November 30, 2018

trust.js but verify (JS Party #54)

Listen Later

55 minutes

KBall, Jerod, and Nick break down some recent events in the JavaScript world. Take a dive into the recent event-stream malware attack, breaking down the State of JavaScript 2018 survey, and sharing pro tips to make your life better.

Join the discussion

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

Gauge – Low maintenance test automation! Gauge is free and open source test automation framework that takes the pain out of acceptance testing.

Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog.

DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days.

Featuring:

Kevin Ball – Website, GitHub, LinkedIn, X
Nick Nisi – Website, GitHub, Bluesky, Mastodon, X
Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

The event-stream incident

FallingSnow’s initial issue that made it public

npm yanked the package and reported on the attack

Listen to Dominic Tarr discuss it on The Changelog (broken link until 2018-12-5)

Could this be a copy-cat of this Hackernoon article from earlier this year?

The State of JS survey

Check out the survey (and rad website) right here

KBall recommends Mel Summer’s talk from EmberFest 2018

Pro Tips

Jerod cites Eugen Kiss’s Lean Testing post (More commentary here)

Nick recommends some handy git aliases from Cory Frang

KBall’s tip is a .clone() of Nick’s debugging trip from episode 46

Never forgot to trust.js but verify. 😉

Something missing or broken? PRs welcome!

...more

View all episodes

View all episodes

Download on the App Store

Download on the App Store

Get it on Google Play

Changelog Master Feed

By Changelog Media

4.4

2929 ratings

November 30, 2018

trust.js but verify (JS Party #54)

Listen Later

55 minutes

KBall, Jerod, and Nick break down some recent events in the JavaScript world. Take a dive into the recent event-stream malware attack, breaking down the State of JavaScript 2018 survey, and sharing pro tips to make your life better.

Join the discussion

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

Gauge – Low maintenance test automation! Gauge is free and open source test automation framework that takes the pain out of acceptance testing.

Rollbar – We catch our errors before our users do because of Rollbar. Resolve errors in minutes, and deploy your code with confidence. Learn more at rollbar.com/changelog.

DigitalOcean – DigitalOcean is simplicity at scale. Whether your business is running one virtual machine or ten thousand, DigitalOcean gets out of your way so your team can build, deploy, and scale faster and more efficiently. New accounts get $100 in credit to use in your first 60 days.

Featuring:

Kevin Ball – Website, GitHub, LinkedIn, X
Nick Nisi – Website, GitHub, Bluesky, Mastodon, X
Jerod Santo – Website, GitHub, LinkedIn, Mastodon, X

Show Notes:

The event-stream incident

FallingSnow’s initial issue that made it public

npm yanked the package and reported on the attack

Listen to Dominic Tarr discuss it on The Changelog (broken link until 2018-12-5)

Could this be a copy-cat of this Hackernoon article from earlier this year?

The State of JS survey

Check out the survey (and rad website) right here

KBall recommends Mel Summer’s talk from EmberFest 2018

Pro Tips

Jerod cites Eugen Kiss’s Lean Testing post (More commentary here)

Nick recommends some handy git aliases from Cory Frang

KBall’s tip is a .clone() of Nick’s debugging trip from episode 46

Never forgot to trust.js but verify. 😉

Something missing or broken? PRs welcome!

...more

More shows like Changelog Master Feed

Software Engineering Radio - the podcast for professional software developers by team@se-radio.net (SE-Radio Team)

Software Engineering Radio - the podcast for professional software developers

275 Listeners

Hanselminutes with Scott Hanselman by Scott Hanselman

Hanselminutes with Scott Hanselman

379 Listeners

The Changelog: Software Development, Open Source by Changelog Media

The Changelog: Software Development, Open Source

288 Listeners

Software Engineering Daily by Software Engineering Daily

Software Engineering Daily

624 Listeners

Talk Python To Me by Michael Kennedy

Talk Python To Me

583 Listeners

Soft Skills Engineering by Jamison Dance and Dave Smith

Soft Skills Engineering

290 Listeners

Thoughtworks Technology Podcast by Thoughtworks

Thoughtworks Technology Podcast

43 Listeners

The TWIML AI Podcast (formerly This Week in Machine Learning & Artificial Intelligence) by Sam Charrington

The TWIML AI Podcast (formerly This Week in Machine Learning & Artificial Intelligence)

436 Listeners

Syntax - Tasty Web Development Treats by Wes Bos & Scott Tolinski - Full Stack JavaScript Web Developers

Syntax - Tasty Web Development Treats

982 Listeners

CoRecursive: Coding Stories by Adam Gordon Bell - Software Developer

CoRecursive: Coding Stories

188 Listeners

Kubernetes Podcast from Google by Abdel Sghiouar, Kaslin Fields

Kubernetes Podcast from Google

181 Listeners

Practical AI by Practical AI LLC

Practical AI

208 Listeners

The Stack Overflow Podcast by The Stack Overflow Podcast

The Stack Overflow Podcast

62 Listeners

Big Technology Podcast by Alex Kantrowitz

Big Technology Podcast

507 Listeners

Oxide and Friends by Oxide Computer Company

Oxide and Friends

65 Listeners