Presentation - "Surrogate dependencies (poc in node js) v1.0"

Here is the second part of the presentation I delivered at the OWASP London Chapter event (29 Sep 2016)

Presentation "NodeJS security - still unsafe at most speeds - v1.0"

Here is the first part of the presentation I delivered at the OWASP London Chapter event (29 Sep 2016)

40 technologies used on the 'Maturity Models' nodeJS application

I've been working on an Maturity Model application to help me manage a project where I'm doing an large BSIMM mapping exercise.

The tech stack is based on NodeJS + Angular, and it looks like this:

Should dependencies be committed to main source-code repo?

What do you think?

Please cast your vote here

Node + Chrome TDD test environment (finally got it to work)

In the past 3 months I've spent countless hours (and a good number of weekends) trying to figure out a way to better TDD node and JS, and finally I got it to work:

Node-Webkit REPL with support for Chrome's WebDriver

I needed to write some Selenium WebDriver scripts and since I couldn't find a good REPL for it, I wrote this one in the last coupe days:

I'm actually really happy with how it turned out:

See https://github.com/o2platform/webkit-repl  for the execution instructions, the code and more screenshots

This UI is based on https://github.com/rogerwang/node-webkit and the selenium/webdriver integration is provided by https://github.com/admc/wd

Running git, node, python,make and levelgraph on Chrome OS (inside a ChromeBook)

After creating the Chrome REPL extension, I was curious if it would run under Chrome OS and ChromeBook. To try it out, I was able to get my hands on a Dell ChromeBook 11, and It was nice to see that it worked perfectly.

While using the ChromeBook I was thinking that if I was able to run (tools like) git, node and LevelGraph (which is needed for my current dev focus at SI: TM_Graph_DB) I would have a really portable development environment (specially for running longish batches of Unit Tests).

After a bit of Linux fiddling, I was able to get it working and here is a screenshot of the final result:

FluentNode API - please help

I've been working on an Fluent API for node which you can get from https://www.npmjs.org/package/fluentnode

It is basically a large number of JS prototype functions (written in coffee-script) which try to simplify node development, improve developer productivity and make the code more readable.

It's still early days, but there are already a good number of APIs in there (and all are covered by UnitTests)

I would love go get some feedback on the current APIs (and other APIs to add)

Reddit thread

A small AngularJS Jasmine test executed by KarmaJS

When I try to understand how a particular technology works I always like to create a simple test case with a small number of moving parts.

This post shows such example for an AngularJS page, a Jasmine test, a NodeJS web server and a KarmaJS execution cycle.

The files used/customised were based on the KarmaJS test/e2e/angular-scenario example:

Debugging a weird case of missing module in AngularJS and KarmaJS

When I was trying the  Running KarmaJS’s AngularJS example test/e2e/angular-scenario (on Chrome) I hit on the the following weird behaviour.

TLDR; the solution was to run npm install –g karma@canary

Using Scripted (JS Editor from VMWare) to build Mobile Site

When I was creating the First working version of TeamMentor Mobile I gave scripted a test drive and I quite like it.

You can read more at Scripted: A Javascript Editor from vmware and this is what my GUI looked like:

Since the scripted stuff on the bin folder wasn't working (on Windows), to start scripted, I added the node.exe file to the server directory and launched scripted from there using node scripted.js

I really like the real-time feedback on JS Errors and it is nice to code on an IDE that understands Javascript.

What I really want to learn more is the use of Annotated JavaScript for the Closure Compiler (see https://developers.google.com/closure/compiler/docs/js-for-compiler) since this could be a great way to add type information to Javascript. Note how in the TM_Mobile.js file (screenshot above), it starts with /* global ... */ which tells the compiler to accept those variables as globals

One feature that I would like to see was an auto-preview of the code changes (in a browser window)

Video: NodeJS O2 REPL environment (using node.exe)

NodeJS is pretty amazing, I was able to get the node.exe (from here) and run its REPL environment with only that exe (no other installation or dependencies needed!).

Since it was that easy, I added NodeJS support to the O2 Platform and created a couple REPL editor environments which make it easy to consume NodeJS.

Here is a video of these new O2 Scripts (note how easy it was to create an NodeJS webserver :)

Some NodeJS references:

• NodeJS main site: http://nodejs.org (with commercial support provided by Joyent)
• Installing and Running node.js applications within IIS on Windows - Are you mad? 
• Node.js vs. ASP.NET Web API css
• What is Node.js? 
• Node.js, Doctor’s Offices and Fast Food Restaurants – Understanding Event-driven Programming 
• What so different about Node.js's event-driven? Can't we do that in ASP.NET's HttpAsyncHandler? 
• How to pass command line arguments to node.js? 
• The secrets of Node's success radar.
• Projects, Applications, and Companies Using Node 
• Useful when starting using NodeJS
• Taking Baby Steps with Node.js
• Don't debug with JSON.Stringify
• JSON Round Trip with node.js 
• How to stop a node.js server without killing the process? 
• NodeJS tools
• Browser base debugger
• Running NodeJS on IIS:
• https://github.com/tjanczuk/iisnode
• Hosting node.js applications in IIS on Windows 
• Azure NodeJS developer center
• Azure NodeJS HelloWorld
• Debug node.js applications on Windows with iisnode integrated debugging