Security in Node.JS - London Node User Group - August 2019
Presented by Forbes Lindesay
While working on large node.js projects, I’ve noticed that there is no clear answer to common questions like “how do I securely store passwords”. I’ve also noticed that all the popular frameworks lack key security features such as CSRF protection and Rate Limiting by default. It’s really easy to get security wrong, and it’s not your fault that this is so difficult.
In this talk, I’ll present some practical steps you can take to secure your applications, including protecting against some of the most common attack vectors. I’ll also attempt to inspire you to think differently about what the defaults should be when you build new applications and libraries. We can make our code default to security; it doesn’t have to be this way.
ABOUT ME
I'm a tech lead at Threads Styling and maintain several large open source projects, such as Pug, atauthentication.com and atdatabases.org. My twitter handle is @ForbesLindesay.
_
About Pusher Sessions:
We're bringing the meetup to you. With Sessions, you can watch recordings of top-notch talks from developer meetups -- wherever and whenever you want.
Meetups are a great way to learn from our peers and to keep up with the latest trends and technologies. As developers ourselves, we at Pusher wanted to bring this great content to more people... So we built Sessions. On Sessions, you can watch talks that interest you and subscribe to be notified when new content gets added.
If you run a meetup and want to get involved, kindly get in touch.
_
About Pusher:
Pusher is a hosted service with APIs, developer tools and open source libraries that greatly simplify integrating real-time functionality into web and mobile applications.
Pusher will automatically scale when required, removing all the pain of setting up and maintaining a secure, real-time infrastructure.
Pusher is already trusted to do so by thousands of developers and companies like GitHub, MailChimp, the Financial Times, Buffer and many more.
Getting started takes just a few seconds: simply go to pusher.com and create a free account. Happy hacking!
Видео Security in Node.JS - London Node User Group - August 2019 канала Pusher
While working on large node.js projects, I’ve noticed that there is no clear answer to common questions like “how do I securely store passwords”. I’ve also noticed that all the popular frameworks lack key security features such as CSRF protection and Rate Limiting by default. It’s really easy to get security wrong, and it’s not your fault that this is so difficult.
In this talk, I’ll present some practical steps you can take to secure your applications, including protecting against some of the most common attack vectors. I’ll also attempt to inspire you to think differently about what the defaults should be when you build new applications and libraries. We can make our code default to security; it doesn’t have to be this way.
ABOUT ME
I'm a tech lead at Threads Styling and maintain several large open source projects, such as Pug, atauthentication.com and atdatabases.org. My twitter handle is @ForbesLindesay.
_
About Pusher Sessions:
We're bringing the meetup to you. With Sessions, you can watch recordings of top-notch talks from developer meetups -- wherever and whenever you want.
Meetups are a great way to learn from our peers and to keep up with the latest trends and technologies. As developers ourselves, we at Pusher wanted to bring this great content to more people... So we built Sessions. On Sessions, you can watch talks that interest you and subscribe to be notified when new content gets added.
If you run a meetup and want to get involved, kindly get in touch.
_
About Pusher:
Pusher is a hosted service with APIs, developer tools and open source libraries that greatly simplify integrating real-time functionality into web and mobile applications.
Pusher will automatically scale when required, removing all the pain of setting up and maintaining a secure, real-time infrastructure.
Pusher is already trusted to do so by thousands of developers and companies like GitHub, MailChimp, the Financial Times, Buffer and many more.
Getting started takes just a few seconds: simply go to pusher.com and create a free account. Happy hacking!
Видео Security in Node.JS - London Node User Group - August 2019 канала Pusher
Показать
Комментарии отсутствуют
Информация о видео
Другие видео канала
![An Introduction to Gatsby and GraphQL - Bristol JS - March 2019](https://i.ytimg.com/vi/D33HrJoNapc/default.jpg)
![Monzo’s 'Spent This Month Widget' - Mohammad Javad - React Native London May 2023](https://i.ytimg.com/vi/ob9yDxnSLsc/default.jpg)
![Cloud Infrastructure as C# and F# with Pulumi - .NET South West - February 2020](https://i.ytimg.com/vi/SsvfsAJdLFI/default.jpg)
![Communicating with BLE devices in a React Native App - Rohan Samuel - RNL January 2023](https://i.ytimg.com/vi/JhB_GRrnVcw/default.jpg)
![Vienna.js, Modern Image Delivery Techniques, November 2019](https://i.ytimg.com/vi/1dcn-eUmdBg/default.jpg)
![The State of Kotlin - Kotlin London - March 2018](https://i.ytimg.com/vi/BMOAcZdOzGc/default.jpg)
![RealTime Exoskeleton-Mapping and Body Segmentation on the Browser with Tensorflow.js - Italo Jose](https://i.ytimg.com/vi/M2hN_8fQ7K8/default.jpg)
![C#8 Nullable Reference in Practice - .NET Oxford - March 2020](https://i.ytimg.com/vi/0IH_oLe9Bn0/default.jpg)
![Three pillars of successful digital product development - Product Circle - December 2020](https://i.ytimg.com/vi/3K9jQfpkGWU/default.jpg)
![Measuring performance of React Native apps in production | React Native London | April 2022](https://i.ytimg.com/vi/Yl6gj0ZLB3Y/default.jpg)
![What’s New and Upcoming in JS and CSS - Bristol JS - June 2022](https://i.ytimg.com/vi/1R7COup6hoc/default.jpg)
![Ember.js Berlin / 4x Presentation Special / July 2021](https://i.ytimg.com/vi/c-sWTZJ6nlM/default.jpg)
![Vienna.go, This is Go - a personal tale on what makes Go unique, November 2019](https://i.ytimg.com/vi/9n2YUCwDGFA/default.jpg)
![Life, Liberty and the Pursuit of APIness - Dot Net North - October 2017](https://i.ytimg.com/vi/VHSdjUktgJE/default.jpg)
![Trust, the Secret Ingredient in High Performing Teams - Bristol JS - January 2020](https://i.ytimg.com/vi/S_gOARjfyno/default.jpg)
![APIs on the Scale of Decades - Dot Net Sheff - August 2018](https://i.ytimg.com/vi/F5kXwWPg-Uw/default.jpg)
![Organising Components in React: Spotahome - Time To React - February 2020](https://i.ytimg.com/vi/culmF6R6STo/default.jpg)
![Present Future of User Interface Development - JS Monthly - May 2018](https://i.ytimg.com/vi/HGf89S1N930/default.jpg)
![Redux Performance - Time to React - October 2019](https://i.ytimg.com/vi/zAzejnrwRtY/default.jpg)
![Headless Flipper - Embeddable Mobile Devtools for your CI and Beyond - Andrey Goncharov - RNL](https://i.ytimg.com/vi/n1XqdLL-3DI/default.jpg)
![Give your app character! How to doodle-style a payments app - React Native London - July 2021](https://i.ytimg.com/vi/Zl24HPkQDKM/default.jpg)