The journey to Microservices can be very challenging due to infrastructure and operational complexities Microservices come with. That bears the risk shifting the focus from building your core domain to handing these complexities and ending up with compromises on parts of your software solution you should not compromise. How can a small team handle infrastructure and operational complexities that come with Microservices and still deliver business and user value? One approach could be to build your core domain – that differentiates you from your competitors – in-house and outsource undifferentiating commodities to utility suppliers. In this talk Susanne will use Wardley Maps to visualise how the value chain can evolve when getting infrastructure components handled by different options: Going from open source software to Kubernetes' container orchestration, to Istio's service mesh and to Serverless technologies, such as AWS Lambda. EVENT:
Build Stuff 2019 SPEAKER:
Susanne Kaiser PUBLICATION PEMRISSIONS:
Build Stuff Conference Organizer provided Coding Tech with the permission to republish Build Stuff talks. https://www.youtube.com/watch?v=1cnLMuBABo0

Gaussian processes are flexible probabilistic models that can be used to perform Bayesian regression analysis without having to provide pre-specified functional relationships between the variables. This tutorial will introduce new users to specifying, fitting and validating Gaussian process models in Python. EVENT:
PyData NYC 2019 SPEAKER:
Chris Fonnesbeck PUBLICATION PERMISSIONS:
PyData provided Coding Tech with the permission to republish PyData talks CREDITS:
PyData YouTube channel: https://www.youtube.com/channel/UCOjD18EJYcsBog4IozkF_7w https://www.youtube.com/watch?v=xBE8qdAAj3w

So called “0-click” exploits, in which no user interaction is required to compromise a mobile device, have become a highly interesting topic for security researchers, and not just because Apple announced a one million dollar bug bounty for such exploits against the iPhone this year. This talk will go into the details of how a single memory corruption vulnerability in iMessage was remotely exploited to compromise an iPhone. The insights gained from the exploitation process will hopefully help defend against such attacks in the future. This talk will dive into the internals of an iMessage exploit that achieves unsandboxed remote code execution on vulnerable devices (all iPhones and potentially other iDevices up to iOS 12.4) without user interaction and within a couple of minutes. All that is necessary for a successful attack in a default configuration is knowledge of the target’s phone number or an email address. Further, the attack is also possible without any visible indicators of the attack displayed to the user. First, an overview of the general iMessage software architecture will be given, followed by an introduction of the exploited vulnerability. Next, a walkthrough of the exploitation process, including details about how the various exploit mitigations deployed on iOS were bypassed, will be presented. Some of the exploitation techniques are rather generic and should be applicable to exploit other vulnerabilities, messengers, and even other platforms such as Android. Along the way, some advice will be shared with the audience on how to bootstrap research in this area. The talk concludes with a set of suggestions for mobile OS and messenger vendors on how to mitigate the demonstrated exploit techniques effectively and hopefully make these kinds of attacks significantly more difficult/costly to perform in the future. While previous experience with iOS userland exploitation will not be required for this talk, some basic background knowledge on memory corruption vulnerabilities is recommended. SPEAKER:
Samuel Groß PUBLICATION PERMISSIONS:
Original video was published with the Creative Commons Attribution license (reuse allowed) ATTRIBUTION CREDITS:
Original video source: https://www.youtube.com/watch?v=_Is1mJLRyzg https://www.youtube.com/watch?v=kjOuOUVFbrQ