Show notes:

* Why another Meteor podcast?
    * Focus on community and open source
    * Focus on package and other open source contributions
    * Shoutout to the https://modulesunraveled.com/podcast and the drupal community
        * Modules Unraveled has a nice 
* What is a package?
    * http://docs.meteor.com/#/full/usingpackages
    * Writing packages
        * http://docs.meteor.com/#/full/writingpackages
        * https://themeteorchef.com/recipes/writing-a-package/
* Why would you want to write a package for Meteor?
    * To compartmentalize a set of functionality in an application to share with other internal applications and make it easier to follow how an application is constructed.
    * Easier to open source functionality to the community
* Resources
    * https://github.com/Urigo/awesome-meteor
    * https://atmosphere.com (https://atmosphere.com/)
    * https://fastosphere.meteor.com (https://fastosphere.meteor.com/)
* Package of the week:
    * https://atmospherejs.com/hb5/meteor-is.js
        * Simple package which wraps the is.js micro check library for client and server use
            * https://arasatasaygin.github.io/is.js/

0: Community Makes Us Great

jj (archduke), tecto and shrop talk about using the Browser Security package to prevent click jacking and secure other aspects of Meteor applications.

* Browser Policy package https://atmospherejs.com/meteor/browser-policy
* browser-policy README.md https://github.com/meteor/meteor/tree/devel/packages/browser-policy
* Clickjacking: Web pages can see and hear you (original disclosure) http://jeremiahgrossman.blogspot.com/2008/10/clickjacking-web-pages-can-see-and-hear.html
* Click-Jack Test Code https://github.com/originaladcc/rws/blob/master/click-jack-test
* Automated attacks http://samy.pl/quickjack/ 
* Defense in depth: securing Meteor apps with Content Security Policy http://info.meteor.com/blog/defense-in-depth-securing-meteor-apps-with-content-security-policy
* meteor: browser policy https://dweldon.silvrback.com/browser-policy
* Meteor security fundamentals http://justmeteor.com/blog/meteor-security-fundamentals/
* Meteor Club Q&A on Security w/ Pete Corey & Josh Owens https://www.youtube.com/watch?v=oaKOqcutkdc


1: Browser Policy

Deeter, tecto and shrop talk about normalization vs. denormalization of data in MongoDB and using the maximum:computed-fields package to keep data denormalized and updated across collections.

* https://atmospherejs.com/maximum/computed-fields
* https://github.com/maximummeteor/computed-fields/
* https://crater.io/posts/T7WFdgiMTzZGoP8tP/why-we-don-t-denormalize-anymore
* http://justmeteor.com/blog/why-we-dont-denormalize-anymore/
* https://atmospherejs.com/reywood/publish-composite
* https://atmospherejs.com/dburles/collection-helpers
* Mongo DB Is Web Scale (NSFW) https://www.youtube.com/watch?v=b2F-DItXtZs


2: Computed Fields

tecto and shrop talk about the accounts-phony package and chimp.js.

* https://forums.meteor.com/t/the-right-way-to-handle-authentication-and-authorization-in-cucumber-for-meteor/2926/8
* https://atmospherejs.com/csauer/accounts-phony
* https://github.com/cjsauer/accounts-phony/
* http://chimpjs.com (http://chimpjs.com/)
* https://chimp.readme.io/docs
* https://github.com/meteor/guide

3: csauer:accounts-phony

shrop talks about managing user account related forms and functionality with the useraccounts suite of packages.


4: useraccounts:core

We have moved episodes to http://hb5.co/podcast/meteor-strike. Please join us there to continue listening!

Welcome to the Meteor Strike podcast where we talk about interesting Meteor packages and other community contributions that make the Meteor JavaScript framework great.

Hosted by shrop and tecto

Meteor Strike

Popular tracks