The ActiveState Podcast https://activestate.podbean.com Explore the critical aspects of software security with the ActiveState Podcast Series, focusing on mitigating supply chain attacks and navigating open source management in fintech. Discover strategies for balancing rapid development with robust security measures, leveraging AI, and understanding the Python ecosystem, empowering tech professionals to enhance enterprise security and innovation. Mon, 15 Jul 2024 06:00:00 -0400 https://podbean.com/?v=5.5 en Copyright 2024 All rights reserved. Technology 1440 episodic ActiveState ActiveState No false https://pbcdn1.podbean.com/imglogo/image-logo/18851828/Active_State_Series_Art_Overview_Podcast_New_Episode_List_pyyzfe.png The ActiveState Podcast https://activestate.podbean.com 144 144 Episode 6, The Wall Street FinTech Perspective of Open Source Episode 6, The Wall Street FinTech Perspective of Open Source https://activestate.podbean.com/e/the-wall-street-fintech-perspective-of-open-source-ep6/ https://activestate.podbean.com/e/the-wall-street-fintech-perspective-of-open-source-ep6/#comments Mon, 15 Jul 2024 06:00:00 -0400 activestate.podbean.com/88761e45-8aed-3945-9c21-a3c079ce0f8a In Episode 6, of the ActiveState Podcast Series, "The Wall Street FinTech Perspective of Open Source," hosts Darya Niknamian and Pablo Bleck discuss the challenges and advantages of using open source software in the financial industry. Listeners will gain insights into managing open source dependencies securely, the importance of maintaining brand trust, and how financial institutions can navigate the complexities of open source to innovate quickly while staying compliant with regulations. Discover strategies for balancing security with speed and efficiency in the fintech world. 00:00 Introduction to the Active State Podcast 00:11 Meet the Hosts: Insights from Fintech Veterans 00:59 The Challenges of Managing Open Source in Fintech 01:28 The Importance of Trust and Security in Financial Industries 03:50 The Pros and Cons of Open Source in Fintech 06:45 Navigating the Complexities of Open Source Dependencies 08:28 Security Practices and Challenges in Fintech 13:21 ActiveState's Approach to Software Supply Chain Security 19:49 The Future of Security in Fintech and Closing Thoughts

]]> In Episode 6, of the ActiveState Podcast Series, "The Wall Street FinTech Perspective of Open Source," hosts Darya Niknamian and Pablo Bleck discuss the challenges and advantages of using open source software in the financial industry. Listeners will gain insights into managing open source dependencies securely, the importance of maintaining brand trust, and how financial institutions can navigate the complexities of open source to innovate quickly while staying compliant with regulations. Discover strategies for balancing security with speed and efficiency in the fintech world.

00:00 Introduction to the Active State Podcast
00:11 Meet the Hosts: Insights from Fintech Veterans
00:59 The Challenges of Managing Open Source in Fintech
01:28 The Importance of Trust and Security in Financial Industries
03:50 The Pros and Cons of Open Source in Fintech
06:45 Navigating the Complexities of Open Source Dependencies
08:28 Security Practices and Challenges in Fintech
13:21 ActiveState's Approach to Software Supply Chain Security
19:49 The Future of Security in Fintech and Closing Thoughts

]]> activestate false No 1313 6 full Episode 5, Cybersecurity: Safeguarding the Open Source Ecosystem Episode 5, Cybersecurity: Safeguarding the Open Source Ecosystem https://activestate.podbean.com/e/cybersecurity-safeguarding-the-open-source-ecosystem-ep5/ https://activestate.podbean.com/e/cybersecurity-safeguarding-the-open-source-ecosystem-ep5/#comments Mon, 08 Jul 2024 06:00:00 -0400 activestate.podbean.com/702ca447-c50a-3fcc-9c90-662db6350fb8 In episode five of the ActiveState series, cybersecurity experts Nicole Schwartz and Dana Crane discuss essential strategies for protecting the open source ecosystem. They delve into the growing threat of supply chain attacks, the importance of understanding the origins of open source components, and effective ways to mitigate these risks. Learn about the role of AI in security, the necessity of timely patching, and the benefits of outsourcing open source management to enhance productivity and security. Discover how collective responsibility can foster a more secure and efficient open source community.

