Lessons learnt the hard way.
Download as PPTX, PDF0 likes433 views
This is a talk delivered at ThoughtWorks XConf Sydney 2013. It is focussed on lessons learnt the hard way at WorldVision during a year long project re-platforming to multiple front end Angular JS applications using HTML5 and consuming Micro-services backed APIs built in .Net.
1 of 45
Download to read offline
Recommended
Oreo, Nougat, Marshmallow and Lollipop: Efficient Android testing in 2019.
Oreo, Nougat, Marshmallow and Lollipop: Efficient Android testing in 2019.Ivan Krutov
?
This document discusses efficient Android testing in 2019 using tools like Selenoid and Appium. It describes setting up a large Selenium cluster with over 5000 browsers and 2.5 million test sessions per day across 5 data centers for testing Android applications and mobile web. Custom Android images are created using Selenoid to allow quick boot times and testing directly on emulated Android environments without needing real devices.Firefox OS Intro, Inside OUT
Firefox OS Intro, Inside OUTskiee-mahir
?
This ºÝºÝߣ is an Introduction to Firefox OS, the latest mobile Operating System made by the Non-profit behind the Firefox Browser, Mozilla. This is to be used for any Event or Public talk on Firefox OS. Fell Free to make it better.´³±ð²Ô°ì¾±²Ô²õ¤Î¹¹³É?ÔËÓåѥ¿©`¥ó
´³±ð²Ô°ì¾±²Ô²õ¤Î¹¹³É?ÔËÓåѥ¿©`¥óSEGADevTech
?
Jenkins is a tool that allows continuous integration and delivery of software projects. It supports building, testing, and deploying software projects across various platforms including Windows, Linux, and Mac. Jenkins provides features for automation, integration, and easy management of software builds.Digital Games in European Libraries
Digital Games in European LibrariesSilversprite
?
A presentation given at #IL2008 showing the connections between Europe and the USA, and how public libraries in the former are using video games.Lean Programmer Anarchy 
Lean Programmer Anarchy Nigel Fernandes
?
This document discusses various topics such as anarchy, trust, continuous delivery, agile techniques and issues with software development. It notes anarchy as the absence of authority and freedom of the individual as a political ideal. For software development, it mentions using agile techniques like stand ups, retrospectives and tests alongside continuous delivery of small applications through short iterations. However, it also notes issues like things working differently on individual machines than expected.Lledo sports
Lledo sportsJes¨²s Domingo
?
Sports played in Greece include rugby, a contact team sport of two 15-player teams playing two 40-minute halves; cricket, a bat-and-ball sport between two 11-player teams; and futsal, a collective ball sport between two 5-player teams played indoors on a hard court.Monuments and they history, greece. joan g. a.
Monuments and they history, greece. joan g. a.Jes¨²s Domingo
?
Greece has a long historical past dating back to the 7th millennium BC. The document discusses several important historical sites in Greece including the Temple of Zeus in Olympia, the ruins of the Colossus of Rhodes statue, the Roman Agora located north of the Acropolis in Athens, the ancient city of Sparta and its acropolis, the Parthenon temple in Athens, and the Acropolis of Athens situated on a rocky hilltop and home to ancient ruins.Application of Stacks
Application of StacksAin-ul-Moiz Khawaja
?
The document discusses stacks and converting expressions between infix, postfix, and prefix notation. It provides examples and algorithms for converting infix expressions to postfix. The algorithms involve using an operator stack to determine the order of operations based on precedence rules. Operands are added to the output string and operators are pushed to the stack or popped and added to the output string based on their precedence.Huiming Liu-'resident evil' of smart phones--wombie attack
Huiming Liu-'resident evil' of smart phones--wombie attackGeekPwn Keen
?
In this presentation, Huiming Liu, the researcher of Tencent Security Xuanwu Lab, will present an astonishing mobile wireless zombie(Wombie) attack demo ¡ª the smartphone viruses spread like zombies in ¡°Resident Evil¡±, and the technique details will also be explained. The Wombie doesn¡¯t rely on Internet to spread, so it can¡¯t be detected on the internet. Besides, it can serve as an attack amplifier for many other attack methods. For example, the recent KRACK attack about WPA2 will benefit a lot if combined with the Wombie Attack.DSA Day 2 PPT.pdf
DSA Day 2 PPT.pdfAkramMohammad28
?
1) The document recaps Day 1 of the 30 Days Master Class on Data Science 2.0 which covered introductions, the course agenda, and applications of data science.
2) It then discusses why Python is well-suited for data science due to its ease of use and development, provides a brief history of Python, and outlines how to install Python.
3) The document introduces key Python concepts like interpreters, compilers, and different execution modes before demonstrating basic programming structures like conditional statements and loops.Owasp AppSecEU 2015 - BeEF Session
Owasp AppSecEU 2015 - BeEF SessionBart Leppens
?
Bart Leppens gave a presentation on the Browser Exploitation Framework (BeEF). He discussed BeEF's architecture, how it hooks browsers, its module and extension system, and live demonstrations of information gathering, exploitation, and using BeEF with Metasploit. He also covered topics like inter-protocol communication, exploiting protocols like ActiveFax, and porting BeEF bind shellcode to Linux. The talk provided an overview of BeEF's capabilities and real-world attack scenarios.CNIT 128 8. Identifying and Exploiting Android Implementation Issues (Part 3)
CNIT 128 8. Identifying and Exploiting Android Implementation Issues (Part 3)Sam Bowne
?
Based on "The Mobile Application Hacker's Handbook 1st Edition", by Dominic Chell
Instructor: Sam Bowne
More info: https://samsclass.info/128/128_S19.shtmlBOX of Illusion MOSEC'17
BOX of Illusion MOSEC'17Python0x0
?
The age of IoT is at our threshold. Many large-scale companies have already started developing security solutions to make this brave new world safe. One of possible, we may even say, surefire approaches is to create a device which would connect to a network and protect other devices in it. Let¡¯s discuss the efficiency of the given approach in relation to BitDefender Box.
Build html 5 apps for mobile
Build html 5 apps for mobileJo?o Ferreira
?
This document discusses building apps for Firefox OS mobile operating system using HTML5, CSS, and JavaScript. It provides an overview of Firefox OS, describes the types of apps that can be built including hosted, packaged, and hybrid apps, and explains the process for submitting a built app to the Firefox Marketplace.1. inside source IP address and port number 172.16.1.2020translat.pdf
1. inside source IP address and port number 172.16.1.2020translat.pdfmeejuhaszjasmynspe52
?
