Feross Aboukhadijeh
where else to find them
website:https://feross.org
github:feross
x:feross
linkedin:feross
speakerdeck:feross
devto:feross
npm:feross
what they talk about
all 13 in the filters
where they keep going back
- JSConf.Asia2 editions2014–2018
- Node Congress2 editions2022–2024
- Nordic.js2 editions2017–2022
all 15 in the filters
on a stage with
- Jan Jongboomonce
- Martin Splittonce
- Noam Rosenthalonce
who talks about the same things
- Mathias Buus8 talks
- Stefan Judis23 talks
- Irina Shestak14 talks
- Remy Sharp13 talks
- Kyle Simpson24 talks
- Liran Tal44 talks
| title | conference | date |
|---|---|---|
| The State of JavaScript Security in 2024 | React Summit US 2024 | 2024-11-18 |
As React continues to dominate the web development landscape, securing the vast ecosystem of open source dependencies has never been more critical. In 2024… | ||
| Feross Aboukhadijeh's Q&A Room | React Summit US 2024 | 2024-11-18 |
-- no description -- | ||
| The Dark Side of Open Source | Node Congress 2024 | 2024-04-04 |
Join Feross, CEO of Socket, on a thrilling journey into the dark side of open source software. Come along for the ride as we explore the unseen risks lurking… | ||
| Using ChatGPT to Find Vulnerabilities & Malware in Open Source | REFACTOR DX 2023 | 2023-07-12 |
Socket uses ChatGPT plus traditional scanners to flag real npm and Python malware: a static analysis pre-filter rejects clearly safe packages, suspicious… | ||
| What's Really Going on Inside Your Node_Modules Folder | Nordic.js 2022 | 2022-10-06 |
Node ecosystem risk is concrete: installing one npm package typically pulls in 79 additional packages maintained by 39 maintainers, big apps like Discord rely… | ||
| Keynote: The State of JavaScript Supply Chain Security in 2022 | OpenJS World 2022 | 2022-06-06 |
Walks through the October 2021 compromise of ua-parser.js (54 releases, ~7M weekly downloads, used by ~3M GitHub repos) where attacker uses install scripts to… | ||
| What's Going on Inside the Node_Modules Folder | Conf42 Chaos Engineering 2022 | 2022-03-10 |
Examines real npm incidents: a ua-parser.js release with a Monero miner and password‑stealing DLL affects a package with 7 million weekly downloads and was… | ||
| It's a Jungle Out There: What's Really Going on Inside Your Node_Modules Folder, Feross Aboukhadijeh | Node Congress 2022 | 2022-02-17 |
Shows that ua-parser.js is compromised for four hours and that malicious packages sit live an average of 209 days, backed by a 100 GB metadata and 15 TB… | ||
| It's a Jungle Out There! – Open Source Supply Chain Attacks | CascadiaJS 2021 | 2021-11-03 |
NPM packages run arbitrary code at install time and attackers hide payloads in preinstall scripts, with 64% of malicious packages executing on install… | ||
| The Lost Art of MIDI – Bringing < bgsound> Back to the Web | JSConfCO 2018 | 2018-11-16 |
Recreates background MIDI playback by compiling a C MIDI engine to WebAssembly + Emscripten, using Web Audio to stream decoded PCM and a web component to… | ||
| The Most Annoying Website (Aka "the Power of the Web Platform") | JSConf US 2018 | 2018-08-21 |
A live demo builds an "annoying site" that actually opens and fights with dozens of popups, autoplays unmuted speech, copies ASCII art to the clipboard, fills… | ||
| International Speakers' Corner | JavaScript fwdays'18 | 2018-03-18 |
-- no description -- | ||
| The Most Annoying Website (aka "The Power of the Web Platform") | JavaScript fwdays'18 | 2018-03-18 |
Builds a live demo called annoying site com that spawns popups and refuses to die, using window.open plus per-popup mover code, clipboard writes… | ||
| Write Perfect Code with Standard and ESLint | JSConf.Asia 2018 | 2018-01-25 |
Clear, actionable claims: use Standard or ESLint to catch real bugs now, not just style debates. Concrete tooling: Standard CLI with 200+ pre-configured rules… | ||
| JavaScript Pranks | JSConf.Asia 2018 | 2018-01-25 |
A demo site called The Annoying Site Dot Com assembles real browser tricks and shows they work: it logs you out via image GETs, hijacks opener to navigate the… | ||
| The Most Annoying Website (aka "The Power of the Web Platform") | dotJS 2017 | 2017-12-01 |
Demos show concrete hacks: a site that fills hard drive via infinite subdomains (five MB per domain, once crashing Chrome around two GB), a Flash iframe webcam… | ||
| Get Rich Quick With P2P Crypto Currency | Nordic.js 2017 | 2017-09-07 |
Title promises crypto riches but the concrete claim is different: browser peer‑to‑peer works and saves bandwidth (cites Spotify 88% hosting reduction). The… | ||
| Real world Electron: Building Cross-platform desktop apps with JavaScript | NodeConf Argentina 2016 | 2016-11-17 |
Built a production Electron app called WebTorrent Desktop with 31 releases, 32 contributors, and hundreds of thousands of installs, and documents concrete wins… | ||
| Web Apps of The Future | ColdFront Conference 2015 | 2015-09-03 |
Claim: fully peer-to-peer, offline, decentralized web apps are practical today using WebRTC Service Workers Web Crypto replicating databases. Demonstrations… | ||
| WebTorrent | JSConf.Asia 2014 | 2014-11-20 |
Claims a browser BitTorrent client that fully interoperates with the regular BitTorrent network by using WebRTC Data Channels plus hybrid clients that speak… | ||
| WebRTC Mad Science | NodeConf EU 2014 | 2014-09-08 |
Builds a browser BitTorrent client that actually works end to end turning browsers into peers and proving WebTorrent: BitTorrent over WebRTC is feasible… | ||
| nothing matches | ||