Is this Legacy or Revenant Code? - Sergey Sergyenko | Ruby Meditation 30

•

0 j'aime•207 vues

Talk of Sergey Sergyenko, CEO at Cybergizer, at Ruby Meditation #30 Online 24.10.2020 Next conference - http://www.rubymeditation.com/ Description: I hope that the code I write continues to be used after I die. Which is why I only ever write legacy code" - this is what Patterson mentioned on his Twitter last September. In this talk, I will define metrics and try to distinguish code from Legacy to the one that Survived. Also, I will introduce the so-called "Code Survival" refactoring approach. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Technologie

LEGACY OR
REVENANT
CODE
SERGEY
SERGYENKO
CEO, Cybergizer
BELARUS RUBY USER GROUP

https://twitter.com/tenderlove/status/1308237713464635393

https://github.com/chrislgarry/apollo-11

Legacy Code is code inherited
from another developer or team
which uses older technologies
that are no longer supported or
have been superceded by a newer
version. Many programmers say
that “code becomes legacy code
as soon as it’s writtern”

The reason that programmers think the old code is a
mess is because of a cardinal, fundamental law of
programming:
IT’S HARDER TO READ CODE
THAT TO WRITE IT

There are TWO KINDS of
software: the one that
people complain about and
the one that nobody uses.

The longer a piece of code lasts
in a codease, the
MORE VALUE it can deliver.
Customers don’t care about the
age of the code, they care about
WORKING SOFTWARE.

The Roman bridges of antiquity were very inefficient
structures. By modern standards, they used too much
stone, and as a result, far too much labour to build.
Over the years we have learned to build bridges more
efficiently, using fewer materials and less labour to
perform the same task.
- Tom Clancy (The Sum of All Fears)

Biological Systems, as a Human for
example, can’t be a legacy, b/c of
aging, but they can produce it and
measured by its Value.
HOW DO YOU
CREATE SYSTEMS
THAT SURVIVE?
HOW DO WE
CREATE SYSTEMS
THAT OUTLAST US?

Chad Fowler: https://www.youtube.com/watch?v=YruzQgWdv48

It all comes back to one
thing: CODE SURVIVES by
providing VALUE and being
DIFFICULT TO REPLACE
THE REVENANT CODE

ONE PAGE PROGRAM:
RECYCLE THE CODE:
KILL AND REPLACE
CODE PERMANENTLY
SMALL THINGS ARE
GOOD
IMMUTABLE DEPLOYMENS:
NEVER UPGRADE SOFTWARE ON
AN EXISTING NODE

MONITOR EVERYTHING:
https://github.com/testdouble/suture
USE IT TO ELABORATE BUSINESS REQSFAVOR MEASUREMENT OVER TESTING
TRACK GENERATIONS OF WINNERS:
PLAN VALIDATE COMPARE
CUT REFACTOR FALLBACK
RECORD VERIFY DELETE

THANK YOU! SERGEY
SERGYENKO
CEO, Cybergizer
BELARUS RUBY USER GROUP
@sergyenko

Contenu connexe

Similaire à Is this Legacy or Revenant Code? - Sergey Sergyenko | Ruby Meditation 30

In this talk I’ll explain what is the Software Supply Chain, common threats and mitigations and how they apply to IAC ecosystem too. I’ll show off security threats using Terraform and its ecosystem and finally i’ll talk about OCI images talking about digital signatures and SBOM using Sigstore and Syft. I’ll do a live coding session showing off how to deploy secure OCI images on K8S cluster with security policies built with Kyverno, the session includes also security scanning using the generated SBOM.

CodeMotion 2023 - Deep dive nella supply chain della nostra infrastruttura cl...

sparkfabrik

Devcon3 : iExec Allowing Scalable, Efficient, and Virtualized Off-chain Execu...

Gilles Fedak

Application security meetup k8_s security with zero trust_29072021

lior mazor

Webinar–Reviewing Modern JavaScript Applications

Synopsys Software Integrity Group

IoT Security: Cases and Methods

Leonardo De Moura Rocha Lima

Wwc developing hyperledger applications v4

LennartF

Prominent Blockchain Programming Languages to consider while building Blockch...

