More Open Source Security episodes
Published 23 Feb 2026
Duration: 29:53
The development and application of AI tools, such as Goose AI, in software development is explored, highlighting challenges and opportunities in using AI-generated code and the evolving role of developers.
Josh chats with Brad Axen from Block about his creation Goose as well as the Agentic AI Foundation (AAIF). I am quite skeptical of many AI claims, but...
The podcast discusses the advancement and application of agentic AI tools, particularly focusing on Goose AI, an AI coding assistant developed by Block (formerly Square). This tool enables users to build code and manage tasks through both command-line and graphical user interface methods, reflecting a shift in software development where users can convey their needs in natural language rather than writing code manually. However, achieving reliable results requires precise instructions and iterative refinement, as AI-generated code can have quality issues, especially in open-source projects, highlighting the need for improved code review practices.
The conversation also addresses broader efforts to standardize AI agent interactions, including initiatives like the Agentic AI Foundation, which is working on protocols such as MCP and ACP. Goose AI is presented as an example of these protocols in action. The discussion emphasizes the importance of human oversight in AI-assisted coding and considers the evolving role of developers as AI tools become more integrated into the development process. Looking ahead, the podcast anticipates more intuitive and efficient interfaces for AI-driven software development.
21 Sept 2026 The curl summer of Bliss with Daniel and Stefan
"Explored open-source security challenges, highlighting curl's 'Summer of Bliss' initiative to reduce maintainer burnout, the impact of AI-generated vulnerability reports, and the need for human expertise in security management, while advocating for sustainable practices in open-source development."
14 Sept 2026 CRA vulnerability reporting with Daniel Thompson
"Cyber Resilience Act imposes strict vulnerability reporting rules on manufacturers, raising concerns over inefficiency, ethical disclosures, and industry compliance challenges."
31 Aug 2026 Sovereign Tech Agency with Erik Moller
"Explores the Sovereign Tech Agency's efforts to sustain open-source software as critical infrastructure, emphasizing public investment, digital sovereignty, and strategic funding for projects like *curl* and AI security."
17 Aug 2026 Maintaining EOL Open Source with Commonhaus and HeroDevs
"Explores open-source maintenance challenges, solutions for solo maintainers, and the role of organizations like Common House and HeroDevs in sustaining projects through financial, legal, and administrative support, emphasizing governance, dependency management, and enterprise-community collaboration to ensure long-term sustainability."
10 Aug 2026 Cleanup, Speedup, Levelup open source at e18e
"E18e enhances JavaScript by reducing dependencies, optimizing tools, and improving security, as seen in its work with Storybook, while promoting cleaner code and community collaboration."