Open Source Security

By Josh Bressers

Is Trojan Source a vulnerability?

=> 🔊 Play episode (33 min) | Direct episode link | 💬 Share episode

Published November 07, 2021 6:00pm

Josh and Kurt talk about the new Trojan Source bug. We don't always agree on if this is a vulnerability (it's not), but by the end we come to an agreement that ASCII is out, Unicode is in. We don't live in a world where you can make a realistic suggestion to return to using only ASCII. There are a lot of weird moving parts with this one. Show Notes Trojan Source oss-security message GitHub example

=> Return to podcast