<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" encoding="UTF-8" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/" xmlns:atom="http://www.w3.org/2005/Atom/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:googleplay="http://www.google.com/schemas/play-podcasts/1.0" xmlns:itunes="http://www.itunes.com/dtds/podcast-1.0.dtd" xmlns:fireside="http://fireside.fm/modules/rss/fireside">
  <channel>
    <fireside:hostname>web02.fireside.fm</fireside:hostname>
    <fireside:genDate>Wed, 17 Jun 2026 06:33:38 -0500</fireside:genDate>
    <generator>Fireside (https://fireside.fm)</generator>
    <title>Thinking Elixir Podcast - Episodes Tagged with “Xss”</title>
    <link>https://podcast.thinkingelixir.com/tags/xss</link>
    <pubDate>Tue, 27 Dec 2022 04:15:00 -0700</pubDate>
    <description>The Thinking Elixir podcast is a weekly show where we talk about the Elixir programming language and the community around it. We cover news and interview guests to learn more about projects and developments in the community. Whether you are already experienced with Elixir or just exploring the language, this show is created with you in mind. We discuss community news, Functional Programming, transitioning from OOP, coding conventions, and more. Guests visit the show to help challenge our assumptions, learn about new developments and grow in the process. Subscribe to join us on this journey!</description>
    <language>en-us</language>
    <itunes:type>episodic</itunes:type>
    <itunes:subtitle>News and interviews for the Elixir community</itunes:subtitle>
    <itunes:author>ThinkingElixir.com</itunes:author>
    <itunes:summary>The Thinking Elixir podcast is a weekly show where we talk about the Elixir programming language and the community around it. We cover news and interview guests to learn more about projects and developments in the community. Whether you are already experienced with Elixir or just exploring the language, this show is created with you in mind. We discuss community news, Functional Programming, transitioning from OOP, coding conventions, and more. Guests visit the show to help challenge our assumptions, learn about new developments and grow in the process. Subscribe to join us on this journey!</itunes:summary>
    <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/8/811c9756-babe-40ac-8c25-b3bb24e522e0/cover.jpg?v=2"/>
    <itunes:explicit>no</itunes:explicit>
    <itunes:keywords>elixir, programming, web, clustering, phoenix, liveview, news, developer</itunes:keywords>
    <itunes:owner>
      <itunes:name>ThinkingElixir.com</itunes:name>
      <itunes:email>podcast@thinkingelixir.com</itunes:email>
    </itunes:owner>
<itunes:category text="Education">
  <itunes:category text="How To"/>
</itunes:category>
<itunes:category text="News">
  <itunes:category text="Tech News"/>
</itunes:category>
<itunes:category text="Technology"/>
<item>
  <title>131: Start Securing Elixir and Phoenix</title>
  <link>https://podcast.thinkingelixir.com/131</link>
  <guid isPermaLink="false">73a9ff58-9f27-42f7-aab9-7d369e3f2705</guid>
  <pubDate>Tue, 27 Dec 2022 04:15:00 -0700</pubDate>
  <author>ThinkingElixir.com</author>
  <enclosure url="https://aphid.fireside.fm/d/1437767933/811c9756-babe-40ac-8c25-b3bb24e522e0/73a9ff58-9f27-42f7-aab9-7d369e3f2705.mp3" length="27815936" type="audio/mpeg"/>
  <itunes:episodeType>full</itunes:episodeType>
  <itunes:author>ThinkingElixir.com</itunes:author>
  <itunes:subtitle>We met up again with Michael Lubas to discuss some lesser known community security resources and helpful tips to get us started with securing our Elixir and Phoenix applications!</itunes:subtitle>
  <itunes:duration>38:12</itunes:duration>
  <itunes:explicit>no</itunes:explicit>
  <itunes:image href="https://media24.fireside.fm/file/fireside-images-2024/podcasts/images/8/811c9756-babe-40ac-8c25-b3bb24e522e0/cover.jpg?v=2"/>
  <description>&lt;p&gt;Securing our apps is our responsibility as developers. We are the custodians and the guardians of our user's data. We met up again with Michael Lubas to discuss some lesser known community security resources and helpful tips to get us started with securing our Elixir and Phoenix applications!&lt;/p&gt;