1. inside source IP address and port number 172.16.1.20:20
translated outside IP address 68.68.68.1:80
1. VPN address translation
2. Network address port translation
3. DMZ address translation
4. Network address translation
2. How many ports are used by computers for TCP/IP network traffic?
1. 65500
2. 1024
3. 65535
4. 6553
3. Which command prompt utility allows administrators to determine the actual path from one
computer to another?
1. tracert
2. NAT
3. dns flush
4. ping
4. Which UNIX tool is used to do a scan on itself?
1. traceroute
2. DHCP
3. netstat
4. ping localhost
5. Which type of VPN would be used to allow an organization to leverage the Internet backbone
to build a secure WAN between office branches?
1. remote user vpn
2. HTTP VPN
3. DMZ vpn
4. remote office vpn
6. What type of firewall uses routers with rules to grant or deny access based only on source
address, destination address, and port number?
1. packet-filtering gateway
2. application gateway
3. layer 3 gateway
4. hybrid gateway
7. A _______ attack will automatically attempt thousands or millions of passwords to gain
access to a system.
1. worm
2. virus
3. dictionary
4. logic bomb
8. What protocol is are layers 6 and 7 of the OSI model based on?
1. TCP/IP
2. IPsec
3. FTP
4. PPTP
9. Which network services provides the mapping and translation of domain names to IP
addresses?
1. HTTP
2. DHCP
3. DNS
4. FTP
10. With a proxy server enabled on a firewall, the firewall stores web pages where?
1. Local usb drive
2. RAM
3. Local hard drive
4. FTP server
11 The ________ provides definitions for seen layers, which each layer provides services that
depend on higher level layers depend on.
2. TCP
3. FTP
4. OSI
5. DNS
12. Which of the ways listed below can firewall security be completely bypassed? (Multiple
answers)
1. HTTP sites are never secure
2. E-mail is never secure
3. A computer not owned by the enterprise should never be connected to the enterprise
4. Files from home computers and files from office computers should never commingle.
Solution
Q1
4. Network address translation
Q2
3. 65535
Q3
1. tracert
Q6
1. packet-filtering gateway
Q7
2. virus.CSW2017 Geshev+Miller logic bug hunting in chrome on android
CSW2017 Geshev+Miller logic bug hunting in chrome on androidCanSecWest
?
The document describes several logic flaws in Chrome on Android that could be exploited. It discusses exploiting automatic file downloads to steal downloaded files or files from Google Drive by tricking the browser into downloading malicious files. It also describes using cross-site request forgery tokens and device IDs to programmatically install arbitrary apps from the Google Play store. The presentation aims to show how understanding application logic can lead to powerful "logic bug" exploits beyond simple memory corruption issues.Web-App Remote Code Execution Via Scripting Engines
Web-App Remote Code Execution Via Scripting Enginesc0c0n - International Cyber Security and Policing Conference
?
Web-App Remote Code Execution Via Scripting Engines by Rahul Sasi at c0c0n - International Cyber Security and Policing Conference http://is-ra.org/c0c0n/speakers.htmlUnite2014 Bunny Necropsy - Servers, Syncing Game State, Security and Optimiza...
Unite2014 Bunny Necropsy - Servers, Syncing Game State, Security and Optimiza...David Geurts
?
A 30 minute extension on the presentation Syncing Success. Talks about all the lessons learned and how we improved upon them. Very good tips on Unity and how to manage MonoBehaviours to make unity games run super smooth. Unity Asset Bundle build tool plan and setupBSIDES-PR Keynote Hunting for Bad Guys
BSIDES-PR Keynote Hunting for Bad GuysJoff Thyer
?
This document discusses techniques for hunting bad guys on networks, including identifying client-side attacks, malware command and control channels, post-exploitation activities, and hunting artifacts. It provides examples of using DNS logs, firewall logs, HTTP logs, registry keys, installed software inventories, and the AMCache registry hive to look for anomalous behaviors that could indicate security compromises. The goal is to actively hunt for threats rather than just detecting known bad behaviors.Building your first Windows Phone 7 application for SharePoint
Building your first Windows Phone 7 application for SharePointJoris Poelmans
?
This document discusses building Windows Phone 7 applications to access SharePoint. It covers authentication with SharePoint, exploring different remote APIs like RSS, REST, and web services. It demonstrates integrating with SharePoint using RSS/ATOM feeds, the REST API, and social/search web services. The document emphasizes that authentication makes WP7 integration with SharePoint difficult but the SharePoint 2010 and WP7 Training Kit can help get started quickly building apps to extend SharePoint business solutions.If You Tolerate This, Your Child Processes Will Be Next
If You Tolerate This, Your Child Processes Will Be NextBart Leppens
?
Presentation given by Bart Leppens at Belgian OWASP chapter on 17th december 2013. This preso talks about BeEF, IPC and IPE. Web-browser exploiting internal network services and Cross-Site Faxing (XSF).CNIT 128 8. Android Implementation Issues (Part 3)
CNIT 128 8. Android Implementation Issues (Part 3)Sam Bowne
?
This document discusses various techniques for exploiting Android devices, including injecting JavaScript code to install malware, tricking users into downloading malicious updates, abusing permissions to gain access to private data like contacts and location, and extracting user data like passwords through physical access to the device. It provides examples of exploiting vulnerabilities in apps to escalate privileges and infiltrate user accounts.NMS Media Services Jobshet 1 to 5 Summary
NMS Media Services Jobshet 1 to 5 SummaryHock Leng PUAH
?
This document provides an overview of the first 5 jobsheets for a media services course. It discusses [1] installing the latest version of VirtualBox executable files, [2] using VirtualBox to set up a virtual machine with network drive access to host files, and [3] configuring common web server roles and services like IIS on a Windows Server 2003 virtual machine. It also covers embedding different media file types like images, Shockwave, Flash video, and HTML5 video on web pages, and ensuring the proper MIME types are configured on the server for file extensions.Contributing To The Mozilla Codebase
Contributing To The Mozilla CodebaseSouradeep De
?
