<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" encoding="UTF-8" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/" xmlns:atom="http://www.w3.org/2005/Atom/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:googleplay="http://www.google.com/schemas/play-podcasts/1.0" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:fireside="http://fireside.fm/modules/rss/fireside">
  <channel>
    <fireside:hostname>web01.fireside.fm</fireside:hostname>
    <fireside:genDate>Sat, 23 May 2026 16:57:52 -0500</fireside:genDate>
    <generator>Fireside (https://fireside.fm)</generator>
    <title>Thinking Elixir Podcast - Episodes Tagged with “Best Practices”</title>
    <link>https://podcast.thinkingelixir.com/tags/best%20practices</link>
    <pubDate>Tue, 17 Oct 2023 04:15:00 -0600</pubDate>
    <description>The Thinking Elixir podcast is a weekly show where we talk about the Elixir programming language and the community around it. We cover news and interview guests to learn more about projects and developments in the community.
Whether you are already experienced with Elixir or just exploring the language, this show is created with you in mind. We discuss community news, Functional Programming, transitioning from OOP, coding conventions, and more.
Guests visit the show to help challenge our assumptions, learn about new developments and grow in the process.
Subscribe to join us on this journey!
</description>
    <language>en-us</language>
    <itunes:type>episodic</itunes:type>
    <itunes:subtitle>News and interviews for the Elixir community</itunes:subtitle>
    <itunes:author>ThinkingElixir.com</itunes:author>
    <itunes:summary>The Thinking Elixir podcast is a weekly show where we talk about the Elixir programming language and the community around it. We cover news and interview guests to learn more about projects and developments in the community.
Whether you are already experienced with Elixir or just exploring the language, this show is created with you in mind. We discuss community news, Functional Programming, transitioning from OOP, coding conventions, and more.
Guests visit the show to help challenge our assumptions, learn about new developments and grow in the process.
Subscribe to join us on this journey!
</itunes:summary>
    <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/8/811c9756-babe-40ac-8c25-b3bb24e522e0/cover.jpg?v=2"/>
    <itunes:explicit>no</itunes:explicit>
    <itunes:keywords>elixir, programming, web, clustering, phoenix, liveview, news, developer</itunes:keywords>
    <itunes:owner>
      <itunes:name>ThinkingElixir.com</itunes:name>
      <itunes:email>podcast@thinkingelixir.com</itunes:email>
    </itunes:owner>
<itunes:category text="Education">
  <itunes:category text="How To"/>
</itunes:category>
<itunes:category text="News">
  <itunes:category text="Tech News"/>
</itunes:category>
<itunes:category text="Technology"/>
<item>
  <title>173: Web App Security Best Practices and Sobelow</title>
  <link>https://podcast.thinkingelixir.com/173</link>
  <guid isPermaLink="false">f1cd648d-8b6e-4a39-8fd2-b546c718c80d</guid>
  <pubDate>Tue, 17 Oct 2023 04:15:00 -0600</pubDate>
  <author>ThinkingElixir.com</author>
  <enclosure url="https://aphid.fireside.fm/d/1437767933/811c9756-babe-40ac-8c25-b3bb24e522e0/f1cd648d-8b6e-4a39-8fd2-b546c718c80d.mp3" length="34467840" type="audio/mpeg"/>
  <itunes:episodeType>full</itunes:episodeType>
  <itunes:author>ThinkingElixir.com</itunes:author>
  <itunes:subtitle>We're joined by Michael Lubas of Paraxial.io as we delve into cybersecurity! We talk about the EEF's Web Application Security Best Practices guide. We show  Sobelow some deserved love as it helps all Elixir web apps and much more!</itunes:subtitle>
  <itunes:duration>47:26</itunes:duration>
  <itunes:explicit>no</itunes:explicit>
  <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/8/811c9756-babe-40ac-8c25-b3bb24e522e0/cover.jpg?v=2"/>
  <description>&lt;p&gt;We delve into the tricky world of cybersecurity with our guest, Michael Lubas. We touch on the widely-discussed 23andMe data breach, discussing what went wrong and how it applies to Elixir apps. A significant part of our talk is centered around the informative guide by the EEF Security Working Group called “Web Application Security Best Practices for BEAM languages.” An essential tool featured in our discussion is Sobelow, a security-focused static code analysis tool invaluable in warding off potential security breaches. We wrap up the conversation by discussing the practical application of these tools, using Paraxial.io's vulnerable-by-design “Potion Shop” app as a case study to run Sobelow and practice fixing issues. Join us for an enlightening discussion packed full of important insights!&lt;/p&gt;

