Search a title or topic

Over 20 million podcasts, powered by 

Player FM logo
Artwork

Content provided by Corey Quinn. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Corey Quinn or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.
Player FM - Podcast App
Go offline with the Player FM app!

Helping Securing the Python with Mike Fiedler

34:31
 
Share
 

Manage episode 453926260 series 2937944
Content provided by Corey Quinn. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Corey Quinn or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

On this Screaming in the Cloud In this episode of Screaming in the Cloud, Corey Quinn is joined by AWS container hero and security engineer at the Python Software Foundation, Mike Fiedler. They delve into the intricacies of Python's ecosystem, discussing the evolution of PyPI, its significance, and the ongoing battles against security threats like account takeover attacks and typo-squatting. Mike sheds light on his role in maintaining the security and reliability of the Python Package Index, the importance of 2FA, and the collaborative efforts with security researchers. Corey and Mike also explore the challenges and philosophies surrounding legacy systems versus greenfield development, with insights on maintaining critical infrastructure and the often-overlooked aspects of social engineering.


Show Highlights

(0:00) Introduction

(0:47) The Duckbill Group sponsor read

(1:21) Breaking down the Python nomenclature and its usability

(5:49) Figuring out how Boto3 is one of the most downloaded packages

(6:43) Why Mike is the only full-time security and safety engineer at the Python Software Foundation

(9:53) How the Python Software Foundation affords to operate

(14:17) Mike's stack security work

(16:14) The Duckbill Group sponsor read

(16:57) Having the "impossible job" of stopping supply chain attacks

(21:00) The dangers of social engineering attacks

(24:44) Why Mike prefers to work on legacy systems

(33:30) Where you can find more from Mike

About Mike Fiedler

Mike Fiedler is a highly analytical, forward-thinking Information Technology professional. His broad-based background includes systems administration and engineering in global environments. Mike is technically astute and versatile with ability to quickly learn, master, and leverage new technologies to meet business needs and has a track record of success in improving performance, stability, and security for all infrastructure and product initiatives.

Mike is also bilingual, speaks English and Hebrew, and he loves solving puzzling problems.

Links

Sponsor

The Duckbill Group: duckbillgroup.com

  continue reading

648 episodes

Artwork
iconShare
 
Manage episode 453926260 series 2937944
Content provided by Corey Quinn. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Corey Quinn or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://podcastplayer.com/legal.

On this Screaming in the Cloud In this episode of Screaming in the Cloud, Corey Quinn is joined by AWS container hero and security engineer at the Python Software Foundation, Mike Fiedler. They delve into the intricacies of Python's ecosystem, discussing the evolution of PyPI, its significance, and the ongoing battles against security threats like account takeover attacks and typo-squatting. Mike sheds light on his role in maintaining the security and reliability of the Python Package Index, the importance of 2FA, and the collaborative efforts with security researchers. Corey and Mike also explore the challenges and philosophies surrounding legacy systems versus greenfield development, with insights on maintaining critical infrastructure and the often-overlooked aspects of social engineering.


Show Highlights

(0:00) Introduction

(0:47) The Duckbill Group sponsor read

(1:21) Breaking down the Python nomenclature and its usability

(5:49) Figuring out how Boto3 is one of the most downloaded packages

(6:43) Why Mike is the only full-time security and safety engineer at the Python Software Foundation

(9:53) How the Python Software Foundation affords to operate

(14:17) Mike's stack security work

(16:14) The Duckbill Group sponsor read

(16:57) Having the "impossible job" of stopping supply chain attacks

(21:00) The dangers of social engineering attacks

(24:44) Why Mike prefers to work on legacy systems

(33:30) Where you can find more from Mike

About Mike Fiedler

Mike Fiedler is a highly analytical, forward-thinking Information Technology professional. His broad-based background includes systems administration and engineering in global environments. Mike is technically astute and versatile with ability to quickly learn, master, and leverage new technologies to meet business needs and has a track record of success in improving performance, stability, and security for all infrastructure and product initiatives.

Mike is also bilingual, speaks English and Hebrew, and he loves solving puzzling problems.

Links

Sponsor

The Duckbill Group: duckbillgroup.com

  continue reading

648 episodes

Todos los episodios

×
 
Loading …

Welcome to Player FM!

Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.

 

Copyright 2025 | Privacy Policy | Terms of Service | | Copyright
Listen to this show while you explore
Play