Recording date: 2019-01-31
Adam Baldwin @adam_baldwin
Resources:
Details about the Event Stream IncidentNews about the Event Stream IncidentGreenkeeper.ioPackage LocksSynk.ionpm AuditComparing npm audit with SnykPrivate PackagesWays to Have Your Private npm RegistryThe Rogue Gallery of Cybersecurity Bad ActorsFaceTime Audio BugTwo Factor AuthenticationHaveIBeenPwnedHow Serverless Works to Manage HaveIBeenPwnedSomeone to follow
@RachelTobac@Fox0x01@ReyBangoTroyHunt@ManfredSteyer / Softwarearchitekt.at@ShmuelaJ / NG-Girls.org@JenLooperTimejumps
00:57 Guest Introduction02:23 Javascript security in the news05:29 Should we be worried about this happening again?06:54 What's the best course of action when you see security warnings?08:56 What is Greenkeeper?10:18 Sponsor: Nativescript10:52 Comparing npm audit and snyk14:33 What do people who want to have a corporate acccount do?21:22 Using a real world example24:08 Are there times where it can't figure out what to do?26:16 Isn't there a way to just keep malware out of the registry?28:22 Sponsor: IdeaBlade29:23 What's a bad actor?34:17 FaceTime group call bug36:05 Recommended tips for security39:34 What's the state of 2 factor auth?42:31 When we pass software to clients, how can we secure things?45:08 Someone to follow