&lt;p&gt;Show Notes online - &lt;a href="http://podcast.thinkingelixir.com/173" target="_blank" rel="nofollow noopener"&gt;http://podcast.thinkingelixir.com/173&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Elixir Community News&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://github.com/phoenixframework/phoenix_live_view/pull/2845?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://github.com/phoenixframework/phoenix_live_view/pull/2845&lt;/a&gt; – Information on the upcoming LiveView that speeds up client DOM patching 5x.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/chris_mccord/status/1709681327019086044?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/chris_mccord/status/1709681327019086044&lt;/a&gt; – The post to further explain the upcoming LiveView.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/josevalim/status/1709841186972705033?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/josevalim/status/1709841186972705033&lt;/a&gt; – José Valim's clarification on how LiveView's 5x DOM patching works.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/wojtekmach/status/1709675064944144605?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/wojtekmach/status/1709675064944144605&lt;/a&gt; – Teaser about a cool new Req feature by Wojtek Mach.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/wojtekmach/status/1710053454217887970?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/wojtekmach/status/1710053454217887970&lt;/a&gt; – Release note for Req v0.3.12 and v0.4.4 and encouragement to upgrade.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/Tangui/status/1709645048906748378?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/Tangui/status/1709645048906748378&lt;/a&gt; – Announcement of a new HTTP Caching library called http_cache.&lt;/li&gt;
&lt;li&gt;
&lt;a href="http://svground.fr/blog/posts/introducing-http-cache/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;http://svground.fr/blog/posts/introducing-http-cache/&lt;/a&gt; – Blog post that accompanies the release of the new HTTP Caching library.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://github.com/tanguilp/plug_http_cache?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://github.com/tanguilp/plug_http_cache&lt;/a&gt; – plug_http_cache - An Elixir plug that caches HTTP responses.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://github.com/tanguilp/tesla_http_cache?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://github.com/tanguilp/tesla_http_cache&lt;/a&gt; – tesla_http_cache - HTTP caching Tesla middleware.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://news.livebook.dev/remote-execution-smart-cell---launch-week-2---day-1-m3dv2?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://news.livebook.dev/remote-execution-smart-cell---launch-week-2---day-1-m3dv2&lt;/a&gt; – Post about Day 1 of Livebook's launch week with information on the new feature.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/thmsmlr/status/1709309268183367901?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/thmsmlr/status/1709309268183367901&lt;/a&gt; – Announcement of Livebook Copilot by Thomas Millar.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://github.com/thmsmlr/kino_copilot?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://github.com/thmsmlr/kino_copilot&lt;/a&gt; – kino_copilot - Livebook SmartCell that refactors code, generates SQL for data analysis, writes documentation, and generates dashboards.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/hugobarauna/status/1709631824555573554?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/hugobarauna/status/1709631824555573554&lt;/a&gt; – Demonstration of Livebook voice transcription by Hugo Baraúna.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://github.com/brainlid/langchain_demo?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://github.com/brainlid/langchain_demo&lt;/a&gt; – LangChain Demo project that includes an example of an Agent.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://fly.io/phoenix-files/created-my-personal-ai-fitness-trainer-in-2-days/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://fly.io/phoenix-files/created-my-personal-ai-fitness-trainer-in-2-days/&lt;/a&gt; – Blog post - Created my Personal AI Fitness Trainer in 2 Days&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.youtube.com/watch?v=AsfQNtoaB1M?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://www.youtube.com/watch?v=AsfQNtoaB1M&lt;/a&gt; – YouTube video overview for AI Personal Fitness Trainer with demo&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://spawnfest.org/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://spawnfest.org/&lt;/a&gt; – Information on SpawnFest, a 48-hour online software development contest.&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://codebeameurope.com/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://codebeameurope.com/&lt;/a&gt; – Information on CodeBEAM Europe event.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Do you have some Elixir news to share? Tell us at &lt;a href="https://twitter.com/ThinkingElixir" target="_blank" rel="nofollow noopener"&gt;@ThinkingElixir&lt;/a&gt; or email at &lt;a href="mailto:show@thinkingelixir.com" target="_blank" rel="nofollow noopener"&gt;show@thinkingelixir.com&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Discussion Resources&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://www.wired.com/story/23andme-credential-stuffing-data-stolen/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://www.wired.com/story/23andme-credential-stuffing-data-stolen/&lt;/a&gt; – 23andMe breach&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://erlef.github.io/security-wg/web_app_security_best_practices_beam/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://erlef.github.io/security-wg/web_app_security_best_practices_beam/&lt;/a&gt; – Web Application Security Best Practices for BEAM languages - a guide from the EEF Security Working Group&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://paraxial.io/blog/real-sobelow?