&lt;p&gt;Show Notes online - &lt;a href="http://podcast.thinkingelixir.com/131" rel="nofollow noopener"&gt;http://podcast.thinkingelixir.com/131&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Elixir Community News&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://erlangforums.com/t/otp-25-2-released/2166" rel="nofollow noopener"&gt;https://erlangforums.com/t/otp-25-2-released/2166&lt;/a&gt; – Erlang/OTP 25.2 is the second maintenance patch package for OTP 25, with mostly bug fixes as well as improvements.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/livebookdev/status/1603787699458113539" rel="nofollow noopener"&gt;https://twitter.com/livebookdev/status/1603787699458113539&lt;/a&gt; – HuggingFace announced “spaces”, a feature that lets people run Docker images on HuggingFace.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://huggingface.co/spaces/livebook-dev/single_file_phx_bumblebee_ml" rel="nofollow noopener"&gt;https://huggingface.co/spaces/livebook-dev/single_file_phx_bumblebee_ml&lt;/a&gt; – Elixir Phoenix was specifically shown as a Docker example on HuggingFace&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/sean_moriarity/status/1602817446875992066" rel="nofollow noopener"&gt;https://twitter.com/sean_moriarity/status/1602817446875992066&lt;/a&gt; – Sean Moriarity added “negative prompts” feature to Nx's Stable Diffusion support.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/elixir-nx/bumblebee/pull/109" rel="nofollow noopener"&gt;https://github.com/elixir-nx/bumblebee/pull/109&lt;/a&gt; – PR adding "negative prompt" support&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/miruoss/status/1604849993130676225" rel="nofollow noopener"&gt;https://twitter.com/miruoss/status/1604849993130676225&lt;/a&gt; – Michael Ruoss has a new Kino plugin for working with kubernetes pods&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/mruoss/kino_k8s_term" rel="nofollow noopener"&gt;https://github.com/mruoss/kino_k8s_term&lt;/a&gt; – KinoK8sTerm&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/livebookdev/status/1603391808209391617" rel="nofollow noopener"&gt;https://twitter.com/livebookdev/status/1603391808209391617&lt;/a&gt; – Livebook added two new neural network tasks to Bumblebee integration.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/hanrelan/status/1603470678081929216" rel="nofollow noopener"&gt;https://twitter.com/hanrelan/status/1603470678081929216&lt;/a&gt; – Customized Livebook Stable Diffusion shows intermediate steps when generating images.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://blog.ftes.de/elixir-dijkstras-algorithm-with-priority-queue-f6022d710877" rel="nofollow noopener"&gt;https://blog.ftes.de/elixir-dijkstras-algorithm-with-priority-queue-f6022d710877&lt;/a&gt; – Fredrik Teschke wrote a blogpost using Livebook to visualize Dijkstra's algorithm for finding the shortest path between nodes in a graph.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://notes.club/" rel="nofollow noopener"&gt;https://notes.club/&lt;/a&gt; – Notesclub is a website by Hec Perez that makes it easy to share and discover Livebook notebooks online.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/louispilfold/status/1602740866602631170" rel="nofollow noopener"&gt;https://twitter.com/louispilfold/status/1602740866602631170&lt;/a&gt; – Louis Pilfold announced his last full day at Nomio. He is now working full time on Gleam.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/louispilfold/status/1600960290455113728" rel="nofollow noopener"&gt;https://twitter.com/louispilfold/status/1600960290455113728&lt;/a&gt; – Louis Pilfold shared that Bumblebee, Nx and Axon work in Gleam thanks to Gleam's new Elixir support.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://twitter.com/kipcole9/status/1604929772253229057" rel="nofollow noopener"&gt;https://twitter.com/kipcole9/status/1604929772253229057&lt;/a&gt; – Kip Cole has a library called Image. He added &lt;code&gt;Image.Classification.classify(image)&lt;/code&gt; using Bumblebee.&lt;/li&gt;
&lt;li&gt;&lt;a href="https://sessionize.com/code-beam-lite-stockholm-2023" rel="nofollow noopener"&gt;https://sessionize.com/code-beam-lite-stockholm-2023&lt;/a&gt; – Code BEAM Lite Stockholm 2023, 12 May 2023, Stockholm, Sweden. Call for speakers is open until Feb 5th 2023.&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;Do you have some Elixir news to share? Tell us at &lt;a href="https://twitter.com/ThinkingElixir" rel="nofollow noopener"&gt;@ThinkingElixir&lt;/a&gt; or email at &lt;a href="mailto:show@thinkingelixir.com" rel="nofollow noopener"&gt;show@thinkingelixir.com&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Discussion Resources&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://paraxial.io" rel="nofollow noopener"&gt;https://paraxial.io&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://paraxial.io/blog/securing-elixir" rel="nofollow noopener"&gt;https://paraxial.io/blog/securing-elixir&lt;/a&gt; – Securing Elixir/Phoenix Applications - 5 Tips to Get Started&lt;/li&gt;
