Recording date: 2019-01-31
John Papa @John_Papa
Ward Bell @WardBell
Adam Baldwin @adam_baldwin
Resources:
- Details about the Event Stream Incident
- News about the Event Stream Incident
- Greenkeeper.io
- Package Locks
- Synk.io
- npm Audit
- Comparing npm audit with Snyk
- Private Packages
- Ways to Have Your Private npm Registry
- The Rogue Gallery of Cybersecurity Bad Actors
- FaceTime Audio Bug
- Two Factor Authentication
- HaveIBeenPwned
- How Serverless Works to Manage HaveIBeenPwned
Someone to follow
- @RachelTobac
- @Fox0x01
- @ReyBango
- TroyHunt
- @ManfredSteyer / Softwarearchitekt.at
- @ShmuelaJ / NG-Girls.org
- @JenLooper
Timejumps
- 00:57 Guest Introduction
- 02:23 Javascript security in the news
- 05:29 Should we be worried about this happening again?
- 06:54 What's the best course of action when you see security warnings?
- 08:56 What is Greenkeeper?
- 10:18 Sponsor: Nativescript
- 10:52 Comparing npm audit and snyk
- 14:33 What do people who want to have a corporate acccount do?
- 21:22 Using a real world example
- 24:08 Are there times where it can't figure out what to do?
- 26:16 Isn't there a way to just keep malware out of the registry?
- 28:22 Sponsor: IdeaBlade
- 29:23 What's a bad actor?
- 34:17 FaceTime group call bug
- 36:05 Recommended tips for security
- 39:34 What's the state of 2 factor auth?
- 42:31 When we pass software to clients, how can we secure things?
- 45:08 Someone to follow
Activity