250: EEF Elections and Security
Thinking Elixir Podcast
Enhancements in Elixir Cybersecurity Training and Phoenix Updates
This chapter explores improvements in cybersecurity training for Elixir developers, focusing on a project from the Erlang Ecosystem Foundation. It also highlights the upcoming Phoenix 1.0 release with new features and addresses recent security vulnerabilities in the Ash framework.
News includes EEF board elections with voting beginning May 9th, Gleam v1.10.0 enhancing security with SBoMs and SLSA build provenance, an AshAuthentication vulnerability with mitigation steps, the Elixir Secure Coding Training project finding a permanent home at the EEF, announcements for both ElixirConf US 2025 in Orlando and ElixirConfEU in Krakow with speaker lineup, and more!
Show Notes online - http://podcast.thinkingelixir.com/250
Elixir Community News
- https://paraxial.io/ – Paraxial.io is sponsoring today's show! Sign up for a free trial of Paraxial.io today and mention Thinking Elixir when you schedule a demo for a limited time offer.
- https://erlef.org/blog/eef/election-2025 – EEF board elections announced with important dates - candidacy submissions by May 8th, voting open May 9-16th.
- https://x.com/TheErlef/status/1911847956308959650 – Gleam v1.10.0 will ship with Build SBoMs and SLSA build provenance for all release artifacts and Docker images, improving visibility into dependencies and software supply chain security.
- https://x.com/theerlef/status/1910348770514006242 – The "Elixir Secure Coding Training (ESCT)" project has been transferred to the Erlang Ecosystem Foundation for a more permanent home and maintainership.
- https://bsky.app/profile/davelucia.com/post/3lmcqhzoc7c26 – Dave Lucia shares information about the ESCT project transfer from Podium to TvLabs and ultimately to the EEF.
- https://github.com/erlef/elixir-secure-coding – An interactive cybersecurity curriculum designed for enterprise use at software companies using Elixir.
- https://github.com/phoenixframework/phoenix/pull/6184 – Fix for Plug.Debugger screen which was showing ANSI codes in HTML.
- https://github.com/phoenixframework/phoenix/pull/6194 – Fix for the Phoenix installer's incorrect application of custom variants in tailwind v4.
- https://github.com/team-alembic/ash_authentication/security/advisories/GHSA-3988-q8q7-p787 – AshAuthentication vulnerability published with mitigation steps - update packages, set require_interaction to true, and add confirm_route above auth_routes.
- https://elixirconf.com/ – ElixirConf US 2025 is open for submitting talks and workshops in Orlando. Talk submissions due April 29, workshop submissions due April 15.
- https://x.com/elixirconf/status/1907843035544826137 – Announcement for ElixirConf US 2025 in Orlando with deadlines for talk and workshop submissions.
- https://x.com/ElixirConfEU/status/1911747531953832323 – ElixirConfEU Speakers were announced for the upcoming conference in Krakow, Poland.
- https://www.elixirconf.eu/#tickets – Ticket information for ElixirConfEU - 250 Euros for virtual ticket, 600 Euros for in-person ticket.
- https://www.elixirconf.eu/#keynotes – Keynote information for ElixirConfEU in Krakow, Poland, May 14-16 (training on May 14, regular sessions on May 15-16).
Do you have some Elixir news to share? Tell us at @ThinkingElixir or email at show@thinkingelixir.com
Find us online
- Message the show - Bluesky
- Message the show - X
- Message the show on Fediverse - @ThinkingElixir@genserver.social
- Email the show - show@thinkingelixir.com
- Mark Ericksen on X - @brainlid
- Mark Ericksen on Bluesky - @brainlid.bsky.social
- Mark Ericksen on Fediverse - @brainlid@genserver.social
- David Bernheisel on Bluesky - @david.bernheisel.com
- David Bernheisel on Fediverse - @dbern@genserver.social
Sponsored By:
The AI-powered Podcast Player