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://paraxial.io/blog/real-sobelow&lt;/a&gt; – Elixir Security - Real World Sobelow&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://podcast.thinkingelixir.com/148?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://podcast.thinkingelixir.com/148&lt;/a&gt; – Security Scanning our Apps with Sobelow&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.ftc.gov/enforcement/refunds/equifax-data-breach-settlement?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://www.ftc.gov/enforcement/refunds/equifax-data-breach-settlement&lt;/a&gt; – Why use Sobelow? The Equifax breach, $425 million penalty, was a remote code execution (RCE) vulnerability&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://paraxial.io/blog/elixir-rce?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://paraxial.io/blog/elixir-rce&lt;/a&gt; – Understanding remote code execution (RCE) attacks in Elixir&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://paraxial.io/blog/potion-shop?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://paraxial.io/blog/potion-shop&lt;/a&gt; – Potion Shop&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.meetup.com/new-york-city-elixir/events/296705817/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://www.meetup.com/new-york-city-elixir/events/296705817/&lt;/a&gt; – The NYC Elixir meetup&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.meetup.com/denver-erlang-elixir/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://www.meetup.com/denver-erlang-elixir/&lt;/a&gt; – Denver Elixir meetup&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Guest Information&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;a href="https://twitter.com/paraxialio?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://twitter.com/paraxialio&lt;/a&gt; – on Twitter&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://github.com/paraxialio/?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://github.com/paraxialio/&lt;/a&gt; – on Github&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://genserver.social/paraxial?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://genserver.social/paraxial&lt;/a&gt; – on Fediverse&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://paraxial.io/blog/index?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://paraxial.io/blog/index&lt;/a&gt; – Blog&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.linkedin.com/company/paraxial-io?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://www.linkedin.com/company/paraxial-io&lt;/a&gt; – LinkedIn&lt;/li&gt;
&lt;li&gt;
&lt;a href="https://www.youtube.com/@paraxial5874?utm_source=thinkingelixir&amp;amp;utm_medium=shownotes" target="_blank" rel="nofollow noopener"&gt;https://www.youtube.com/@paraxial5874&lt;/a&gt; – Paraxial YouTube channel&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Find us online&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Message the show - &lt;a href="https://twitter.com/ThinkingElixir" target="_blank" rel="nofollow noopener"&gt;@ThinkingElixir&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Message the show on Fediverse - &lt;a href="https://genserver.social/ThinkingElixir" target="_blank" rel="nofollow noopener"&gt;@ThinkingElixir@genserver.social&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Email the show - &lt;a href="mailto:show@thinkingelixir.com" target="_blank" rel="nofollow noopener"&gt;show@thinkingelixir.com&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Mark Ericksen - &lt;a href="https://twitter.com/brainlid" target="_blank" rel="nofollow noopener"&gt;@brainlid&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Mark Ericksen on Fediverse - &lt;a href="https://genserver.social/brainlid" target="_blank" rel="nofollow noopener"&gt;@brainlid@genserver.social&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;David Bernheisel - &lt;a href="https://twitter.com/bernheisel" target="_blank" rel="nofollow noopener"&gt;@bernheisel&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;David Bernheisel on Fediverse - &lt;a href="https://genserver.social/dbern" target="_blank" rel="nofollow noopener"&gt;@dbern@genserver.social&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Cade Ward - &lt;a href="https://twitter.com/cadebward" target="_blank" rel="nofollow noopener"&gt;@cadebward&lt;/a&gt;
&lt;/li&gt;
&lt;li&gt;Cade Ward on Fediverse - &lt;a href="https://genserver.social/cadebward" target="_blank" rel="nofollow noopener"&gt;@cadebward@genserver.social&lt;/a&gt; &lt;/li&gt;
&lt;/ul&gt;
</description>
  <itunes:keywords>elixir, security, sobelow, best practices</itunes:keywords>
  <content:encoded>
    <![CDATA[<p>We delve into the tricky world of cybersecurity with our guest, Michael Lubas. We touch on the widely-discussed 23andMe data breach, discussing what went wrong and how it applies to Elixir apps. A significant part of our talk is centered around the informative guide by the EEF Security Working Group called “Web Application Security Best Practices for BEAM languages.” An essential tool featured in our discussion is Sobelow, a security-focused static code analysis tool invaluable in warding off potential security breaches. We wrap up the conversation by discussing the practical application of these tools, using Paraxial.io&#39;s vulnerable-by-design “Potion Shop” app as a case study to run Sobelow and practice fixing issues. Join us for an enlightening discussion packed full of important insights!</p>

