maennchen

maennchen

Hi all,

I recently sat down with @dali32 from the SAFE team at Erlang Solutions for two new security-focused webinars. If BEAM security is on your radar, give these a look before they disappear into the noise of your watch-later list.

Part 1 – SAFE & OIDCC

  • Building a full-fat OpenID Connect client for the BEAM
  • What an external SAFE audit actually looks like
  • The single String.to_atom pitfall we found and fixed
  • Using GitHub private advisories for responsible disclosure
  • Why third-party reviews are worth the hassle

Part 2 – Security & the BEAM Ecosystem

  • Why the Erlang Ecosystem Foundation became a CVE Numbering Authority
  • Grabbing and acting on fresh BEAM CVE data
  • Retiring vulnerable package versions on Hex
  • Supply-chain hardening via the Ægis initiative
  • Ways to get involved through the Security Working Group

Enjoy the videos, and let me know what you think!

Where Next? Top

Trending in Screencasts Top

Potions
Sooner or later you’ll need to run a one-off or recurring task on a deployed app, and if you deploy with releases the usual answer, a Mix...
New
ElixirCasts
Plotto is a 100% Elixir charting library with no NIFs or external dependencies. In this episode, we’ll use it to add interactive SVG char...
New

Other Trending Topics Top

tomazbracic
Hey everyone, I want to share something I have been working on for a while. I built a custom Nerves system for the **STM32MP157F-DK2** b...
New
mudasobwa
I am happy to introduce the very α version of the new programming language compiled to BEAM. Welcome Cure. It has literally three kille...
New
marciok
Hi there! We created Gust: A task orchestrator inspired by Airflow. For those who have never heard about Aiflow, it’s a Python-based wor...
New
jimsynz
Beam Bots (or just BB for short) is a framework for building fault-tolerant robotics applications in Elixir using familiar OTP patterns. ...
New
Dmk
Xamal is a deployment tool for Elixir apps that deploys native releases to bare metal servers over SSH. It’s a port of GitHub - basecamp/...
New
netoum
Corex is an accessible, unstyled UI component library for Phoenix that integrates Zag.js state machines using Vanilla JavaScript and Live...
New

We're in Beta

About us Mission Statement

Options

Thread Display Mode




Thread Preview

Skip Thread Previews