Lessons learnt the hard way.

•Descargar como PPTX, PDF•

0 recomendaciones•430 vistas

This is a talk delivered at ThoughtWorks XConf Sydney 2013. It is focussed on lessons learnt the hard way at WorldVision during a year long project re-platforming to multiple front end Angular JS applications using HTML5 and consuming Micro-services backed APIs built in .Net.

Tecnología Empresariales

1. App packaged with Node + PhantomJS
2. Deploy the application.
3. Post deployment status check.
4. Post deployment snapshot script
5. Windows Task for nightly refresh

The 300ms delay
between a click
and a touch event.

Episode 5 :
The almost there functionality

IE8, 9: XDomainRequest
• The target URL must be accessed using
only the HTTP methods GET and POST
• No custom headers may be added to the
request
• Only text/plain is supported for the
request's Content-Type header
• No authentication or cookies will be sent
with the request
• Requests targeted to Intranet URLs may
only be made from the Intranet Zone
• Requests must be targeted to the same
scheme as the hosting page

You aren’t
going to get it
right at first go

Using WebAPI and
Areas to build
services within a
service

Más contenido relacionado

Similar a Lessons learnt the hard way.

In this presentation, Huiming Liu, the researcher of Tencent Security Xuanwu Lab, will present an astonishing mobile wireless zombie(Wombie) attack demo — the smartphone viruses spread like zombies in “Resident Evil”, and the technique details will also be explained. The Wombie doesn’t rely on Internet to spread, so it can’t be detected on the internet. Besides, it can serve as an attack amplifier for many other attack methods. For example, the recent KRACK attack about WPA2 will benefit a lot if combined with the Wombie Attack.

Huiming Liu-'resident evil' of smart phones--wombie attack

GeekPwn Keen

DSA Day 2 PPT.pdf

AkramMohammad28

Owasp AppSecEU 2015 - BeEF Session

Bart Leppens

CNIT 128 8. Identifying and Exploiting Android Implementation Issues (Part 3)

Sam Bowne

BOX of Illusion MOSEC'17

Python0x0

Build html 5 apps for mobile

João Ferreira

1. inside source IP address and port number 172.16.1.20:20 translated outside IP address 68.68.68.1:80 1. VPN address translation 2. Network address port translation 3. DMZ address translation 4. Network address translation 2. How many ports are used by computers for TCP/IP network traffic? 1. 65500 2. 1024 3. 65535 4. 6553 3. Which command prompt utility allows administrators to determine the actual path from one computer to another? 1. tracert 2. NAT 3. dns flush 4. ping 4. Which UNIX tool is used to do a scan on itself? 1. traceroute 2. DHCP 3. netstat 4. ping localhost 5. Which type of VPN would be used to allow an organization to leverage the Internet backbone to build a secure WAN between office branches? 1. remote user vpn 2. HTTP VPN 3. DMZ vpn 4. remote office vpn 6. What type of firewall uses routers with rules to grant or deny access based only on source address, destination address, and port number? 1. packet-filtering gateway 2. application gateway 3. layer 3 gateway 4. hybrid gateway 7. A _______ attack will automatically attempt thousands or millions of passwords to gain access to a system. 1. worm 2. virus 3. dictionary 4. logic bomb 8. What protocol is are layers 6 and 7 of the OSI model based on? 1. TCP/IP 2. IPsec 3. FTP 4. PPTP 9. Which network services provides the mapping and translation of domain names to IP addresses? 1. HTTP 2. DHCP 3. DNS 4. FTP 10. With a proxy server enabled on a firewall, the firewall stores web pages where? 1. Local usb drive 2. RAM 3. Local hard drive 4. FTP server 11 The ________ provides definitions for seen layers, which each layer provides services that depend on higher level layers depend on. 2. TCP 3. FTP 4. OSI 5. DNS 12. Which of the ways listed below can firewall security be completely bypassed? (Multiple answers) 1. HTTP sites are never secure 2. E-mail is never secure 3. A computer not owned by the enterprise should never be connected to the enterprise 4. Files from home computers and files from office computers should never commingle. Solution Q1 4. Network address translation Q2 3. 65535 Q3 1. tracert Q6 1. packet-filtering gateway Q7 2. virus.

