Rolling Your Own Security Team for Fun and No Profit at All

Rolling Your Own Security Team for Fun and No Profit at All

Explore the evolution and challenges of founding and running the Arch Linux Security Team in this comprehensive conference talk from Arch Conf 2020. Gain insights into the team's development over six years, including its core values, motivation, and communication strategies. Learn about the Security Tracker, manual code review processes, and handling of proprietary packages. Discover optimization techniques, the CV numbering authority, and how to contribute to Arch Linux security. Understand the workflow, tools, and API used for security tracking, as well as the team's approach to verifying security fixes. Get answers to questions about Arch Linux's security handling, paid staff, and how to get involved in the security team.