: 2024-08-13
Share

Description

Episode description: Andrew Pollock is a Senior Software Engineer at Google, currently working on https://osv.dev. With a background as an Enterprise Security Engineer, he has extensive experience in large-scale Linux Systems Administration and GCP Security. Andrew is passionate about the human factors in security, focusing on scalable solutions, great user experiences and self-service opportunities. He has primarily worked in Linux/Unix environments as a Site Reliability Engineer or Security Engineer, with a strong interest in process improvement and automation.

  • 00:52 - Andrew shares his background as a “mid-90s data nerd”
  • 02:31 - Managing vulnerabilities in the open source ecosystem
  • 03:57 - How to navigate inconsistent metadata
  • 06:26 - The challenge of source attribution
  • 07:54 - The rapid-fire round
  • 09:15 - Andrew’s advice to open source developers
  • 10:22 - Andrew’s call to action to developers


Episode links:

Comments 
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel
Bidding Adieu to Omkhar Arasaratnam

Bidding Adieu to Omkhar Arasaratnam

2024-09-1720:32

CoSAI, OpenSSF and the Interesting Intersection of Secure AI and Open Source

CoSAI, OpenSSF and the Interesting Intersection of Secure AI and Open Source

2024-09-1022:47

GitHub’s Mike Hanley and Transforming the “Dept. of No” Into the "Dept. of Yes, And…”

GitHub’s Mike Hanley and Transforming the “Dept. of No” Into the "Dept. of Yes, And…”

2024-09-0322:43

CISA's Aeva Black and the Public Sector View of Open Source Security

CISA's Aeva Black and the Public Sector View of Open Source Security

2024-08-2712:13

Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

2024-08-1312:16

Rust Foundation’s Bec Rumbul and Succeeding as a “Non-Techie” in a Tech-Heavy Industry

Rust Foundation’s Bec Rumbul and Succeeding as a “Non-Techie” in a Tech-Heavy Industry

2024-07-3018:28

Sonatype’s Brian Fox and the Perplexing Phenomenon of Downloading Known Vulnerabilities

Sonatype’s Brian Fox and the Perplexing Phenomenon of Downloading Known Vulnerabilities

2024-07-1622:24

Arun Gupta and Giving Back to Security Communities

Arun Gupta and Giving Back to Security Communities

2024-07-0222:02

Stacklok's Adolfo García Veytia Digs Into SBOMs and VEX

Stacklok's Adolfo García Veytia Digs Into SBOMs and VEX

2024-06-1818:11

A Man Called CRob: Introducing the Newest Co-host of What’s in the SOSS?

A Man Called CRob: Introducing the Newest Co-host of What’s in the SOSS?

2024-06-1120:03

OpenAI’s Matt Knight and Exploring the Intersection of AI and Open Source Security

OpenAI’s Matt Knight and Exploring the Intersection of AI and Open Source Security

2024-06-0414:58

Eric Brewer and the Future of Open Source Security

Eric Brewer and the Future of Open Source Security

2024-05-2116:09

Mark Russinovich and AI’s Impact on Software Engineering and Open Source Software Security

Mark Russinovich and AI’s Impact on Software Engineering and Open Source Software Security

2024-05-0717:29

Christoph Kern and the Challenge of Keeping Google Secure

Christoph Kern and the Challenge of Keeping Google Secure

2024-04-2320:50

Vincent Danen and the Art of Vulnerability Management

Vincent Danen and the Art of Vulnerability Management

2024-04-1118:36

What's in the SOSS? Preview

What's in the SOSS? Preview

2024-03-2600:38

Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

Google’s Andrew Pollock and Addressing Open Source Vulnerabilities

Omkhar Arasaratnam, OpenSSF