Node.js Foundation Security WorkGroup Meeting 2018-08-23

[mhdawson]

Time

UTC Thu 23-Aug-2018 19:00 (07:00 PM):

Timezone	Date/Time
US / Pacific	Thu 23-Aug-2018 12:00 (12:00 PM)
US / Mountain	Thu 23-Aug-2018 13:00 (01:00 PM)
US / Central	Thu 23-Aug-2018 14:00 (02:00 PM)
US / Eastern	Thu 23-Aug-2018 15:00 (03:00 PM)
London	Thu 23-Aug-2018 20:00 (08:00 PM)
Amsterdam	Thu 23-Aug-2018 21:00 (09:00 PM)
Moscow	Thu 23-Aug-2018 22:00 (10:00 PM)
Chennai	Fri 24-Aug-2018 00:30 (12:30 AM)
Hangzhou	Fri 24-Aug-2018 03:00 (03:00 AM)
Tokyo	Fri 24-Aug-2018 04:00 (04:00 AM)
Sydney	Fri 24-Aug-2018 05:00 (05:00 AM)

Or in your local time:

• http://www.timeanddate.com/worldclock/fixedtime.html?msg=Node.js+Foundation+Security%20WorkGroup+Meeting+2018-08-23&iso=20180823T19
• or http://www.wolframalpha.com/input/?i=07PM+UTC%2C+Aug+23%2C+2018+in+local+time

Links

• Minutes Google Doc: https://docs.google.com/document/d/1f-OxxrS8FnJGud08lC5gKUYMbWMc0v8MLv-uqyINh0o/edit

Agenda

• Discussion on membranes - Discussion Towards a Security Model #376
  • Background doc - https://en.wikipedia.org/wiki/Object-capability_model

Invited

• Security wg team: @nodejs/security-wg

Observers/Guests

Notes

Joining the meeting

• link for participants: https://zoom.us/j/405474359
• For those who just want to watch We stream our conference call straight to YouTube so anyone can listen to it live, it should start playing at https://www.youtube.com/c/nodejs+foundation/live when we turn it on. There's usually a short cat-herding time at the start of the meeting and then occasionally we have some quick private business to attend to before we can start recording & streaming. So be patient and it should show up.
• youtube admin page: https://www.youtube.com/my_live_events?filter=scheduled

[mhdawson]

@nodejs/security-wg updated agenda. A a reminder this is a special meeting for a presentation on membranes.

[addaleax]

This is now, right? Would it be okay to join as an observer?

[mhdawson]

@addaleax absolutely

[mikesamuel]

Great presentation!

[vdeturckheim]

Thanks a lot @erights for this great presentation and @bmeck for setting it up.
Let's discuss the next steps in the original issue #376

[erights]

@vdeturckheim @mhdawson @addaleax @mikesamuel other...,

You are welcome all! I greatly enjoyed it, and look forward to referring others to the recording. Speaking of which where should I expect the recording to show up? What form is it in?

[vdeturckheim]

Recording is available already on Youtube: https://www.youtube.com/watch?v=lgAnL1swyns

[deian]

Thanks for answering all my questions! I'd be super curious to see numbers to clarify some of the things when ya'll get a chance

[erights]

I really appreciate the recording!

Watching it now. Is there something wrong with the color separation? The B&W is where it appears, but there are colored ghosts in bizarre places.

[erights]

Hi @deian I didn't realize it was you. Good to reconnect!

Yes, I will get these questions answered.

[erights]

Someone mentioned work for transparently enough linking components across a postMessage boundary. What is that work?

[erights]

The description for the video links to the wrong meeting page

[deian]

Watching it now. Is there something wrong with the color separation? The B&W is where it appears, but there are colored ghosts in bizarre places.

FWIW the live thing was totally fine. I wonder if it's youtube + zoom thing.

Someone mentioned work for transparently enough linking components across a postMessage boundary. What is that work?

That was me. I was referring to Pivot

[erights]

I created a version with corrected visuals at
https://www.youtube.com/watch?v=9Snbss_tawI&t=0s&list=PLKr-mvz8uvUgybLg53lgXSeLOp4BiwvB2&index=23

Is it possible for Node to link to this one instead?