The document provides instructions for contributing code to the Mozilla codebase. It outlines 7 steps: 1) Get the source code and build Firefox, 2) Understand the development process, 3) Find work to do by fixing bugs or using whatcanidoformozilla.org, 4) Fix the bug, 5) Get code review, 6) Respond to review feedback, and 7) Get the code committed. It also provides examples of bugs and languages/projects to contribute to, including C++, JavaScript, Java, Python, PHP, and Rust.PHP - Programming language war, does it matter
PHP - Programming language war, does it matterMizno Kruge
?
ºÝºÝߣ for Software Architect Indonesia Community (SARCCOM) meetup 26th August 2017 at Microsoft Indonesia
https://www.meetup.com/Software-Architect-Indonesia/events/242334607/ServerSentEvents.pdf
ServerSentEvents.pdfAlessandro Minoccheri
?
This document discusses Server-Sent Events (SSE) and how it can be used to build an auction engine application. SSE allows a server to push automatic updates to clients via an HTTP connection. It provides a more memory-efficient alternative to polling via XMLHttpRequest. The document compares SSE to WebSockets, noting SSE uses HTTP while WebSockets use a custom protocol. SSE is best for cases like stock updates or notifications where communication is unidirectional from server to client. The document demonstrates implementing SSE from scratch using Symfony/Mercure and discusses considerations like handling connection errors and sending events to specific users/topics.Foxtrot C2: Forced Payload Delivery
Foxtrot C2: Forced Payload DeliveryDimitry Snezhkov
?
The document summarizes a technique for delivering payloads across networks with robust inspection mechanisms. It proposes using Firefox Send for private, encrypted file sharing to deliver payloads. Payloads are encrypted client-side using the WebCrypto API and can be decrypted in any browser. Notification of the encrypted file link is done over alternate covert channels like DNS to avoid inspection. A Python-based C2 framework called Foxtrot is demonstrated which uses Firefox Send for the payload delivery channel and DNS for the command and control channel to automate payload delivery between agent systems.Dark Fairytales from a Phisherman (Vol. II)
Dark Fairytales from a Phisherman (Vol. II)Michele Orru
?
The document outlines techniques for automating phishing campaigns using tools like PhishingFrenzy and the Browser Exploitation Framework (BeEF).
It describes how phishing is similar to fishing in that it involves preparing bait (in the form of phishing templates) and casting it out to catch victims. It then introduces PhishLulz, an automated phishing tool built on PhishingFrenzy and BeEF that can be run cheaply on Amazon EC2.
It also discusses the new BeEF Autorun Rule Engine, which allows defining rules to trigger client-side attacks and modules based on conditions like the browser or OS of hooked victims. Examples are given of how this could be usedDigital Transformation Summit - Melbourne 2019
Digital Transformation Summit - Melbourne 2019Nigel Fernandes
?
A 20min presentation given to industry leaders across Melbourne and Sydney on Digital Transformation.
The key take aways were:
- Focus on Why (and be genuine)
- Exploit Conway's Law (potentially in reverse).
- Start Now.
Ipqc Enterprise Architecture Summit - Melbourne 2019
Ipqc Enterprise Architecture Summit - Melbourne 2019Nigel Fernandes
?
Conference presentation on Enterprise architecture and strategy conversations around the Finance Core systems.
More Related Content
Similar to Lessons learnt the hard way. (20)
Huiming Liu-'resident evil' of smart phones--wombie attack
Huiming Liu-'resident evil' of smart phones--wombie attackGeekPwn Keen
?
In this presentation, Huiming Liu, the researcher of Tencent Security Xuanwu Lab, will present an astonishing mobile wireless zombie(Wombie) attack demo ¡ª the smartphone viruses spread like zombies in ¡°Resident Evil¡±, and the technique details will also be explained. The Wombie doesn¡¯t rely on Internet to spread, so it can¡¯t be detected on the internet. Besides, it can serve as an attack amplifier for many other attack methods. For example, the recent KRACK attack about WPA2 will benefit a lot if combined with the Wombie Attack.DSA Day 2 PPT.pdf
DSA Day 2 PPT.pdfAkramMohammad28
?
1) The document recaps Day 1 of the 30 Days Master Class on Data Science 2.0 which covered introductions, the course agenda, and applications of data science.
2) It then discusses why Python is well-suited for data science due to its ease of use and development, provides a brief history of Python, and outlines how to install Python.
3) The document introduces key Python concepts like interpreters, compilers, and different execution modes before demonstrating basic programming structures like conditional statements and loops.Owasp AppSecEU 2015 - BeEF Session
Owasp AppSecEU 2015 - BeEF SessionBart Leppens
?
Bart Leppens gave a presentation on the Browser Exploitation Framework (BeEF). He discussed BeEF's architecture, how it hooks browsers, its module and extension system, and live demonstrations of information gathering, exploitation, and using BeEF with Metasploit. He also covered topics like inter-protocol communication, exploiting protocols like ActiveFax, and porting BeEF bind shellcode to Linux. The talk provided an overview of BeEF's capabilities and real-world attack scenarios.CNIT 128 8. Identifying and Exploiting Android Implementation Issues (Part 3)
CNIT 128 8. Identifying and Exploiting Android Implementation Issues (Part 3)Sam Bowne
?
Based on "The Mobile Application Hacker's Handbook 1st Edition", by Dominic Chell
Instructor: Sam Bowne
More info: https://samsclass.info/128/128_S19.shtmlBOX of Illusion MOSEC'17
BOX of Illusion MOSEC'17Python0x0
?
The age of IoT is at our threshold. Many large-scale companies have already started developing security solutions to make this brave new world safe. One of possible, we may even say, surefire approaches is to create a device which would connect to a network and protect other devices in it. Let¡¯s discuss the efficiency of the given approach in relation to BitDefender Box.
Build html 5 apps for mobile
Build html 5 apps for mobileJo?o Ferreira
?
This document discusses building apps for Firefox OS mobile operating system using HTML5, CSS, and JavaScript. It provides an overview of Firefox OS, describes the types of apps that can be built including hosted, packaged, and hybrid apps, and explains the process for submitting a built app to the Firefox Marketplace.1. inside source IP address and port number 172.16.1.2020translat.pdf
1. inside source IP address and port number 172.16.1.2020translat.pdfmeejuhaszjasmynspe52
?
1. inside source IP address and port number 172.16.1.20:20
translated outside IP address 68.68.68.1:80
1. VPN address translation
2. Network address port translation
3. DMZ address translation
4. Network address translation
2. How many ports are used by computers for TCP/IP network traffic?
1. 65500
2. 1024
3. 65535
4. 6553
3. Which command prompt utility allows administrators to determine the actual path from one
computer to another?
