The EACG Podcast
Dialogues, discussions, and interviews on digital products, regulation, and product security — straight from our consulting practice.
RSS feed ↗"It's Not My Code"
Priya Raman — sole, unpaid maintainer of a small library load-bearing for half the internet — confronts Marcus's incident response and Tess's attacker's-eye view with what happens when nobody can see three suppliers deep.
Episode 4"That's Not a Zero-Day"
Marcus and Tess build, from opposite sides of the fence, toward the same conclusion: that "zero-day" has become a word people reach for to manufacture urgency, not to report a fact — and that the antidote was never a sharper alarm, but the boring work done long before one goes off.
Episode 3"The Fix Is Available"
A conversation in which Nora — a product manager for connected industrial devices, and an EACG client — confronts Marcus's disclosure process and Tess's attacker's-eye view with the gap between publishing a fix and a fleet actually running it.
Episode 2"Likelihood Times Impact"
A dialectic conversation between Marcus and Tess on whether a risk matrix's likelihood-times-impact score means anything — and what's left once you stop trusting the arithmetic but still need the conversation it was standing in for.
Episode 1Local or Network? On the Temptation of a Simple Split
A dialectic conversation between Marcus and Tess on whether known vulnerabilities should be divided into those exploitable over the network and those exploitable only locally — and what such a division would do to the people who have to act on it.
Get notified by email
Never miss a new episode — we'll email you as soon as one drops.
- Reply within one business day
- No spam, we promise
- GDPR compliant
Thank you!
We'll reply within one business day.