In a recent stream with Manfred Steyer, Martina Kraus demonstrated live-hacking techniques, something that is rarely showcased in talks or video content. The session highlighted how effortlessly tokens can be retrieved from local storage, how cookie security settings can be configured, and other potential vulnerabilities that developers often ignore. Martina is a recognized personality in the Angular ecosystem and a member of OWASP—an organization widely known for publishing the top ten lists of prevalent security risks.
Live-Hacking
A video stream featuring Martina Kraus and Manfred Steyer recently aired, where Kraus showcased attacks on the fly—a format that is uncommon in typical conference talks or pre-recorded tutorials.
As an OWASP member and a prominent voice in the Angular community, Kraus walked through scenarios illustrating how straightforward it is to compromise tokens stored in local storage, adjust settings for securing cookies, and other security gaps that may go unnoticed by developers. For context, OWASP is the organization responsible for the widely referenced top ten lists of common security vulnerabilities.
Nx Powerpack
Nx, the widely used alternative to the Angular CLI, has launched a new commercial offering known as Powerpack. This product brings several capabilities to the table, including Codeowners for restricting access at the folder or project level, conformance checks for enforcing rules, and the ability to self-host your cache storage.
The introduction of the self-hosted cache storage sparked discussion across social media channels. Caching is a cornerstone feature of Nx since it allows builds to be reused across teams and CI pipelines. In the past, this functionality was available through paid Nx Cloud services, but some private APIs enabled developers to set up their own free cloud storage. Those APIs have since been discontinued, and the only way to achieve self-hosted cache storage now is through Powerpack.
nx.dev