Keywords: cybersecurity, open source, supply chain attacks, AI in security, patching vulnerabilities, open source management, enterprise security, Nicole Schwartz, Dana Crane.

]]> In episode five of the ActiveState series, cybersecurity experts Nicole Schwartz and Dana Crane discuss essential strategies for protecting the open source ecosystem. They delve into the growing threat of supply chain attacks, the importance of understanding the origins of open source components, and effective ways to mitigate these risks. Learn about the role of AI in security, the necessity of timely patching, and the benefits of outsourcing open source management to enhance productivity and security. Discover how collective responsibility can foster a more secure and efficient open source community.

Keywords: cybersecurity, open source, supply chain attacks, AI in security, patching vulnerabilities, open source management, enterprise security, Nicole Schwartz, Dana Crane.

]]> activestate false No 1330 5 full Episode 4, Everything Python - Trusted Publishers & Authors Episode 4, Everything Python - Trusted Publishers & Authors https://activestate.podbean.com/e/everything-python-trusted-publishers-authors-ep4/ https://activestate.podbean.com/e/everything-python-trusted-publishers-authors-ep4/#comments Mon, 01 Jul 2024 06:00:00 -0400 activestate.podbean.com/8231a7b2-d3e8-343f-870d-dfb132164458
00:00 Introduction to Episode Four
00:28 Understanding Trusted Publishing
02:04 Security Benefits of Trusted Publishing
03:34 Workflow Improvements with Trusted Publishing
04:36 Provenance and Supply Chain Security
11:08 Short-Lived Tokens and Security
12:51 Origins of Trusted Publishing
14:02 Building and Testing Python Packages
17:26 ActiveState Platform for Python Authors
18:13 Conclusion and Next Steps ]]> activestate false No 1125 4 full Episode 3, The Software Sweet Spot - Balancing Security and Development Speed Episode 3, The Software Sweet Spot - Balancing Security and Development Speed https://activestate.podbean.com/e/the-software-sweet-spot-balancing-security-and-development-speed-ep3/ https://activestate.podbean.com/e/the-software-sweet-spot-balancing-security-and-development-speed-ep3/#comments Mon, 24 Jun 2024 06:00:00 -0400 activestate.podbean.com/c216ca66-e7f3-3d86-bae8-eec9937d60a9 In "The Sweet Spot: Balancing Security and Development Speed," Episode 3 of The ActiveState Podcast, hosts Nicole Schwartz and Martin Drohmann dive into the challenges of managing security vulnerabilities while meeting development deadlines. They share practical tips for integrating security practices into your workflow and discuss how ActiveState's tools can help you avoid dependency hell and securely manage open-source projects. Tune in for an engaging conversation on finding the optimal balance between security and development efficiency. 00:00 Introduction to the Podcast and Active State 00:23 Balancing Security and Development Speed: A Friendly Argument 01:33 The Developer's Perspective on Security and Prioritization 03:38 The Security Perspective: Prioritizing Vulnerabilities 05:05 Tooling and Techniques to Manage Security in Development 07:35 The Challenge of Dependency Management in Open Source 10:22 Active State's Solutions for Dependency Management and Security 11:20 The Importance of Frequent Updates and Best Practices 18:19 Concluding Thoughts on Security, Dependency Management, and Active State

]]> In "The Sweet Spot: Balancing Security and Development Speed," Episode 3 of The ActiveState Podcast, hosts Nicole Schwartz and Martin Drohmann dive into the challenges of managing security vulnerabilities while meeting development deadlines. They share practical tips for integrating security practices into your workflow and discuss how ActiveState's tools can help you avoid dependency hell and securely manage open-source projects. Tune in for an engaging conversation on finding the optimal balance between security and development efficiency.