&lt;li&gt;&lt;a href="https://paraxial.io/blog/xss-phoenix" rel="nofollow noopener"&gt;https://paraxial.io/blog/xss-phoenix&lt;/a&gt; – Cross Site Scripting (XSS) Patterns in Phoenix&lt;/li&gt;
&lt;li&gt;&lt;a href="https://podcast.thinkingelixir.com/93" rel="nofollow noopener"&gt;https://podcast.thinkingelixir.com/93&lt;/a&gt; – Previous interview with Michael&lt;/li&gt;
&lt;li&gt;&lt;a href="https://www.youtube.com/watch?v=w3lKmFsmlvQ" rel="nofollow noopener"&gt;https://www.youtube.com/watch?v=w3lKmFsmlvQ&lt;/a&gt; – ElixirConf 2017 - Plugging the Security Holes in Your Phoenix Application - Griffin Byatt&lt;/li&gt;
&lt;li&gt;&lt;a href="https://felt.com/blog/rate-limiting" rel="nofollow noopener"&gt;https://felt.com/blog/rate-limiting&lt;/a&gt; – Rate Limiting Algorithms for Client-Facing Web Apps by Tyler Young&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/podium/elixir-secure-coding" rel="nofollow noopener"&gt;https://github.com/podium/elixir-secure-coding&lt;/a&gt; – Elixir Secure Coding Training (ESCT) that runs in Livebook&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/rrrene/html_sanitize_ex" rel="nofollow noopener"&gt;https://github.com/rrrene/html_sanitize_ex&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://fly.io/phoenix-files/github-actions-for-elixir-ci/" rel="nofollow noopener"&gt;https://fly.io/phoenix-files/github-actions-for-elixir-ci/&lt;/a&gt; – Blog post about Elixir CI/CD checks&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/mirego/mix_audit" rel="nofollow noopener"&gt;https://github.com/mirego/mix_audit&lt;/a&gt; – mix_audit&lt;/li&gt;
&lt;li&gt;&lt;a href="https://hexdocs.pm/mix/Mix.Tasks.Deps.Unlock.html" rel="nofollow noopener"&gt;https://hexdocs.pm/mix/Mix.Tasks.Deps.Unlock.html&lt;/a&gt; – mix hex.audit&lt;/li&gt;
&lt;li&gt;&lt;a href="https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/" rel="nofollow noopener"&gt;https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/&lt;/a&gt; – Erlang Ecosystem Foundation resource - Secure Coding and Deployment Hardening Guidelines&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/slab/safeurl-elixir" rel="nofollow noopener"&gt;https://github.com/slab/safeurl-elixir&lt;/a&gt; – SafeURL hex package by Slab&lt;/li&gt;
&lt;li&gt;&lt;a href="https://slab.com/" rel="nofollow noopener"&gt;https://slab.com/&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Guest Information&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href="https://twitter.com/paraxialio" rel="nofollow noopener"&gt;https://twitter.com/paraxialio&lt;/a&gt; – on Twitter&lt;/li&gt;
&lt;li&gt;&lt;a href="https://github.com/paraxialio/" rel="nofollow noopener"&gt;https://github.com/paraxialio/&lt;/a&gt; – on Github&lt;/li&gt;
&lt;li&gt;&lt;a href="https://paraxial.io/" rel="nofollow noopener"&gt;https://paraxial.io/&lt;/a&gt; – Blog&lt;/li&gt;
&lt;li&gt;&lt;a href="mailto:michael@paraxial.io" rel="nofollow noopener"&gt;michael@paraxial.io&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href="https://genserver.social/paraxial" rel="nofollow noopener"&gt;https://genserver.social/paraxial&lt;/a&gt; – on Mastadon&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Find us online&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Message the show - &lt;a href="https://twitter.com/ThinkingElixir" rel="nofollow noopener"&gt;@ThinkingElixir&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Message the show on Mastadon - &lt;a href="https://genserver.social/ThinkingElixir" rel="nofollow noopener"&gt;@ThinkingElixir@genserver.social&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Email the show - &lt;a href="mailto:show@thinkingelixir.com" rel="nofollow noopener"&gt;show@thinkingelixir.com&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Mark Ericksen - &lt;a href="https://twitter.com/brainlid" rel="nofollow noopener"&gt;@brainlid&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Mark Ericksen on Mastadon - &lt;a href="https://genserver.social/brainlid" rel="nofollow noopener"&gt;@brainlid@genserver.social&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;David Bernheisel - &lt;a href="https://twitter.com/bernheisel" rel="nofollow noopener"&gt;@bernheisel&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;David Bernheisel on Mastadon - &lt;a href="https://genserver.social/dbern" rel="nofollow noopener"&gt;@dbern@genserver.social&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Cade Ward - &lt;a href="https://twitter.com/cadebward" rel="nofollow noopener"&gt;@cadebward&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Cade Ward on Mastadon - &lt;a href="https://genserver.social/cadebward" rel="nofollow noopener"&gt;@cadebward@genserver.social&lt;/a&gt; &lt;/li&gt;
&lt;/ul&gt;
</description>
  <itunes:keywords>elixir, security, phoenix, xss</itunes:keywords>
  <content:encoded>
    <![CDATA[<p>Securing our apps is our responsibility as developers. We are the custodians and the guardians of our user's data. We met up again with Michael Lubas to discuss some lesser known community security resources and helpful tips to get us started with securing our Elixir and Phoenix applications!</p>