1. inside source IP address and port number 172.16.1.2020translat.pdf

meejuhaszjasmynspe52

CSW2017 Geshev+Miller logic bug hunting in chrome on android

CanSecWest

Web-App Remote Code Execution Via Scripting Engines

c0c0n - International Cyber Security and Policing Conference

Unite2014 Bunny Necropsy - Servers, Syncing Game State, Security and Optimiza...

David Geurts

Attackers don’t just search for technology vulnerabilities, they take the easiest path and find the human vulnerabilities. Drive by web attacks, targeted spear phishing, and more are commonplace today with the goal of delivering custom malware. In a world where delivering custom advanced malware that handily evades signature and blacklisting approaches, and does not depend on application software vulnerabilities, how do we understand when are environments are compromised? What are the telltale signs that compromise activity has started, and how can we move to arrest a compromise in progress before the attacker laterally moves and reinforces their position? The penetration testing community knows these signs and artifacts of advanced malware presence, and it is up to us to help educate defenders on what to look for.

BSIDES-PR Keynote Hunting for Bad Guys

Joff Thyer

Building your first Windows Phone 7 application for SharePoint

Joris Poelmans

If You Tolerate This, Your Child Processes Will Be Next

Bart Leppens

CNIT 128 8. Android Implementation Issues (Part 3)

Sam Bowne

NMS Media Services Jobshet 1 to 5 Summary

Hock Leng PUAH

Contributing To The Mozilla Codebase

Souradeep De

PHP - Programming language war, does it matter

Mizno Kruge

ServerSentEvents.pdf

Alessandro Minoccheri

Foxtrot C2: Forced Payload Delivery

Dimitry Snezhkov

Phishing attacks are a prevalent threat against large or small organisations. As professionals in the security field we need to be able to give our clients the look and feel of what a real "bad guy" may do to attack an organisation. Leverage Phishing Frenzy and BeEF on your next engagement to ensure your client is getting the most out of their assessment. With simple templates you can launch an effective phishing campaign in minutes, and thanks to the BeEF integration you’ll be hooking and exploiting browsers in no time. Have you ever wondered what is the best pretext to use during your phishing campaign use-case? What about timeframes? We’ll discuss statistics based on real-world professional phishing engagements. We'll also entertain you with fun (and real) hacking stories involving phishing and client-side exploitation.

Dark Fairytales from a Phisherman (Vol. II)

Michele Orru

Similar a Lessons learnt the hard way. (20)

Huiming Liu-'resident evil' of smart phones--wombie attack

DSA Day 2 PPT.pdf

Owasp AppSecEU 2015 - BeEF Session

CNIT 128 8. Identifying and Exploiting Android Implementation Issues (Part 3)

BOX of Illusion MOSEC'17

Build html 5 apps for mobile

1. inside source IP address and port number 172.16.1.2020translat.pdf

CSW2017 Geshev+Miller logic bug hunting in chrome on android

Web-App Remote Code Execution Via Scripting Engines

Unite2014 Bunny Necropsy - Servers, Syncing Game State, Security and Optimiza...

BSIDES-PR Keynote Hunting for Bad Guys

Building your first Windows Phone 7 application for SharePoint

If You Tolerate This, Your Child Processes Will Be Next

CNIT 128 8. Android Implementation Issues (Part 3)

NMS Media Services Jobshet 1 to 5 Summary

Contributing To The Mozilla Codebase

PHP - Programming language war, does it matter

ServerSentEvents.pdf

Foxtrot C2: Forced Payload Delivery

Dark Fairytales from a Phisherman (Vol. II)

Más de Nigel Fernandes

Digital Transformation Summit - Melbourne 2019

Nigel Fernandes

Ipqc Enterprise Architecture Summit - Melbourne 2019

Nigel Fernandes

As an enterprise the thing you should care about is not the hype about serverless, it is the billing model shift it brings. If you are starting out on your DevOps journey in the enterprise, look to skip the complexity and costs of Containerisation and go straight to Serverless. This is a talk I presented at the DevOps sydney conference in 2018. It focuses on the cost benefits of serverless and why your organisation should care.

