JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne
JavaScript Jabber26 Mars 2019

JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne

SponsorsPanel
  • Aaron Frost
  • AJ O’Neal
  • Chris Ferdinandi
  • Joe Eames
  • Aimee Knight
  • Charles Max Wood
Joined by special guests: Hillel Wayne and Richard FeldmanEpisode SummaryIn this episode of JavaScript Jabber, Hillel Wayne kicks off the podcast by giving a short background about his work, explains the concepts of formal methods and the popular npm package - event-stream, in brief. The panelists then dive into the recent event-stream attack and discuss it at length, focusing on different package managers and their vulnerabilities, as well as the security issues associated with them. They debate on whether paying open source developers for their work, thereby leading to an increase in contribution, would eventually help in improving security or not. They finally talk about what can be done to fix certain dependencies and susceptibilities to prevent further attacks and if there are any solutions that can make things both convenient and secure for users.LinksPicksJoe Eames:Aimee Knight:Aaron Frost:Chris Ferdinandi:Charles Max Wood:Richard Feldman:Hillel Wayne:Special Guests: Hillel Wayne and Richard Feldman.

Support this podcast at — https://redcircle.com/javascript-jabber/donations

Privacy & Opt-Out: https://redcircle.com/privacy

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Avsnitt(738)

122 JSJ Socket.IO with Guillermo Rauch

122 JSJ Socket.IO with Guillermo Rauch

The panelists talk to Guillermo Rauch about Socket.io.Special Guest: Guillermo Rauch. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle....

20 Aug 201448min

121 JSJ Broccoli.js with Jo Liss

121 JSJ Broccoli.js with Jo Liss

The panelists discuss Broccoli.js with its creator, Jo Liss.Special Guest: Jo Liss. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.co...

13 Aug 201437min

120 JSJ Google Polymer with Rob Dodson and Eric Bidelman

120 JSJ Google Polymer with Rob Dodson and Eric Bidelman

The panelists talk to Rob Dodson and Eric Bidelman about the Google Polymer project and Google I/O.Special Guests: Eric Bidelman and Rob Dodson . Support this podcast at — https://redcircle.com/java...

6 Aug 20141h

119 JSJ Chrome Apps with Joe Marini

119 JSJ Chrome Apps with Joe Marini

The panelists talk about Chrome apps with Google's Joe Marini.Special Guest: Joe Marini. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcirc...

30 Juli 201455min

118 JSJ Web Developer Skills

118 JSJ Web Developer Skills

The panelists talk about what skills you need to be considered a professional web developer. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://red...

23 Juli 201455min

117 JSJ The Koa Framework with Gerred Dillon and Will Conant

117 JSJ The Koa Framework with Gerred Dillon and Will Conant

The panelists discuss the Koa Framework with Gerred Dillon and Will Conant.Special Guests: Gerred Dillon and Will Conant. Support this podcast at — https://redcircle.com/javascript-jabber/donationsP...

16 Juli 20146min

116 JSJ jQuery UI vs KendoUI with Burke Holland and TJ VanToll

116 JSJ jQuery UI vs KendoUI with Burke Holland and TJ VanToll

The panelists discuss jQuery vs KendoUI with Burke Holland and TJ VanToll.Special Guests: Burke Holland and TJ VanToll. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPri...

9 Juli 20141h 2min

115 JSJ The ES6 Module Loader Polyfill, SystemJS, and jspm with Guy Bedford

115 JSJ The ES6 Module Loader Polyfill, SystemJS, and jspm with Guy Bedford

the panelists discuss the ES6 module loader polyfill, SystemJS, and jspm with Guy Bedford.Special Guest: Guy Bedford. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPriva...

2 Juli 201445min

Populärt inom Business & ekonomi

framgangspodden
varvet
badfluence
rss-jossan-nina
rss-borsens-finest
rss-svart-marknad
svd-tech-brief
avanzapodden
uppgang-och-fall
fill-or-kill
rss-dagen-med-di
borsmorgon
lastbilspodden
rss-inga-dumma-fragor-om-pengar
rss-kort-lang-analyspodden-fran-di
kapitalet-en-podd-om-ekonomi
bathina-en-podcast
tabberaset
rss-den-nya-ekonomin
affarsvarlden