Five minutes into this javascript exploit video, you’ll understand why that massive stack of node modules in your app is BAD. Nicely done.
And… 14 minutes in and he hits Moment.js… which is everywhere… with a straightforward tough-to-solve regex DDOS hack.
Then mongoose… then…
Diamond dependencies are everywhere, from dll dependency hell to running an upgradable linux distro to your node stack to figuring out your #include order. Check out Titus’s perspective, it’s pretty tight.
Read the title. Believe it.
Cygwin can do the backflips to get sshd running properly and enable you to treat a Windoze shitbox as an actual ssh-able shell. Just do it and don’t look back.
