10 Aug 2026 Cleanup, Speedup, Levelup open source at e18e
"E18e enhances JavaScript by reducing dependencies, optimizing tools, and improving security, as seen in its work with Storybook, while promoting cleaner code and community collaboration."
More Open Source Security episodes
Iocaine poisons bots with Gergely Nagy
Published 12 Jan 2026
Duration: 40:07
Iocane protects self-hosted websites from aggressive web crawlers by using a sophisticated runtime that misdirects bots with rubbish content while preserving normal user experiences.
Episode Description
Josh talks to Gergely Nagy (algernon) about his tool Iocaine. Iocaine creates a maze to trap scraping bots in a world a fake pages they cannot escape....
Overview
The podcast outlines Iocane, a tool designed to defend self-hosted websites from aggressive web crawlers by serving misleading or nonsensical content to bots while ensuring normal functionality for human users. Iocane works as a runtime system that filters and processes requests using user-defined scripts, often redirecting bots through complex, randomly generated content created with techniques like Markov chains. The system is designed to avoid detection by bots while remaining invisible to legitimate users, using stealthy methods and leveraging cultural references, such as the poison from The Princess Bride, to enhance its approach.
The tools philosophy emphasizes speed, efficiency, and passive mitigation of bot traffic, with a focus on trapping and analyzing bots rather than simply blocking them. The discussion explores bot behavior, techniques for managing bot responses, and strategies for identifying and exploiting bot vulnerabilities, all aimed at helping website owners reclaim control over their content from automated threats. Iocane supports multiple scripting languages and is designed to be integrated seamlessly into existing web infrastructure, providing an innovative and adaptive solution for bot defense.
Recent Episodes of Open Source Security
3 Aug 2026 VulnCheck's State of Exploitation Report with Patrick Garrity
"Cybersecurity vulnerabilities are being exploited faster (80-day average), AI is both a tool and target, disclosure practices are inconsistent, and better coordination, transparency, and proactive patching are critical to mitigating risks."
27 Jul 2026 Securing critical infrastructure with Josh Corman
"Cybersecurity faces escalating threats to critical infrastructure, requiring stronger OT security, IT-OT collaboration, proactive threat modeling, and resilience engineering to prevent real-world disasters."
20 Jul 2026 Abandoned open source with Josh Marpet
"Outdated vendor risk management processes, plagued by misrepresented questionnaires and slow vulnerability disclosures, demand faster, proactive security measures and greater transparency in open-source software."
13 Jul 2026 Red Hat's Project Lightwell with Mo Duffy
"Project Lightwell uses AI and open-source collaboration to detect and fix vulnerabilities missed by traditional tools, emphasizing upstream transparency, AI's role in security, and Red Hat's efforts to sustain long-term open-source security through collaboration and patch adoption."