About this episode

Chris DeMars discusses the challenges of patching and security in the AI era with host Kate Holterhoff.

RedMonk's Kate Holterhoff sits down with Chris DeMars, Senior Developer Advocate at TuxCare, for a conversation about patching in the AI era. Chris started writing code in Q Basic in the mid-90s and now spends his time at conferences explaining the JavaScript supply chain to people who'd rather not think about it: typosquatting, the Shai-Hulud worm, and getting locked out of his own VS Code editor at Vueconf. They get into why a Dockerfile that Claude wrote him pulled in an insecure version of Node, why most enterprise customers are nowhere near migrating off end-of-life software regardless of the modernization story being sold to them, and what rebootless live patching actually looks like once a CVE drops. Show notes: https://redmonk.com/videos/chris-demars/ Chapters 00:00 Introduction and Background of Chris DeMars 02:59 The Role of Developer Advocacy in Security 05:52 JavaScript Ecosystem and Security Challenges 08:54 AI's Impact on Security Practices 11:42 Developers' Awareness of Security Issues 14:50 The Importance of Patching and CVEs 17:37 The Future of Security in Development 21:09 The Process of Fixing Vulnerabilities 24:01 Modernization vs. Legacy Systems 24:50…

People in this episode

Host: Kate Holterhoff

Guest: Chris DeMars

Topics covered

• Patching
• Security
• AI
• JavaScript Ecosystem
• Developer Advocacy
• Open Source
• Legacy Systems

Keywords

• patching
• security
• AI
• JavaScript
• CVE
• Docker
• open source
• developer advocacy
• legacy systems

Mentioned in this episode

Organizations: TuxCare, RedMonk

Products: VS Code, Dockerfile, Node

Places: JavaScript, AI

More episodes of The MonkCast

• An Interview with Kyle Daigle at Microsoft BUILD 2026: Models, Tokens, Agents & Developer Calm · June 25, 2026 · 35 min
• Jack Herrington on TanStack's npm Mini Shai-Hulud Compromise · June 23, 2026 · 54 min
• Inside the Acquisition: VoidZero Joins Cloudflare with Evan You · June 16, 2026 · 1h 0m

Explore listener stats, chart rankings, contacts and more on the The MonkCast podcast page.