Linux and FOSS Supply Chain Issues - Hal Pomeranz - PSW #772

Linux systems are a collection of free and Open Source software-- some packaged by your distro, some built from source. How do you verify that your upstream isn't polluted by bad actors?

Segment Resources:

https://github.com/evilsocket/opensnitch

 https://securityonionsolutions.com/software/

https://deer-run.com/users/hal/

 https://archive.org/details/HalLinuxForensics

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw772