We have learned that we need to trust others, but as our parents used to say – don’t trust strangers. So we secure our production server more than ever. Yet, there is this no-man's land: “the build server”. We think it’s time to take a closer look at some of the good practices around securing builds & artifacts to improve our day to day level of trust. Development has changed over the years, from doing everything yourself to a 3rd party package for every function. Operations has changed too, running your own servers is now considered an exception. To the cloud!
We have learned that we need to trust others, but as our parents used to say – don’t trust strangers. So we secure our production server more than ever. Yet, in the middle sits this no-man's land: “the CI server”. We think it’s time to take a closer look at some of the good practices around securing builds & artifacts to improve our day to day level of trust. With Marked Sherman statement “Development is now assembly” in mind, the talk will focus more on the package/artifact/repository aspect. Less on the app security inside the code itself or at the OS/Machine level. ❮ul❯
❮li❯This talk I will go into detail on:❮/li❯
❮li❯How to verify trust of your dependencies: from metadata, binaries, and repositories❮/li❯
❮li❯How to provide trust to others that build upon your software❮/li❯
❮li❯How this ties into the concept of “reproducible builds”❮/li❯
❮li❯How a practical “Software Bill of Material” looks❮/li❯
❮li❯How the concepts of the “The Update Framework” (TUF) relate❮/li❯
❮li❯How you can implement secure packaging policies❮/li❯
❮/ul❯ It will explain these topics using practical/code examples from the Node.js and Docker ecosystems.
All this will be presented from the different viewpoints from “dev” , “sec” and “ops”. Let’s take ownership of your trust , we are already responsible when things go wrong anyway. EVENT / SPEAKER:
FOSDEM 2020 / Patrick Debois PUBLICATION PERMISSIONS / ATTRIBUTION CREDITS:
Original video was published with the Creative Commons Attribution license (reuse allowed). Original video source: https://www.youtube.com/watch?v=QYe94_gvMfk **** Interested in the stock market? Love trading? I developed my own Market Model which provides BUY and SELL signals on S&P500. Check it out here: https://yuriymatso.com/my-market-model/ https://www.youtube.com/watch?v=SfDoWTXf14w

JavaScript is the lifeblood of the modern web application. You need it to do anything remotely complex on the web. But, for many Python developers, the modern JavaScript ecosystem is intimidating. The tools feel complex. There are often several ways to achieve the same goals. It's hard to choose a framework—and then once you do, it's hard to know exactly how to integrate it into a Flask or Django project. This talk aims to demystify modern JavaScript for Python-minded developers. It will cover major advances that have been made to JavaScript in recent years and how you can use the JavaScript ecosystem – including tools like npm, webpack and babel – to write Python applications for the modern web. EVENT / SPEAKER:
PyConZA 2020 / Cory Zue PUBLICATION PERMISSIONS / ATTRIBUTIONS:
The original video was published with the Creative Commons Attribution license (reuse allowed). The source: https://www.youtube.com/watch?v=hdAv2Fju5g8 ****
INTERESTED IN THE STOCK MARKET?
I developed a profitable trading model that generates high probability BUY & SELL signals on S&P500. To learn about it, visit https://yuriymatso.com/my-market-model/ https://www.youtube.com/watch?v=jAbDjt0pens

We've all heard about WebAssembly, but most of the times it's mentioned in the context of building video games, image and video compression, VR/AR etc. However, a lot of us do not work as game developers and we don't encounter these problems in our day to day work. This brings out the question – should I even learn WebAssembly? In this talk, I want to show some use cases in building business/enterprise applications where WebAssembly can be applied. The talk is practical and we will see how WebAssembly can improve your apps performance by order of magnitude and hopefully convince you why WebAssembly is here to stay. EVENT / SPEAKER:
SingaporeJS 2020 / Nemanja Ninkovic PERMISSIONS / ATTRIBUTIONS:
Original video was published with the Creative Commons Attribution license (reuse allowed). Original source: https://www.youtube.com/watch?v=xJghyFgho9w ***
INTERESTED IN THE STOCK MARKET?
I developed a profitable trading model that generates high probability BUY & SELL signals on S&P500. To learn about it, visit https://yuriymatso.com/my-market-model/ https://www.youtube.com/watch?v=xBfiYy3vECo