My books on #JavaScript and #TypeScript are free to read online:

– Exploring JavaScript (ES2024 edition)
– Deep JavaScript
– Tackling TypeScript
– Shell scripting with Node.js

 Boosts appreciated!

https://exploringjs.com

📮 New on the blog:

Netlify’s Disingenuous Survey-based Attack on Next.js (and Eleventy, too)

https://www.zachleat.com/web/netlify-and-nextjs/

Dear CouchDB users, (future) developers & friends,

we're happy to invite you to @neighbourhoodie's next online @couchdb Berlin Meetup on March 15th (this week!), 2023, 5:30 PM – 7:00 PM (CET)

Talks by Alex Feyerke, @jfriedensreich & your’s truly:

Talk #1: Type safe access to CouchDB with PouchDB

Talk #2: Zero Boilerplate Data Binding for Reactive and Offline UIs with CouchDB and PouchDB

Talk #3: CouchDB and… SQL?

Register here: https://vi.to/hubs/couchdb-berlin

Already smarting from a breach that put partially encrypted login data into a threat actor’s hands, LastPass on Monday said that the same attacker hacked a senior devops engineer's home computer and obtained a decrypted vault available to only a handful of company developers.

“This was accomplished by targeting the DevOps engineer’s home computer and exploiting a vulnerable third-party media software package, which enabled remote code execution capability and allowed the threat actor to implant keylogger malware,” LastPass officials wrote. “The threat actor was able to capture the employee’s master password as it was entered, after the employee authenticated with MFA, and gain access to the DevOps engineer’s LastPass corporate vault.”

A person briefed on a private report from LastPass and spoke on the condition of anonymity said the media software package that was exploited was Plex. Interestingly, Plex reported its own network intrusion on August 24, just 12 days after the second incident commenced.

It's not clear if the Plex breach has any connection to the LastPass intrusions. Representatives of LastPass and Plex didn’t respond to emails seeking comment for this story.

https://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/

Lighthouse 10.0 is out.

• updated scoring (we'll kind of miss you TTI. ok not really)
• bfcache compatibility audit
• user flows general availability
• complete type declarations
…and 495 commits of goodness.

https://developer.chrome.com/blog/lighthouse-10-0/

Hey look another LastPass breach. This one happened in August and they’re only now disclosing. Which means either they didn’t detect it until now, or they tried to cover it up.

This is just getting sad.

https://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/