Sep 17, 2026 · 45 min · 12 segments
In this episode of the GR-OSS Out Podcast, host Jay Faulkner talks with Juan Escalada, maintainer of GitProxy at G-Research Open Source Software, about a serious vulnerability in GitProxy that allowed…
And this sounds kind of funny because I realized that like time happens, right? But I was in the industry actually working as a system administrator of DevOps when that term sort of started to emerge.
So anytime I hear someone say that they do DevOps like as a job title, I'm always curious to dig down and see what that means to them.
So when you say like you work on DevOps, What sort of things does that bring to mind for you? I'm going to anchor it to this.
I'm going to say like, do you have access to a production environment somewhere that you use to keep the lights on? Or are you just working on the software side of DevOps?
The word AI is being used now where it's sort of like someone gave you a basic monitoring system for your servers.
That's actually the reason I ask is to disambiguate because it can mean anything from I'm on call for a multi-million dollar environment to...
Yeah, I keep CI running in a GitHub repository, and I think that's actually kind of neat.
You know, it kind of makes sense that you're saying that's the realm you work in, because the one thing I know that you've got your name attached to, at least for us down at GResearch, is GitProxy.
And our employers, our patrons, however you want to say it, the good people over at G-Research have a pretty strict security posture.
And I think your work is maybe enabling them to do a little bit more directly with open source.
So you might ask me, well, what is your work specifically related to, say, cryptography or memory handling and security in general? And while I don't deal with those questions, maybe on a day-to-day basis, indeed, Git proxy is meant to be a security layer so that GR can contribute to open source operations.
without having to worry about potential leakage and any kind of problems that come with importing code from out in the world and pushing code out in the world.
And this sounds kind of funny because I realized that like time happens, right? But I was in the industry actually working as a system administrator of DevOps when that term sort of started to emerge.
So anytime I hear someone say that they do DevOps like as a job title, I'm always curious to dig down and see what that means to them.
So when you say like you work on DevOps, What sort of things does that bring to mind for you? I'm going to anchor it to this.
I'm going to say like, do you have access to a production environment somewhere that you use to keep the lights on? Or are you just working on the software side of DevOps?
The word AI is being used now where it's sort of like someone gave you a basic monitoring system for your servers.
That's actually the reason I ask is to disambiguate because it can mean anything from I'm on call for a multi-million dollar environment to...
Yeah, I keep CI running in a GitHub repository, and I think that's actually kind of neat.
You know, it kind of makes sense that you're saying that's the realm you work in, because the one thing I know that you've got your name attached to, at least for us down at GResearch, is GitProxy.
And our employers, our patrons, however you want to say it, the good people over at G-Research have a pretty strict security posture.
And I think your work is maybe enabling them to do a little bit more directly with open source.
So you might ask me, well, what is your work specifically related to, say, cryptography or memory handling and security in general? And while I don't deal with those questions, maybe on a day-to-day basis, indeed, Git proxy is meant to be a security layer so that GR can contribute to open source operations.
without having to worry about potential leakage and any kind of problems that come with importing code from out in the world and pushing code out in the world.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.
