Keeping Open Source Software Secure with Eddie Zaneski

In this episode of The Defense Unicorns Podcast, we’re joined by Collen Roller, Founder of Dark Saber, as he shares his journey of innovation within the U.S. Air Force. From his work in Natural Language Processing (NLP) to mentoring airmen on developing applications using outdated systems, Collen’s story highlights perseverance and creativity. Discover how Dark Saber has empowered airmen to build production-ready software, transforming their operational efficiency.We explore the transformative potential of generative AI in defense, including its ability to automate tasks like paperwork and coding, enhancing productivity. Collen also introduces Nipper GPT, an AI tool tailored for DoD networks that bridges information gaps through conversational interfaces, pushing the boundaries of data access within military environments.Looking to the future, Collen discusses exciting advancements like Retrieval Augmented Generation (RAG) and multi-agent AI architectures, poised to revolutionize military data interactions. As he reflects on the importance of passion and community in driving change, this episode showcases Collen’s commitment to modernizing defense technology through innovation.Key Quote: “I think that people need to realize that these tools are for their benefits and they need to get involved in using them today to enhance their performance and workflow because if you're not using them, you're being slow.”-Collen Roller, Founder of Dark SaberTime Stamps:(00:00) DoD Software and Conversational Systems(11:28) Future of AI in Military Operations(17:05) Future Developments in Artificial Intelligence(34:38) Revolutionizing Software Development in DoD(44:21) Driving Change in DoD Through PassionLinks:Learn more about Dark SaberConnect with CollenConnect with Luke

This week on, Defense Unicorns Podcast we welcome Eddie Zaneski, the tech lead for open source here at Defense Unicorns, who takes us through his fascinating career journey from aspiring math teacher to a key player in the tech industry. Eddie shares his experiences transitioning into computer science, his passion for developer relations, and his significant contributions to the Kubernetes project. We dive into the evolution of software deployment, from bare metal servers to virtual machines and containers, and how Kubernetes has become essential in managing large-scale containerized applications. Eddie also reflects on his time at DigitalOcean, Amazon, and ChainGuard, highlighting his work on software supply chain security projects like Protobomb and Sigstore.Our conversation then turns to the security of open-source communities, challenging the misconception that open-source software is less secure than its closed-source counterparts. Eddie discusses the advantages of transparency in open source, using the XZ library's recent security breach as a case study to emphasize the importance of trust and identity verification. We also explore the potential for similar vulnerabilities in closed-source projects and the growing importance of supply chain security measures, including building integrity and software bills of materials (SBOM). The episode concludes with a thought-provoking discussion on the benefits of transparency in open source and whether proprietary software incidents would be as openly shared or understood.Eddie shares his enthusiasm for leveraging government funding to support open-source projects. He expresses his excitement about engaging with soldiers, airmen, and guardians to understand their challenges and explore open-source solutions. We also touch on innovative tools for air-gapped environments, like Zarf, and their applications across various industries. Listen in as Eddie recounts his experiences at Bravo hackathons, the unique challenges faced by developers in constrained environments, and offers valuable career advice for those passionate about open source and software development.Key Quote“There's lots of misconceptions and I'm sure you and I can talk about all of them. One of the big ones is, just. It's less secure, right? that's a massive myth. Open source security is less secure because all the code is in the open and everyone can go find the holes and generally quite the opposite actually, because the code is in the open, everyone can do their own audits and everyone can see what's happening under the covers of the magic box that you usually can't peer into with proprietary software. We have entire teams of like security. So the Kubernetes project is divided up into special interest groups or SIGs. So we have SIGs for security, we have a product security council and committee that is the incident response people for when there is a new CVE or a bug found, and all sorts of different types of things that are just tailored around security.”-Eddie ZaneskiTime Stamps:(00:02) Kubernetes and Open Source Evolution(08:17) Security in Open Source Communities(20:43) Software Bill of Materials for Cybersecurity(24:04) Exploring Defense Unicorns and Open Source(31:43) Navigating Careers in Open Source(42:25) Breaking Barriers in Defense Innovation(46:42) Collaborating for Defense Open SourceLinksConnect with Eddie

