maennchen

maennchen

SAFE & OIDCC Audit + BEAM Security—Webinar Recordings

Hi all,

I recently sat down with @dali32 from the SAFE team at Erlang Solutions for two new security-focused webinars. If BEAM security is on your radar, give these a look before they disappear into the noise of your watch-later list.

Part 1 – SAFE & OIDCC

  • Building a full-fat OpenID Connect client for the BEAM
  • What an external SAFE audit actually looks like
  • The single String.to_atom pitfall we found and fixed
  • Using GitHub private advisories for responsible disclosure
  • Why third-party reviews are worth the hassle

Part 2 – Security & the BEAM Ecosystem

  • Why the Erlang Ecosystem Foundation became a CVE Numbering Authority
  • Grabbing and acting on fresh BEAM CVE data
  • Retiring vulnerable package versions on Hex
  • Supply-chain hardening via the Ægis initiative
  • Ways to get involved through the Security Working Group

Enjoy the videos, and let me know what you think!

Where Next?

Popular in Screencasts Top

hays
Hello, I had a great time digging into Ecto and creating this intro screencast: Ecto 2.0: The Database Tool for Elixir and Phoenix Th...
New
sevensidedmarble
New video on LiveView for almost total beginner level: Hopefully this is a helpful starting point for someone out there!
New
sergio
Here’s a quick 3 minute video explaining how to get a great workflow for Phoenix Liveview templates. Good dev ux!
New
ElixirCasts
I made a screencast where we make a chat room application that supports multiple rooms. https://elixircasts.io/multiple-room-chat-applic...
New
aseigo
New video covering, at least in brief, the current date and time APIs in Elixir. I do hope that more of Calendar / Timex are pulled i...
New
New
CinderellaMan
Hands-on Elixir & OTP: Create a cryptocurrency trading bot - Ep. 16 - Add end-to-end tests elixir | otp | learning | screencast | cry...
New
lawik
I’ve been making videos a fair bit and they typically go both on the blog and the YouTube channel. Just released this one which attempts...
New
New
zacksiri
Hey Everyone We recently released a free episode and 4 member’s exclusive episode in our Elixir Foundation series. In this episode I tal...
New

Other popular topics Top

dotdotdotPaul
Okay, I'm having a heck of a time trying to figure out how to best handle the validation of belongs_to associations in Ecto. I'm sure I'...
New
JorisKok
I have a server on AWS, and was running a load test using artillery. When looking at the Phoenix dashboard I see the Ports going to 100% ...
New
jerry
Good day to you all. I have been struggling to get a query involving like and ilike to work. Can anyone assist me on this, please? pro...
New
chrismccord
This release brings a number of exciting features, including integration with the new Phoenix LiveDashboard and Phoenix LiveView. There h...
New
hariharasudhan94
I would like to know what is the best IDE for elixir development?
New
stefanchrobot
What’s the safe way to decode a JSON string into a struct? I want to avoid calling String.to_atom. Jason.decode can give me a map with st...
New
minhajuddin
I have seen a lot of code which picks the first element from a list using Enum.at(0) instead of List.first. Is there a reason why people ...
New
lucidguppy
I have a super simple question about elixir - how would I take a file like this foo bar baz and output a new file that enumerates th...
New
vrod
I am using the Starship cross-shell prompt – it seems pretty nice, but I get some errors: [WARN] - (starship::utils): Executing command ...
New
lanycrost
Hi everyone! I need implement if…else if…else condition from my elixir code, and anymore of this control flow structures not work proper...
New

We're in Beta

About us Mission Statement