Podcasts Technology Two Voice Devs Episode 109 - Verify and Verify Again

Episode 109 - Verify and Verify Again

Published: Aug. 25, 2022, 3:02 p.m.

b'

Making sure our #VoiceFirst applications are written securely and use secure components is important. And when one of those components has a security bug, it is important that we update it as soon as we can. Mark highlights a recent security vulnerability in the node-forge module, which is used by the alexa-verifier-middleware module. Mark and Allen then discuss what the verifier does and how we can be careful when it comes to using libraries.

\\n

Some references:

\\n
    \\n
  • alexa-verifier-middleware: https://www.npmjs.com/package/alexa-verifier-middleware
    • \\n
  • Alexa verification: https://developer.amazon.com/en-US/docs/alexa/custom-skills/host-a-custom-skill-as-a-web-service.html#manually-verify-request-sent-by-alexa
    • \\n
  • Issues with node-forge: https://github.com/advisories/GHSA-x4jg-mjrx-434g
    • \\n
'