The Chronic Disease Plaguing the Internet
summary
Research finds about 3/4 billion websites are out of date and roughly one third of surveyed organizations report a security incident in the last 24 months, with 75% of vulnerabilities living in dependencies. JavaScript ecosystems surface shows 11,000 malicious packages detected (28% year over year), node hits 2 billion downloads last year and many still run unsupported Node 16. Public tools include healthyweb.org checker, is my node vulnerable tool, and automated release flows that cut a 700‑hour process to 26 steps.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 1:48JavaScript ecosystem challenges
- 3:53npm dependency vulnerabilities
- 6:44OpenJS outdated web research
- 8:51jQuery security risks
- 10:16Upgrading JavaScript projects
- 11:40Healthy Web initiative
- 12:22Node.js upgrade urgency
- 13:46OpenJS security initiatives
- 15:30Customizing security best practices
- 16:53Infrastructure consolidation
- 17:40Social engineering prevention
- 19:26Governance and security
- 20:31Node.js security growth
- 21:37Capital One modernization
- 23:05Critical projects funding
- 24:09Collaborating with OpenJS
- 24:32Q&A
related talks
47mBlack Clouds and Silver Linings in Node.js Security
35mHow the Web Tangled Itself
34mStranger Danger: Finding Security Vulnerabilities Before They Find You!
14mStranger Danger: Tracking Vulnerabilities in Your Third Party Code
27mState of Node.js Security
16mAre We Forever Doomed to Software Supply Chain Security?
16mAre we Forever Doomed to Software Supply Chain Security?
35mServer-Side Browsers: Exploring the Web’s Hidden Attack Surface