1. tracert
2. NAT
3. dns flush
4. ping
4. Which UNIX tool is used to do a scan on itself?
1. traceroute
2. DHCP
3. netstat
4. ping localhost
5. Which type of VPN would be used to allow an organization to leverage the Internet backbone
to build a secure WAN between office branches?
1. remote user vpn
2. HTTP VPN
3. DMZ vpn
4. remote office vpn
6. What type of firewall uses routers with rules to grant or deny access based only on source
address, destination address, and port number?
1. packet-filtering gateway
2. application gateway
3. layer 3 gateway
4. hybrid gateway
7. A _______ attack will automatically attempt thousands or millions of passwords to gain
access to a system.
1. worm
2. virus
3. dictionary
4. logic bomb
8. What protocol is are layers 6 and 7 of the OSI model based on?
1. TCP/IP
2. IPsec
3. FTP
4. PPTP
9. Which network services provides the mapping and translation of domain names to IP
addresses?
1. HTTP
2. DHCP
3. DNS
4. FTP
10. With a proxy server enabled on a firewall, the firewall stores web pages where?
1. Local usb drive
2. RAM
3. Local hard drive
4. FTP server
11 The ________ provides definitions for seen layers, which each layer provides services that
depend on higher level layers depend on.
2. TCP
3. FTP
4. OSI
5. DNS
12. Which of the ways listed below can firewall security be completely bypassed? (Multiple
answers)
1. HTTP sites are never secure
2. E-mail is never secure
3. A computer not owned by the enterprise should never be connected to the enterprise
4. Files from home computers and files from office computers should never commingle.
Solution
Q1
4. Network address translation
Q2
3. 65535
Q3
1. tracert
Q6
1. packet-filtering gateway
Q7
2. virus.CSW2017 Geshev+Miller logic bug hunting in chrome on android
CSW2017 Geshev+Miller logic bug hunting in chrome on androidCanSecWest
?
The document describes several logic flaws in Chrome on Android that could be exploited. It discusses exploiting automatic file downloads to steal downloaded files or files from Google Drive by tricking the browser into downloading malicious files. It also describes using cross-site request forgery tokens and device IDs to programmatically install arbitrary apps from the Google Play store. The presentation aims to show how understanding application logic can lead to powerful "logic bug" exploits beyond simple memory corruption issues.Web-App Remote Code Execution Via Scripting Engines
Web-App Remote Code Execution Via Scripting Enginesc0c0n - International Cyber Security and Policing Conference
?
Web-App Remote Code Execution Via Scripting Engines by Rahul Sasi at c0c0n - International Cyber Security and Policing Conference http://is-ra.org/c0c0n/speakers.htmlUnite2014 Bunny Necropsy - Servers, Syncing Game State, Security and Optimiza...
Unite2014 Bunny Necropsy - Servers, Syncing Game State, Security and Optimiza...David Geurts
?
A 30 minute extension on the presentation Syncing Success. Talks about all the lessons learned and how we improved upon them. Very good tips on Unity and how to manage MonoBehaviours to make unity games run super smooth. Unity Asset Bundle build tool plan and setupBSIDES-PR Keynote Hunting for Bad Guys
BSIDES-PR Keynote Hunting for Bad GuysJoff Thyer
?
This document discusses techniques for hunting bad guys on networks, including identifying client-side attacks, malware command and control channels, post-exploitation activities, and hunting artifacts. It provides examples of using DNS logs, firewall logs, HTTP logs, registry keys, installed software inventories, and the AMCache registry hive to look for anomalous behaviors that could indicate security compromises. The goal is to actively hunt for threats rather than just detecting known bad behaviors.Building your first Windows Phone 7 application for SharePoint
Building your first Windows Phone 7 application for SharePointJoris Poelmans
?
This document discusses building Windows Phone 7 applications to access SharePoint. It covers authentication with SharePoint, exploring different remote APIs like RSS, REST, and web services. It demonstrates integrating with SharePoint using RSS/ATOM feeds, the REST API, and social/search web services. The document emphasizes that authentication makes WP7 integration with SharePoint difficult but the SharePoint 2010 and WP7 Training Kit can help get started quickly building apps to extend SharePoint business solutions.If You Tolerate This, Your Child Processes Will Be Next
If You Tolerate This, Your Child Processes Will Be NextBart Leppens
?
Presentation given by Bart Leppens at Belgian OWASP chapter on 17th december 2013. This preso talks about BeEF, IPC and IPE. Web-browser exploiting internal network services and Cross-Site Faxing (XSF).CNIT 128 8. Android Implementation Issues (Part 3)
CNIT 128 8. Android Implementation Issues (Part 3)Sam Bowne
?
This document discusses various techniques for exploiting Android devices, including injecting JavaScript code to install malware, tricking users into downloading malicious updates, abusing permissions to gain access to private data like contacts and location, and extracting user data like passwords through physical access to the device. It provides examples of exploiting vulnerabilities in apps to escalate privileges and infiltrate user accounts.NMS Media Services Jobshet 1 to 5 Summary
NMS Media Services Jobshet 1 to 5 SummaryHock Leng PUAH
?
This document provides an overview of the first 5 jobsheets for a media services course. It discusses [1] installing the latest version of VirtualBox executable files, [2] using VirtualBox to set up a virtual machine with network drive access to host files, and [3] configuring common web server roles and services like IIS on a Windows Server 2003 virtual machine. It also covers embedding different media file types like images, Shockwave, Flash video, and HTML5 video on web pages, and ensuring the proper MIME types are configured on the server for file extensions.Contributing To The Mozilla Codebase
Contributing To The Mozilla CodebaseSouradeep De
?
The document provides instructions for contributing code to the Mozilla codebase. It outlines 7 steps: 1) Get the source code and build Firefox, 2) Understand the development process, 3) Find work to do by fixing bugs or using whatcanidoformozilla.org, 4) Fix the bug, 5) Get code review, 6) Respond to review feedback, and 7) Get the code committed. It also provides examples of bugs and languages/projects to contribute to, including C++, JavaScript, Java, Python, PHP, and Rust.PHP - Programming language war, does it matter
PHP - Programming language war, does it matterMizno Kruge
?
