Devnexus 2022 - Keynote - Hacking the OSS Supply Chain - Stephen Chin

This talk addresses the critical security vulnerabilities within the open-source software supply chain, highlighting the significant risks faced by developers and enterprises. The speaker, Stephen Chin, discusses how a typical business application consists of 80% open-source code and explores the implications of security breaches, such as the SolarWinds hack, which showcase a deeper, systemic issue affecting various programming languages and cloud services. Chin proposes a foundational approach to securing the software supply chain, aiming to fortify the open-source ecosystem against potential exploits and enhance overall security.