Skip to main content
Localhost Podcast

Localhost Podcast

By Localhost Podcast

Hello from the Internet!

This is your guide to the various aspects of the lovely world of web development.

Every month we shall get together, and discuss an aspect of web development. We will unwrap the subject using questions sent by YOU the listener.

You can contact us via the twitter on @localhostfm or email your questions to show@localhost.fm

Mark Drew and Rob Dudley are stepping up to the challenge to answer these questions for you.
Available on
Apple Podcasts Logo
Castbox Logo
Overcast Logo
Pocket Casts Logo
Spotify Logo
Currently playing episode

028 - Black hat hacking

Localhost PodcastDec 04, 2019

00:00
43:05
028 - Black hat hacking

028 - Black hat hacking

Hello from the internet!


In this episode we welcome back Rob and don our black hats to take a look at the world of hacking.


Enjoy the show!

Dec 04, 201943:05
027 - More javascript with Dylan Schiemann

027 - More javascript with Dylan Schiemann

Hello from the internet!

In this episode we speak to Dylan Schiemann about more things Javascript.

Enjoy the show!
Sep 08, 201934:43
026 - Javascript with Chris Ferdinandi

026 - Javascript with Chris Ferdinandi

Hello from the internet!

In this episode we speak to Chris Ferdinandi about all things Javascript

Enjoy the show!
Aug 02, 201937:52
025 - Advanced Web Authentication

025 - Advanced Web Authentication

Hello from the internet!

In this episode we continue our exploration of identity, security and authorisation on the web...

Enjoy the show!
Jul 06, 201945:59
024 - Web Authentication

024 - Web Authentication

Hello from the Internet!
In this episode we discuss all that is web authentication and how we got here from the pre-cookie days of the internet!

From Basic, to Form to Auth0 and WebAuthN we look at the different ways we can get into websites (legally of course!)

Enjoy the show!
Jun 10, 201934:13
023 - CodeMasters 2018
Apr 10, 201901:20
022 - Payment Providers

022 - Payment Providers

022 - Payment Providers by Mark Drew and Rob Dudley
Mar 19, 201938:50
021 - Season 3 Introduction

021 - Season 3 Introduction

Hello from the Internet!
We are back with a whole new season of the Localhost Podcast! In this episode we go over what changes we have planned!

Enjoy the show!
Feb 21, 201911:15
019 -  CFCamp 2018

019 - CFCamp 2018

Hello from the internet!
In this special edition of the localhost podcast, we are live at the end of the awesome CFCamp Conference in Munich Germany , pondering and doing a retrospective about all the topics covered!

It was a blast! Come join the fun!
Dec 19, 201801:00:38
018 - Hackathons & Game Jams

018 - Hackathons & Game Jams

Hello from the Internet!

In this episode, we expand our discussion to the world of hackathons and Game Jams!

Enjoy the episode!
Oct 30, 201801:03:36
017 - The Birth of JavaScript

017 - The Birth of JavaScript

Hello from the internet!

In this episode we go retro and look at the origins of JavaScript and how we it has become so ubiquitous in the development of the web

Enjoy the episode!
Sep 20, 201801:12:56
016 - Application Security

016 - Application Security

Hello from the internet!

In this episode, we continue our walk in the badlands of development as we review the seemingly impossible task of securing our applications.


Enjoy the episode!
Aug 09, 201801:10:31
015 - Talking Source Control and Games with Steve Streeting

015 - Talking Source Control and Games with Steve Streeting

Hello from the internet!

In this episode we will be talking to a very special guest! Steve Streeting! If you are into source control, this episode is for you.

Enjoy the episode!
Jun 18, 201855:30
014 - OWASP Top 10

014 - OWASP Top 10

Hello from the Internet

In this we count down the OWASP TOP 10 and explore the implications of each of the issues that we should be looking at in securing our applications.

Enjoy the show!

## Show Notes
- [OWASP](https://www.owasp.org/index.php/Main_Page)
- [OWASP TOP 10 for 2017](https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdf)

### 10. Logs
- Insufficient Logging and Monitoring -
www.owasp.org/index.php/Top_10-2017_A10-Insufficient_Logging%26Monitoring
- Graylog - www.graylog.org/
- Logstash (ELK) - www.elastic.co/elk-stack

### 09. Components
- www.owasp.org/index.php/Top_10-2017_A9-Using_Components_with_Known_Vulnerabilities
- Safety - Python - pyup.io/safety/
- Ruby - guides.rubygems.org/security/
- Node - Node Security - github.com/nodesecurity/nsp