ºÝºÝߣ for Software Architect Indonesia Community (SARCCOM) meetup 26th August 2017 at Microsoft Indonesia
https://www.meetup.com/Software-Architect-Indonesia/events/242334607/ServerSentEvents.pdf
ServerSentEvents.pdfAlessandro Minoccheri
?
This document discusses Server-Sent Events (SSE) and how it can be used to build an auction engine application. SSE allows a server to push automatic updates to clients via an HTTP connection. It provides a more memory-efficient alternative to polling via XMLHttpRequest. The document compares SSE to WebSockets, noting SSE uses HTTP while WebSockets use a custom protocol. SSE is best for cases like stock updates or notifications where communication is unidirectional from server to client. The document demonstrates implementing SSE from scratch using Symfony/Mercure and discusses considerations like handling connection errors and sending events to specific users/topics.Foxtrot C2: Forced Payload Delivery
Foxtrot C2: Forced Payload DeliveryDimitry Snezhkov
?
The document summarizes a technique for delivering payloads across networks with robust inspection mechanisms. It proposes using Firefox Send for private, encrypted file sharing to deliver payloads. Payloads are encrypted client-side using the WebCrypto API and can be decrypted in any browser. Notification of the encrypted file link is done over alternate covert channels like DNS to avoid inspection. A Python-based C2 framework called Foxtrot is demonstrated which uses Firefox Send for the payload delivery channel and DNS for the command and control channel to automate payload delivery between agent systems.Dark Fairytales from a Phisherman (Vol. II)
Dark Fairytales from a Phisherman (Vol. II)Michele Orru
?
The document outlines techniques for automating phishing campaigns using tools like PhishingFrenzy and the Browser Exploitation Framework (BeEF).
It describes how phishing is similar to fishing in that it involves preparing bait (in the form of phishing templates) and casting it out to catch victims. It then introduces PhishLulz, an automated phishing tool built on PhishingFrenzy and BeEF that can be run cheaply on Amazon EC2.
It also discusses the new BeEF Autorun Rule Engine, which allows defining rules to trigger client-side attacks and modules based on conditions like the browser or OS of hooked victims. Examples are given of how this could be usedWeb-App Remote Code Execution Via Scripting Engines
Web-App Remote Code Execution Via Scripting Enginesc0c0n - International Cyber Security and Policing Conference
?
More from Nigel Fernandes (18)
Digital Transformation Summit - Melbourne 2019
Digital Transformation Summit - Melbourne 2019Nigel Fernandes
?
A 20min presentation given to industry leaders across Melbourne and Sydney on Digital Transformation.
The key take aways were:
- Focus on Why (and be genuine)
- Exploit Conway's Law (potentially in reverse).
- Start Now.
Ipqc Enterprise Architecture Summit - Melbourne 2019
Ipqc Enterprise Architecture Summit - Melbourne 2019Nigel Fernandes
?
Conference presentation on Enterprise architecture and strategy conversations around the Finance Core systems.
Exploiting Serverless - DevOps Conference Sydney 2018
Exploiting Serverless - DevOps Conference Sydney 2018Nigel Fernandes
?
As an enterprise the thing you should care about is not the hype about serverless, it is the billing model shift it brings.
If you are starting out on your DevOps journey in the enterprise, look to skip the complexity and costs of Containerisation and go straight to Serverless.
This is a talk I presented at the DevOps sydney conference in 2018. It focuses on the cost benefits of serverless and why your organisation should care.Looking at your Technology company through the "3 Horizons of growth" model. 
Looking at your Technology company through the "3 Horizons of growth" model. Nigel Fernandes
?
The model was originally proposed by Mckinsey as the "3 horizons of growth" to help business leaders honing their analysis of where and how to compete, grow, and best manage their organizations.
In this talk I put to the audience the model could be applied to Technology businesses, and I attempt to draw the members present into a discussion on its application to people & teams as well as architecture or tech strategy.
I also outline a few activities that can provide data points for consideration and focus the attention of people as part of the model.
All this comes with the disclaimer "all models are incorrect some are useful". I look forward to hearing your feedback.
https://www.meetup.com/CTO-School-Melbourne/events/235165561/Agile Software Development (Monash University - Guest Lecture series)
Agile Software Development (Monash University - Guest Lecture series)Nigel Fernandes
?
I was invited by Chris Gonsalves (Associate Dean Student Engagement) and Mehran Vahid (Lecturer, Faculty of Information Technology) to present a guest lecture to roughly 200 students @ Monash University on Agile Software Development (June 2016).
Since the students had already covered the theory of Agile, Scrum and RUP, this talk focussed on the real world aspects of Agile in practice and used SEEK as a baseline example.Microservices meetup
Microservices meetupNigel Fernandes
?
A short presentation to the Microservices meet up on using the 3 horizons model from McKinsey to help guide architecture and technical investment decisions. And how Microservices can help in certain places.Seek test-invaders
Seek test-invadersNigel Fernandes
?
This was a guide to a workshop we ran at Monash University in Clayton to introduce students to test driven design.
The cool tools we used for the workshop were orignally built by Scott Robinson, Mike Gardiner and Ryan Boucher. Credit:https://github.com/quad/testinvaders
Thanks to Norman Noble, Neeraj Visal and Scott Dan who helped me run the session.My career lessons - for Monash Students at Battle of the Brains 215
My career lessons - for Monash Students at Battle of the Brains 215Nigel Fernandes
?
5 minute presentation to IT and Engineering Students at Monash, Battle of the Brains 2015 (Typo on slide 9: should say "now" instead of "not".)Towards a responsive business - DevOps MeetUp Melbourne 2013
Towards a responsive business - DevOps MeetUp Melbourne 2013Nigel Fernandes
?
Over the last year, a team of software engineers have been quietly revamping the architecture, codebase and development practises at World Vision Australia. They have been using the principles of continuous delivery to deliver a SOA based IT platform for a non-profit who's business genuinely has a world wide impact. In the span of 6 months they have delivered several drops to production through a push button deployment process.
We use Nuget, ProGet, WinRM, Chocolately, NSpec, Jasmine/Karma/PhantomJS and SpecFlow/Selenium/WebDriver. We test our deployment scripts with Canary deployments orchestrated through PowerShell. More interestingly we're using Puppet and Node.js to drive the idea of shipping products intended for single tenant architectures and the principle of "the machine as the artefact of the pipeline".Towards a responsive business, the developer way
Towards a responsive business, the developer wayNigel Fernandes
?
