JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne
JavaScript Jabber26 Mars 2019

JSJ 357: Event-Stream & Package Vulnerabilities with Richard Feldman and Hillel Wayne

SponsorsPanel
  • Aaron Frost
  • AJ O’Neal
  • Chris Ferdinandi
  • Joe Eames
  • Aimee Knight
  • Charles Max Wood
Joined by special guests: Hillel Wayne and Richard FeldmanEpisode SummaryIn this episode of JavaScript Jabber, Hillel Wayne kicks off the podcast by giving a short background about his work, explains the concepts of formal methods and the popular npm package - event-stream, in brief. The panelists then dive into the recent event-stream attack and discuss it at length, focusing on different package managers and their vulnerabilities, as well as the security issues associated with them. They debate on whether paying open source developers for their work, thereby leading to an increase in contribution, would eventually help in improving security or not. They finally talk about what can be done to fix certain dependencies and susceptibilities to prevent further attacks and if there are any solutions that can make things both convenient and secure for users.LinksPicksJoe Eames:Aimee Knight:Aaron Frost:Chris Ferdinandi:Charles Max Wood:Richard Feldman:Hillel Wayne:Special Guests: Hillel Wayne and Richard Feldman.

Support this podcast at — https://redcircle.com/javascript-jabber/donations

Privacy & Opt-Out: https://redcircle.com/privacy

Become a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.

Avsnitt(737)

009 JSJ Testing JavaScript with Joe Eames

009 JSJ Testing JavaScript with Joe Eames

The panelists discuss testing JavaScript with Joe EamesSpecial Guest: Joe Eames. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/p...

27 Mars 20121min

008 JSJ V8 and Dart with Lars Bak and Kasper Lund

008 JSJ V8 and Dart with Lars Bak and Kasper Lund

The panelists discuss V8 and Dart with Lars Bak and Kasper Lund.Special Guest: Kasper Lund. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redc...

14 Mars 201247min

007 JSJ Online Resources for Javascript Developers

007 JSJ Online Resources for Javascript Developers

The panelists discuss online resources for JavaScript Developers. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a ...

13 Mars 201230min

006 JSJ Chrome Dev Tools with Paul Irish

006 JSJ Chrome Dev Tools with Paul Irish

The panelists discuss Chrome dev tools with Paul Irish.Special Guest: Paul Irish. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/...

24 Feb 201251min

005 JSJ Javascript Objects

005 JSJ Javascript Objects

The panelists discuss JavaScript objects. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcas...

18 Feb 201253min

004 JSJ Backbone.js with Jeremy Ashkenas

004 JSJ Backbone.js with Jeremy Ashkenas

The panelists discuss Backbone.js with Jeremy Ashkenas.Special Guest: Jeremy Ashkenas . Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircl...

13 Feb 201254min

003 JSJ Build Tools

003 JSJ Build Tools

The panelists discuss build tools. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: http...

3 Feb 201245min

002 JSJ The Right Way to Build Web Applications

002 JSJ The Right Way to Build Web Applications

The panelists discuss the right way to build web applications. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a sup...

29 Jan 201248min

Populärt inom Business & ekonomi

badfluence
framgangspodden
varvet
rss-jossan-nina
uppgang-och-fall
rss-borsens-finest
rss-svart-marknad
bathina-en-podcast
rss-dagen-med-di
rss-inga-dumma-fragor-om-pengar
fill-or-kill
dynastin
avanzapodden
rss-kort-lang-analyspodden-fran-di
lastbilspodden
24fragor
borsmorgon
tabberaset
svd-tech-brief
kapitalet-en-podd-om-ekonomi