Episode brief
Listen here
Listen to the full episode.
What this episode examines
Your vehicle's biggest security threat might be arriving with a perfectly valid digital signature and your company's own stamp of approval.
In this episode, we break down why the shift to software-defined vehicles is currently failing at the release gate. We walk through the uncomfortable reality of SOP pressure and argue that current security assessments are often treated as advisory rather than hard controls.
It is time to stop asking for attention and start controlling the release, because a "safe" binary that your organization doesn't actually understand is just a liability waiting to happen.
Drop your take in the comments or share this episode with a colleague who is fighting against weak provenance and unrealistic deadlines right now.