More Open Source Security episodes
Published 9 Feb 2026
Duration: 32:26
The Nextcloud podcast explores its evolution as an open-source collaboration platform that promotes digital sovereignty, offering users self-hosted data and software, avoiding vendor lock-in and empowering data portability and transparency.
Josh talk to the founder and CEO of Nextcloud, Frank Karlitschek about digital sovereignty. There's a lot of attention lately around digital sovereign...
The podcast explores the evolution of Nextcloud, which began as a hobby project called ownCloud and was revitalized a decade ago to become an open source collaboration platform. It emphasizes Nextcloud's mission to provide users with control over their data through self-hosting capabilities, enabling digital sovereignty. The platform offers a range of tools for file synchronization, email, calendar, chat, and office work, all designed to be open and free from vendor lock-in, ensuring data portability and transparency.
The discussion also addresses the growing importance of data sovereignty in the face of differing privacy regulations across regions, such as European laws and U.S. legal frameworks. Nextcloud is highlighted for its scalable architecture and ease of setup, including options like Docker, making it accessible for both individuals and organizations. The platform is driven by a community-focused development model, prioritizing ethical practices and user freedom. Looking ahead, the project aims to enhance performance, security, and overall user experience to better serve its growing user base.
11 May 2026 Open source is critical infrastructure with Kat Cosgrove
Maintaining open source infrastructure is critical to prevent security risks from neglected projects, highlighting the need for sustainable funding, corporate collaboration beyond financial support, and systemic reforms to address coordination challenges, dependency fragility, and vulnerabilities.
4 May 2026 How to actually test a disaster plan with David Bernstein
A three-part disaster recovery framework emphasizing simplicity, clear roles, and collaboration, utilizing structured testing via HSEEP, real-world validation, and continuous improvement through exercises, while addressing pitfalls and balancing realism with psychological safety.
27 Apr 2026 Open Source Pledge with Vlad-Stefan Harbuz
Challenges in open source sustainability include undervaluing maintainers, dependency tracking issues, fragmented tooling, burnout, governance flaws, and paradoxical tool sustainability, necessitating financial support, sustainable governance, and collective action for long-term project viability.
20 Apr 2026 Building a plan for disaster with David Bernstein
Adaptive emergency management and disaster recovery demand dynamic strategies, structured frameworks like ISO 22301/NIST, cyclical preparedness, stress testing, stakeholder alignment, and resilience through collaboration and continuous learning to tackle evolving digital and physical risks.
13 Apr 2026 Open Source Malware with Paul McCarty
Open Source Malware (OSM) addresses the gap in detecting intentional malicious open-source components by cataloging threats, de-obfuscating code, extracting indicators of compromise, and providing post-incident data, while tackling challenges like persistent malicious packages, limitations of traditional tools against interpreted languages, fragmented collaboration, AI risks, and the need for improved CI/CD security, audit tools, and balanced AI-human oversight.