GR-OSS OUT Podcast - Episodes Tagged with “Security”

OpenStack Ironic and the MLH Fellowshipwith CID

G-Research Open Source Software — Tue, 18 Aug 2026 17:00:00 -0700

In this episode of the GROSS Out Podcast, host Tabitha DiDomenico talks with CID, a software engineer and maintainer on the OpenStack Ironic project at G-Research. CID explains what OpenStack Ironic does — provisioning and managing bare metal (physical) servers the same way you'd manage a cloud instance — covering the full server lifecycle from enrollment and cleaning to firmware updates and deployment.

CID also share his journey from ALX (African Leadership X), the MLH Fellowship to full-time open source maintainer of OpenStack Ironic and how it changed his life.

The conversation covers:

What OpenStack Ironic is and the problem it solves for bare metal provisioning
Runbooks, a feature for predefining and scoping automation steps across servers, and the upcoming Version 2 (V2) improvements
Why this release cycle has focused heavily on security advisories and vulnerability backports across four stable release branches
CID's path from the Major League Hacking (MLH) Fellowship and the African Leadership Experience (ALX) software engineering program to becoming a full-time open source maintainer
The realities of open source code review, the anxiety of working in public, and why backward compatibility is one of the most overlooked but critical skills in maintaining large infrastructure projects
CID's advice for anyone facing rejection from a fellowship or open source community

Links
CID's Blog - https://auditorical.com/
OpenStack Ironic - https://opendev.org/openstack/ironic
MLH Fellowship - https://fellowship.mlh.com/
ALX - https://www.alxafrica.com/
Eventlet - https://evenlet.net/
Runbooks - https://docs.openstack.org/ironic/latest/admin/runbooks.html

G-Research is hiring in Dallas, TX and London, UK! Apply at https://gresearch.com/vacancies.

For a video version of this podcast, check out https://youtu.be/fbsI8l-MaFA.

The GR-OSS OUT Podcast is produced by Ben Wiley. Special Guest: CID.

Building Welcoming Communities with Stacey Potter

G-Research Open Source Software — Mon, 13 Oct 2025 14:00:00 -0700

Tabitha Diaminico from G Research sits down with Stacey Potter, Manager of Community at the Open Source Security Foundation (OpenSSF), to explore what makes open source communities thrive. Stacey shares her unique journey through open source—from working at a license compliance company to shepherding projects like Flux through CNCF graduation, and now building inclusive communities at OpenSSF. Discover the practical strategies for welcoming new contributors, the surprising parallels between marketing and community building, and why people are truly the heart of open source.

Whether you're a seasoned maintainer looking to grow your project, a developer considering your first contribution, or simply curious about the open source security landscape, you'll hear actionable insights on creating psychological safety in communities, the importance of good documentation, and exciting initiatives like OpenSSF's upcoming ambassador program. Plus, get the inside scoop on upcoming OpenSSF events and smaller projects that deserve more love.

G-Research is hiring in Dallas, TX and London, UK! Apply at https://gresearch.com/vacancies.

For a video version of this podcast, check out https://youtu.be/-nJHBWtcTug.

The GR-OSS OUT Podcast is produced by Ben Wiley. Special Guest: Stacey Potter.

The Art of Finding and Publishing Security Bugs with David Leadbeater

G-Research Open Source Software — Fri, 13 Jun 2025 11:00:00 -0700

In this episode of the G Research Open Source Software Outreach Podcast, host Jay Faulkner sits down with security researcher and engineer David Leadbeater. They dive into David’s journey from hacking on Linux as a kid to discovering vulnerabilities in modern terminals. The conversation explores how obscure bugs can linger in new code, the messy reality of threat modeling, the challenges of maintaining secure open source software, and war stories from email security days.

Check out DGL's personal blog at [dgl.cx](dgl.cx).

Come work for G-Research in Dallas, TX or London, UK -- see open positions at https://www.gresearch.com/vacancies
For a video version of this podcast, check out https://youtu.be/-nJHBWtcTug Special Guest: David Leadbeater.

Security and Community with Tabatha DiDomenico

G-Research Open Source Software — Wed, 12 Feb 2025 07:00:00 -0800

In this podcast, Tabatha and Jay discuss security, oss communities, and the places security and community can intersect. Learn how GR-OSS works with CHAOSS and OpenSSF as part of our open source work.