<p>Show Notes online - <a href="http://podcast.thinkingelixir.com/131" rel="nofollow noopener">http://podcast.thinkingelixir.com/131</a></p>

<p><strong>Elixir Community News</strong></p>

<ul>
<li><a href="https://erlangforums.com/t/otp-25-2-released/2166" rel="nofollow noopener">https://erlangforums.com/t/otp-25-2-released/2166</a> – Erlang/OTP 25.2 is the second maintenance patch package for OTP 25, with mostly bug fixes as well as improvements.</li>
<li><a href="https://twitter.com/livebookdev/status/1603787699458113539" rel="nofollow noopener">https://twitter.com/livebookdev/status/1603787699458113539</a> – HuggingFace announced “spaces”, a feature that lets people run Docker images on HuggingFace.</li>
<li><a href="https://huggingface.co/spaces/livebook-dev/single_file_phx_bumblebee_ml" rel="nofollow noopener">https://huggingface.co/spaces/livebook-dev/single_file_phx_bumblebee_ml</a> – Elixir Phoenix was specifically shown as a Docker example on HuggingFace</li>
<li><a href="https://twitter.com/sean_moriarity/status/1602817446875992066" rel="nofollow noopener">https://twitter.com/sean_moriarity/status/1602817446875992066</a> – Sean Moriarity added “negative prompts” feature to Nx's Stable Diffusion support.</li>
<li><a href="https://github.com/elixir-nx/bumblebee/pull/109" rel="nofollow noopener">https://github.com/elixir-nx/bumblebee/pull/109</a> – PR adding "negative prompt" support</li>
<li><a href="https://twitter.com/miruoss/status/1604849993130676225" rel="nofollow noopener">https://twitter.com/miruoss/status/1604849993130676225</a> – Michael Ruoss has a new Kino plugin for working with kubernetes pods</li>
<li><a href="https://github.com/mruoss/kino_k8s_term" rel="nofollow noopener">https://github.com/mruoss/kino_k8s_term</a> – KinoK8sTerm</li>
<li><a href="https://twitter.com/livebookdev/status/1603391808209391617" rel="nofollow noopener">https://twitter.com/livebookdev/status/1603391808209391617</a> – Livebook added two new neural network tasks to Bumblebee integration.</li>
<li><a href="https://twitter.com/hanrelan/status/1603470678081929216" rel="nofollow noopener">https://twitter.com/hanrelan/status/1603470678081929216</a> – Customized Livebook Stable Diffusion shows intermediate steps when generating images.</li>
<li><a href="https://blog.ftes.de/elixir-dijkstras-algorithm-with-priority-queue-f6022d710877" rel="nofollow noopener">https://blog.ftes.de/elixir-dijkstras-algorithm-with-priority-queue-f6022d710877</a> – Fredrik Teschke wrote a blogpost using Livebook to visualize Dijkstra's algorithm for finding the shortest path between nodes in a graph.</li>
<li><a href="https://notes.club/" rel="nofollow noopener">https://notes.club/</a> – Notesclub is a website by Hec Perez that makes it easy to share and discover Livebook notebooks online.</li>
<li><a href="https://twitter.com/louispilfold/status/1602740866602631170" rel="nofollow noopener">https://twitter.com/louispilfold/status/1602740866602631170</a> – Louis Pilfold announced his last full day at Nomio. He is now working full time on Gleam.</li>
<li><a href="https://twitter.com/louispilfold/status/1600960290455113728" rel="nofollow noopener">https://twitter.com/louispilfold/status/1600960290455113728</a> – Louis Pilfold shared that Bumblebee, Nx and Axon work in Gleam thanks to Gleam's new Elixir support.</li>
<li><a href="https://twitter.com/kipcole9/status/1604929772253229057" rel="nofollow noopener">https://twitter.com/kipcole9/status/1604929772253229057</a> – Kip Cole has a library called Image. He added <code>Image.Classification.classify(image)</code> using Bumblebee.</li>
<li><a href="https://sessionize.com/code-beam-lite-stockholm-2023" rel="nofollow noopener">https://sessionize.com/code-beam-lite-stockholm-2023</a> – Code BEAM Lite Stockholm 2023, 12 May 2023, Stockholm, Sweden. Call for speakers is open until Feb 5th 2023.</li>
</ul>