<p>Show Notes online - <a href="http://podcast.thinkingelixir.com/173" rel="nofollow">http://podcast.thinkingelixir.com/173</a></p>

<p><strong>Elixir Community News</strong></p>

<ul>
<li><a href="https://github.com/phoenixframework/phoenix_live_view/pull/2845?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/phoenixframework/phoenix_live_view/pull/2845</a> – Information on the upcoming LiveView that speeds up client DOM patching 5x.</li>
<li><a href="https://twitter.com/chris_mccord/status/1709681327019086044?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/chris_mccord/status/1709681327019086044</a> – The post to further explain the upcoming LiveView.</li>
<li><a href="https://twitter.com/josevalim/status/1709841186972705033?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/josevalim/status/1709841186972705033</a> – José Valim&#39;s clarification on how LiveView&#39;s 5x DOM patching works.</li>
<li><a href="https://twitter.com/wojtekmach/status/1709675064944144605?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/wojtekmach/status/1709675064944144605</a> – Teaser about a cool new Req feature by Wojtek Mach.</li>
<li><a href="https://twitter.com/wojtekmach/status/1710053454217887970?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/wojtekmach/status/1710053454217887970</a> – Release note for Req v0.3.12 and v0.4.4 and encouragement to upgrade.</li>
<li><a href="https://twitter.com/Tangui/status/1709645048906748378?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/Tangui/status/1709645048906748378</a> – Announcement of a new HTTP Caching library called http_cache.</li>
<li><a href="http://svground.fr/blog/posts/introducing-http-cache/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">http://svground.fr/blog/posts/introducing-http-cache/</a> – Blog post that accompanies the release of the new HTTP Caching library.</li>
<li><a href="https://github.com/tanguilp/plug_http_cache?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/tanguilp/plug_http_cache</a> – plug_http_cache - An Elixir plug that caches HTTP responses.</li>
<li><a href="https://github.com/tanguilp/tesla_http_cache?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/tanguilp/tesla_http_cache</a> – tesla_http_cache - HTTP caching Tesla middleware.</li>
<li><a href="https://news.livebook.dev/remote-execution-smart-cell---launch-week-2---day-1-m3dv2?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://news.livebook.dev/remote-execution-smart-cell---launch-week-2---day-1-m3dv2</a> – Post about Day 1 of Livebook&#39;s launch week with information on the new feature.</li>
<li><a href="https://twitter.com/thmsmlr/status/1709309268183367901?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/thmsmlr/status/1709309268183367901</a> – Announcement of Livebook Copilot by Thomas Millar.</li>
<li><a href="https://github.com/thmsmlr/kino_copilot?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/thmsmlr/kino_copilot</a> – kino_copilot - Livebook SmartCell that refactors code, generates SQL for data analysis, writes documentation, and generates dashboards.</li>
<li><a href="https://twitter.com/hugobarauna/status/1709631824555573554?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/hugobarauna/status/1709631824555573554</a> – Demonstration of Livebook voice transcription by Hugo Baraúna.</li>
