Senate Minority Leader Chuck Schumer (D-NY) on Monday called for ousted Secret Service Director Randolph “Tex” Alles to testify before...

Microsoft’s Patch Tuesday for April released fixes for a couple of critical font-related vulnerabilities, like an earlier disclosed one found in Adobe Type Manager Library (atmfd.dll). It also featured patches for vulnerabilities in Microsoft SharePoint and Windows Components.

The post April Patch Tuesday: Fixes for Font-Related, Microsoft SharePoint, Windows Components Vulnerabilities appeared first on .

This paper investigates the vulnerabilities of health care systems in OECD and BRIICS countries to adverse secular trends and large macroeconomic shocks.

Unemployment insurance is a key tool for risk sharing and redistribution and also a prominent automatic stabiliser. It is a volatile spending item by design, which can lead to vulnerabilities. This paper explores various shocks and sources of vulnerability of the unemployment insurance schemes of OECD and BRIICS countries.

Demographic developments are unfavourable for the financing of pension schemes in most OECD countries, implying continued growth in pension expenditure in virtually all OECD countries. This paper examines the vulnerability of pension systems, with an emphasis on financial sustainability and adequacy.

Global economic growth is expected to pick up modestly next year to around 3.6 % from a projected 3.3% in 2017 but risks of rising protectionism, financial vulnerabilities, potential volatility from divergent interest rate paths and disconnects between market valuations and real activity hang over the outlook, according to the OECD.

Online Resource

Sponsors

• Triplebyte
• Sentry use the code “devchat” for $100 credit
• Clubhouse
• CacheFly

Panel

• Aaron Frost
• AJ O’Neal
• Chris Ferdinandi
• Joe Eames
• Aimee Knight
• Charles Max Wood

Joined by special guests: Hillel Wayne and Richard Feldman

Episode Summary

In this episode of JavaScript Jabber, Hillel Wayne kicks off the podcast by giving a short background about his work, explains the concepts of formal methods and the popular npm package - event-stream, in brief. The panelists then dive into the recent event-stream attack and discuss it at length, focusing on different package managers and their vulnerabilities, as well as the security issues associated with them. They debate on whether paying open source developers for their work, thereby leading to an increase in contribution, would eventually help in improving security or not. They finally talk about what can be done to fix certain dependencies and susceptibilities to prevent further attacks and if there are any solutions that can make things both convenient and secure for users.

Links

• STAMP model in accident investigation
• Hillel’s Twitter
• Hillel’s website
• Richard’s Twitter
• Stamping on Event-Stream

Picks

Joe Eames:

• Stuffed Fables

Aimee Knight:

• SRE book - Google
• Lululemon leggings
• DVSR - Band

Aaron Frost:

• JSConf US

Chris Ferdinandi:

• Paws New England
• Vanilla JS Guides

Charles Max Wood:

• Sony Noise Cancelling Headphones
• KSL Classifieds
• Upwork

Richard Feldman:

• Elm in Action
• Sentinels of the Multiverse

Hillel Wayne:

• Elm in the Spring
• Practical TLA+
• Nina Chicago - Knitting
• Tomb Trader