Keynote: Revisiting Total Cost of Ownership for External Dependencies - Paul Vixie, AWS Security
Channel: The Linux Foundation
Date: 2022-10-08

Keynote: Revisiting Total Cost of Ownership for External Dependencies - Paul Vixie, VP/Distinguished Engineer, AWS Security

In May 2022, Nozomi Networks published a security advisory describing an unpatched DNS bug affecting hundreds of IoT vendors. As the original author (upstream) of some of those bugs and as the eventual patcher (upstream) of all of them, this security advisory struck me as symptomatic of a broad cultural norm in today's software community. Simply put, external dependencies are allowed to present unaccounted risks. We don't have to live this way. Let's discuss.