JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne

JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne

SponsorsPanel
  • Aaron Frost
  • AJ O’Neal
  • Chris Ferdinandi
  • Joe Eames
  • Aimee Knight
  • Charles Max Wood
Joined by special guests: Hillel Wayne and Richard FeldmanEpisode SummaryIn this episode of JavaScript Jabber, Hillel Wayne kicks off the podcast by giving a short background about his work, explains the concepts of formal methods and the popular npm package - event-stream, in brief. The panelists then dive into the recent event-stream attack and discuss it at length, focusing on different package managers and their vulnerabilities, as well as the security issues associated with them. They debate on whether paying open source developers for their work, thereby leading to an increase in contribution, would eventually help in improving security or not. They finally talk about what can be done to fix certain dependencies and susceptibilities to prevent further attacks and if there are any solutions that can make things both convenient and secure for users.LinksPicksJoe Eames:Aimee Knight:Aaron Frost:Chris Ferdinandi:Charles Max Wood:Richard Feldman:Hillel Wayne:Special Guests: Hillel Wayne and Richard Feldman.

Support this podcast at — https://redcircle.com/javascript-jabber/donations

Privacy & Opt-Out: https://redcircle.com/privacy

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Episoder(738)

Iterating on Open Source - JSJ 615

Iterating on Open Source - JSJ 615

Today the panel is discussing iterating on open source projects. Aimee and AJ recall a conversation they had in the past on this subject and AJ talks about some of his experience iterating with open s...

9 Jan 202457min

Dev Dilemmas: TypeScript Triumphs and Quirks of JavaScript Arrays - JSJ 614

Dev Dilemmas: TypeScript Triumphs and Quirks of JavaScript Arrays - JSJ 614

AJ, Charles, Dan, and Steve dive deep into all things JavaScript and TypeScript. In this episode, they discuss the pros and cons of arrow functions and the ongoing debate about using semicolons at the...

2 Jan 20241h 33min

The Future of Authentication in JavaScript: An Inside Look into Passport JS with Jared Hanson - JSJ 613

The Future of Authentication in JavaScript: An Inside Look into Passport JS with Jared Hanson - JSJ 613

Jared Hanson is a software engineer at Okta. In this episode, they delve into the world of authentication strategies, troubleshooting touchscreen frustrations, and exploring the evolution of web appli...

26 Des 20231h 19min

The Rise of No Code: A Deep Dive into Toddle's Revolutionary Web App Platform - JSJ 612

The Rise of No Code: A Deep Dive into Toddle's Revolutionary Web App Platform - JSJ 612

Andreas Møller is a software engineer and the creator of Toddle, a platform that lets you build web applications without traditional code. They dive into the world of web development and the exciting ...

19 Des 20231h 21min

Monitoring Performance and Core Web Vitals ft. Bianca Grizhar and Sumitra Manga  - JSJ 611

Monitoring Performance and Core Web Vitals ft. Bianca Grizhar and Sumitra Manga - JSJ 611

Bianca and Sumitra from Raygun join the panel to talk about Core Web Vitals and how tools like Raygun can help keep tabs on and monitor your performance stats as you change your web application to get...

12 Des 20231h 22min

Bit: Paving the Way for Component Management - JSJ 610

Bit: Paving the Way for Component Management - JSJ 610

Gilad Shoham is a developer and open-source leader at Bit. They explore the latest trends and insights in the world of development and technology. The conversation also delves into the complexities of...

5 Des 20231h 21min

Discovering ElysiaJS and The Duality of TypeScript and JavaScript - JSJ 609

Discovering ElysiaJS and The Duality of TypeScript and JavaScript - JSJ 609

SaltyAom is a cosplayer, developer, and creator of ElysiaJS. They deep dive into the complexities of JavaScript and TypeScript, offering insights into backend development, performance optimizations, a...

27 Nov 20231h 30min

How To Recession Proof Your Job - BONUS

How To Recession Proof Your Job - BONUS

Get the Black Friday/Cyber Monday "Double Your Productivity by 5pm Today" DealCoupon Code: "THRIVE" for a GIANT discountAre you looking at all the layoffs and uncertainty going on and wondering if you...

21 Nov 20231h 12min

Populært innen Business og økonomi

stopp-verden
lydartikler-fra-aftenposten
dine-penger-pengeradet
rss-penger-polser-og-politikk
e24-podden
rss-borsmorgen-okonominyhetene
livet-pa-veien-med-jan-erik-larssen
tid-er-penger-en-podcast-med-peter-warren
pengesnakk
finansredaksjonen
utbytte
pengepodden-2
rss-sunn-okonomi
morgenkaffen-med-finansavisen
lederpodden
stormkast-med-valebrokk-stordalen
liberal-halvtime
rss-markedspuls-2
lederskap-nhhs-podkast-om-ledelse
arcticpodden