How the CopyFail disclosure went sideways
About this episode
The episode discusses the issues surrounding the premature public disclosure of the CopyFail exploit and its implications for open source software.
In this episode, Theori’s Brian Pak and Andrew Wesie join James Wilson to discuss why the CopyFail exploit was publicly disclosed before Linux distributions had their patches ready. As you’ll hear in this episode, mistakes were made and lessons learned. It’s worth a podcast, too, because in our opinion this incident foreshadows the inevitable problems that open source software will face in the unfolding vulnpocalypse.
More episodes of Risky Business Features
- Why NPM v12 won’t stop supply chain attacks
- Everything is getting much worse, much faster
- Solo podcast: A deep dive on TeamPCP
- How to survive supply chain attacks
- NCSC’s Ollie Whitehouse on surviving the "bugpocalypse"
- What a great agentic AI deployment plan looks like
Explore listener stats, chart rankings, contacts and more on the Risky Business Features podcast page.