This talk is a distillation of knowledge acquired from helping organizations transition to Agile methods for nearly a decade. Topics covered include readiness assessments, organizational antibodies, project community, agile metrics, pair-programming, legacy code and transition strategies. You’ll see lots of pictures and hear lots of memorable stories. The talk concludes with a Q&A session.
In this presentation filmed during QCon SF 2007, Jeff Williams addressed two major security holes threatening the world of Web 2.0 applications: Cross Site Request Forgery (CSRF) and Advanced Cross Site Scripting ((XSS). After explaining the threats and how they work, Jeff presented the countermeasures to be taken in order to avoid them.
In this presentation filmed during QCon SF 2007, Linda Rising tried to approach agility from a different perspective, that of how we are wired to work and sleep, which turns out to be very similar to iterations. The conclusion was that we are not to do agile, but to rather be agile.
In this presentation, recorded at QCon, WSO2's CEO and WSDL co-inventor Sanjiva Weerawarana tries to address some of the myths and lies surrounding the REST-vs.-WS-* debate. He argues that while both camps claim how "easy" it is to build distributed business applications using their favorite technological approach, building distributed applications simply remains a hard problem.
In this presentation, Ian Wilkes, VP of Systems Engineering, describes the architecture used by the popular game named Second Life. Ian presents how the architecture was at its debut and how it evolved over years as users and features have been added.
In this presentation, Ian Flint, Director of Operations for Bix, Yahoo!’s online contest service, tries to explain the infrastructure and architecture employed by Yahoo! to keep going a multitude of servers running of different platforms and offering different services.
Successful architectures evolve over time to meet the needs of changing business requirements. In this talk, Luke Hohmann presents how to collaborate with key members of your business, including product management, product marketing, and product owners, to manage architectural changes that promote quality, using techniques and language that they will understand and support.
In his presentation, recorded at QCon San Francisco, MuleSource architect Dan Diephouse explores ways to use the Atom Publishing Protocol (AtomPub) when building services in a RESTful way. He explains when to use and when to avoid using AtomPub, highlights its advantages, and shows where it doesn't provide a generic solution.
Every organization should define a standard way for developers to perform common security-related actions - authenticating, access control, validation, encoding, encryption, logging, error handling, and more. In this talk, Jeff discuss the process of establishing a security API for your enterprise, focusing on the most critical methods needed by web application and web service developers.
In this presentation, Dan Pritchett addresses latency issues in web applications that should be dealt with from the beginning when the system is designed. Dan offers some practical solutions to latency.
For decades, software engineering has "dreamed an impossible dream", to build software as easily as building Lego houses. In this talk, James Noble imagines a world where the dream has been realized, where software parts can be found in worldwide repositories, where most software is built by reusing existing software, and where we've finally been freed from the mundane necessity of programming.
In this presentation, Brian Zimmer, Senior Architect at Orbitz World Wide, unveils Orbitz.com’s architecture and its evolution over the years as the site grew from a US domestic flights booking website to an international website offering flight booking, accommodation, car rental, cruises, vacations, and event booking.