Copy of The Secret Life of DevRels

What do Developer Advocates do all day long besides hanging out on twitter? I will share my own experience of day to day activities from my first year as a DevRel in 2019. Let's take a peek at the Secret Life of DevRels

Code

Weaponizing open source for protest and profit

Packages for mass consumption: supply chain security concerns of npm dependencies

25minutes: Packages for Mass Consumption: supply chain security concerns of npm dependencies

Packages for Mass Consumption - an npm story unfolded

Packages for Mass Consumption - an npm story unfolded

Malicious Modules on npm - A Series of Unfortunate Events - Technion Cyberday 2020

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how to mitigate them to build secure JavaScript and Node.js applications. We will deep-dive into practical Node.js security measures which you can easily implement in your current projects, covering OWASP Top 10 issues such as injection attacks and secure dependencies management. Finally, we will review the work and initiatives that the Node.js Security Working Group have been taking to ensure a more secure future for Node.js.

Malicious Modules on npm - A Series of Unfortunate Events

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how to mitigate them to build secure JavaScript and Node.js applications. We will deep-dive into practical Node.js security measures which you can easily implement in your current projects, covering OWASP Top 10 issues such as injection attacks and secure dependencies management. Finally, we will review the work and initiatives that the Node.js Security Working Group have been taking to ensure a more secure future for Node.js.

Black Clouds & Silver Linings in Node.js Security - NodeTLV 2020

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how to mitigate them to build secure JavaScript and Node.js applications. We will deep-dive into practical Node.js security measures which you can easily implement in your current projects, covering OWASP Top 10 issues such as injection attacks and secure dependencies management. Finally, we will review the work and initiatives that the Node.js Security Working Group have been taking to ensure a more secure future for Node.js.

Node-JS-CLI-Apps-preview

Packages for Mass Consumption - an npm story unfolded

Packages for Mass Consumption - an npm story unfolded

Review Slides - The Secret Life of DevRels

What do Developer Advocates do all day long besides hanging out on twitter? I will share my own experience of day to day activities from my first year as a DevRel in 2019. Let's take a peek at the Secret Life of DevRels

Black Clouds & Silver Linings in Node.js Security - NodeTLV 2020

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how malicious npm packages work, how to avoid them and apply npm and Node.js security best practices every developer should know with hands-on live hacking.

APIdays Barcelona - Consumer-Driven Contracts for API Testing

A Comprehensive Guide to Contract Testing APIs in a Service Oriented Architecture. It is likely you experienced the painful situation of deploying to production only to find out that an API service you integrate with has broken the contract. Enter Consumer-Driven-Contracts.

The Secret Life of DevRels

What do Developer Advocates do all day long besides hanging out on twitter? I will share my own experience of day to day activities from my first year as a DevRel in 2019. Let's take a peek at the Secret Life of DevRels

So You Want To Engage With Developers?

DevRel Meetup - https://www.meetup.com/DevRel/events/262868450

Malicious Modules on npm - A Series of Unfortunate Events

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how to mitigate them to build secure JavaScript and Node.js applications. We will deep-dive into practical Node.js security measures which you can easily implement in your current projects, covering OWASP Top 10 issues such as injection attacks and secure dependencies management. Finally, we will review the work and initiatives that the Node.js Security Working Group have been taking to ensure a more secure future for Node.js.

Black Clouds & Silver Linings in Node.js Security - OWASP Global AppSec IL 2019

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how to mitigate them to build secure JavaScript and Node.js applications. We will deep-dive into practical Node.js security measures which you can easily implement in your current projects, covering OWASP Top 10 issues such as injection attacks and secure dependencies management. Finally, we will review the work and initiatives that the Node.js Security Working Group have been taking to ensure a more secure future for Node.js.

Black Clouds & Silver Linings in Node.js Security - NodeUkraine

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how to mitigate them to build secure JavaScript and Node.js applications. We will deep-dive into practical Node.js security measures which you can easily implement in your current projects, covering OWASP Top 10 issues such as injection attacks and secure dependencies management. Finally, we will review the work and initiatives that the Node.js Security Working Group have been taking to ensure a more secure future for Node.js.

2018 - Bucharest - Jest Testing Patterns

Test doubles? Assertions? Code coverage? Jest has it all! There are many testing frameworks and test utilities in the JavaScript ecosystem, but jest is the one which is quickly becoming a favorite for many developers. The talk will introduce jest as a testing framework, the reasons why developers love it, and explore its hidden features, testing patterns, and Jest's extensions ecosystem.

2018 Black Clouds & Silver Linings in Node.js Security

With a great ecosystem, comes great responsibility, and application security is not one to wave off. Let’s review some black clouds of security horror stories in the Node.js ecosystem, and learn how to mitigate them to build secure JavaScript and Node.js applications. We will deep-dive into practical Node.js security measures which you can easily implement in your current projects, covering OWASP Top 10 issues such as injection attacks and secure dependencies management. Finally, we will review the work and initiatives that the Node.js Security Working Group have been taking to ensure a more secure future for Node.js.

Effective Git Workflows

Git is wonderful in it’s flexibility but not all workflows created equal. There’s a good chance your workflow could be optimized and scaled well as your team and org grows. In this talk I will share how the processes, workflows and standards that we employ at Nielsen’s Marketing Cloud enable us to adapt a CI/CD culture, take control again on our git history and foster collaboration and confidence throughout the organization.

Seamless Sec-Ops for Node.js

DevSecOps Meetup #1

Making The Terminal Great Again

Whether it’s npm, webpack or yeoman generators, developers spend a great deal of their time on the CLI to run, debug and interact with programs. You already know React, and use it to render to the browser or to mobile apps. Now you can harness this knowledge of React and Node.js to build your next shiny terminal UI application. This is your chance to learn the great world of Node.js CLI applications and dive into hands-on coding of a fancy React console app. You will also discover some powerful and fun CLI tools and libraries that make up the ecosystem and can help you with your day to day developer activity.

deck

Technical Interviews

Achieving an objective, measured, re-usable technical interviews.