Episode 109 - Verify and Verify Again
Episode 109 of the Two Voice Devs podcast, hosted by Mark and Allen, titled "Episode 109 - Verify and Verify Again" was published on August 25, 2022 and runs 16 minutes.
August 25, 2022 ·16m · Two Voice Devs
Summary
Making sure our #VoiceFirst applications are written securely and use secure components is important. And when one of those components has a security bug, it is important that we update it as soon as we can. Mark highlights a recent security vulnerability in the node-forge module, which is used by the alexa-verifier-middleware module. Mark and Allen then discuss what the verifier does and how we can be careful when it comes to using libraries. Some references: alexa-verifier-middleware: https://www.npmjs.com/package/alexa-verifier-middleware Alexa verification: https://developer.amazon.com/en-US/docs/alexa/custom-skills/host-a-custom-skill-as-a-web-service.html#manually-verify-request-sent-by-alexa Issues with node-forge: https://github.com/advisories/GHSA-x4jg-mjrx-434g
Episode Description
Making sure our #VoiceFirst applications are written securely and use secure components is important. And when one of those components has a security bug, it is important that we update it as soon as we can. Mark highlights a recent security vulnerability in the node-forge module, which is used by the alexa-verifier-middleware module. Mark and Allen then discuss what the verifier does and how we can be careful when it comes to using libraries.
Some references:
- alexa-verifier-middleware: https://www.npmjs.com/package/alexa-verifier-middleware
- Alexa verification: https://developer.amazon.com/en-US/docs/alexa/custom-skills/host-a-custom-skill-as-a-web-service.html#manually-verify-request-sent-by-alexa
- Issues with node-forge: https://github.com/advisories/GHSA-x4jg-mjrx-434g
Similar Episodes
Apr 11, 2026 ·61m
Apr 11, 2026 ·107m
Jan 2, 2026 ·13m
Jan 1, 2026 ·12m
Dec 31, 2025 ·13m
Dec 30, 2025 ·7m