Shelly Megan

This talk "What is the secure software supply chain and the current state of the PHP ecosystem" discusses the current state of the software supply chain, the big global recent events (SolarWinds, log4shell, codecov, packagist) and the state of the PHP and Drupal ecosystem, the threats and the mitigations that can be applied using tools like Sigstore, Syft, and Grype for digital signatures, SBOM generation, and automatic vulnerability scanning and how to use them for real-world projects to gain unprecedented levels of knowledge of your digital artifacts.

Drupal Dev Days Vienna 2023 - What is the secure software supply chain and th...

sparkfabrik

Zero Trust Networking has become a standard marketing buzzword but the underlying principles are critical for modern microservice-style architectures. Authentication, authorizations, policy, etc. can be difficult to implement between services and do so in a maintainable way. Google invented their own transparent encryption and authorization protocol called "ALTS" back in 2007 to serve the application layer of Google's Borg workload scheduler, but we don't see others using it outside Google. In this webinar we look at existing technology like TLS and newcomer Wireguard and see how these technologies come together to provide a secure foundation for workload identity and modern service-to-service networking.

Understanding Wireguard, TLS and Workload Identity

Christian Posta

In this talk I’ll present the current state of the software supply chain, the big global recent events (SolarWinds, log4shell, codecov, packagist) and the state of the PHP and Drupal ecosystem, the threats and the mitigations that can be applied using tools like Sigstore, Syft, and Grype for digital signatures, SBOM generation, and automatic vulnerability scanning and how to use them for real-world projects to gain unprecedented levels of knowledge of your digital artifacts. There will be also a demo of the mentioned tools in action to implement a secure supply chain pipeline for your Drupal projects.

What is the Secure Supply Chain and the Current State of the PHP Ecosystem

sparkfabrik

Software development in the modern age

Roy Wasse

Alchemy is a blockchain infrastructure company that provides developers with tools to build and scale decentralized applications (dApps) on the Ethereum network. The platform is designed to simplify the development process by providing a suite of developer-focused tools and services. The Alchemy platform offers several key features that make it an attractive option for developers. One of the main features is its robust API, which provides developers with access to Ethereum's full node infrastructure. This means that developers can easily interact with the Ethereum network without having to set up and maintain their own nodes. Another key feature of the Alchemy platform is its developer dashboard. The dashboard provides developers with real-time insights into the performance of their dApps, including metrics like transaction volume, gas usage, and user adoption. This allows developers to quickly identify and address any performance issues and optimize their dApps for maximum efficiency. In addition to its API and developer dashboard, the Alchemy platform also offers a range of other tools and services designed to make building and scaling dApps as easy as possible. These include a smart contract debugger, a gas price oracle, and an Ethereum address book. One of the most impressive aspects of the Alchemy platform is its scalability. Alchemy's infrastructure is designed to support millions of users and transactions, making it ideal for building large-scale dApps. The platform also uses a range of optimization techniques, such as transaction batching and smart caching, to ensure that dApps can handle high volumes of traffic without slowing down. Overall, Alchemy is a powerful and versatile platform that offers a range of developer-focused tools and services for building and scaling dApps on the Ethereum network. Whether you're a seasoned Ethereum developer or just getting started with Web3 development, Alchemy is definitely worth checking out.

Alchemy: The Web3 Development Platform

Steve Hodgkiss

Securing Source Code on Endpoints

thomashelsley

Introducing flow the new blockchain for open worlds

Blockchain Council

Digital Code Lock

Raja Nabila Raja Mudzafar

OtherScreen Architecture

Jim Van Fleet

AWS live hack: Docker + Snyk Container on AWS

Eric Smalling

Many assume that code analysis requires code compilation as a prerequisite. Today, all major static code analyzers are built on this assumption and only scan post compilation - requiring buildable code. The reliance on compilation has major and negative implications for all stake holders: developers, auditors, CISOs, as well as the organizations that hope to build a secure development lifecycle (SDLC). Historically, static code analysis required a complete and buildable project to run against, which made the logical place to do the analysis at the build server and in-line with the entire build process. The “buildable” requirement also forced the execution of the scan nearer the end of the development process, making security repairs to code more expensive and greatly reducing any benefits.

