Security in Node.js - Githubissues

lnug / speakers

Open an issue to submit a talk

43 stars 7 forks source link

Security in Node.js #171

Closed ForbesLindesay closed 4 years ago

ForbesLindesay commented 4 years ago

While working on large node.js projects, I’ve noticed that there is no clear answer to common questions like “how do I securely store passwords”. I’ve also noticed that all the popular frameworks lack key security features such as CSRF protection and Rate Limiting by default. It’s really easy to get security wrong, and it’s not your fault that this is so difficult.

In this talk, I’ll present some practical steps you can take to secure your applications, including protecting against some of the most common attack vectors. I’ll also attempt to inspire you to think differently about what the defaults should be when you build new applications and libraries. We can make our code default to security; it doesn’t have to be this way.

I'm a tech lead at Threads Styling and maintain several large open source projects, such as Pug, @authentication and @databases. My twitter handle is @ForbesLindesay

jkbits1 commented 4 years ago

@admataz and everyone else, the version of this talk at FullStack 19 was both very informative and accessible, so useful for all levels. I'll let you all carry on the conversation, just wanted to add that

Ankcorn commented 4 years ago

@ForbesLindesay This is something I'd love to know more about. There is 1 speaker slot on august the 28th? After that it would be September the 25th. What would be best for you?

admataz commented 4 years ago

great to have you back at lnug @ForbesLindesay!

ForbesLindesay commented 4 years ago

August 28th would be great :)

Ankcorn commented 4 years ago

@ForbesLindesay Awesome! Let's get this scheduled.

ForbesLindesay commented 4 years ago

@Ankcorn I just noticed this isn't on the schedule at https://lnug.org/future.html

admataz commented 4 years ago

thanks. oops. haven’t updated the website this month. will sort it out as soon as i get home.

neshka commented 4 years ago

Hi @ForbesLindesay

Just confirming - how are things looking for your talk on Wednesday? All good?

details of the venue:

CONDÉ NAST
ADELPHI BUILDING
1-11 JOHN ADAM ST
WC2N 6HT

I will be there from about 6:15pm - people start arriving around 6:30 and we plan to start with talks after a brief intro and welcome at 7pm

If you have any issues - please call @admataz: 07757234443 or me: 07752387427

See you there! Aga

neshka commented 4 years ago

Hi @ForbesLindesay! :) Are you ready for tomorrow? Please let us know. Thank you in advance :)

ForbesLindesay commented 4 years ago

Hi @neshka, I only just saw these updates. I should be there in about 30 minutes time :)

ForbesLindesay commented 4 years ago

Screen Recording, Slides and the JavaScript Open Source Meetup I mentioned: https://thrds.biz/meetup

neshka commented 4 years ago

Hi @ForbesLindesay, thank you so much for the talk yesterday. I hope you had a good time.

We will send you the video as soon it's ready.

admataz commented 4 years ago

Hi @ForbesLindesay - the video is now in the LNUG YouTube Channel. https://youtu.be/Qrb-gwlBUzo

Nice to see you - and thanks again for your talk and contribution. Please let us know if you have any thoughts or feedback

ForbesLindesay commented 4 years ago

Thanks @admataz I really enjoyed speaking, it was an excellent venue & all round well run.