Presentation at DDD Melbourne in July 2013 by Venetia Bird and Nigel Fernandes. The talk focuses on dealing with legacy systems and complexity. They discuss the developer techniques to evolving an architecture thats better able to handle business evolution. DevOps Days Melbourne meet-up
DevOps Days Melbourne meet-upNigel Fernandes
?
This is a talk I gave at the DevOps days meet-up in Melbourne in June 2012.
In the talk I go over implementing Continuous Delivery in an enterprise organisation. Its based on our experiences doing CD in a large traditional Telco in Australia.
It covers:
- an introduction to the principle
- the state of the art of Cont. Delivery in Single application versus multistream development
- the optimum conditions to start implementing and measuring CD
- focusing on the BAU/Support line as an entry pointLAST Conference - Dev-Ops and Continuous Delivery
LAST Conference - Dev-Ops and Continuous DeliveryNigel Fernandes
?
This is a talk I gave at the Lean, Agile and Systems Thinking conference in Melbourne, July 2012.
http://www.lastconference.com/
Covering DevOps as a movement. Ideas behind continuous delivery and a sample implementation covering some of those principles in practise using Puppet and Amazon Web Services.Continuous Delivery and the Cloud
Continuous Delivery and the CloudNigel Fernandes
?
This is a webinar presentation I did with Daniel Aragao for the ThoughtWorks Continuous Delivery series. We focus on 3 common impediments to implementing continuous delivery and our 3 step process to overcoming them.
Given our target audience, this presentation was not very technical, but focuses on ideas and concepts rather than working code.
You can listen to and watch the presentation here:
http://continuous-delivery.thoughtworks.com/events/delivery-cloudContinuous Delivery in the AWS Cloud
Continuous Delivery in the AWS CloudNigel Fernandes
?
This document summarizes a workshop about DevOps practices like continuous integration, infrastructure as code, and automated deployment. It discusses:
1. Using continuous integration to automatically build and test code changes.
2. Defining infrastructure using configuration files to enable consistent and automated environments from development to production.
3. Automating deployment through tools that rebuild servers from code and data to enable rapid, repeatable releases with minimal downtime.
The document provides examples using tools like Puppet, AWS, and CloudFormation to demonstrate these practices on a sample Twitter application. It emphasizes how automation enables faster delivery of features while maintaining production stability.RubyConf Uruguay 2011
RubyConf Uruguay 2011Nigel Fernandes
?
Talk given in Montevideo in 2011 for 30mins.
Focussing on code quality and understanding what that means.Thoughtworks Brazil, Code Quality
Thoughtworks Brazil, Code QualityNigel Fernandes
?
The document discusses refactoring code to improve its structure and quality. It recommends measuring code smells and toxicity using various metrics tools to identify areas for refactoring. Key areas include complexity, duplication, feature envy, and dependency tangles. The steps involve quantifying issues, visualizing dependencies, agreeing on solutions, and then refactoring the code. Maintaining test coverage is important to ensure refactoring does not introduce bugs. The overall goal is to make the code easier to understand and modify without changing its functionality.RubyConf Brazil 2011
RubyConf Brazil 2011Nigel Fernandes
?
Talk given in SaoPaulo in 2011 for 45mins.
Focussing on servver side mash-ups and our use of them in a Strangler patternTest Engineering
Test EngineeringNigel Fernandes
?
A small presentation go alogn with my demo of a simple Selenium test called from PHP with Selenium RC.Recently uploaded (20)
UiPath Document Understanding - Generative AI and Active learning capabilities
UiPath Document Understanding - Generative AI and Active learning capabilitiesDianaGray10
?
This session focus on Generative AI features and Active learning modern experience with Document understanding.
Topics Covered:
Overview of Document Understanding
How Generative Annotation works?
What is Generative Classification?
How to use Generative Extraction activities?
What is Generative Validation?
How Active learning modern experience accelerate model training?
Q/A
? If you have any questions or feedback, please refer to the "Women in Automation 2025" dedicated Forum thread. You can find there extra details and updates. Computational Photography: How Technology is Changing Way We Capture the World
Computational Photography: How Technology is Changing Way We Capture the WorldHusseinMalikMammadli
?
? Computational Photography (Computer Vision/Image): How Technology is Changing the Way We Capture the World
He? d¨¹?¨¹nm¨¹s¨¹n¨¹zm¨¹, m¨¹asir smartfonlar v? kameralar nec? bu q?d?r g?z?l g?r¨¹nt¨¹l?r yarad?r? Bunun sirri Computational Fotoqrafiyas?nda(Computer Vision/Imaging) gizlidir¡ª??kill?ri ??km? v? emal etm? ¨¹sulumuzu t?kmill??dir?n, komp¨¹ter elmi il? fotoqrafiyan?n inqilabi birl??m?si.Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...
Getting Started with AWS - Enterprise Landing Zone for Terraform Learning & D...Chris Wahl
?
Recording: https://youtu.be/PASG0NTKUQA?si=1Ih7O9z0Lk0IzX9n
Welcome innovators! In this comprehensive tutorial, you will learn how to get started with AWS Cloud and Terraform to build an enterprise-like landing zone for a secure, low-cost environment to develop with Terraform. We'll guide you through setting up AWS Control Tower, Identity and Access Management, and creating a sandbox account, ensuring you have a safe and controlled area for learning and development. You'll also learn about budget management, single sign-on setup, and using AWS organizations for policy management. Plus, dive deep into Terraform basics, including setting up state management, migrating local state to remote state, and making resource modifications using your new infrastructure as code skills. Perfect for beginners looking to master AWS and Terraform essentials!Transcript: AI in publishing: Your questions answered - Tech Forum 2025
Transcript: AI in publishing: Your questions answered - Tech Forum 2025BookNet Canada
?
George Walkley, a publishing veteran and leading authority on AI applications, joins us for a follow-up to his presentation "Applying AI to publishing: A balanced and ethical approach". George gives a brief overview of developments since that presentation and answers attendees' pressing questions about AI¡¯s impact and potential applications in the book industry.