<li><a href="https://github.com/brainlid/langchain_demo?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/brainlid/langchain_demo</a> – LangChain Demo project that includes an example of an Agent.</li>
<li><a href="https://fly.io/phoenix-files/created-my-personal-ai-fitness-trainer-in-2-days/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://fly.io/phoenix-files/created-my-personal-ai-fitness-trainer-in-2-days/</a> – Blog post - Created my Personal AI Fitness Trainer in 2 Days</li>
<li><a href="https://www.youtube.com/watch?v=AsfQNtoaB1M?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.youtube.com/watch?v=AsfQNtoaB1M</a> – YouTube video overview for AI Personal Fitness Trainer with demo</li>
<li><a href="https://spawnfest.org/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://spawnfest.org/</a> – Information on SpawnFest, a 48-hour online software development contest.</li>
<li><a href="https://codebeameurope.com/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://codebeameurope.com/</a> – Information on CodeBEAM Europe event.</li>
</ul>

<p>Do you have some Elixir news to share? Tell us at <a href="https://twitter.com/ThinkingElixir" rel="nofollow">@ThinkingElixir</a> or email at <a href="mailto:show@thinkingelixir.com" rel="nofollow">show@thinkingelixir.com</a></p>

<p><strong>Discussion Resources</strong></p>

<ul>
<li><a href="https://www.wired.com/story/23andme-credential-stuffing-data-stolen/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.wired.com/story/23andme-credential-stuffing-data-stolen/</a> – 23andMe breach</li>
<li><a href="https://erlef.github.io/security-wg/web_app_security_best_practices_beam/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://erlef.github.io/security-wg/web_app_security_best_practices_beam/</a> – Web Application Security Best Practices for BEAM languages - a guide from the EEF Security Working Group</li>
<li><a href="https://paraxial.io/blog/real-sobelow?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/real-sobelow</a> – Elixir Security - Real World Sobelow</li>
<li><a href="https://podcast.thinkingelixir.com/148?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://podcast.thinkingelixir.com/148</a> – Security Scanning our Apps with Sobelow</li>
<li><a href="https://www.ftc.gov/enforcement/refunds/equifax-data-breach-settlement?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.ftc.gov/enforcement/refunds/equifax-data-breach-settlement</a> – Why use Sobelow? The Equifax breach, $425 million penalty, was a remote code execution (RCE) vulnerability</li>
<li><a href="https://paraxial.io/blog/elixir-rce?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/elixir-rce</a> – Understanding remote code execution (RCE) attacks in Elixir</li>
<li><a href="https://paraxial.io/blog/potion-shop?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/potion-shop</a> – Potion Shop</li>
<li><a href="https://www.meetup.com/new-york-city-elixir/events/296705817/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.meetup.com/new-york-city-elixir/events/296705817/</a> – The NYC Elixir meetup</li>
<li><a href="https://www.meetup.com/denver-erlang-elixir/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.meetup.com/denver-erlang-elixir/</a> – Denver Elixir meetup</li>
</ul>