In this episode of the Defense Unicorns Podcast, Rebecca sits down with Mark McGrath, a Marine Corps veteran turned asset manager and consultant, to explore how modern DevSecOps practices intersect with John Boyd's theories. Mark’s deep understanding of Boyd's OODA loop—observe, orient, decide, act—shapes how he helps clients in industries like manufacturing, energy, and public relations respond to complexity and streamline decision-making, much like DevSecOps optimizes software development and deployment.Diving into the legacy of John Boyd and going beyond the OODA loop, Mark discusses Boyd’s influence on business strategy, finance, and software development. Mark brings a fresh angle to Boyd’s concept of rapid iteration, emphasizing how speed, adaptability, and customer feedback are key tenets not just in the military or on Wall Street but also in DevSecOps. We also delve into Boyd's "Destruction and Creation," connecting it to principles of continuous integration and delivery, and explore how his philosophy of action and adaptation aligns with the core practices of DevSecOps.Throughout the episode, Mark highlights the critical role of psychological safety and cross-functional collaboration, both key to effective leadership and DevSecOps culture. Whether you're deploying code or managing high-stakes operations, this conversation illuminates the relevance of Boyd's theories for anyone aiming to navigate complexity, enhance agility, and drive innovation in their organization.Key Quote“You realize I have to continuously shatter and smash my understanding of the world or my perception of the world because if I don't I'm going to become Blockbuster video. And if I don't, I'm going to be Blackberry. Or if I don't, I'm going to stagnate and I'm going to become extremely vulnerable to my competitors or the rate of change or whatever it is, it's going to get me and I'm not going to be able to survive on my own terms and it's impossible for me to ever thrive.”-Mark McGrathTime Stamps:00:58 Mark McGrath's Background and Career Journey01:38 Discovering John Boyd's Theories04:13 Joining AGLX and Applying Boyd's Theories06:35 Understanding John Boyd's Broader Impact17:47 Boyd's Conceptual Spiral and Continuous Reorientation28:39 Challenging the Status Quo33:33 The Importance of Humility35:06 Comfort vs. Volatility40:13 The Power of Feedback48:07 Boyd's Universal ApplicabilityLinks:Connect with MarkLearn more about AGLXCheck out the “No Way Out” PodcastThe Whirl of Reorintation SubstackRead Destruction and CreationRead John Boyd, The Fighter Pilot Who Changed The Art of War Read The Psychology of Military Incompetence Read the Timeless Way of Building

Join us on this episode of Defense Unicorns Podcast as we are joined by Kurt Sanger, retired Marine and former Deputy Staff Judge Advocate at US Cyber Command. Kurt shares his journey from growing up in New York City to studying at Holy Cross and Cardozo Law School, where his interest in the Marine Corps began. He reflects on his early roles in military justice and his transition into cyber operations law, providing candid insights into the challenges and motivations that shaped his path.In this episode, Kurt discusses the evolution of cyber partnerships and the critical role of trust and collaboration within the Five Eyes community. He sheds light on the complexities of legal counsel in military operations, emphasizing the importance of clear communication and the broad responsibilities of military attorneys. Through key events like the ISIS conflict and the Sony breach, Kurt illustrates the rapid shift from theory to practice in cyber operations.We also delve into the challenges of great power competition, the debate over the US Cyber Command’s role, and the essential collaboration between technologists and lawyers in shaping cyber policy. Kurt offers a thought-provoking perspective on how emerging technologies and international relations could shape the future of conflict.--Key Quote: “All these organizations have missions and those missions take up all the bandwidth that they have, all the people and all the assets that they have to carry out as it is. And competing in cyberspace is most likely never going to be the priority of an organization that has a kinetic mission.”-Kurt Sanger--Time Stamps:(00:46) Kurt Sanger's Background and Career Path(04:58) Transition to Cyber Law and Operations(07:08) Challenges and Evolution in Cyber Operations(09:23) Legal and Ethical Considerations in Cyber Operations(26:47) Discussion on Cyber Force and Organizational Structure(46:33) The Future of Cyber Conflict and Hope--Links:Connect with KurtConnect with RebeccaLaw of the Horse, What Cyber Law Might TeachCode is LawThe Nightingale's SongBeats So Lonely

