If you have not been hiding under a rock, you might be getting tired of security breaches coming from open source software and the press talking about supply chain security. So if you find yourself frustrated by the constant drum beat and wondering how it got so bad, don’t fret: you’re not alone. To find our way out of this mess, we may need to understand how we got here… In this talk, Aeva will take us back to a simpler time–the 90s–and show how certain legal decisions led to the insecurity of open source software. Looking through the lens of this history, we may better understand policy changes currently being considered.