Max Mehl
ea5ad727b2
All checks were successful
Website build and deploy / build (pull_request) Successful in 1m21s
25 lines
2.1 KiB
Markdown
25 lines
2.1 KiB
Markdown
---
|
|
title: "No IT security without Free Software"
|
|
date: 2019-07-03
|
|
categories:
|
|
- english
|
|
- presentation
|
|
tags:
|
|
- Security
|
|
headerimage:
|
|
src: pass-the-salt-2019.jpg
|
|
text: Picture of me giving the presentation at Pass the SALT 2019 in Lille
|
|
alt: Max Mehl during his presentation at Pass the SALT 2019 in Lille
|
|
video: https://www.youtube.com/watch?v=B0qxm331Q8Q
|
|
slides: https://download.fsfe.org/presentations/20190703-mm-SALT-ITSec.en.pdf
|
|
event:
|
|
name: Pass the SALT 2019
|
|
href: https://2019.pass-the-salt.org/talks/102.html
|
|
---
|
|
|
|
At Pass the SALT 2019 in Lille, France, I presented on the essential connection between IT security and Free Software. Pass the SALT (Security And Libre Talks) is a security conference with a specific focus on Free and Open Source Software security tools and practices, making it the ideal venue for this topic. The conference brings together security professionals who both develop and use Free Software security tools, and understand the value of transparency in security work.
|
|
|
|
The talk examined why proprietary software creates fundamental security problems that cannot be solved through patches or better practices alone. Without access to source code, security researchers cannot fully audit systems, users cannot verify what their software actually does, and the community cannot collaborate on security improvements. I presented case studies of security issues that persisted in proprietary systems precisely because of their closed nature, contrasted with Free Software projects where transparency enabled rapid community response to vulnerabilities.
|
|
|
|
The presentation also addressed common misconceptions: that disclosure of source code helps attackers (when research shows the opposite), that commercial vendors provide better security than community projects (when evidence suggests otherwise), and that security and usability require proprietary approaches (when Free Software demonstrates both are achievable). For the Pass the SALT audience, this reinforced their work developing and promoting Free Software security tools as not just technically sound, but philosophically necessary for genuine security.
|