Download the podcast’s audio directly here.

This Episode’s Articles:

How Netflix Gives All Its Engineers SSH Access To Instances Running In Production

One of the ways Netflix enables engineering velocity is with a culture of ‘freedom and responsibility’ that empowers individuals with the freedom to do what is needed to get the job done. As a result, the security teams at Netflix focus on reducing developer friction, making it hard to do the wrong thing, and then rely on auditing, automated analysis, and alerting to keep things safe. Russell Lewis reviews a few approaches used in the industry to secure SSH bastions (aka jumpboxes) and evaluates them through the lens of Netflix’s security culture.

Chrome Defaults To HTML5 Over Adobe Flash Starting in Q4

In which we discuss Google’s continued efforts to kill off Flash and how long Google will continue to be a chaotic force for good on the Internet

Clearing up Some Misconceptions Around the ‘ImageTragick’ Bug

A discussion of the underlying issues that lead to the impact of the ImageMagick vulnerabilities and whether it’s always the right choice to rely on third-party modules for basic functionality.

Honorable Mention: ‘Demonically Clever’ Backdoor Hides In a Tiny Slice of a Computer Chip