<p>Do you have some Elixir news to share? Tell us at <a href="https://twitter.com/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir</a> or email at <a href="mailto:show@thinkingelixir.com" rel="nofollow noopener">show@thinkingelixir.com</a></p>

<p><strong>Discussion Resources</strong></p>

<ul>
<li><a href="https://paraxial.io" rel="nofollow noopener">https://paraxial.io</a></li>
<li><a href="https://paraxial.io/blog/securing-elixir" rel="nofollow noopener">https://paraxial.io/blog/securing-elixir</a> – Securing Elixir/Phoenix Applications - 5 Tips to Get Started</li>
<li><a href="https://paraxial.io/blog/xss-phoenix" rel="nofollow noopener">https://paraxial.io/blog/xss-phoenix</a> – Cross Site Scripting (XSS) Patterns in Phoenix</li>
<li><a href="https://podcast.thinkingelixir.com/93" rel="nofollow noopener">https://podcast.thinkingelixir.com/93</a> – Previous interview with Michael</li>
<li><a href="https://www.youtube.com/watch?v=w3lKmFsmlvQ" rel="nofollow noopener">https://www.youtube.com/watch?v=w3lKmFsmlvQ</a> – ElixirConf 2017 - Plugging the Security Holes in Your Phoenix Application - Griffin Byatt</li>
<li><a href="https://felt.com/blog/rate-limiting" rel="nofollow noopener">https://felt.com/blog/rate-limiting</a> – Rate Limiting Algorithms for Client-Facing Web Apps by Tyler Young</li>
<li><a href="https://github.com/podium/elixir-secure-coding" rel="nofollow noopener">https://github.com/podium/elixir-secure-coding</a> – Elixir Secure Coding Training (ESCT) that runs in Livebook</li>
<li><a href="https://github.com/rrrene/html_sanitize_ex" rel="nofollow noopener">https://github.com/rrrene/html_sanitize_ex</a></li>
<li><a href="https://fly.io/phoenix-files/github-actions-for-elixir-ci/" rel="nofollow noopener">https://fly.io/phoenix-files/github-actions-for-elixir-ci/</a> – Blog post about Elixir CI/CD checks</li>
<li><a href="https://github.com/mirego/mix_audit" rel="nofollow noopener">https://github.com/mirego/mix_audit</a> – mix_audit</li>
<li><a href="https://hexdocs.pm/mix/Mix.Tasks.Deps.Unlock.html" rel="nofollow noopener">https://hexdocs.pm/mix/Mix.Tasks.Deps.Unlock.html</a> – mix hex.audit</li>
<li><a href="https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/" rel="nofollow noopener">https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/</a> – Erlang Ecosystem Foundation resource - Secure Coding and Deployment Hardening Guidelines</li>
<li><a href="https://github.com/slab/safeurl-elixir" rel="nofollow noopener">https://github.com/slab/safeurl-elixir</a> – SafeURL hex package by Slab</li>
<li><a href="https://slab.com/" rel="nofollow noopener">https://slab.com/</a></li>
</ul>

