This talk explores Rust, a C-compatible programming language from Mozilla, and the limits of its interoperability with C code. The featured code began as an exploratory project to program in the kernel with the goal of implementing a module in Rust using as much existing kernel tooling as possible to accomplish the task. Topics covered will include a brief overview of Rust and its safety and compatibility guarantees, leveraging the kernel build system for use with a Rust project, potential problems and drawbacks to look out for when using Rust in the kernel, and ultimately a demo of the kernel module itself. The target audience is those familiar with the basics of kernel programming and more advanced C knowledge, but the talk will intentionally provide background for those unfamiliar with kernel programming to follow along. *** Zeet helps anyone deploy and scale like the top tech companies, without the work. Try Zeet to deploy any Github or Dockerhub project today: https://zeet.co?a=codingtech​​​​ *** PUBLICATION PERMISSIONS:
Original video was published with the Creative Commons Attribution license (reuse allowed). Link: https://www.youtube.com/watch?v=oacmnKlWZT8 https://www.youtube.com/watch?v=u80WqduxdhA

Node.js is widely used for developing both server-side and desktop applications. It provides a cross-platform execution environment for JavaScript programs. Due to the increasing popularity, the security of Node.js is critical to web servers and desktop clients. We present a novel attack method against the Node.js platform, called hidden property abusing (HPA). The new attack leverages the widely-used data exchanging feature of JavaScript to tamper critical program states of Node.js programs, like server-side applications. HPA entitles remote attackers to launch serious attacks, such as stealing confidential data, bypassing security checks, and launching denial of service attacks. To help developers detect the HPA issues of their Node.js applications, we develop a tool, named LYNX, that utilizes hybrid program analysis to automatically reveal HPA vulnerabilities and even synthesize exploits. We apply LYNX on a set of widely-used Node.js programs and identify 13 previously unknown vulnerabilities. LYNX successfully generates 10 severe exploits. We have reported all of our findings to the Node.js community. At the time of paper writing, we have received the confirmation of 12 vulnerabilities and got 12 CVEs assigned. Moreover, we collaborated with an authoritative public vulnerability database to help them use a new vulnerability notion and description in related security issues. The talk consists of four parts. First, we will introduce recent offensive research on Node.js. Second, we will introduce HPA by demonstrating an exploit on a widely-used web framework. Third, we will explain how to leverage program analysis techniques to automatically detect and exploit HPA. In the end, we will have a comprehensive evaluation which discusses how we identified 13 HPA 0days with the help of our detection method. *** Zeet helps anyone deploy and scale like the top tech companies, without the work. Try Zeet to deploy any Github or Dockerhub project today: https://zeet.co?a=codingtech​​​​ *** PUBLICATION PERMISSIONS:
Original video was published with the Creative Commons Attribution license (reuse allowed). Link: https://www.youtube.com/watch?v=oGeEoaplMWA https://www.youtube.com/watch?v=BsXtO33xYS8

You've built an amazing site with fast load times, great components, and large (but lazily loaded!) assets. However, when you update or redeploy your site, are your users getting the best experience? Without careful consideration, existing users might have to download (and parse, and spend effort on) assets that they basically already have in their cache. Learn strategies to minimize the amount of work involved in incremental updates, whether it be for JS, CSS, or larger assets like images. We look at build systems in the abstract, and present a modern well-lit path for hosting and caching. *** Zeet helps anyone deploy and scale like the top tech companies, without the work. Try Zeet to deploy any Github or Dockerhub project today: https://zeet.co?a=codingtech​​​​ *** PUBLICATION PERMISSIONS:
Original video was published with the Creative Commons Attribution license (reuse allowed). Link: https://www.youtube.com/watch?v=tprJYFkv4LU https://www.youtube.com/watch?v=wwH48lshcoY