DEF CON 22 talk (2014) on how much internet infrastructure runs on open-source software that nobody has reviewed and nobody is funded to secure. Built the dataset behind it: 2,000+ open-source projects analyzed with a Jenkins pipeline on an AWS spot fleet.

Links

• Source