<p><strong>Guest Information</strong></p>

<ul>
<li><a href="https://twitter.com/paraxialio" rel="nofollow noopener">https://twitter.com/paraxialio</a> – on Twitter</li>
<li><a href="https://github.com/paraxialio/" rel="nofollow noopener">https://github.com/paraxialio/</a> – on Github</li>
<li><a href="https://paraxial.io/" rel="nofollow noopener">https://paraxial.io/</a> – Blog</li>
<li><a href="mailto:michael@paraxial.io" rel="nofollow noopener">michael@paraxial.io</a></li>
<li><a href="https://genserver.social/paraxial" rel="nofollow noopener">https://genserver.social/paraxial</a> – on Mastadon</li>
</ul>

<p><strong>Find us online</strong></p>

<ul>
<li>Message the show - <a href="https://twitter.com/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir</a></li>
<li>Message the show on Mastadon - <a href="https://genserver.social/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir@genserver.social</a></li>
<li>Email the show - <a href="mailto:show@thinkingelixir.com" rel="nofollow noopener">show@thinkingelixir.com</a></li>
<li>Mark Ericksen - <a href="https://twitter.com/brainlid" rel="nofollow noopener">@brainlid</a></li>
<li>Mark Ericksen on Mastadon - <a href="https://genserver.social/brainlid" rel="nofollow noopener">@brainlid@genserver.social</a></li>
<li>David Bernheisel - <a href="https://twitter.com/bernheisel" rel="nofollow noopener">@bernheisel</a></li>
<li>David Bernheisel on Mastadon - <a href="https://genserver.social/dbern" rel="nofollow noopener">@dbern@genserver.social</a></li>
<li>Cade Ward - <a href="https://twitter.com/cadebward" rel="nofollow noopener">@cadebward</a></li>
<li>Cade Ward on Mastadon - <a href="https://genserver.social/cadebward" rel="nofollow noopener">@cadebward@genserver.social</a></li>
</ul><p>Sponsored By:</p><ul><li><a rel="nofollow" href="https://fly.io">Fly.io</a>: <a rel="nofollow" href="https://fly.io">Fly.io is a great place to deploy your next Phoenix application! Check them out!
</a></li></ul>]]>
  </content:encoded>
  <itunes:summary>
    <![CDATA[<p>Securing our apps is our responsibility as developers. We are the custodians and the guardians of our user's data. We met up again with Michael Lubas to discuss some lesser known community security resources and helpful tips to get us started with securing our Elixir and Phoenix applications!</p>

<p>Show Notes online - <a href="http://podcast.thinkingelixir.com/131" rel="nofollow noopener">http://podcast.thinkingelixir.com/131</a></p>

