xpinjection. Страница 3

Hearts of Darkness: A Spring DevOps Apocalypse by Joris Kuipers @ Spring I/O 2022

Spring I/O 2022 - Barcelona, 26-27 May Slides: https://www.slideshare.net/jkuipers/hearts-of-darksess-a-spring-devops-apocalypse In this talk Joris will share several real-life failure cases concerning running Spring applications in production. Examples include services being killed because of health check issues, Micrometer metrics getting lost, circuit breakers never closing after opening, OOM errors caused by unbounded queues and other nightmarish scenario’s. Not only will you come to understand how these problems could sneak through staging to make their way to production, you will also be given practical tips on how to avoid these things from happening to your own applications. Otto von Bismarck famously said “Fools say that they learn by experience. I prefer to profit by others’ experience”. Don’t be a fool, and profit by attending this talk!

Java™ 18 & 19 What's new and noteworthy? by Piotr Przybyl

Hey, there are two major Java versions released every year! We don’t have to wait 3 years or so for new features any more. Isn’t that cool? 😉 Java was supposed "to be slow". However, Java turns out to evolve so fast, that next releases aren't just version bumps, but might significantly change the rules of the game. That's a good reason to check out what's new in Java. To name a few changes: Pattern Matching for switch, Record Patterns, Virtual Threads, Calling native stuff, Simple Web server, what's gone and what will be gone, and other stuff. If you find them interesting, let’s dive deep together into new interesting stuff. PIOTR PRZYBYL Notorious engineer at work and after hours, tracing meanders of the art of software engineering. Remote Software Gardener, mostly working in web-oriented Java gardens. Programming usually in Java (since 1.3) and Scala, but in other languages too. Fan of agility, seen mostly as choosing the right tools and approaches after asking the right questions. Developer, trainer and conference speaker. In his talks, Piotr covers not only hardcore Java but also software architecture, computer security, and soft-skills. ------------------------------------------------------------ INTRO * visuals & editing by @Mercator * music : Avocado by Ephixa

Introducing Spring Framework 6.0 by Brian Clozel and Stephane Nicoll

The next generation of Spring applications is almost here! Spring Framework 6.0 brings an exciting new baseline for the entire Spring ecosystem: Java 17, Jakarta EE 9+. This is the foundation for Spring Boot 3.0 and the beginning of new major themes, ranging from AOT/Native to Observability. During this presentation, Stéphane and Brian will cover the main topics of this new release: * the new Java 17 and Jakarta EE 9 baseline * the AOT/Native efforts for GraalVM native applications and efficient JVM apps * the Spring Observability initiative and what it means for various components like RestTemplate, web controllers... * the new Java interface clients for HTTP and other transports * Support for RFC 7807 problem details * and more! STÉPHANE NICOLL Stéphane has 20 years of experience in software engineering with a strong focus on API development on the JVM. After having spent more than a decade developing large scale Java enterprise applications in the geospatial, financial, or logistics sectors, he joins the core Spring Framework development team in 2014. Currently, Stéphane works on Spring Boot and leads start.spring.io, a service that helps millions of users start their next application. BRIAN CLOZEL Spring Framework, Spring Boot and Spring for GraphQL committer at VMware. ------------------------------------------------------------ INTRO * visuals & editing by @Mercator * music : Avocado by Ephixa

The Art of Code by Dylan Beattie

Software and technology have changed every aspect of the world we live in. At one extreme are the ‘mission critical’ applications - the code that runs our banks, our hospitals, our airports and phone networks. Then there’s the code we all use every day to browse the web, watch movies, create spreadsheets… not quite so critical, but still code that solves problems and delivers services. But what about the code that only exists because somebody wanted to write it? Code created just to make people smile, laugh, maybe even dance? Maybe even code that does nothing at all? Code that was created just to see if it was possible? Join Dylan Beattie - programmer, musician, and creator of the Rockstar programming language - for an entertaining look at the art of code. We’ll look at the origins of programming as an art form, from Conway’s Game of Life to the 1970s demoscene and the earliest Obfuscated C competitions. We’ll learn about esoteric languages and quines - how DO you create a program that prints its own source code? We’ll discover quine relays, code golf and generative art, and we’ll explore the phenomenon of live coding as performance - from the pioneers of electronic music to modern algoraves and live coding platforms like Sonic Pi. Dylan Beattie Dylan Beattie is a consultant, software developer and international keynote speaker. He’s been building web applications since the 1990s, and works primarily on Microsoft .NET, HTTP APIs, UX design, and distributed systems. Dylan lives and works in London and when he’s not writing code he plays guitar and writes songs. ------------------------------------------------------------ INTRO * visuals & editing by @Mercator * music : Avocado by Ephixa

Deserialization exploits in Java: why should I care? by Brian Vermeer

Hackers refer to deserialization in Java as “the gift that keeps on giving”. But what is actually the problem? In most cases, it is not even your own code that creates this security vulnerability. This problem is also not restricted to Java’s custom serialization framework. When deserializing JSON, XML, or YAML, similar issues can occur as well. In this talk, I explain how deserialization vulnerabilities work natively in Java and how attack chains are created. Next, I will show that deserializing XML, JSON, and YAML can also get you into trouble. And of course, we had the recent Log4j problems with deserialization. Many different problems can occur when deserializing data and in this session, I will use several demos to illustrate various security issues. How do you avoid these issues? I will give you some pointers on how to mitigate these problems in your own applications, this also includes new features in Java 17. At the end of this session, you will have an understanding of the problem space and be able to take action in your code to prevent it.

Improving your skills with the debugger by Bouke Nijhuis

This presentation is about levelling up your debugging game. Most developers only use the proverbial tip of the iceberg when working with the debugger. There is so much more to learn so lets have a look at interesting mechanisms like: - dropping frames ("going back in time") - remote debugging (why stay on your local machine?) - hot code swapping (faster than redeploying the code) - stream debugging (for those hard to debug streams) The entire presentation will be in IntelliJ. Some parts are IntelliJ specific, but most parts apply to all IDEs.