Skip to content

How the CopyFail disclosure went sideways

May 21, 2026 · 19 min

Show notes

In this episode, Theori’s Brian Pak and Andrew Wesie join James Wilson to discuss why the CopyFail exploit was publicly disclosed before Linux distributions had their patches ready. As you’ll hear in this episode, mistakes were made and lessons learned. It’s worth a podcast, too, because in our opinion this incident foreshadows the inevitable problems that open source software will face in the unfolding vulnpocalypse.

Show notes

    All episodes of Risky Business Features

    Settings

    Display

    Language

    Decides which stations you see first on the home page.

    History

    Recently played stations and episodes and your latest searches are only stored in this browser.

    Notifications

    A short notice when a podcast you follow has a new episode. Turn off single podcasts with the bell on their page.

    Account

    Save favorites – in the app and on the website.

    Keyboard shortcuts

    /
    Open search
    Space
    Play or pause
    ← →
    In the player: back 15 s, forward 30 s (episodes) · in a row: next tile
    ↑ ↓
    In a row: target within the tile
    Home / End
    In a row: first or last tile
    Esc
    Close window or menu
    ?
    This overview
    Now playing

    Go to station page

    Play next

      Add episodes with “Play next” – they play after the current episode.