<p><strong>Guest Information</strong></p>

<ul>
<li><a href="https://twitter.com/paraxialio?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/paraxialio</a> – on Twitter</li>
<li><a href="https://github.com/paraxialio/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/paraxialio/</a> – on Github</li>
<li><a href="https://genserver.social/paraxial?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://genserver.social/paraxial</a> – on Fediverse</li>
<li><a href="https://paraxial.io/blog/index?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/index</a> – Blog</li>
<li><a href="https://www.linkedin.com/company/paraxial-io?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.linkedin.com/company/paraxial-io</a> – LinkedIn</li>
<li><a href="https://www.youtube.com/@paraxial5874?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.youtube.com/@paraxial5874</a> – Paraxial YouTube channel</li>
</ul>

<p><strong>Find us online</strong></p>

<ul>
<li>Message the show - <a href="https://twitter.com/ThinkingElixir" rel="nofollow">@ThinkingElixir</a></li>
<li>Message the show on Fediverse - <a href="https://genserver.social/ThinkingElixir" rel="nofollow">@ThinkingElixir@genserver.social</a></li>
<li>Email the show - <a href="mailto:show@thinkingelixir.com" rel="nofollow">show@thinkingelixir.com</a></li>
<li>Mark Ericksen - <a href="https://twitter.com/brainlid" rel="nofollow">@brainlid</a></li>
<li>Mark Ericksen on Fediverse - <a href="https://genserver.social/brainlid" rel="nofollow">@brainlid@genserver.social</a></li>
<li>David Bernheisel - <a href="https://twitter.com/bernheisel" rel="nofollow">@bernheisel</a></li>
<li>David Bernheisel on Fediverse - <a href="https://genserver.social/dbern" rel="nofollow">@dbern@genserver.social</a></li>
<li>Cade Ward - <a href="https://twitter.com/cadebward" rel="nofollow">@cadebward</a></li>
<li>Cade Ward on Fediverse - <a href="https://genserver.social/cadebward" rel="nofollow">@cadebward@genserver.social</a></li>
</ul><p>Sponsored By:</p><ul><li><a rel="nofollow" href="https://fly.io">Fly.io</a>: <a rel="nofollow" href="https://fly.io">Fly.io is a great place to deploy your next Phoenix application! Check them out!</a></li></ul>]]>
  </content:encoded>
  <itunes:summary>
    <![CDATA[<p>We delve into the tricky world of cybersecurity with our guest, Michael Lubas. We touch on the widely-discussed 23andMe data breach, discussing what went wrong and how it applies to Elixir apps. A significant part of our talk is centered around the informative guide by the EEF Security Working Group called “Web Application Security Best Practices for BEAM languages.” An essential tool featured in our discussion is Sobelow, a security-focused static code analysis tool invaluable in warding off potential security breaches. We wrap up the conversation by discussing the practical application of these tools, using Paraxial.io&#39;s vulnerable-by-design “Potion Shop” app as a case study to run Sobelow and practice fixing issues. Join us for an enlightening discussion packed full of important insights!</p>

<p>Show Notes online - <a href="http://podcast.thinkingelixir.com/173" rel="nofollow">http://podcast.thinkingelixir.com/173</a></p>

