[BSL2025] It's the middle of the night; do you know where your maintainers are - Diogo Sousa скачать в хорошем качестве

[BSL2025] It's the middle of the night; do you know where your maintainers are - Diogo Sousa

Open source software continues to steadily expand, with thousands of projects being added each day. Each new addition represents a variation in language, scope, purpose, and quality, adding to the millions of projects already in place across many different ecosystems. However, this growth is not matched by a corresponding increase in new maintainers joining the fray. Where there is new life, there is also decay. This leads to challenges in project sustainability and opens the door to potential issues in long- and short-term vulnerability management. With nearly every organization using open source in one way or another, vulnerabilities are like a big iceberg. Sometimes they’re being dragged in your direction by oceanic currents or lying in wait for your product, like a cruise liner, to collide with them head-on. In this talk, I’ll discuss the status quo of vulnerability management for open source projects: how it is done, how it could be done better, what’s working and what could be improved. Once settled in, we’ll don our diving gear and head beneath the surface to gauge just how much of the iceberg is hiding. About the Speaker: Diogo Sousa is an Engineering Manager at Canonical, working in support of the Ubuntu Security Team’s mission of providing Canonical users with the most secure and reliable open source experience possible. His day-to-day focus is on Ubuntu Pro’s Expanded Security Maintenance offering, prioritizing workloads and coordinating fixes across main and universe packages for all Ubuntu LTS releases. Outside professional endeavors, but still within arm’s reach, he co-leads the OWASP Lisboa chapter, delivers talks at cybersecurity events, participates in alumni events with current students, mentors people undergoing career upskilling, and writes some content here and there. In his (truly) free time, you can find him cooking (still can’t do baking), expanding his movie collection, teaching math, and playing board games.