Exploiting Serverless - DevOps Conference Sydney 2018

Nigel Fernandes

The model was originally proposed by Mckinsey as the "3 horizons of growth" to help business leaders honing their analysis of where and how to compete, grow, and best manage their organizations. In this talk I put to the audience the model could be applied to Technology businesses, and I attempt to draw the members present into a discussion on its application to people & teams as well as architecture or tech strategy. I also outline a few activities that can provide data points for consideration and focus the attention of people as part of the model. All this comes with the disclaimer "all models are incorrect some are useful". I look forward to hearing your feedback. https://www.meetup.com/CTO-School-Melbourne/events/235165561/

Looking at your Technology company through the "3 Horizons of growth" model.

Nigel Fernandes

I was invited by Chris Gonsalves (Associate Dean Student Engagement) and Mehran Vahid (Lecturer, Faculty of Information Technology) to present a guest lecture to roughly 200 students @ Monash University on Agile Software Development (June 2016). Since the students had already covered the theory of Agile, Scrum and RUP, this talk focussed on the real world aspects of Agile in practice and used SEEK as a baseline example.

Agile Software Development (Monash University - Guest Lecture series)

Nigel Fernandes

Microservices meetup

Nigel Fernandes

Seek test-invaders

Nigel Fernandes

My career lessons - for Monash Students at Battle of the Brains 215

Nigel Fernandes

Over the last year, a team of software engineers have been quietly revamping the architecture, codebase and development practises at World Vision Australia. They have been using the principles of continuous delivery to deliver a SOA based IT platform for a non-profit who's business genuinely has a world wide impact. In the span of 6 months they have delivered several drops to production through a push button deployment process. We use Nuget, ProGet, WinRM, Chocolately, NSpec, Jasmine/Karma/PhantomJS and SpecFlow/Selenium/WebDriver. We test our deployment scripts with Canary deployments orchestrated through PowerShell. More interestingly we're using Puppet and Node.js to drive the idea of shipping products intended for single tenant architectures and the principle of "the machine as the artefact of the pipeline".

Towards a responsive business - DevOps MeetUp Melbourne 2013

Nigel Fernandes

Towards a responsive business, the developer way

Nigel Fernandes

This is a talk I gave at the DevOps days meet-up in Melbourne in June 2012. In the talk I go over implementing Continuous Delivery in an enterprise organisation. Its based on our experiences doing CD in a large traditional Telco in Australia. It covers: - an introduction to the principle - the state of the art of Cont. Delivery in Single application versus multistream development - the optimum conditions to start implementing and measuring CD - focusing on the BAU/Support line as an entry point

DevOps Days Melbourne meet-up

Nigel Fernandes

LAST Conference - Dev-Ops and Continuous Delivery

Nigel Fernandes

This is a webinar presentation I did with Daniel Aragao for the ThoughtWorks Continuous Delivery series. We focus on 3 common impediments to implementing continuous delivery and our 3 step process to overcoming them. Given our target audience, this presentation was not very technical, but focuses on ideas and concepts rather than working code. You can listen to and watch the presentation here: http://continuous-delivery.thoughtworks.com/events/delivery-cloud

Continuous Delivery and the Cloud

Nigel Fernandes

Continuous Delivery in the AWS Cloud

Nigel Fernandes

RubyConf Uruguay 2011

Nigel Fernandes

Thoughtworks Brazil, Code Quality

Nigel Fernandes

RubyConf Brazil 2011

Nigel Fernandes

Test Engineering

Nigel Fernandes

Más de Nigel Fernandes (18)

Digital Transformation Summit - Melbourne 2019

Ipqc Enterprise Architecture Summit - Melbourne 2019

Exploiting Serverless - DevOps Conference Sydney 2018

Looking at your Technology company through the "3 Horizons of growth" model.