In this podcast episode, host Rebecca talks with Lieutenant Colonel Casey Waldo Miller, Deputy Commander of the 67th Cyberspace Operations Group. Covering topics from his family history of military service to his role in transforming cyber operations, Lt. Col. Miller shares his journey into the Air Force, the lessons learned from commanding the 90th Cyberspace Operations Squadron, and his philosophy of leadership, including concepts like catastrophic success, ‘sucking less’ and strategic intent. Highlighting key moments like influencing Air Force policy changes and briefing top military leaders, this episode provides an in-depth look at how strategic thinking and prioritizing people can lead to significant organizational change.

In this episode of Defense Unicorns Podcast, host Rebecca Lively engages with Luke Shabro, a former intelligence specialist and current Army Growth Lead at Defense Unicorns, in a comprehensive dialogue focusing on Luke’s journey from the navy to a pivotal role in shaping the future of military operations. They delve into Luke’s experiences with DevSecOps, cybersecurity, and how his work in intelligence and organizational transformation has contributed to anticipating and preparing for future warfare challenges. The conversation highlights the importance of innovative thinking and collaboration across the defense sector to proactively address the evolving landscape of global security and technological advancement. 

On this episode of Defense Unicorns, a Podcast, Air Force Captain Will Walker’s journey from university to the Air Force, focusing on his involvement in software development, DevOps technologies, and cybersecurity. It touches on his experiences with ROTC, passion for software, and the balance between technical involvement and leadership. The conversation delves into creating CICD pipelines, driving innovation in structured organizations, and the importance of questioning the status quo for change. Additionally, Will reflects on the value of software development, emphasizing its disruptive potential, impact on pushing boundaries, and the power of open-source collaboration in the tech field. 

This podcast episode features a candid conversation with Rebecca Lively, former Deputy Director at the Air Force's Shadows Edge Software Factory, now part of Defense Unicorns. Rebecca shares her unique career journey, from an impulsive decision to attend law school, to intellectual property litigation, and eventually leading roles within the military’s cyber and software development sectors. She discusses the challenges and realizations she faced in various roles, including her struggle with imposter syndrome and the importance of diversity and humility in tech. The episode also delves into broader issues like some flaws within the government’s hiring system, the impact of diversity on software development, and the shift towards creating a more inclusive and innovative work environment.

Join us as we dive into the story of Jeff McCoy. His journey wasn't a straight line. He went from blowing up his dad's laptop as a kid to making big changes in military tech with his work at Kessel Run, and Platform One and Space Camp. Now, he's taking on the tech world with his own startup, Defense Unicorns, which he co-founded. We'll talk about the ups and downs, the challenges he faced, their recent Series A investment for $30 million and other wins along the way. If you're curious about how someone goes from serving their country to shaking up the tech scene, this is the podcast for you.

In this episode titled we delve into the extraordinary journey of Nicolas Chaillan, who started as a teen software developer, revolutionized PHP adoption in enterprises, pioneered secure e-commerce in Europe, and went on to found and scale multiple companies across the globe, to include becoming the Department of the Air Force’s First Chief Software Officer. Listen as Nic shares insights from his early days of building game server hosting companies and e-commerce websites, navigating the challenges of being a young entrepreneur in a rapidly evolving tech landscape, and transitioning into a pivotal role in the U.S. Department of Defense. This story is not just about technological innovation, but also about resilience, adaptability, and the drive to make a significant impact on national security. Join us as we uncover the lessons learned from bridging the worlds of startups and cybersecurity, and how embracing change and seizing opportunities can lead from teenage coding projects to leading tech initiatives in defense. Connect with Nic on LinkedIn.