and as one of the great partners of @nodehub_web3 #nodesummit
8 Aug 2024
Happy to be speaking at one of the biggest tech events happening in Latin America next week! Rio Innovation Week
@tpcventures @Cosmos_Brasil @ScrtBrasil
2
43
30 Mar 2024
3. Is this OSS attack method (including social engineering maintainers) totally unexpected?
No, this is not an unexpected attack - many folks in the industry have been talking about the risk of open source maintainer burn out for years. There’s a commonly shared xkcd cartoon (called "Dependency") people use to describe this vulnerability all the time.
I even gave a talk in 2018 at the @NodeSummit about how social engineering could be used to target open source security maintainers, gain trust, and infiltrate libraries with vulnerabilities in exactly the way it was used by this attacker.
What is surprising here are the potential lengths the attacker went to over the course of multiple years to develop enough trust to pull this attack off.
ALT Rachel Tobac giving a talk at Node Summit in 2018 discussing the ways attackers could social engineer open source security maintainers to gain the ability to introduce vulnerabilities and attack at scale.
ALT Rachel Tobac in 2018 at Node Summit giving a talk about the likely targets social engineers would consider attacking to build trust and introduce vulnerabilities into open source code that is run by millions of people.
2
8
66
14,448
5 Jan 2023
I miss NodeSummit too. There was such great energy, learning, and friendship.
1
2
61
2 Mar 2022
I really like what @heroku did at the last NodeSummit conference - instead of plain old swag, they gave out pre-filled credit cards of $5 each that you can spend them on @opencollect and by that support the open source projects that you care about. Very thoughtful of them ❤️
2
2
21
25 Oct 2020
@NodeSummit If you decide to host more node Summits, for the love of Nod(e), please use @webflow instead of WordPress
1
16 Sep 2020
I met @rohitcolinrao at @NodeSummit in San Francisco where he attended a workshop with @jasnell and myself. Due to some bad luck, he is now homeless. Let’s help him getting back on his feet: gofundme.com/f/homeless-due-…
2
5
9
22 Jul 2020
The first picture was from @ISACANews WCISC Winnipeg event where @Comey and I were the 2 keynotes. The big height difference made for interesting photos! Next is my keynote at @NodeSummit. Then we have photo by @stokfredrik during my @securityfest keynote, then @SAINTCON keynote!
2
1
27
30 May 2020
I can't explain how I'm feeling right now, this was my first international talk in the Node Global Summit, and I'm very very veeeery happyyyyy!
thanks @GeekleOfficial for the opportunity and to all my friends of the brazilian tech communities!
#NodeGS #node #nodeSummit
3
1
54
30 May 2020
Interesting library shared by @ShaneeRadz github.com/mondaycom/node-ex… in async hooks talk 🚀 #nodesummit
2
26 May 2020
Dude this whole thread is so wholesome I’m reading it for like the fifth time
1
7
26 May 2020
That is really awesome.
I started the Node course on Codecademy but was struggling. After looking through this thread, I’m excited to get to it again!
2
4
26 May 2020
It was really great to meet you there! hopefully we will meet again on another event!
2
2
16 Apr 2020
It's what basically every other Node logger library trained people to do
2
