jeffluszcz
Contacting jeffluszcz
Federation handle:
@jeffluszcz@mastodon.social
jeffluszcz's Information
jeffluszcz's Bio
Cambridge. Founded Palamida 2004 (acquired by http://flexera.com/sca in 2016) Open Source Licensing, OSPOs, M&A, SCA, SBOMs and Security
Love my bike, moss and walkable cities!
jeffluszcz's Posts
jeffluszcz has 6 posts.
Pinned
jeffluszcz
Kicking off my new SBOM Skills Series with 'How Falsehoods, Folklore and Foul-ups hurt your SBOM'. What causes the problems your users will see in your SBOM? How can you get ahead of them? See how in my new article: https://zebracatzebra.com/sbom-skills/how-falsehoods-folklore-and-foul-ups-hurt-your-sbom/ #sbom #supplychain #opensource
Tags: #SBOM #supplychain #opensource
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
Up next in my SBOM Skills series: 99% of the news is not on the front page! What are you missing by not tracking your "Below the Fold" SBOMS?
How and why you should find and manage the containers, infrastructure and middleware pieces that most SBOMs are missing.
Read more here:
https://zebracatzebra.com/sbom-skills/the-importance-of-below-the-fold-sboms/ #oss #opensource #softwaresupplychainsecurity #sbom
Tags: #oss #opensource #softwaresupplychainsecurity #SBOM
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
What lessons can we learn from 20 years of managing invisible cut and pastes of Open Source code and how can we apply them to managing code generated by AI tools?
https://zebracatzebra.com/oss/what-20-years-of-stolen-snippets-teaches-about-managing-ai-generated-code/ #ai #sbom #softwaresupplychainsecurity #opensource
Tags: #ai #SBOM #softwaresupplychainsecurity #opensource
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
Getting a SBOM produced that you can stand behind and that won’t embarrass you or get you in trouble can be difficult at first. There’s a few common areas that SBOMs will have problems in. These include Completeness, Depth, Unremediated Vulnerabilities, Open Source License Violations, and Over Delivery.
Each of these areas can cause rework, missed deadlines, loss of sales and even legal problems. Let's dive into what these are and techniques to fix them! https://zebracatzebra.com/oss/your-first-sbom-is-going-to-stink-dont-panic-get-started-fixing-it/ #sbom
Tags: #SBOM
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
#introduction #introductionpost
I'm Jeff Luszcz, I live in San Francisco. I love my bike and am involved with #pedestrian and #bike advocacy.
I'm the Director of an #OSPO (Open Source Program Office) and was the founder of Palamida, one of the first SCA/Open Source scanning companies from 2003-2019.
I love working with people on Open Source Licensing, OSPOs, M&A and Security.
I blog at https://zebracatzebra.com
I enjoy #arduino, #hamradio, #amateurradio and disaster communications.
Tags: #introduction #introductionpost #pedestrian #bike #ospo #arduino #hamradio #amateurradio
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
In response to this post@ai6yr With my SLA and AGMs I figured out the final resting voltage that showed state of charge to confirm my battery charger was doing the right thing.
Mentions: @ai6yr@m.ai6yr.org
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
Up next in my SBOM Skills series: 99% of the news is not on the front page! What are you missing by not tracking your "Below the Fold" SBOMS?
How and why you should find and manage the containers, infrastructure and middleware pieces that most SBOMs are missing.
Read more here:
https://zebracatzebra.com/sbom-skills/the-importance-of-below-the-fold-sboms/ #oss #opensource #softwaresupplychainsecurity #sbom
Tags: #oss #opensource #softwaresupplychainsecurity #SBOM
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
What lessons can we learn from 20 years of managing invisible cut and pastes of Open Source code and how can we apply them to managing code generated by AI tools?
https://zebracatzebra.com/oss/what-20-years-of-stolen-snippets-teaches-about-managing-ai-generated-code/ #ai #sbom #softwaresupplychainsecurity #opensource
Tags: #ai #SBOM #softwaresupplychainsecurity #opensource
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
Kicking off my new SBOM Skills Series with 'How Falsehoods, Folklore and Foul-ups hurt your SBOM'. What causes the problems your users will see in your SBOM? How can you get ahead of them? See how in my new article: https://zebracatzebra.com/sbom-skills/how-falsehoods-folklore-and-foul-ups-hurt-your-sbom/ #sbom #supplychain #opensource
Tags: #SBOM #supplychain #opensource
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
Getting a SBOM produced that you can stand behind and that won’t embarrass you or get you in trouble can be difficult at first. There’s a few common areas that SBOMs will have problems in. These include Completeness, Depth, Unremediated Vulnerabilities, Open Source License Violations, and Over Delivery.
Each of these areas can cause rework, missed deadlines, loss of sales and even legal problems. Let's dive into what these are and techniques to fix them! https://zebracatzebra.com/oss/your-first-sbom-is-going-to-stink-dont-panic-get-started-fixing-it/ #sbom
Tags: #SBOM
Likes: 0
Replies: 0
Boosts: 0
jeffluszcz
#introduction #introductionpost
I'm Jeff Luszcz, I live in San Francisco. I love my bike and am involved with #pedestrian and #bike advocacy.
I'm the Director of an #OSPO (Open Source Program Office) and was the founder of Palamida, one of the first SCA/Open Source scanning companies from 2003-2019.
I love working with people on Open Source Licensing, OSPOs, M&A and Security.
I blog at https://zebracatzebra.com
I enjoy #arduino, #hamradio, #amateurradio and disaster communications.
Tags: #introduction #introductionpost #pedestrian #bike #ospo #arduino #hamradio #amateurradio
Likes: 0
Replies: 0
Boosts: 0