### 08. Deserialization
- www.owasp.org/index.php/Top_10-2017_A8-Insecure_Deserialization

### 07. XSS
- https://www.owasp.org/index.php/Top_10-2017_A7-Cross-Site_Scripting_(XSS)

### 06. Security Misconfiguration
- www.owasp.org/index.php/Top_10-2017_A6-Security_Misconfiguration

- How to harden a Linux server:
- nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-123.pdf
- medium.com/viithiisys/10-steps-to-secure-linux-server-for-production-environment-a135109a57c5
- www.cyberciti.biz/tips/linux-security.html

### 05. Broken Access Control
- www.owasp.org/index.php/Top_10-2017_A5-Broken_Access_Control
- Firesheep - codebutler.com/projects/firesheep/

### 04. XML External Entities
- https://www.owasp.org/index.php/Top_10-2017_A4-XML_External_Entities_(XXE)
- Billion Laughs Attack - en.wikipedia.org/wiki/Billion_laughs_attack

### 03. Sensitive Data Exposure
- www.owasp.org/index.php/Top_10-2017_A3-Sensitive_Data_Exposure
- PCI DSS - www.pcisecuritystandards.org/pci_security/
- GDPR - ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/
- Password Hashing - crackstation.net/hashing-security.htm
- Best practice for SSL + TLS
- www.ssllabs.com/ssltest/
- hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
- Let’s Encrypt - letsencrypt.org/
- CipherList - Strong config for Apache / Nginx cipherli.st/

### 02. Broken Authentication
- www.owasp.org/index.php/Top_10-2017_A2-Broken_Authentication
- Horse staple - xkcd.com/936/
- NIST - www.passwordping.com/surprising-new-password-guidelines-nist/
- Rainbow tables - project-rainbowcrack.com/table.htm
- Google 2FA
- Authy - authy.com/
- Duo - duo.com/

### 01. Injection
- www.owasp.org/index.php/Top_10-2017_A1-Injection
- Bobby Tables - xkcd.com/327/
- Misc
- Nessus - www.tenable.com/products/nessus/nessus-professional
- OpenVas - www.openvas.org/
- ZED Attack Proxy - www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
- zxcvbn: realistic password strength estimation - blogs.dropbox.com/tech/2012/04/zxcvbn-realistic-password-strength-estimation/
- Be afraid, be very afraid - attack.mitre.org/wiki/Main_Page
May 04, 201801:01:12
013 - Talking Docker with Bret Fisher & Grant Shepert

013 - Talking Docker with Bret Fisher & Grant Shepert

Hello from the internet

In this develop episode we have the pleasure of talking with Docker Captain Bret Fisher and with Grant Shepert about Docker, how it is used and the upcoming MuraCon Conference!

Enjoy the show!
Mar 23, 201845:06
012 - The Vagaries of Version Control

012 - The Vagaries of Version Control

Hello from the internet!

In this episode Rob and Mark discuss the use of Version Control and where it comes from, what are the best tactics and where we are going with it!

Enjoy the show!
Mar 14, 201801:08:56
011 -  No or Nu SQL

011 - No or Nu SQL

Hello from the internet!


In this episode Rob and Mark explore the vast landscape of the "noSQL" category of software. Not Only SQL might not be the best name but we try to get a better handle on what it is.

Enjoy the show!
Feb 26, 201801:05:59
010 - Season 2 Preview
Jan 08, 201819:01
009 - Twelve Factors of Xmas

009 - Twelve Factors of Xmas

Hello from the Internet!

In this episode we explore the idea of the "twelve factor application" which allow you to deploy scalabale applications or software as a service type systems.
Dec 20, 201701:11:36
008 - Technical Debt

008 - Technical Debt

Hello from the Internet!
In this episode we discuss and explore the technical debt that can get stored in our projects.

We go over what technical debt is, how it happens, and what we can do to mitigate it!
Dec 14, 201758:21
007 - Take a REST

007 - Take a REST

Hello from the internet!

Welcome to Episode 7 of the Localhost Podcast!

In this episode we shall be talking about APIs, SOAP, REST, Oh My!

I am Mark Drew and sitting in the motorcycle sidecar on this journey through the information super -highway is Rob Dudley!
Dec 02, 201701:21:21
006.2 - CFCamp Retrospective

006.2 - CFCamp Retrospective

Hello from the Internet!
In this second episode live from CFCamp in Munich we cove the sessions we attended as well as we get a great interview with Michael Hnat, the organiser of CFCamp!

