Ilkka Turunen's guest appearances

Ilkka Turunen

Software Engineering Daily

Security Archives - Software Engineering Daily

Tech Stories from HackerNoon

Podcast Archives - Software Engineering Daily

Software Daily

OwlTail

In this episode of the HackerNoon Podcast, Amy Tom sits down with Ilkka Turunen to talk about Supply Chain Security. They go over the Log4J incident that made a lot of apps built-in Java vulnerable to exploitation, what it means to be a field CTO, how companies can place themselves to collect user feedback, and a lot more!   Ilkka Turunen is the Field CTO of https://www.sonatype.com/ (Sonatype).   On this episode of the HackerNoon Podcast, Amy Tom and Ilkka Turunen chat about: What is a field CTO anyways? 🤔 (01:20) How do you stay in the loop on customer needs and feedback? ➿ (05:19) How has Ikka’s job as a field CTO changed since the pandemic started? 😷 (07:30) Supply chain attacks have increased since the pandemic started. How have Sonatype’s customers and the business changed over this period? 🧰 (08:53) Breaking down how the executive order by Biden’s administration regarding supply chains is affecting the software industry ⚙️ (10:06) What is the best way to mitigate supply chain risk? ⚠️ (11:49) Getting into vendor due diligence as mitigation of supply chain risk 🚩(17:22) Learnings from the Log4J incident 📝 (22:44) Why are 40% of Log4J downloads still the old vulnerable versions? ☢️ (25:47)    Log4J vulnerability resource center: https://www.sonatype.com/resources/log4j-vulnerability-resource-center    Find Ilkka Turunen online: https://twitter.com/llkkaT    Learn more about HackerNoon: To read HackerNoon stories, check out hackernoon.com To apply for a position, check out https://careers.hackernoon.com/ To participate in HackerNoon writing contests, check out https://hackernoon.com/u/hackernooncontests

In this episode of the HackerNoon Podcast, Amy Tom sits down with Ilkka Turunen to talk about Supply Chain Security. They go over the Log4J incident that made a lot of apps built-in Java vulnerable to exploitation, what it means to be a field CTO, how companies can place themselves to collect user feedback, and a lot more! Ilkka Turunen is the Field CTO of <a href="https://www.sonatype.com/" rel="nofollow" target="_blank">https://www.sonatype.com/</a> (Sonatype). On this episode of the HackerNoon Podcast, Amy Tom and Ilkka Turunen chat about: <ul><li>What is a field CTO anyways? 🤔 (01:20)</li> <li>How do you stay in the loop on customer needs and feedback? ➿ (05:19)</li> <li>How has Ikka’s job as a field CTO changed since the pandemic started? 😷 (07:30)</li> <li>Supply chain attacks have increased since the pandemic started. How have Sonatype’s customers and the business changed over this period? 🧰 (08:53)</li> <li>Breaking down how the executive order by Biden’s administration regarding supply chains is affecting the software industry ⚙️ (10:06)</li> <li>What is the best way to mitigate supply chain risk? ⚠️ (11:49)</li> <li>Getting into vendor due diligence as mitigation of supply chain risk 🚩(17:22)</li> <li>Learnings from the Log4J incident 📝 (22:44)</li> <li>Why are 40% of Log4J downloads still the old vulnerable versions? ☢️ (25:47)</li> </ul> Log4J vulnerability resource center: <ul><li><a href="https://www.sonatype.com/resources/log4j-vulnerability-resource-center" rel="nofollow" target="_blank">https://www.sonatype.com/resources/log4j-vulnerability-resource-center</a></li> </ul> Find Ilkka Turunen online: <ul><li><a href="https://twitter.com/llkkaT" rel="nofollow" target="_blank">https://twitter.com/llkkaT</a></li> </ul> Learn more about HackerNoon: <ul><li>To read HackerNoon stories, check out <a href="http://hackernoon.com" rel="nofollow" target="_blank">hackernoon.com</a></li> <li>To apply for a position, check out <a href="https://careers.hackernoon.com/" rel="nofollow" target="_blank">https://careers.hackernoon.com/</a></li> <li>To participate in HackerNoon writing contests, check out <a href="https://hackernoon.com/u/hackernooncontests" rel="nofollow" target="_blank">https://hackernoon.com/u/hackernooncontests</a></li></ul>

How to Recover from the Log4j Supply Chain Attack with Ilkka Turunen

Everyone is becoming increasingly aware of supply chains for physical goods.  Software has its own supply chain.  A supply of open source solutions exists as does a demand for these solutions by industry.  Both have surely grown, but it would be nice to have a way of measuring by how much. The State of Software Supply Chain 2021 is an annual publication now in its 7th year.  It’s released by Sonatype.  In this interview, I speak with their Field CTO Ilkka Turunen.  We review some of the highlights from the report including the state of open source and some particularly interesting statistics about supply chain attacks. The post The State of Software Supply Chain 2021 with Ilkka Turunen appeared first on Software Engineering Daily.

Everyone is becoming increasingly aware of supply chains for physical goods.  Software has its own supply chain.  A supply of open source solutions exists as does a demand for these solutions by industry.  Both have surely grown, but it would be nice to have a way of measuring by how much. <a href="https://www.sonatype.com/resources/state-of-the-software-supply-chain-2021" rel="nofollow" target="_blank">The State of Software Supply Chain 2021</a> is an annual publication now in its 7th year.  It’s released by Sonatype.  In this interview, I speak with their Field CTO Ilkka Turunen.  We review some of the highlights from the report including the state of open source and some particularly interesting statistics about supply chain attacks. The post <a href="https://softwareengineeringdaily.com/2021/12/13/the-state-of-software-supply-chain-2021-with-ilkka-turunen/" rel="nofollow" target="_blank">The State of Software Supply Chain 2021 with Ilkka Turunen</a> appeared first on <a href="https://softwareengineeringdaily.com" rel="nofollow" target="_blank">Software Engineering Daily</a>.