SPDX 3.0 Update
Learn about the latest updates and improvements in SPDX 3.0, exploring its enhanced capabilities for software bill of materials (SBOM) and supply chain security.
Beyond the Trend: Authentic Approaches to Fostering Diversity in Open Source
Explore authentic approaches to fostering diversity in open source, avoiding common pitfalls and implementing concrete strategies for genuine inclusivity, based on a blind woman's tech journey.
Digital Forensics with Container Checkpointing
Explore container checkpointing for digital forensics in cloud environments. Learn to capture and analyze forensic snapshots of running containers, enhancing security in ephemeral Kubernetes setups.
Securing Modern Apps with Zero Trust and Next-Gen Web Application Firewall
Explore Zero Trust principles and next-gen Web Application Firewall technology for securing modern cloud applications against sophisticated cyber attacks, featuring Coraza and OWASP CoreRuleSet.
Will Large-Scale Automated Scanning Stop Malware on OSS Repositories?
Explore challenges of automated malware scanning in open-source repositories, focusing on PyPI's experience. Learn why current approaches fall short and discover emerging solutions for effective package security.
Growing the Chain: Trusting Build Provenance from Userspace
Explore techniques for establishing trust in CI/CD workflows, focusing on artifact signing, provenance generation, and building a chain of trust using open-source technologies like Sigstore and OIDC.
Greening the AI Cloud - Validating Power Models for Kubernetes Containers
Explore power consumption estimation for ML workloads using Kepler framework. Learn to create and validate power models for optimizing energy usage in data centers and Kubernetes environments.
Comparing FTP, FTPS, and SFTP - Choosing the Best File Transfer Protocol
Explore the differences between FTP, FTPS, and SFTP protocols, focusing on security features, authentication methods, and practical implementation in C# applications.
Native Messaging for Strictly Confined Browsers
Explore native messaging implementation for Firefox snap, including WebExtensions portal and browser changes. Demonstration of functionality with extensions and future plans for other browsers.
The Future of the Internet - A Mozilla Perspective
Explore Mozilla's vision for the internet's future, addressing challenges like closed systems, surveillance, and data privacy while discussing aspirations for a free and open web.
An Introduction to Let's Encrypt - SSL/TLS, HTTPS, and Free Automated Certificates
Explore Let's Encrypt: A free, automated certificate authority revolutionizing internet security. Learn its history, benefits, and impact on HTTPS adoption.
Designing for User-Centered Privacy
Explore user-centric privacy research and its implications for browser design. Learn about misconceptions, cultural perspectives, and the importance of data protection in the digital age.
Privacy Initiative on the Web - Protecting User Privacy Online
Explore web privacy principles, user research insights, and balancing transparency and control in online privacy. Learn about challenges and future trends in protecting user data.
Engineering for Privacy in Mixed Reality
Explore Mozilla's approach to user privacy in mixed reality, focusing on empowering users through secure immersive web browsing and social VR platform development.
Sylva Project: Achievements and Future Directions in Telco Cloud Homogenization
Explore Sylva's role in Telco Cloud & Edge homogenization, its key achievements, and future prospects for reducing fragmentation and integrating CloudNative and GitOps into the ecosystem.
Smarter Than Your Average SBOM - Understanding the SBOM Lifecycle
Explore the SBOM lifecycle, including creation, storage, distribution, trust verification, and enrichment. Learn about emerging practices and companion formats in software security.
Understanding the Sec in DevSecOps: Beyond Just Shifting Left
Explore attack vectors, preventive measures, and compliance strategies in DevSecOps. Learn innovative approaches to enhance software security beyond shifting left.
SEAPATH: A LF Energy Project for Critical Infrastructure with Emphasis on Software Supply Chain Security
Explore SEAPATH, an LFEnergy project revolutionizing electrical grid substations through virtualization, enhancing adaptability and interconnections while prioritizing reliability and cybersecurity for critical infrastructure.
Security Research with Open Source Software - Volume Omega
Explore open source software security with the OpenSSF Alpha-Omega team. Learn about automated security patches, vulnerability research, and tools to address global security concerns in the OSS ecosystem.
Bringing Service Security to a New Level - An Introduction to SaaSBOMs
Explore SaaSBOMs: enhancing service transparency, addressing complexities in generation, and discussing future developments for improved software supply chain security and legal compliance.
XIAO ESP32S3 Sense - Tiny ESP32 Camera with Microphone and MicroSD
Explore the XIAO ESP32S3 Sense board's features and build a camera with sound recording capabilities. Learn to set up, program, and upgrade this versatile microcontroller.