JavaScript Supply Chain with Feross Aboukhadijeh

Apr 22, 2022 by SED

The JavaScript supply chain includes numerous vulnerabilities due to its expansive nature and the long dependency chains. Socket is a new security company that can protect your most critical apps from supply chain attacks. They are taking an entirely new approach to one of the hardest problems in security in a stagnant part of the industry that has historically been obsessed with just reporting on known vulnerabilities. Feross is the Founder and CEO of Socket Security. He joins the show to talk about Socket’s approach to detecting and blocking supply chain attacks.

Sponsorship inquiries: sponsor@softwareengineeringdaily.com

Transcript

Transcript provided by We Edit Podcasts. Software Engineering Daily listeners can go to weeditpodcasts.com to get 15% off the first three months of audio editing and transcription services with code: SED. Thanks to We Edit Podcasts for partnering with SE Daily. Please click here to view this show’s transcript.

Thanks to our sponsors

This episode is brought to you by:

influxdata.com/sedaily
Act in Time with InfluxData. Easy to start, easy to scale. InfluxDB, is THE open source time series database. Purpose-built to handle the massive volumes of time-stamped data produced by IoT devices, applications, networks, containers and computers. Programmable and performant, InfluxDB gives you high granularity, high scale, and high availability. Capture, analyze, and store millions of points per second to see across all your data sources. For more information and to try it for free, visit influxdata.com/sedaily
Spot.io/SEDAILY
Spot by NetApp is the cloud automation platform that makes it easy to deliver continuously optimized infrastructure at the lowest possible cost. Spot helps their customers get the most out of their cloud investments by automating cloud infrastructure to ensure performance, reduce complexity, and optimize costs. Discover how leading companies, from cloud-native startups to global enterprises, are automating, simplifying and optimizing their cloud infrastructure with Spot by NetApp. Check them out at Spot.io/SEDAILY where you can find more information, request a demo, or even start a free trial.
events.puppet.com/fireside
Puppet, the industry leader for infrastructure automation, invites you to a fireside chat to learn how to increase collaboration and build a culture of joint accountability for compliance and security across your organization.
Join Alex Hin, Senior Product Manager at Puppet, for a discussion of how IT, security, compliance, and risk management teams can work together to protect your organization from risk.
You can join Puppet for the conversation on Thursday, April 7th at 11 AM eastern and start building your own culture of accountability that enhances compliance by registering at events.puppet.com/fireside.
capitalone.com/ML
Capital One believes everyone deserves better banking. This means easier access your money and more security. That’s why Capital One is investing in machine learning. Machine Learning allows Capital One to do things like: fight fraud with random forests. Identify how mobile app outages happen with casual models. Speed up online shopping with machine learning at the edge. The potential of machine learning is so big. See how Capital One is using machine learning to create the future of banking. Machine learning at Capital One. What’s in your wallet? Visit capitalone.com/ML
softwareengineeringdaily.com/montecarlodata
Data engineers struggling with unreliable data rely on Monte Carlo, the world’s first end-to-end, fully automated Data Observability Platform! Monte Carlo enables data teams with visibility into the quality and reliability of their analytical data to maximize business impact. Start trusting your data with Monte Carlo today! Visit softwareengineeringdaily.com/montecarlodata
to learn more.