JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne
JavaScript Jabber26 Maalis 2019

JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne

SponsorsPanel
  • Aaron Frost
  • AJ O’Neal
  • Chris Ferdinandi
  • Joe Eames
  • Aimee Knight
  • Charles Max Wood
Joined by special guests: Hillel Wayne and Richard FeldmanEpisode SummaryIn this episode of JavaScript Jabber, Hillel Wayne kicks off the podcast by giving a short background about his work, explains the concepts of formal methods and the popular npm package - event-stream, in brief. The panelists then dive into the recent event-stream attack and discuss it at length, focusing on different package managers and their vulnerabilities, as well as the security issues associated with them. They debate on whether paying open source developers for their work, thereby leading to an increase in contribution, would eventually help in improving security or not. They finally talk about what can be done to fix certain dependencies and susceptibilities to prevent further attacks and if there are any solutions that can make things both convenient and secure for users.LinksPicksJoe Eames:Aimee Knight:Aaron Frost:Chris Ferdinandi:Charles Max Wood:Richard Feldman:Hillel Wayne:Special Guests: Hillel Wayne and Richard Feldman.

Support this podcast at — https://redcircle.com/javascript-jabber/donations

Privacy & Opt-Out: https://redcircle.com/privacy

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Jaksot(738)

Remix and EpicWeb.dev with Kent C. Dodds - JSJ 554

Remix and EpicWeb.dev with Kent C. Dodds - JSJ 554

Kent C. Dodds is a well-known JavaScript developer who has done myriad development courses and training. He's also done outreach for Remix. He's spoken at tons of conferences and his now working on cr...

25 Loka 20221h 49min

Being a New Developer with Diego Moura - JSJ 553

Being a New Developer with Diego Moura - JSJ 553

Diego Moura is a newer developer who has recently joined the ranks of professional developers. The panel talks to Diego about his career as a fashion designer and how he moved to Canada and go into pr...

18 Loka 20221h 33min

Dan Shappir's Failed Predictions - JSJ 552

Dan Shappir's Failed Predictions - JSJ 552

The panel goes back a few years and reviews some technology predictions that Dan made a few years ago on Quora. These include WASM, Progressive web apps, and others. Most were wrong, but one did end u...

4 Loka 20221h 13min

Software Development as a Craft with Netta Bondy - JSJ 551

Software Development as a Craft with Netta Bondy - JSJ 551

Today we talk with Netta Bondy, a front end developer at Twang and dive into a discussion about when software development becomes a craft. We discuss the challenges of practicality vs. art, and the ch...

27 Syys 20221h 17min

Partytown with Adam Bradley - JSJ 550

Partytown with Adam Bradley - JSJ 550

Today we talk with Adam Bradley, the Director of Technology at Builder.io. He previously worked at Ionix as a creator of Ionic Framework, a mobile UI interface builder for web applications, and Stenci...

20 Syys 20221h 16min

Qwik with Misko Hevery - JSJ 549

Qwik with Misko Hevery - JSJ 549

Today we talk with Misko Hevery about solving the loading speed issue for websites constructed using JavaScript frameworks. Such websites are often slow to load, which is detrimental to their ability ...

13 Syys 20221h 11min

Web Performance and the Google WordPress Team with Felix Arntz - JSJ 548

Web Performance and the Google WordPress Team with Felix Arntz - JSJ 548

Today we talk with Felix Arntz, a developer relations engineer at Google.  Hired on the Google WordPress team, and involved with the Sidekick plugin, we discuss some of the challenges and approaches o...

6 Syys 20221h 24min

Supply Chain Security with Stephen Chin - BONUS

Supply Chain Security with Stephen Chin - BONUS

There is no question that the volume, sophistication, and severity of software supply chain attacks is on the rise.  How do you navigate your supply chain security?  Stephen Chin joins the show today ...

2 Syys 202243min

Suosittua kategoriassa Liike-elämä ja talous

sijotuskasti
mimmit-sijoittaa
rss-rahapodi
psykopodiaa-podcast
rss-rahamania
herrasmieshakkerit
ostan-asuntoja-podcast
rss-seuraava-potilas
rss-20-30-40-podcast
rahapuhetta
rss-inderes-femme
rss-paasipodi
rss-myynnilla-on-asiaa-kert-kenner
taloudellinen-mielenrauha
rss-sami-miettinen-neuvottelija
yrittaja
raksapodi
rss-lahtijat
rss-startup-ministerio
rss-sisalto-kuntoon