Terrence Fletcher

Panel: Life after the xz utils backdoor hack

12:35 PM - 1:20 PM EST

In late March, we all dealt with yet another attack on a popular open source project; this time, in the Linux-level package used for file compression called xz utils. What was most sinister about this attack, though, was how deeply it impacted trust within the open source community. The attacker spent years engineering multiple sock puppet accounts to gain the trust of the volunteer xz utils maintainer. In this panel moderated by Tidelift VP of product Lauren Hanford, we’ll talk to Josh Bressers of Anchore; Shaun Martin of BlackIce; Jordan Harband, prolific Javascript maintainer; Rachel Stephens from RedMonk; and Terrence Fischer from Boeing to get a diverse mix of perspectives on how this changes the landscape of open source software supply chain security.

About Terrence Fletcher

Terrence is a seasoned professional with over two decades of experience in IT and
security, with a strong focus on the defense and intelligence sectors. Having worked
with industry giants like Raytheon, Northrop Grumman, and Lockheed Martin, Terrence
is currently at The Boeing Company as a Product Security Engineer, where he
specializes in vulnerability management, attack surface profiling, and threat intelligence
integration.

Terrence holds a BS in Computer Information Systems from Florida Agricultural and
Mechanical University, and a MS in Cybersecurity from The University of Alabama,
Huntsville. He also holds several industry certifications, including the CISSP and
CSSP.

Outside of his professional endeavors, Terrence is deeply committed to nurturing the
next generation of cybersecurity talent through mentoring and volunteer work. He is
passionate about fostering diversity within the industry and enjoys introducing curious
minds to the world of cybersecurity. In his leisure time, Terrence enjoys participating in
mid-distance road races, spending quality time with his family, and indulging in his love
for good food.