00:00 Introduction to the Podcast and Active State
00:23 Balancing Security and Development Speed: A Friendly Argument
01:33 The Developer's Perspective on Security and Prioritization
03:38 The Security Perspective: Prioritizing Vulnerabilities
05:05 Tooling and Techniques to Manage Security in Development
07:35 The Challenge of Dependency Management in Open Source
10:22 Active State's Solutions for Dependency Management and Security
11:20 The Importance of Frequent Updates and Best Practices
18:19 Concluding Thoughts on Security, Dependency Management, and Active State

]]> activestate false No 1243 3 full Episode 2, Tech Debt or Security? What makes you migrate? Episode 2, Tech Debt or Security? What makes you migrate? https://activestate.podbean.com/e/tech-debt-or-security-what-makes-you-migrate-ep2/ https://activestate.podbean.com/e/tech-debt-or-security-what-makes-you-migrate-ep2/#comments Mon, 17 Jun 2024 06:00:00 -0400 activestate.podbean.com/4218655b-a8ce-38db-8a62-22db3aad5845
00:00 Introduction and Hosts Introduction
00:28 Defining Tech Debt and Security
02:13 The Evolution of Tech Debt
04:32 Customer Perception and Impact
05:33 When to Address Tech Debt
07:45 Balancing Tech Debt and Security
12:06 Proactive vs. Reactive Approaches
15:51 Strategies for Staying Up-to-Date
20:08 Conclusion and Final Thoughts ]]> activestate false No 1240 2 full Episode 1, The Rise of Software Supply Chain Attacks Episode 1, The Rise of Software Supply Chain Attacks https://activestate.podbean.com/e/the-rise-of-software-chain-attacks-ep1/ https://activestate.podbean.com/e/the-rise-of-software-chain-attacks-ep1/#comments Mon, 10 Jun 2024 13:27:57 -0400 activestate.podbean.com/e470b9f9-748e-36b2-af44-25aa08ac281a In this premiere episode of the ActiveState Podcast, hosts Pete Garcin and Dana Crane delve into the alarming increase in software supply chain attacks. They pinpoint vulnerabilities in open source software, and discuss various types of attacks like typosquatting and malware. Highlighting incidents such as SolarWinds and Log4j, the hosts shed light on the implications and sophistication of these threats. The episode underscores the need for strong security measures and offers a preview of future topics on safeguarding your software supply chain. 00:00 Episode 1: The Rise of Software Supply Chain Attacks - Introduction 00:25 Understanding ActiveState's Role in Software Security 00:52 Defining the Software Supply Chain 02:49 The Vulnerability of Open Source Supply Chains 03:57 The Impact of Software Supply Chain Attacks 10:22 The Evolution of Software Supply Chain Management 13:27 Outsourcing Supply Chain Management for Better Security 16:57 The Growing Threat of Software Supply Chain Attacks 19:24 Conclusion and Invitation to Learn More

]]> In this premiere episode of the ActiveState Podcast, hosts Pete Garcin and Dana Crane delve into the alarming increase in software supply chain attacks. They pinpoint vulnerabilities in open source software, and discuss various types of attacks like typosquatting and malware. Highlighting incidents such as SolarWinds and Log4j, the hosts shed light on the implications and sophistication of these threats. The episode underscores the need for strong security measures and offers a preview of future topics on safeguarding your software supply chain.

00:00 Episode 1: The Rise of Software Supply Chain Attacks - Introduction
00:25 Understanding ActiveState's Role in Software Security
00:52 Defining the Software Supply Chain
02:49 The Vulnerability of Open Source Supply Chains
03:57 The Impact of Software Supply Chain Attacks
10:22 The Evolution of Software Supply Chain Management
13:27 Outsourcing Supply Chain Management for Better Security
16:57 The Growing Threat of Software Supply Chain Attacks
19:24 Conclusion and Invitation to Learn More

]]> activestate false No 1207 1 full