<p><strong>Elixir Community News</strong></p>

<ul>
<li><a href="https://github.com/phoenixframework/phoenix_live_view/pull/2845?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/phoenixframework/phoenix_live_view/pull/2845</a> – Information on the upcoming LiveView that speeds up client DOM patching 5x.</li>
<li><a href="https://twitter.com/chris_mccord/status/1709681327019086044?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/chris_mccord/status/1709681327019086044</a> – The post to further explain the upcoming LiveView.</li>
<li><a href="https://twitter.com/josevalim/status/1709841186972705033?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/josevalim/status/1709841186972705033</a> – José Valim&#39;s clarification on how LiveView&#39;s 5x DOM patching works.</li>
<li><a href="https://twitter.com/wojtekmach/status/1709675064944144605?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/wojtekmach/status/1709675064944144605</a> – Teaser about a cool new Req feature by Wojtek Mach.</li>
<li><a href="https://twitter.com/wojtekmach/status/1710053454217887970?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/wojtekmach/status/1710053454217887970</a> – Release note for Req v0.3.12 and v0.4.4 and encouragement to upgrade.</li>
<li><a href="https://twitter.com/Tangui/status/1709645048906748378?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/Tangui/status/1709645048906748378</a> – Announcement of a new HTTP Caching library called http_cache.</li>
<li><a href="http://svground.fr/blog/posts/introducing-http-cache/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">http://svground.fr/blog/posts/introducing-http-cache/</a> – Blog post that accompanies the release of the new HTTP Caching library.</li>
<li><a href="https://github.com/tanguilp/plug_http_cache?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/tanguilp/plug_http_cache</a> – plug_http_cache - An Elixir plug that caches HTTP responses.</li>
<li><a href="https://github.com/tanguilp/tesla_http_cache?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/tanguilp/tesla_http_cache</a> – tesla_http_cache - HTTP caching Tesla middleware.</li>
<li><a href="https://news.livebook.dev/remote-execution-smart-cell---launch-week-2---day-1-m3dv2?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://news.livebook.dev/remote-execution-smart-cell---launch-week-2---day-1-m3dv2</a> – Post about Day 1 of Livebook&#39;s launch week with information on the new feature.</li>
<li><a href="https://twitter.com/thmsmlr/status/1709309268183367901?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/thmsmlr/status/1709309268183367901</a> – Announcement of Livebook Copilot by Thomas Millar.</li>
<li><a href="https://github.com/thmsmlr/kino_copilot?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/thmsmlr/kino_copilot</a> – kino_copilot - Livebook SmartCell that refactors code, generates SQL for data analysis, writes documentation, and generates dashboards.</li>
<li><a href="https://twitter.com/hugobarauna/status/1709631824555573554?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/hugobarauna/status/1709631824555573554</a> – Demonstration of Livebook voice transcription by Hugo Baraúna.</li>
<li><a href="https://github.com/brainlid/langchain_demo?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/brainlid/langchain_demo</a> – LangChain Demo project that includes an example of an Agent.</li>
<li><a href="https://fly.io/phoenix-files/created-my-personal-ai-fitness-trainer-in-2-days/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://fly.io/phoenix-files/created-my-personal-ai-fitness-trainer-in-2-days/</a> – Blog post - Created my Personal AI Fitness Trainer in 2 Days</li>
<li><a href="https://www.youtube.com/watch?v=AsfQNtoaB1M?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.youtube.com/watch?v=AsfQNtoaB1M</a> – YouTube video overview for AI Personal Fitness Trainer with demo</li>
<li><a href="https://spawnfest.org/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://spawnfest.org/</a> – Information on SpawnFest, a 48-hour online software development contest.</li>
<li><a href="https://codebeameurope.com/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://codebeameurope.com/</a> – Information on CodeBEAM Europe event.</li>
</ul>

<p>Do you have some Elixir news to share? Tell us at <a href="https://twitter.com/ThinkingElixir" rel="nofollow">@ThinkingElixir</a> or email at <a href="mailto:show@thinkingelixir.com" rel="nofollow">show@thinkingelixir.com</a></p>