Agile Software Development (Monash University - Guest Lecture series)

Microservices meetup

Seek test-invaders

My career lessons - for Monash Students at Battle of the Brains 215

Towards a responsive business - DevOps MeetUp Melbourne 2013

Towards a responsive business, the developer way

DevOps Days Melbourne meet-up

LAST Conference - Dev-Ops and Continuous Delivery

Continuous Delivery and the Cloud

Continuous Delivery in the AWS Cloud

RubyConf Uruguay 2011

Thoughtworks Brazil, Code Quality

RubyConf Brazil 2011

Test Engineering

Último

Data Cloud, More than a CDP by Matt Robison

Anna Loughnan Colquhoun

GenAI Risks & Security Meetup 01052024.pdf

lior mazor

GenCyber Cyber Security Day Presentation

Michael W. Hawkins

Finology Group – Insurtech Innovation Award 2024

The Digital Insurer

MySQL Webinar, presented on the 25th of April, 2024. Summary: MySQL solutions enable the deployment of diverse Database Architectures tailored to specific needs, including High Availability, Disaster Recovery, and Read Scale-Out. With MySQL Shell's AdminAPI, administrators can seamlessly set up, manage, and monitor these solutions, ensuring efficiency and ease of use in their administration. MySQL Router, on the other hand, provides transparent routing from the application traffic to the backend servers in the architectures, requiring minimal configuration. Completely built in-house and supported by Oracle, these solutions have been adopted by enterprises of all sizes for their business-critical applications. In this presentation, we'll delve into various database architecture solutions to help you choose the right one based on your business requirements. Focusing on technical details and the latest features to maximize the potential of these solutions.

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

Miguel Araújo

BooK Now Call us at +918448380779 to hire a gorgeous and seductive call girl for sex. Take a Delhi Escort Service. The help of our escort agency is mostly meant for men who want sexual Indian Escorts In Delhi NCR. It should be noted that any impersonator will get 100 attention from our Young Girls Escorts in Delhi. They will assume the position of reliable allies. VIP Call Girl With Original Photos Book Tonight +918448380779 Our Cheap Price 1 Hour not available 2 Hours 5000 Full Night 8000 TAG: Call Girls in Delhi, Noida, Gurgaon, Ghaziabad, Connaught Place, Greater Kailash Delhi, Lajpat Nagar Delhi, Mayur Vihar Delhi, Chanakyapuri Delhi, New Friends Colony Delhi, Majnu Ka Tilla, Karol Bagh, Malviya Nagar, Saket, Khan Market, Noida Sector 18, Noida Sector 76, Noida Sector 51, Gurgaon Mg Road, Iffco Chowk Gurgaon, Rajiv Chowk Gurgaon All Delhi Ncr Free Home Deliver

08448380779 Call Girls In Greater Kailash - I Women Seeking Men

Delhi Call girls

As privacy and data protection regulations evolve rapidly, organizations operating in multiple jurisdictions face mounting challenges to ensure compliance and safeguard customer data. With state-specific privacy laws coming up in multiple states this year, it is essential to understand what their unique data protection regulations will require clearly. How will data privacy evolve in the US in 2024? How to stay compliant? Our panellists will guide you through the intricacies of these states' specific data privacy laws, clarifying complex legal frameworks and compliance requirements. This webinar will review: - The essential aspects of each state's privacy landscape and the latest updates - Common compliance challenges faced by organizations operating in multiple states and best practices to achieve regulatory adherence - Valuable insights into potential changes to existing regulations and prepare your organization for the evolving landscape

TrustArc Webinar - Stay Ahead of US State Data Privacy Law Developments

TrustArc

Imagine a world where information flows as swiftly as thought itself, making decision-making as fluid as the data driving it. Every moment is critical, and the right tools can significantly boost your organization’s performance. The power of real-time data automation through FME can turn this vision into reality. Aimed at professionals eager to leverage real-time data for enhanced decision-making and efficiency, this webinar will cover the essentials of real-time data and its significance. We’ll explore: FME’s role in real-time event processing, from data intake and analysis to transformation and reporting An overview of leveraging streams vs. automations FME’s impact across various industries highlighted by real-life case studies Live demonstrations on setting up FME workflows for real-time data Practical advice on getting started, best practices, and tips for effective implementation Join us to enhance your skills in real-time data automation with FME, and take your operational capabilities to the next level.