Enjoy the show!
Oct 30, 201754:34
006.1 - CFCAMP Code Masters

006.1 - CFCAMP Code Masters

Hello from the Internet
In this special episode recorded live at CFCamp in Munich,Germany we host a panel quiz show with some of the luminaries of the web development world.
We befuddle and confuse Gert Franz, Aaron Benton, Andrew Jackson and Kai Konig with loads of questions about CFML and Web development.

Enjoy the show!
Oct 30, 201748:02
006 - Conference Call
Sep 12, 201701:08:11
005 - Open Saucy?
Aug 04, 201701:17:05
004 - On the job
Jun 21, 201701:00:12
003 - What makes a good developer?

003 - What makes a good developer?

Hello from the internet! In this episode Mark Drew and Rob Dudley talk about what makes a good developer! From estimations to code comments, from water to tomatoes. And everything in between. Show Notes: Pragmatic Programmer: https://www.amazon.co.uk/Pragmatic-Programmer-Andrew-Hunt/dp/020161622X/ref=sr_1_1?ie=UTF8&qid=1493891782&sr=8-1&keywords=pragmatic+programmer Clean Code: https://www.amazon.co.uk/Clean-Code-Handbook-Software-Craftsmanship/dp/0132350882/ref=sr_1_3?ie=UTF8&qid=1493891812&sr=8-3&keywords=Code+Complete Clean Coder: https://www.amazon.co.uk/Clean-Coder-Conduct-Professional-Programmers/dp/0137081073/ref=pd_bxgy_14_img_2?_encoding=UTF8&psc=1&refRID=W4NC7AEXBNR51PWHN7VG The Pomodoro Technique: https://cirillocompany.de/pages/pomodoro-technique
May 04, 201701:04:01
A question for our listeners: What do you think makes a good developer?
Mar 22, 201700:38
002 - CI: Continuously Integrating?

002 - CI: Continuously Integrating?

Hello from the Internet! In this episode we delve into the depths of CI. How we do it, why we do it and how it other people do it. Mark makes bad puns and Rob clarifies that it isn’t Magnum PI and there are no Ferrari’s mentioned at all. Show notes: Jenkins https://jenkins.io/ Cloudy With a Chance of Tests https://github.com/mhenke/Cloudy-With-A-Chance-Of-Tests The Quantum of Deployment https://codeascraft.com/2010/05/20/quantum-of-deployment/ Facebook BitTorrent Deployments https://arstechnica.com/business/2012/04/exclusive-a-behind-the-scenes-look-at-facebook-release-engineering/ DeployBot https://deploybot.com/ Black Box Thinking https://www.amazon.co.uk/Black-Box-Thinking-Marginal-Performance/dp/1473613809/ref=sr_1_1?ie=UTF8&qid=1488107476&sr=8-1&keywords=Black+Box+Thinking Sean Corfield https://twitter.com/seancorfield CI Traffic Light Build Status https://isotope11.com/blog/monitoring-your-continuous-integration-server-with-traffic-lights-and-an-arduino Catlight Status Notification https://catlight.io/ Hubot by Github https://github.com/github/hubot Philips Hue Light Jenkins Plugin https://wiki.jenkins-ci.org/display/JENKINS/hue-light+Plugin Drone CI https://github.com/drone/drone Webpack https://webpack.github.io/ Yak Shaving http://whatis.techtarget.com/definition/yak-shaving Docker Secrets Management https://blog.docker.com/2017/02/docker-secrets-management Kubernetes https://kubernetes.io/ SorryApp https://www.sorryapp.com/ Rate Us on iTunes https://itunes.apple.com/gb/podcast/localhost-podcast/id1199981378?mt=2
Mar 06, 201701:00:03
001.2 - Develop Branch with Mark Mandel

001.2 - Develop Branch with Mark Mandel

Hello from the Internet!
In this special develop branch episode we talk to Mark Mandel from Google Cloud Services about Kubernetes, Containers and Gaming!
Feb 13, 201747:57
001 .1 - Develop Branch with Geoff Bowers

001 .1 - Develop Branch with Geoff Bowers

Hello from the Internet!
In this special develop branch episode of the Localhost podcast we have a chat with Geoff Bowers from Daemon Internet Consultants about Docker and how his company is using it.
Feb 06, 201757:44
001 - Dr Docker I Presume?

001 - Dr Docker I Presume?

Hello from the Internet! We are your guides to various aspects of the lovely world of web development!
Every month we shall get together, and discuss an aspect of web development. WE shall try to unwrap the subject using questions sent by YOU the listener.

This month, we are talking about Docker!
Jan 27, 201750:24