--- title: "#210: Node Knockout, a DOS vulnerability, and Node.js Security Tips" publication: "Node Weekly" issue: 210 published_at: "2017-10-19" canonical_url: "https://nodeweekly.com/issues/210" --- #210: Node Knockout, a DOS vulnerability, and Node.js Security Tips This week's Node news[Read this e-mail on the Web](http://nodeweekly.com/issues/210) Node WeeklyOctober 19, 2017 #210 Node.js Foundation [A DOS Security Vulnerability Fix is Due Next Week](https://nodejs.org/en/blog/vulnerability/oct-2017-dos/)The Node.js project will be releasing new versions of 4.x, 6.x, and 8.x next week (roughly around October 24) to incorporate a major security fix. Gergely Nemeth [Node.js Security Overview](https://nemethgergely.com/nodejs-security-overview/)Where we are with Node security, and some good security practices for your own Node apps. Node Knockout [Node Knockout: The 48 Hour Online Hackathon](https://www.nodeknockout.com/)Registration is open for this popular 48-hour virtual hackathon focused on Node development. Taking place Nov 11-12. Frontend MastersSponsor [🎉 New, Updated: Deep JavaScript Foundations with Kyle Simpson](https://frontendmasters.com/courses/javascript-foundations/)Join Kyle Simpson, author of the popular “You Don’t Know JavaScript” book series, as he deep dives into JavaScript's core mechanics like scope, closure, this and prototypes ..plus new features in ES6 and more. [![Frontend Masters\](https://copm.s3.amazonaws.com/4cf37b30.png)](https://frontendmasters.com/courses/javascript-foundations/) Arunesh Chandra [What's New With Node-ChakraCore?](https://blogs.windows.com/msedgedev/2017/10/04/node-chakracore-update-node-js-interactive-2017/)At Node.js Interactive 2017, Microsoft shared some updates, including that Node-ChakraCore is used to serve all of the traffic on the [Microsoft Edge Developer portal](https://dev.microsoftedge.com/) and its involvement in running Node on iOS. Dollar Shave Club [ES Check: Checks The Version of ES Used in Source Files](https://github.com/dollarshaveclub/es-check)Checks JavaScript files against a specified version of ECMAScript with a shell command. This can be a way to test files were transpiled properly. Node.js Foundation [V8 6.2 Has Just Landed in Node 'master'](https://github.com/nodejs/node/compare/e2cddbb8ccdb7b3c4a40c8acc630f68703bc77b5...c39caa997c751473d0c8f50af8c6b14bcd389fa0)Not much release wise to see yet but this will be [a big deal, performance-wise.](https://v8project.blogspot.co.uk/2017/09/v8-release-62.html) Microsoft [Napa.js: An Alternative Multi-Threaded JavaScript Runtime](https://github.com/Microsoft/napajs)An interesting project from Microsoft that, like Node, offers a V8 JavaScript runtime but is focused on having multiple V8 instances running at the same time. Keith Horwood [StdLib Sourcecode: A Way to Share Node.js 'Serverless' Code](https://medium.com/stdlibhq/introducing-stdlib-sourcecode-share-your-node-js-serverless-code-with-developers-worldwide-b8fd5714e430?ref=producthunt)_“the easiest way to get started building & deploying web applications using new ‘serverless’ technology.”_ In Brief - [Node 9.0 Due on October 31st](https://twitter.com/jasnell/status/920296046739169282) news James M Snell on Twitter - [A Summary of the Last Week in Node's Working Groups](https://nodesource.com/blog/last-week-in-node-js-working-groups-october-9-2017) news Tierney Cyren - [JavaScript Telemetry: Black Box Recorder for App Crashes](https://rollbar.com/nodeweekly) news Telemetry gives a timeline of browser events leading to errors. Debug with telemetry & know why apps crash. ROLLBARSponsor - [Documenting your Node.js API with apiDoc](https://jonathas.com/documenting-your-nodejs-api-with-apidoc/) tutorial [apiDoc](http://apidocjs.com/) generates HTML from annotations in your code. Jon Ribeiro - [Sending HTML Emails using Sendgrid with Node](https://medium.com/@Keithweaver_/sending-emails-using-sendgrid-with-node-js-1ed879a94f7b) tutorial Keith Weaver - [A Brief History of Streams](https://www.youtube.com/watch?v=gx9ZNY9DNBs) video Jessica Quynh Tran - [Keeping JavaScript Safe: Security & the npm Registry](https://www.youtube.com/watch?v=H48KuESn2sk) video npm CTO CJ Silverio on how the npm registry handles security. C J Silverio - [Why It’s Important That Big Organizations Pay Attention to CI](https://circleci.com/blog/bringing-digital-transformation-to-the-enterprise-why-it-s-important-that-big-organizations-are-now-paying-attention-to-ci/?utm_source=cooperpress&utm_medium=newsletter&utm_campaign=october&utm_content=node-weekly) opinion Yes, “digital transformation” is a buzzword having its moment right now. But what is behind the buzz? CircleCISponsor - [Node.js Interactive North America 2017: Key Takeaways](https://www.lullabot.com/articles/nodejs-interactive-north-america-2017-key-takeaways) opinion Highlights from the recent Node.js Interactive conference. Jerad Bitner - [How HomeAway Uses Node to Scale Service](https://nodesource.com/blog/how-homeaway-uses-node-js-to-scale-service) story Tierney Cyren - [Schnack.js: A Disqus-like Commenting Drop-in for Static Sites](https://www.vis4.net/blog/2017/10/hello-schnack/) code A commenting system build on Node.js and SQLite3. Gregor Aisch - [queuelite.js: Simple, Persistent Message Queue for Prototyping](https://github.com/alexpusch/queuelite.js) code Alex Puschinksy - [ip-num: A TypeScript Library for Working with ASN, IPv4, and IPv6 Numbers](https://github.com/ip-num/ip-num) code Dadepo Aderemi - [eBook - Practical Scalability Analysis with the Universal Scalability Law](https://www.vividcortex.com/resources/universal-scalability-law/?utm_campaign=Node%20Weekly&utm_source=ppc&utm_medium=Practical%20Scalability) VividCortexSponsor Node Weekly is curated by [Peter Cooper](https://twitter.com/peterc) and published by [Cooperpress](https://cooperpress.com/). Want to sponsor an issue? See our [media kit.](https://cooperpress.com/mediakit) Want to post a job? E-mail us or [use our self-serve system.](https://booking.cooperpress.com/jobs) [Unsubscribe](*|UNSUB|*) : [Change email address](*|UPDATE_PROFILE|*) : [Read this issue on the Web](http://nodeweekly.com/issues/210) © Cooperpress Ltd. Office 30, Lincoln Way, Louth, LN11 0LS, UK [Email policy](https://cooperpress.com/spam.html) [Privacy policy](https://cooperpress.com/privacy.html)