We want your opinion! #IQTLabs is conducting a survey to better understand software reuse practices. If you are a software engineer, web developer, data scientist, or in a related role, we invite you to take our brief ~6 minute survey. #datascience #pip surveymonkey.com/r/codereuse

Join Kate Stewart, VP, Dependable Embedded Systems, The Linux Foundation this Thursday, March 25 at 7:30am PDT for an interactive, complimentary Mentorship Session exploring: Generating Software Bill Of Materials. Register here: bit.ly/3ce7WtR #opensource #SBOM

I give a keynote on Cloud Native Security Day #cnsecurityday at #KubeCon + #CloudNativeCon Europe 2021 on May 4. Keynote notice here: cnsecuritydayeu21.sched.com/event/iRnW ; check out the whole virtual conference here: events.linuxfoundation.org/cloud-native-s…

Check this out! An audio interview with me is "The Secure Developer" episode #91, titled "Open Source Security with Dr. David A. Wheeler". Listen here: devseccon.com/ep-91-open-sou…

The US has a new Executive Order on Cybersecurity. Check out my post, "How Linux Foundation (LF) communities enable security measures required by the US Executive Order on Cybersecurity": linuxfoundation.org/en/blog/how-lf…

TFiR just posted an interview of me by Swapnil Bhartiya titled "Is Open Source Ready For Biden’s Executive Order For Cybersecurity?"; enjoy! <tfir.io/is-open-source…>

You're welcome to join my session "Developing Secure Open Source Software (OSS)" on July 20, 9:30 – 11:00am PDT <events.linuxfoundation.org/mentorship-ses…> in the Linux Foundation: Live Mentorship series. 45 min presentation, 45 min Q&A. Free registration: events.linuxfoundation.org/lf-live-mentor…

Norman Dwight Megill died of natural causes on December 9, 2021. He was the creator of Metamath & its international community, and was a wonderful human being. I'll miss him. legacy.com/us/obituaries/…

OpenSSF GM brianbehlendorf shares what Open Source Foundations can do to prevent the next Log4Shell and secure our critical digital infrastructure: openssf.org/blog/2021/12/1…

Linux turned 30 this year! These global technology leaders want to congratulate and thank all kernel developers & the entire #opensource community on 30 years of innovation, growth and your tremendous impact on technology + the world. View here: hubs.la/Q010-yTm0

My thanks to MIT for the chance to speak today about log4j, Log4Shell, & OSS security!

New episode of the Security Unhappy Hour now available: Episode S2E6, 'Securing "the" Open Source'. I'm on it! We discuss (at a high level) open source software & software security. youtube.com/watch?v=0PseIg…

I love the Russian people. That is why I have to tell you the truth. Please watch and share.

Learn how to develop secure software in FREE courses from the OpenSSF! See openssf.org/training/cours… #learnlinux #opensource #cybersecurity #software #development #developer #security

It's April Fools' Day, so it's time to learn about YOLO levels to insecure your software supply chain: blog.chainguard.dev/yolo-levels-in…

The Open Source Security Foundation (OpenSSF) now has a new working group, the "Securing Software Repositories Working Group"! Modern software development generally depends on repositories & their tools, so it's great for them to be working together. See: openssf.org/blog/2022/04/1…

Just posted a new article, "The missing ingredient in software security: grassroots education" on TEISS (no cost but must register). Basically, we need to actively educate developers on developing secure software, because not enough know to spread it. See: teiss.co.uk/news/the-missi…

Here's a TechStrong interview of me about open source software security!: techstrong.tv/videos/intervi…

Boost your software security skills with OpenSSF's free LFD121 course! Learn key principles of secure software development and practical steps to counter attacks. Enroll today! hubs.la/Q02HGQtD0