Fireside chat on security for practitioners & academics
summary
Covers concrete BEAM risks and fixes: never create atoms from user input because atoms aren’t garbage collected and can exhaust the atom table; BEAM distribution traffic is unencrypted by default so use SSL distribution or VPN for cloud clusters; avoid os:cmd injection by opening ports with explicit executable+args rather than string shells; NIFs/beam binaries need PIE/ASLR and careful config; OCSP support in OTP is still experimental; sandboxing and runtime code signing remain unsolved community projects.
AI-written summary · about
chapters (16)
- 0:00Intro
- 2:13Benefits of Immutability
- 4:41Challenges of Immutability
- 6:25Common issues
- 8:37Atom exhaustion
- 10:32Specific threats
- 12:07Common threats
- 13:46How to avoid action injections
- 15:54Security theater
- 17:32Distribution protocol
- 21:22Pie
- 23:52Solutions
- 27:26Trusting dependencies
- 30:38Unsolved challenges
- 35:20OCSP
- 37:53Vulnerability reporting
