JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne
JavaScript Jabber26 Mars 2019

JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne

SponsorsPanel
  • Aaron Frost
  • AJ O’Neal
  • Chris Ferdinandi
  • Joe Eames
  • Aimee Knight
  • Charles Max Wood
Joined by special guests: Hillel Wayne and Richard FeldmanEpisode SummaryIn this episode of JavaScript Jabber, Hillel Wayne kicks off the podcast by giving a short background about his work, explains the concepts of formal methods and the popular npm package - event-stream, in brief. The panelists then dive into the recent event-stream attack and discuss it at length, focusing on different package managers and their vulnerabilities, as well as the security issues associated with them. They debate on whether paying open source developers for their work, thereby leading to an increase in contribution, would eventually help in improving security or not. They finally talk about what can be done to fix certain dependencies and susceptibilities to prevent further attacks and if there are any solutions that can make things both convenient and secure for users.LinksPicksJoe Eames:Aimee Knight:Aaron Frost:Chris Ferdinandi:Charles Max Wood:Richard Feldman:Hillel Wayne:Special Guests: Hillel Wayne and Richard Feldman.

Support this podcast at — https://redcircle.com/javascript-jabber/donations

Privacy & Opt-Out: https://redcircle.com/privacy

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Avsnitt(738)

098 JSJ Assemble.io with Brian Woodward and Jon Schlinkert

098 JSJ Assemble.io with Brian Woodward and Jon Schlinkert

The panelists speak with Brian Woodward and Job Schlinkert about Assemble.io.Special Guests: Brian Woodward and Jon Schlinkert. Support this podcast at — https://redcircle.com/javascript-jabber/dona...

26 Feb 201443min

097 JSJ Gulp.js with Eric Schoffstall

097 JSJ Gulp.js with Eric Schoffstall

The panelists talk to Eric Schoffstall, the creator of Gulp.js.Special Guest: Eric Schoffstall. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://...

19 Feb 201442min

096 JSJ The Challenges of Large Single Page JavaScript Applications with Bart Wood

096 JSJ The Challenges of Large Single Page JavaScript Applications with Bart Wood

The panelists talk to Bart Wood about large single page JavaScript applications.Special Guest: Bart Wood. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out...

14 Feb 201445min

095 JSJ AngularUI with Dean Sofer

095 JSJ AngularUI with Dean Sofer

The panelists talk to Dean Sofer about AngularUI.Special Guest: Dean Sofer. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privac...

7 Feb 201450min

094 JSJ BonsaiJS with Tobi Reiss

094 JSJ BonsaiJS with Tobi Reiss

The panelists talk to Tobi Reiss, the creator of BonsaiJS.Special Guest: Tobi Reiss. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.c...

31 Jan 201443min

093 JSJ The New York Times and JavaScript with Eitan Konigsburg, Alastair Coote and Reed Emmons

093 JSJ The New York Times and JavaScript with Eitan Konigsburg, Alastair Coote and Reed Emmons

The panelists discuss The New York Times and JavaScript with Eitan Konigsburg, Alastair Coote and Reed Emmons.Special Guests: Alastair Coote, Eitan Konigsburg, and Reed Emmons. Support this podcast ...

24 Jan 201454min

092 JSJ The MEAN Stack with Ward Bell and Valeri Karpov

092 JSJ The MEAN Stack with Ward Bell and Valeri Karpov

The panelists discuss the MEAN stack with Ward Bell and Valeri Karpov.Special Guests: Valeri Karpov and Ward Bell . Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy...

17 Jan 20141h 4min

091 JSJ JSON APIs

091 JSJ JSON APIs

The panelists discuss JSON APIs. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https:...

10 Jan 201457min

Populärt inom Business & ekonomi

framgangspodden
varvet
badfluence
rss-jossan-nina
rss-borsens-finest
avanzapodden
svd-tech-brief
rss-svart-marknad
uppgang-och-fall
fill-or-kill
rss-dagen-med-di
borsmorgon
kapitalet-en-podd-om-ekonomi
affarsvarlden
rss-kort-lang-analyspodden-fran-di
tabberaset
lastbilspodden
24fragor
bathina-en-podcast
borslunch-2