►
From YouTube: Node.js Security WG Meeting 7-15-19
Description
Node.js Security WG Meeting for July 15, 2019.
A
B
C
A
Actually,
exactly
on
us
and
the
CFP
process
proposal,
but
I
think
that's
supposed
to
be
like
a
three
or
four
days
conference,
so
maybe
feels
something
we
can
do
in
terms
of
maybe
a
chart,
but
not
really
a
workshop
like
kind
of
or
chop
get
together
from
our
side.
Or
maybe
this
thing
and
finalize
it
will
check
with
something
around
that.
What
do
you
think
yeah
there?
It
is.
D
E
A
Right
so
I'm
not
entirely
sure
if
this
is
relevant
anymore
for
us
to
submit
anything.
I
would
maybe
comment
on
the
issue
just
saying
that
we
could
explore
whether
they
have
unconference
four
chapters,
some
slot
that
we
can
generally
present-
or
you
know
just
have
like
a
speaker
corners
slot
somewhere
around
the
conference
area
representing
the
node
security
workgroup
from
that
perspective,.
A
Right,
so
we
basically
just
to
give
a
context
on
that
one,
since
we
have
the
funds
available
from
that
company
for
for
bug
bounties
on
hacker
one
reports,
we
started
a
discussion
around
basically
criteria
of
which
reports
are
eligible
and
which
are
not.
We
came
up
with
a
draft
proposal.
The
thing
is
that
least
listing
specific
modules
and
getting
the
approval
from
and
confirmation
from
those
maintainer.
A
A
big
part
of
that,
so
we
have
have
a
draft,
so
we
have
ACP
kind
of
a
centrally
adopted.
We
have
a
policy
in,
but
it's
kind
of
shortened
module.
So
we
need
to
do
maybe
a
better
job
of
reaching
out
to
other
people
might
and
introduced
me
to
John
Whitlow.
So
we
have
that
already.
As
someone
who
agreed
Mattel
already
already
reached
out
his
own,
he
also
agrees
to
pretty
much
a
lot
of
the
models
that
he
is
working
on
and
the
orgs.
A
So
we
basically
have
this
in
and
it's
just
really
a
matter
of
time
now
maybe
what
I
was
thinking
we
can
do
is
also
see
the
scopes
that
we
have
currently
on
Hacker
one
check:
maybe
what
are
those
hack
like
higher
visibility
modules
that
we
got
in
to
those
since
its
public?
So
some
of
them
are
from
you
know
something.
That's
already
people
will
know
about
or
you
can
reach
out,
and
you
know
talk
to
these
people
or
any
other
ideas
that
you
guys
have
so.
D
A
A
D
A
D
D
A
E
A
E
E
A
Announcements
perspective
I
think
we
can
reach
out
to
the
folks.
We
highlight
don't
tell
me
their
name
right
now
on
the
social
and
marketing
of
node
and
ask
them
to
send
the
tweet
out
for
this
announcement
basically
say
we
move.
This
is
any
place.
We
can
all
like
kind
of
retweet
it
to
make
sure
that
everyone
who
are
building
like
tools
like
turning
and
integrating
with
it
are
aware
of
it.