Link to recording and presentation slides: https://bnctechforum.ca/sessions/ai-in-publishing-your-questions-answered/
Presented by BookNet Canada on February 20, 2025 with support from the Department of Canadian Heritage.EaseUS Partition Master Crack 2025 + Serial Key
EaseUS Partition Master Crack 2025 + Serial Keykherorpacca127
?
https://ncracked.com/7961-2/
Note: >> Please copy the link and paste it into Google New Tab now Download link
EASEUS Partition Master Crack is a professional hard disk partition management tool and system partition optimization software. It is an all-in-one PC and server disk management toolkit for IT professionals, system administrators, technicians, and consultants to provide technical services to customers with unlimited use.
EASEUS Partition Master 18.0 Technician Edition Crack interface is clean and tidy, so all options are at your fingertips. Whether you want to resize, move, copy, merge, browse, check, convert partitions, or change their labels, you can do everything with a few clicks. The defragmentation tool is also designed to merge fragmented files and folders and store them in contiguous locations on the hard drive.
5 Best Agentic AI Frameworks for 2025.pdf
5 Best Agentic AI Frameworks for 2025.pdfSoluLab1231
?
AI chatbots use generative AI to develop answers from a single interaction. When someone asks a question, the chatbot responds using a natural language process (NLP). Agentic AI, the next wave of artificial intelligence, goes beyond this by solving complicated multistep problems on its way by using advanced reasoning and iterative planning. Additionally, it is expected to improve operations and productivity across all sectors.
Dev Dives: Unlock the future of automation with UiPath Agent Builder
Dev Dives: Unlock the future of automation with UiPath Agent BuilderUiPathCommunity
?
This webinar will offer you a first look at the powerful capabilities of UiPath Agent Builder, designed to streamline your automation processes and enhance your workflow efficiency.
? During the session, you will:
- Discover how to build agents with low-code experience, making it accessible for both developers and business users.
- Learn how to leverage automations and activities as tools within your agents, enabling them to handle complex and dynamic workflows.
- Gain insights into the AI Trust Layer, which provides robust management and monitoring capabilities, ensuring trust and transparency in your automation processes.
- See how agents can be deployed and integrated with your existing UiPath cloud and Studio environments.
??? Speaker:
Zach Eslami, Sr. Manager, Product Management Director, UiPath
? Register for our upcoming Dev Dives March session:
Unleash the power of macOS Automation with UiPath
? AMER: https://bit.ly/Dev_Dives_AMER_March
? EMEA & APJ:https://bit.ly/Dev_Dives_EMEA_APJ_March
This session was streamed live on February 27, 2025, 15:00 GMT.
Check out future Dev Dives 2025 sessions at:
? https://bit.ly/Dev_Dives_2025
5 Must-Use AI Tools to Supercharge Your Productivity
5 Must-Use AI Tools to Supercharge Your Productivitycryptouniversityoffi
?
5 Must-Use AI Tools to Supercharge Your Productivity!
AI is changing the game! ? From research to creativity and coding, here are 5 powerful AI tools you should try.
NotebookLM
? NotebookLM ¨C Your AI Research Assistant
? Organizes & summarizes notes
? Generates insights from multiple sources
? Ideal for students, researchers & writers
? Boost your productivity with smarter note-taking!
Napkin.ai
? Napkin.ai ¨C The Creativity Booster
? Connects and organizes ideas
? Perfect for writers, designers & entrepreneurs
? Acts as your AI-powered brainstorming partner
? Unleash your creativity effortlessly!
DeepSeek
? DeepSeek ¨C Smarter AI Search
? Delivers deeper & more precise search results
? Analyzes large datasets for better insights
? Ideal for professionals & researchers
? Find what you need¡ªfaster & smarter!
ChatGPT
? ChatGPT ¨C Your AI Chat Assistant
? Answers questions, writes content & assists in coding
? Helps businesses with customer support
? Boosts learning & productivity
? From content to coding¡ªChatGPT does it all!
Devin AI
? Devin AI ¨C AI for Coders
? Writes, debugs & optimizes code
? Assists developers at all skill levels
? Makes coding faster & more efficient
??? Let AI be your coding partner!
? AI is transforming the way we work!
DealBook of Ukraine: 2025 edition | AVentures Capital
DealBook of Ukraine: 2025 edition | AVentures CapitalYevgen Sysoyev
?
The DealBook is our annual overview of the Ukrainian tech investment industry. This edition comprehensively covers the full year 2024 and the first deals of 2025. 2025-02-27 Tech & Play_ Fun, UX, and Community.pdf
2025-02-27 Tech & Play_ Fun, UX, and Community.pdfkatalinjordans1
?
2025-02-27 Tech & Play_ Fun, UX, and Community.pdfUnlocking DevOps Secuirty :Vault & Keylock
Unlocking DevOps Secuirty :Vault & KeylockHusseinMalikMammadli
?
DevOps i? t?hl¨¹k?sizliyi sizi maraqland?r?r? ?st?r developer, ist?r t?hl¨¹k?sizlik m¨¹h?ndisi, ist?rs? d? DevOps h?v?skar? olun, bu t?dbir ??b?k?l??m?k, bilikl?rinizi b?l¨¹?m?k v? DevSecOps sah?sind? ?n son t?cr¨¹b?l?ri ?yr?nm?k ¨¹?¨¹n m¨¹k?mm?l f¨¹rs?tdir!
Bu workshopda DevOps infrastrukturlar?n?n t?hl¨¹k?sizliyini nec? art?rmaq bar?d? dan??acay?q. DevOps sisteml?ri qurulark?n avtomatla?d?r?lm??, y¨¹ks?k ?l?atan v? etibarl? olmas? il? yana??, h?m d? t?hl¨¹k?sizlik m?s?l?l?ri n?z?r? al?nmal?d?r. Bu s?b?bd?n, DevOps komandolar?n?n t?hl¨¹k?sizliy? y?n?lmi? praktikalara riay?t etm?si vacibdir.Combining Lexical and Semantic Search with Milvus 2.5
Combining Lexical and Semantic Search with Milvus 2.5Zilliz
?
In short, lexical search is a way to search your documents based on the keywords they contain, in contrast to semantic search, which compares the similarity of embeddings. We¡¯ll be covering:
?Why, when, and how should you use lexical search
?What is the BM25 distance metric
?How exactly does Milvus 2.5 implement lexical search
?How to build an improved hybrid lexical + semantic search with Milvus 2.5THE BIG TEN BIOPHARMACEUTICAL MNCs: GLOBAL CAPABILITY CENTERS IN INDIA
THE BIG TEN BIOPHARMACEUTICAL MNCs: GLOBAL CAPABILITY CENTERS IN INDIASrivaanchi Nathan
?
