Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/linnv/WebRTC-WAV-to-Disk
An example of saving a WAV file(pcm audio from browser microphone) to disk using WebRTC.
github.com/pion/turn
which provide stun and turn servicewebrtcforthecurious.com this blog is practical, and I suggest reading it first, then run this demo, also there are a lot of examples github.com/pion/example-webrtc-applications then take a look and do the excersise
gen self-cert
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout webrtc.devinner.key -out webrtc.devinner.crt
nginx config
#cat /opt/homebrew/etc/nginx/servers/webrtcinner.conf
server {
server_name webrtc.devinner;
listen 443 ssl;
ssl_certificate /Users/jialinwu/qn-pc/nginx/webrtc.devinner.crt; #you should click the crt and adding it to system trust in macOS
ssl_certificate_key /Users/jialinwu/qn-pc/nginx/webrtc.devinner.key;
location / {
proxy_pass http://127.0.0.1:8013;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
server {
if ($host = webrtc.devinner) {
return 301 https://$host$request_uri;
}
listen 80;
server_name webrtc.devinner;
return 404;
}
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.