From Event to Action: Accelerate Your Decision Making with Real-Time Automation

Safe Software

With more memory available, system performance of three Dell devices increased, which can translate to a better user experience Conclusion When your system has plenty of RAM to meet your needs, you can efficiently access the applications and data you need to finish projects and to-do lists without sacrificing time and focus. Our test results show that with more memory available, three Dell PCs delivered better performance and took less time to complete the Procyon Office Productivity benchmark. These advantages translate to users being able to complete workflows more quickly and multitask more easily. Whether you need the mobility of the Latitude 5440, the creative capabilities of the Precision 3470, or the high performance of the OptiPlex Tower Plus 7010, configuring your system with more RAM can help keep processes running smoothly, enabling you to do more without compromising performance.

Boost PC performance: How more available memory can improve productivity

Principled Technologies

In an era where artificial intelligence (AI) stands at the forefront of business innovation, Information Architecture (IA) is at the core of functionality. See “There’s No AI Without IA” – (from 2016 but even more relevant today) Understanding and leveraging how Information Architecture (IA) supports AI synergies between knowledge engineering and prompt engineering is critical for senior leaders looking to successfully deploy AI for internal and externally facing knowledge processes. This webinar be a high-level overview of the methodologies that can elevate AI-driven knowledge processes supporting both employees and customers. Core Insights Include: Strategic Knowledge Engineering: Delve into how structuring AI's knowledge base is required to prevent hallucinations, enable contextual retrieval of accurate information. This will include discussion of gold standard libraries of use cases support testing various LLMs and structures and configurations of knowledge base. Precision in Prompt Engineering: Learn the art of crafting prompts that direct AI to deliver targeted, relevant responses, thereby optimizing customer experiences and business outcomes. Unified Approach for Enhanced AI Performance: Explore the intersection of knowledge and prompt engineering to develop AI systems that are not only more responsive but also aligned with overarching business strategies. Guiding Principles for Implementation: Equip yourself with best practices, ethical guidelines, and strategic considerations for embedding these technologies into your business ecosystem effectively. This webinar is designed to empower business and technology leaders with the knowledge to harness the full potential of AI, ensuring their organizations not only keep pace with digital transformation but lead the charge. Join us to map a roadmap to fully leverage Information Architecture (IA) and AI chart a course towards a future where AI is a key pillar of strategic innovation and business success.

EIS-Webinar-Prompt-Knowledge-Eng-2024-04-08.pptx

Earley Information Science

In this session, we will delve into strategic approaches for optimizing knowledge management within Microsoft 365, amidst the evolving landscape of Copilot. From leveraging automatic metadata classification and permission governance with SharePoint Premium, to unlocking Viva Engage for the cultivation of knowledge and communities, you will gain actionable insights to bolster your organization's knowledge-sharing initiatives. In this session, we will also explore how to facilitate solutions to enable your employees to find answers and expertise within Microsoft 365. You will leave equipped with practical techniques and a deeper understanding of how there is more to effective knowledge management than just enabling Copilot, but building actual solutions to prepare the knowledge that Copilot and your employees can use.

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...

