JSJ 294: Node Security with Adam Baldwin

Panel: Charles Max WoodAJ O’NealJoe EamesSpecial Guests: Adam BaldwinIn this episode, JavaScript Jabber panelist speak with Adam Baldwin. Adam is a return guest and has many years of application security experience. Currently, Adam runs the Node Security Project/Node Security Platform, and Lift Security. Adam discusses the latest of security of Node Security with Charles and AJ. Discussion topics cover security in other platforms, dependencies, security habits, breaches, tokens, bit rot or digital atrophy, and adding security to your development.In particular, we dive pretty deep on:What is  the Node Security Project/Node Security PlatformDependency treesNPMTokens and internal dataWhat does Node Security do for me?NPX and NSPCommand Line CILBit Rot or Digital AtrophyHow often should you check repos.AdvisoriesIf I NPM install?Circle CI or TravisNSP CheckWhat else could I add to the securities?Incorporate security as you build thingsHow do you find the vulnerabilities in the NPM packagesTwo Factor authentication for NPMWeak PasswordsOL Dash?Install ScriptsFavorite Security Story?And much more!Links:Node Security Lift Securityhttps://github.com/evilpacket@nodesecurity@liftsecurity@adam_baldwinPicks:AdamKey BaseHave I been Pwned?CharlesNettie Pot convo.comAJThis Episode with Adam BaldwinFree the Future of Radical PriceMade In America Sam WaltonSonic - VGM AlbumJoePych - MovieNG ConfWhy We Don’t SuckSpecial Guest: Adam Baldwin. Support this podcast at — https://redcircle.com/javascript-jabber/donationsPrivacy & Opt-Out: https://redcircle.com/privacyBecome a supporter of this podcast: https://www.spreaker.com/podcast/javascript-jabber--6102064/support.