<p><strong>Discussion Resources</strong></p>

<ul>
<li><a href="https://www.wired.com/story/23andme-credential-stuffing-data-stolen/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.wired.com/story/23andme-credential-stuffing-data-stolen/</a> – 23andMe breach</li>
<li><a href="https://erlef.github.io/security-wg/web_app_security_best_practices_beam/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://erlef.github.io/security-wg/web_app_security_best_practices_beam/</a> – Web Application Security Best Practices for BEAM languages - a guide from the EEF Security Working Group</li>
<li><a href="https://paraxial.io/blog/real-sobelow?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/real-sobelow</a> – Elixir Security - Real World Sobelow</li>
<li><a href="https://podcast.thinkingelixir.com/148?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://podcast.thinkingelixir.com/148</a> – Security Scanning our Apps with Sobelow</li>
<li><a href="https://www.ftc.gov/enforcement/refunds/equifax-data-breach-settlement?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.ftc.gov/enforcement/refunds/equifax-data-breach-settlement</a> – Why use Sobelow? The Equifax breach, $425 million penalty, was a remote code execution (RCE) vulnerability</li>
<li><a href="https://paraxial.io/blog/elixir-rce?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/elixir-rce</a> – Understanding remote code execution (RCE) attacks in Elixir</li>
<li><a href="https://paraxial.io/blog/potion-shop?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/potion-shop</a> – Potion Shop</li>
<li><a href="https://www.meetup.com/new-york-city-elixir/events/296705817/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.meetup.com/new-york-city-elixir/events/296705817/</a> – The NYC Elixir meetup</li>
<li><a href="https://www.meetup.com/denver-erlang-elixir/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.meetup.com/denver-erlang-elixir/</a> – Denver Elixir meetup</li>
</ul>

<p><strong>Guest Information</strong></p>

<ul>
<li><a href="https://twitter.com/paraxialio?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://twitter.com/paraxialio</a> – on Twitter</li>
<li><a href="https://github.com/paraxialio/?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://github.com/paraxialio/</a> – on Github</li>
<li><a href="https://genserver.social/paraxial?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://genserver.social/paraxial</a> – on Fediverse</li>
<li><a href="https://paraxial.io/blog/index?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://paraxial.io/blog/index</a> – Blog</li>
<li><a href="https://www.linkedin.com/company/paraxial-io?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.linkedin.com/company/paraxial-io</a> – LinkedIn</li>
<li><a href="https://www.youtube.com/@paraxial5874?utm_source=thinkingelixir&utm_medium=shownotes" rel="nofollow">https://www.youtube.com/@paraxial5874</a> – Paraxial YouTube channel</li>
</ul>

<p><strong>Find us online</strong></p>

<ul>
<li>Message the show - <a href="https://twitter.com/ThinkingElixir" rel="nofollow">@ThinkingElixir</a></li>
<li>Message the show on Fediverse - <a href="https://genserver.social/ThinkingElixir" rel="nofollow">@ThinkingElixir@genserver.social</a></li>
<li>Email the show - <a href="mailto:show@thinkingelixir.com" rel="nofollow">show@thinkingelixir.com</a></li>
<li>Mark Ericksen - <a href="https://twitter.com/brainlid" rel="nofollow">@brainlid</a></li>
<li>Mark Ericksen on Fediverse - <a href="https://genserver.social/brainlid" rel="nofollow">@brainlid@genserver.social</a></li>
<li>David Bernheisel - <a href="https://twitter.com/bernheisel" rel="nofollow">@bernheisel</a></li>
<li>David Bernheisel on Fediverse - <a href="https://genserver.social/dbern" rel="nofollow">@dbern@genserver.social</a></li>
<li>Cade Ward - <a href="https://twitter.com/cadebward" rel="nofollow">@cadebward</a></li>
<li>Cade Ward on Fediverse - <a href="https://genserver.social/cadebward" rel="nofollow">@cadebward@genserver.social</a></li>
</ul><p>Sponsored By:</p><ul><li><a rel="nofollow" href="https://fly.io">Fly.io</a>: <a rel="nofollow" href="https://fly.io">Fly.io is a great place to deploy your next Phoenix application! Check them out!</a></li></ul>]]>
  </itunes:summary>
</item>
  </channel>
</rss>
