Date: Tue, 26 Mar 2019 10:00:00 +0000
<div class="trix-content"> <div><strong>Sponsors</strong></div><ul> <li><a href="https://triplebyte.com/jsjabber">Triplebyte</a></li> <li> <a href="http://sentry.io/">Sentry</a> use the code “devchat” for $100 credit</li> <li><a href="https://clubhouse.io/jsjabber">Clubhouse</a></li> <li><a href="https://www.cachefly.com/">CacheFly</a></li> </ul><div><strong>Panel</strong></div><ul> <li>Aaron Frost</li> <li>AJ O’Neal</li> <li>Chris Ferdinandi</li> <li>Joe Eames</li> <li>Aimee Knight</li> <li>Charles Max Wood</li> </ul><div>Joined by special guests: Hillel Wayne and Richard Feldman</div><div><strong>Episode Summary</strong></div><div>In this episode of JavaScript Jabber, Hillel Wayne kicks off the podcast by giving a short background about his work, explains the concepts of formal methods and the popular npm package - event-stream, in brief. The panelists then dive into the recent event-stream attack and discuss it at length, focusing on different package managers and their vulnerabilities, as well as the security issues associated with them. They debate on whether paying open source developers for their work, thereby leading to an increase in contribution, would eventually help in improving security or not. They finally talk about what can be done to fix certain dependencies and susceptibilities to prevent further attacks and if there are any solutions that can make things both convenient and secure for users.</div><div><strong>Links</strong></div><ul> <li><a href="https://shemesh.larc.nasa.gov/iria03/p13-leveson.pdf">STAMP model in accident investigation</a></li> <li><a href="https://twitter.com/Hillelogram?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor">Hillel’s Twitter</a></li> <li><a href="https://www.hillelwayne.com/about/">Hillel’s website</a></li> <li><a href="https://twitter.com/rtfeldman?lang=en">Richard’s Twitter</a></li> <li><a href="https://www.hillelwayne.com/post/stamping-on-eventstream/">Stamping on Event-Stream</a></li> </ul><div><strong>Picks</strong></div><div>Joe Eames:</div><ul><li><a href="https://boardgamegeek.com/boardgame/233312/stuffed-fables">Stuffed Fables</a></li></ul><div>Aimee Knight:</div><ul> <li><a href="https://landing.google.com/sre/sre-book/toc/">SRE book - Google</a></li> <li><a href="https://shop.lululemon.com/p/women-pants/In-Movement-78-Tight/_/prod8760192">Lululemon leggings</a></li> <li><a href="https://open.spotify.com/artist/1QFYii9jMvldjVBUzBC9t2">DVSR - Band</a></li> </ul><div>Aaron Frost:</div><ul><li><a href="https://2019.jsconf.us/">JSConf US</a></li></ul><div>Chris Ferdinandi:</div><ul> <li><a href="https://pawsnewengland.com/">Paws New England</a></li> <li><a href="https://vanillajsguides.com/">Vanilla JS Guides</a></li> </ul><div>Charles Max Wood:</div><ul> <li><a href="https://amzn.to/2S6YiQH?ie=UTF8&qid=1548462018&sr=8-1&linkCode=ll1&tag=devchattv-20&linkId=f06bfe7482dca8bb751ed6d7cc86e2ab&language=en_US">Sony Noise Cancelling Headphones</a></li> <li><a href="https://classifieds.ksl.com/">KSL Classifieds</a></li> <li><a href="https://www.upwork.com">Upwork</a></li> </ul><div>Richard Feldman:</div><ul> <li><a href="https://www.manning.com/books/elm-in-action">Elm in Action</a></li> <li><a href="https://boardgamegeek.com/boardgame/102652/sentinels-multiverse">Sentinels of the Multiverse</a></li> </ul><div>Hillel Wayne:</div><ul> <li><a href="https://www.elminthespring.org/">Elm in the Spring</a></li> <li><a href="https://www.apress.com/us/book/9781484238288">Practical TLA+</a></li> <li><a href="https://www.ninachicago.com/">Nina Chicago - Knitting</a></li> <li><a href="https://boardgamegeek.com/boardgame/214879/tomb-trader">Tomb Trader</a></li> </ul><div>Special Guests: Hillel Wayne and Richard Feldman.</div> </div> Support this podcast at — https://redcircle.com/javascript-jabber/donations Advertising Inquiries: https://redcircle.com/brands Privacy & Opt-Out: https://redcircle.com/privacy