<p><strong>Elixir Community News</strong></p>

<ul>
<li><a href="https://erlangforums.com/t/otp-25-2-released/2166" rel="nofollow noopener">https://erlangforums.com/t/otp-25-2-released/2166</a> – Erlang/OTP 25.2 is the second maintenance patch package for OTP 25, with mostly bug fixes as well as improvements.</li>
<li><a href="https://twitter.com/livebookdev/status/1603787699458113539" rel="nofollow noopener">https://twitter.com/livebookdev/status/1603787699458113539</a> – HuggingFace announced “spaces”, a feature that lets people run Docker images on HuggingFace.</li>
<li><a href="https://huggingface.co/spaces/livebook-dev/single_file_phx_bumblebee_ml" rel="nofollow noopener">https://huggingface.co/spaces/livebook-dev/single_file_phx_bumblebee_ml</a> – Elixir Phoenix was specifically shown as a Docker example on HuggingFace</li>
<li><a href="https://twitter.com/sean_moriarity/status/1602817446875992066" rel="nofollow noopener">https://twitter.com/sean_moriarity/status/1602817446875992066</a> – Sean Moriarity added “negative prompts” feature to Nx's Stable Diffusion support.</li>
<li><a href="https://github.com/elixir-nx/bumblebee/pull/109" rel="nofollow noopener">https://github.com/elixir-nx/bumblebee/pull/109</a> – PR adding "negative prompt" support</li>
<li><a href="https://twitter.com/miruoss/status/1604849993130676225" rel="nofollow noopener">https://twitter.com/miruoss/status/1604849993130676225</a> – Michael Ruoss has a new Kino plugin for working with kubernetes pods</li>
<li><a href="https://github.com/mruoss/kino_k8s_term" rel="nofollow noopener">https://github.com/mruoss/kino_k8s_term</a> – KinoK8sTerm</li>
<li><a href="https://twitter.com/livebookdev/status/1603391808209391617" rel="nofollow noopener">https://twitter.com/livebookdev/status/1603391808209391617</a> – Livebook added two new neural network tasks to Bumblebee integration.</li>
<li><a href="https://twitter.com/hanrelan/status/1603470678081929216" rel="nofollow noopener">https://twitter.com/hanrelan/status/1603470678081929216</a> – Customized Livebook Stable Diffusion shows intermediate steps when generating images.</li>
<li><a href="https://blog.ftes.de/elixir-dijkstras-algorithm-with-priority-queue-f6022d710877" rel="nofollow noopener">https://blog.ftes.de/elixir-dijkstras-algorithm-with-priority-queue-f6022d710877</a> – Fredrik Teschke wrote a blogpost using Livebook to visualize Dijkstra's algorithm for finding the shortest path between nodes in a graph.</li>
<li><a href="https://notes.club/" rel="nofollow noopener">https://notes.club/</a> – Notesclub is a website by Hec Perez that makes it easy to share and discover Livebook notebooks online.</li>
<li><a href="https://twitter.com/louispilfold/status/1602740866602631170" rel="nofollow noopener">https://twitter.com/louispilfold/status/1602740866602631170</a> – Louis Pilfold announced his last full day at Nomio. He is now working full time on Gleam.</li>
<li><a href="https://twitter.com/louispilfold/status/1600960290455113728" rel="nofollow noopener">https://twitter.com/louispilfold/status/1600960290455113728</a> – Louis Pilfold shared that Bumblebee, Nx and Axon work in Gleam thanks to Gleam's new Elixir support.</li>
<li><a href="https://twitter.com/kipcole9/status/1604929772253229057" rel="nofollow noopener">https://twitter.com/kipcole9/status/1604929772253229057</a> – Kip Cole has a library called Image. He added <code>Image.Classification.classify(image)</code> using Bumblebee.</li>
<li><a href="https://sessionize.com/code-beam-lite-stockholm-2023" rel="nofollow noopener">https://sessionize.com/code-beam-lite-stockholm-2023</a> – Code BEAM Lite Stockholm 2023, 12 May 2023, Stockholm, Sweden. Call for speakers is open until Feb 5th 2023.</li>
</ul>

<p>Do you have some Elixir news to share? Tell us at <a href="https://twitter.com/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir</a> or email at <a href="mailto:show@thinkingelixir.com" rel="nofollow noopener">show@thinkingelixir.com</a></p>

