San Francisco, CA
Joined February 2017
- Tweets71
- Following0
- Followers224
- Likes102
Pinned Tweet
Big news today: we were acquired by VMware! We’re very excited to join forces and tackle new challenges in cloud security together.
VMware confirmed that it has acquired Intinsic, a San Francisco serverless computing start-up. cnb.cx/2zgO4ln
Intrinsic retweeted
See @tlhunter at our @Meetup in San Francisco
@CapitalOne
on April 4th, 6:30 pm
Talk is "Real World Attacks in the npm Ecosystem"
read about it here... bit.ly/2Oy6DID
Why should I use a Reverse Proxy if #NodeJS is Production-Ready? medium.com/intrinsic/why-sho…
Intrinsic retweeted
Github diffs are useless from a security perspective. It's gotta be an npm diff, and you should be suspicious if the package is bundled before publish. Bundling should be on the package consumer
Symbols bring a few benefits to #JavaScript and are particularly useful when used as object properties. But, what can they do for us that strings cannot? And why don't they come with the same guarantees in #NodeJS? medium.com/intrinsic/javascr…
Introducing Package Diff: A service for displaying a diff between two versions of an @npmjs package: medium.com/intrinsic/introdu… This tool was inspired by @mikeal. #nodejs
Intrinsic retweeted
I loved working with @eranhammer on a prototype pollution attack that can impact Node applications: github.com/hapijs/hapi/issue… < Check it out.
Do you maintain a #JavaScript library? Have a look at "Protecting your JavaScript APIs". Is your library resilient to each of the outlined attacks? medium.com/intrinsic/protect…
Our very own @tlhunter participated in a podcast this morning on the recent @npmjs event-stream package incident: soundcloud.com/owasp-podcast…
4
Our deep dive on the compromised event-stream package medium.com/intrinsic/comprom… #npm #vulnerabilities #security
Exactly! This is what we do for Node.js!
Intrinsic retweeted
An NPM package with 2,000,000 weekly downloads had malicious code injected into it. No one knows what the malicious code does yet. github.com/dominictarr/event…
Intrinsic retweeted
Read about how @intrinsic are helping us to offer greater protection against dependency hijacking and supply-chain attacks in your #serverless functions.
netlify.com/blog/2018/10/10/…
✍️ You can also sign up for early access to the beta!
Intrinsic retweeted
Netlify Functions makes working with #serverless easier than ever before.
netlify.com/features/functio…
And now, thanks to a partnership with @intrinsic, our enterprise customers get greater protection against dependency hijacking and supply-chain attacks.
netlify.com/blog/2018/10/10/…
Intrinsic retweeted
“Intrinsic is the best way to secure your Node.js Lambda functions, period.” — says Matthew Self of @BoxHQ
That's why we're working with @intrinsic to bring greater security to #serverless functions. More on this from @DavidWells on the @netlify blog:
netlify.com/blog/2018/10/10/…
This just in: We are very excited to partner with @Netlify to offer their enterprise customers advanced runtime security for Netlify Functions. Automatically protect your code against the worst type of attacks!
Sign up for the beta: netlify.com/blog/2018/10/10/…
Intrinsic retweeted
"The typical #nodejs app is about 95% third party modules. Scrutinizing every line of third party code simply isn’t a realistic way of protecting yourself from these threats, which is why Intrinsic is here to protect you." - via @tlhunter
medium.com/intrinsic/securin…
In this post we finally debut some of the awesome capabilities Intrinsic offers when it comes to securing #NodeJS applications! medium.com/intrinsic/securin… #JavaScript #security
Here's @tlhunter's talk, Property Descriptors, Getters/Setters, and Proxies, given at @NodeSummit 2018: nodesummit.com/prior-video/n… #NodeJS #JavaScript