Drew Madelung

How to Troubleshoot Apps for the Modern Connected Worker

ThousandEyes

Presentation on how to chat with PDF using ChatGPT code interpreter

naman860154

Heather Hedden, Senior Consultant at Enterprise Knowledge, presented “The Role of Taxonomy and Ontology in Semantic Layers” at a webinar hosted by Progress Semaphore on April 16, 2024. Taxonomies at their core enable effective tagging and retrieval of content, and combined with ontologies they extend to the management and understanding of related data. There are even greater benefits of taxonomies and ontologies to enhance your enterprise information architecture when applying them to a semantic layer. A survey by DBP-Institute found that enterprises using a semantic layer see their business outcomes improve by four times, while reducing their data and analytics costs. Extending taxonomies to a semantic layer can be a game-changing solution, allowing you to connect information silos, alleviate knowledge gaps, and derive new insights. Hedden, who specializes in taxonomy design and implementation, presented how the value of taxonomies shouldn’t reside in silos but be integrated with ontologies into a semantic layer. Learn about: - The essence and purpose of taxonomies and ontologies in information and knowledge management; - Advantages of semantic layers leveraging organizational taxonomies; and - Components and approaches to creating a semantic layer, including the integration of taxonomies and ontologies

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdf

Enterprise Knowledge

CNv6 Instructor Chapter 6 Quality of Service

giselly40

Partners Life - Insurer Innovation Award 2024

The Digital Insurer

Sara Mae O’Brien Scott and Tatiana Baquero Cakici, Senior Consultants at Enterprise Knowledge (EK), presented “AI Fast Track to Search-Focused AI Solutions” at the Information Architecture Conference (IAC24) that took place on April 11, 2024 in Seattle, WA. In their presentation, O’Brien-Scott and Cakici focused on what Enterprise AI is, why it is important, and what it takes to empower organizations to get started on a search-based AI journey and stay on track. The presentation explored the complexities of enterprise search challenges and how IA principles can be leveraged to provide AI solutions through the use of a semantic layer. O’Brien-Scott and Cakici showcased a case study where a taxonomy, an ontology, and a knowledge graph were used to structure content at a healthcare workforce solutions organization, providing personalized content recommendations and increasing content findability. In this session, participants gained insights about the following: Most common types of AI categories and use cases; Recommended steps to design and implement taxonomies and ontologies, ensuring they evolve effectively and support the organization’s search objectives; Taxonomy and ontology design considerations and best practices; Real-world AI applications that illustrated the value of taxonomies, ontologies, and knowledge graphs; and Tools, roles, and skills to design and implement AI-powered search solutions.

IAC 2024 - IA Fast Track to Search Focused AI Solutions

Enterprise Knowledge

[2024]Digital Global Overview Report 2024 Meltwater.pdf

hans926745

08448380779 Call Girls In Diplomatic Enclave Women Seeking Men

Delhi Call girls

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...

Neo4j

Lessons learnt the hard way.

2. The other World Vision

7. Episode 1 : The SEO Fascination

10.

11. 1. App packaged with Node + PhantomJS 2. Deploy the application. 3. Post deployment status check. 4. Post deployment snapshot script 5. Windows Task for nightly refresh

12. Generating the Snapshot

13. Episode 2 : The Responsive Fixation

14. Mobile First Evolution

15. The 300ms delay between a click and a touch event.

16. Version 1.0.x Version 1.1.x

17.

18. Episode 3 : The Storage Freakiness

19. Local Storage Session Storage

20. HTTP HTTPS

21. Ninja Punch!

22. We hit the ceiling

23. 2.5MB to 5MB Serialized

24. Ninja Punch!

25.

26. Ninja Punch!

27. It goes out of date fast

28. Episode 4 : The re-use Finicky-ness

29. Episode 5 : The almost there functionality

30. CORS Cross Origin Resource Sharing

31.

32. Ninja Punch!

33. IE8, 9: XDomainRequest • The target URL must be accessed using only the HTTP methods GET and POST • No custom headers may be added to the request • Only text/plain is supported for the request's Content-Type header • No authentication or cookies will be sent with the request • Requests targeted to Intranet URLs may only be made from the Intranet Zone • Requests must be targeted to the same scheme as the hosting page

34. Episode 6: The Scott-Zhamak phenomenon

35.

36. Different speeds of evolution

37. Factoring systems by Value Stream

38. The wise man’s words

39. You aren’t going to get it right at first go

40. Using WebAPI and Areas to build services within a service

41.

42. Eliminating batch processes is hard

43. The leaks

44. C#, Dynamic, and Expando Objects

45. Thank you.