This business intelligence report, "The Big Ten Biopharmaceutical MNCs: Global Capability Centers in India", provides an in-depth analysis of the operations and contributions of the Global Capability Centers (GCCs) of ten leading biopharmaceutical multinational corporations in India. The report covers AstraZeneca, Bayer, Bristol Myers Squibb, GlaxoSmithKline (GSK), Novartis, Sanofi, Roche, Pfizer, Novo Nordisk, and Eli Lilly. In this report each company's GCC is profiled with details on location, workforce size, investment, and the strategic roles these centers play in global business operations, research and development, and information technology and digital innovation.DevNexus - Building 10x Development Organizations.pdf
DevNexus - Building 10x Development Organizations.pdfJustin Reock
?
Developer Experience is Dead! Long Live Developer Experience!
In this keynote-style session, we¡¯ll take a detailed, granular look at the barriers to productivity developers face today and modern approaches for removing them. 10x developers may be a myth, but 10x organizations are very real, as proven by the influential study performed in the 1980s, ¡®The Coding War Games.¡¯
Right now, here in early 2025, we seem to be experiencing YAPP (Yet Another Productivity Philosophy), and that philosophy is converging on developer experience. It seems that with every new method, we invent to deliver products, whether physical or virtual, we reinvent productivity philosophies to go alongside them.
But which of these approaches works? DORA? SPACE? DevEx? What should we invest in and create urgency behind today so we don¡¯t have the same discussion again in a decade?L01 Introduction to Nanoindentation - What is hardness
L01 Introduction to Nanoindentation - What is hardnessRostislavDaniel
?
Introduction to NanoindentationBlockchain for Businesses Practical Use Cases & Benefits.pdf
Blockchain for Businesses Practical Use Cases & Benefits.pdf Yodaplus Technologies Private Limited
?
Blockchain is revolutionizing industries by enhancing security, transparency, and automation. From supply chain management and finance to healthcare and real estate, blockchain eliminates inefficiencies, prevents fraud, and streamlines operations.
What You'll Learn in This Presentation:
1. How blockchain enables real-time tracking & fraud prevention
2. The impact of smart contracts & decentralized finance (DeFi)
3. Why businesses should adopt secure and automated blockchain solutions
4. Real-world blockchain applications across multiple industries
Explore the future of blockchain and its practical benefits for businesses!Agentic AI: The 2025 Next-Gen Automation Guide
Agentic AI: The 2025 Next-Gen Automation GuideThoughtminds
?
Introduction to Agentic AI: Explains how it differs from traditional automation and its ability to make independent decisions.
Comparison with Generative AI: A structured comparison between Generative AI (content creation) and Agentic AI (autonomous action-taking).
Technical Breakdown: Covers core components such as LLMs, reinforcement learning, and cloud infrastructure that power Agentic AI.
Real-World Use Cases (2025 & Beyond): Examines how Agentic AI is transforming industries like insurance, healthcare, retail, finance, and cybersecurity.
Business Impact & ROI: Discusses case studies from Unilever, FedEx, and more, showcasing cost savings and operational efficiency improvements.
Challenges & Risks: Highlights bias, security threats, regulatory compliance, and workforce reskilling as critical challenges in AI adoption.
5-Step Implementation Strategy: A practical roadmap to help organizations integrate Agentic AI seamlessly.
Future Predictions (2025-2030): Forecasts on AI-driven workforce evolution, industry disruptions, and the rise of Quantum AI.
AI Trends and Fun Demos ¨C Sotheby¡¯s Rehoboth Presentation
AI Trends and Fun Demos ¨C Sotheby¡¯s Rehoboth PresentationEthan Holland
?
Ethan B. Holland explores the impact of artificial intelligence on real estate and digital transformation. Covering key AI trends such as multimodal AI, agency, co-pilots, and AI-powered computer usage, the document highlights how emerging technologies are reshaping industries. It includes real-world demonstrations of AI in action, from automated real estate insights to AI-generated voice and video applications. With expertise in digital transformation, Ethan shares insights from his work optimizing workflows with AI tools, automation, and large language models. This presentation is essential for professionals seeking to understand AI¡¯s role in business, automation, and real estate.
Blockchain for Businesses Practical Use Cases & Benefits.pdf
Blockchain for Businesses Practical Use Cases & Benefits.pdf Yodaplus Technologies Private Limited
?
Lessons learnt the hard way.
- 2. The other World Vision
- 7. Episode 1 : The SEO Fascination
- 11. 1. App packaged with Node + PhantomJS 2. Deploy the application. 3. Post deployment status check. 4. Post deployment snapshot script 5. Windows Task for nightly refresh
- 13. Episode 2 : The Responsive Fixation
- 15. The 300ms delay between a click and a touch event.
- 18. Episode 3 : The Storage Freakiness
- 20. HTTP HTTPS
- 21. Ninja Punch!
- 22. We hit the ceiling
- 24. Ninja Punch!
- 26. Ninja Punch!
- 27. It goes out of date fast
- 28. Episode 4 : The re-use Finicky-ness
- 29. Episode 5 : The almost there functionality
- 30. CORS Cross Origin Resource Sharing
- 32. Ninja Punch!
- 33. IE8, 9: XDomainRequest ? The target URL must be accessed using only the HTTP methods GET and POST ? No custom headers may be added to the request ? Only text/plain is supported for the request's Content-Type header ? No authentication or cookies will be sent with the request ? Requests targeted to Intranet URLs may only be made from the Intranet Zone ? Requests must be targeted to the same scheme as the hosting page
- 34. Episode 6: The Scott-Zhamak phenomenon
- 37. Factoring systems by Value Stream
- 38. The wise man¡¯s words
- 39. You aren¡¯t going to get it right at first go
- 40. Using WebAPI and Areas to build services within a service
- 42. Eliminating batch processes is hard
- 43. The leaks
- 44. C#, Dynamic, and Expando Objects
- 45. Thank you.
Editor's Notes
- #8: SEO
- #10: Google AJAX site protocol
- #22: The blocking render effect of local storage.
- #25: The blocking render effect of local storage.
- #27: The blocking render effect of local storage.
- #28: Grunt to modify the html. Compressing and clojure compiler
- #30: CORS.
- #33: The blocking render effect of local storage.
- #44: Lax contracts and soft versioning. Leaking abstractions.