<p><strong>Discussion Resources</strong></p>

<ul>
<li><a href="https://paraxial.io" rel="nofollow noopener">https://paraxial.io</a></li>
<li><a href="https://paraxial.io/blog/securing-elixir" rel="nofollow noopener">https://paraxial.io/blog/securing-elixir</a> – Securing Elixir/Phoenix Applications - 5 Tips to Get Started</li>
<li><a href="https://paraxial.io/blog/xss-phoenix" rel="nofollow noopener">https://paraxial.io/blog/xss-phoenix</a> – Cross Site Scripting (XSS) Patterns in Phoenix</li>
<li><a href="https://podcast.thinkingelixir.com/93" rel="nofollow noopener">https://podcast.thinkingelixir.com/93</a> – Previous interview with Michael</li>
<li><a href="https://www.youtube.com/watch?v=w3lKmFsmlvQ" rel="nofollow noopener">https://www.youtube.com/watch?v=w3lKmFsmlvQ</a> – ElixirConf 2017 - Plugging the Security Holes in Your Phoenix Application - Griffin Byatt</li>
<li><a href="https://felt.com/blog/rate-limiting" rel="nofollow noopener">https://felt.com/blog/rate-limiting</a> – Rate Limiting Algorithms for Client-Facing Web Apps by Tyler Young</li>
<li><a href="https://github.com/podium/elixir-secure-coding" rel="nofollow noopener">https://github.com/podium/elixir-secure-coding</a> – Elixir Secure Coding Training (ESCT) that runs in Livebook</li>
<li><a href="https://github.com/rrrene/html_sanitize_ex" rel="nofollow noopener">https://github.com/rrrene/html_sanitize_ex</a></li>
<li><a href="https://fly.io/phoenix-files/github-actions-for-elixir-ci/" rel="nofollow noopener">https://fly.io/phoenix-files/github-actions-for-elixir-ci/</a> – Blog post about Elixir CI/CD checks</li>
<li><a href="https://github.com/mirego/mix_audit" rel="nofollow noopener">https://github.com/mirego/mix_audit</a> – mix_audit</li>
<li><a href="https://hexdocs.pm/mix/Mix.Tasks.Deps.Unlock.html" rel="nofollow noopener">https://hexdocs.pm/mix/Mix.Tasks.Deps.Unlock.html</a> – mix hex.audit</li>
<li><a href="https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/" rel="nofollow noopener">https://erlef.github.io/security-wg/secure_coding_and_deployment_hardening/</a> – Erlang Ecosystem Foundation resource - Secure Coding and Deployment Hardening Guidelines</li>
<li><a href="https://github.com/slab/safeurl-elixir" rel="nofollow noopener">https://github.com/slab/safeurl-elixir</a> – SafeURL hex package by Slab</li>
<li><a href="https://slab.com/" rel="nofollow noopener">https://slab.com/</a></li>
</ul>

<p><strong>Guest Information</strong></p>

<ul>
<li><a href="https://twitter.com/paraxialio" rel="nofollow noopener">https://twitter.com/paraxialio</a> – on Twitter</li>
<li><a href="https://github.com/paraxialio/" rel="nofollow noopener">https://github.com/paraxialio/</a> – on Github</li>
<li><a href="https://paraxial.io/" rel="nofollow noopener">https://paraxial.io/</a> – Blog</li>
<li><a href="mailto:michael@paraxial.io" rel="nofollow noopener">michael@paraxial.io</a></li>
<li><a href="https://genserver.social/paraxial" rel="nofollow noopener">https://genserver.social/paraxial</a> – on Mastadon</li>
</ul>

<p><strong>Find us online</strong></p>

<ul>
<li>Message the show - <a href="https://twitter.com/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir</a></li>
<li>Message the show on Mastadon - <a href="https://genserver.social/ThinkingElixir" rel="nofollow noopener">@ThinkingElixir@genserver.social</a></li>
<li>Email the show - <a href="mailto:show@thinkingelixir.com" rel="nofollow noopener">show@thinkingelixir.com</a></li>
<li>Mark Ericksen - <a href="https://twitter.com/brainlid" rel="nofollow noopener">@brainlid</a></li>
<li>Mark Ericksen on Mastadon - <a href="https://genserver.social/brainlid" rel="nofollow noopener">@brainlid@genserver.social</a></li>
<li>David Bernheisel - <a href="https://twitter.com/bernheisel" rel="nofollow noopener">@bernheisel</a></li>
<li>David Bernheisel on Mastadon - <a href="https://genserver.social/dbern" rel="nofollow noopener">@dbern@genserver.social</a></li>
<li>Cade Ward - <a href="https://twitter.com/cadebward" rel="nofollow noopener">@cadebward</a></li>
<li>Cade Ward on Mastadon - <a href="https://genserver.social/cadebward" rel="nofollow noopener">@cadebward@genserver.social</a></li>
</ul><p>Sponsored By:</p><ul><li><a rel="nofollow" href="https://fly.io">Fly.io</a>: <a rel="nofollow" href="https://fly.io">Fly.io is a great place to deploy your next Phoenix application! Check them out!
</a></li></ul>]]>
  </itunes:summary>
</item>
  </channel>
</rss>