How Virtual Compilation Transforms Static Code Analysis

Checkmarx

Connect Bridge allows you to connect to lobodms from any software. Integrate lobodms with a CRM, ERP, CMS, marketing automation software and email. The integration is live and bi-directional. Connect Bridge allows synchronization of more than 2 systems in a single integration. Integrate lobodms into the company's system landscape. Contact us at office@connecting-software.com or visit http://connecting-software.com/

Lobodms Integration

Connecting Software

Last year at AppSec EU I had a presentation about the Ethereum smart contracts and did a technical showcase of some of their potential vulnerabilities and security flaws. I also presented my proposition on how to handle the responsible disclosure process in the smart contracts world. This year I want to focus on the whole process of security testing and present it by analogies to the web applications which are quite well-known. Smart contracts are described as Web3 decentralized apps and I believe that my talk will not only bring new light on this subject but will also help to understand and organize the way of testing. I am going to cover the whole SDLC and show the similarities and differences between the smart contracts and web applications on each step. The presented overview is especially important nowadays when the biggest companies are building their own blockchain platforms and cryptocurrencies – i.e. Libra introduced by Facebook (which by the way also supports smart contracts). I am also going to show the differences in the arsenal of vulnerabilities, security tools and standards by the analogy to web apps arsenal. I think that, even though there exist a lot of great security projects for smart contracts, we do not have a single, widely accepted security standard (such as ASVS in web apps world). I would like to discuss potential work that needs to be done in that area and show my preliminary work on that matter. After this presentation audience will know what are the similarities and differences between smart contracts and web apps in the SDLC, an arsenal of tools and standards, but also will have a fresh overview of possible options and current trends.

Web Apps vs Blockchain dApps (Smart Contracts): tools, vulns and standards

SecuRing

Similaire à Is this Legacy or Revenant Code? - Sergey Sergyenko | Ruby Meditation 30 (20)

CodeMotion 2023 - Deep dive nella supply chain della nostra infrastruttura cl...

Devcon3 : iExec Allowing Scalable, Efficient, and Virtualized Off-chain Execu...

Application security meetup k8_s security with zero trust_29072021

Webinar–Reviewing Modern JavaScript Applications

IoT Security: Cases and Methods

Wwc developing hyperledger applications v4

Prominent Blockchain Programming Languages to consider while building Blockch...

Drupal Dev Days Vienna 2023 - What is the secure software supply chain and th...

Understanding Wireguard, TLS and Workload Identity

What is the Secure Supply Chain and the Current State of the PHP Ecosystem

Software development in the modern age

Alchemy: The Web3 Development Platform

Securing Source Code on Endpoints

Introducing flow the new blockchain for open worlds

Digital Code Lock

OtherScreen Architecture

AWS live hack: Docker + Snyk Container on AWS

How Virtual Compilation Transforms Static Code Analysis

Lobodms Integration

Web Apps vs Blockchain dApps (Smart Contracts): tools, vulns and standards

Plus de Ruby Meditation

Talk of Roman Dubrovsky, Backend developer at Datarockets, at Ruby Meditation #29 Kyiv 14.12.2019 Next conference - http://www.rubymeditation.com/ Description: More than two years we’re developing and supporting GraphQL API, tried to make it public and integrated our app with other GraphQL APIs. In this talk, I'll try to summarize our experience, say about good practices, issues we found and can resolve. And which we can’t. I will show you how to set up and how to use them. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Life with GraphQL API: good practices and unresolved issues - Roman Dubrovsky...

Ruby Meditation

Talk of Viacheslav Miroshnychenko, Software Engineer at Human Agency, at Ruby Meditation #29 Kyiv 14.12.2019 Next conference - http://www.rubymeditation.com/ Description: Why do we need to think about licenses and check them in our projects? Let's try to figure out it. During this talk, you will learn tools that help you to automate the process of checking licenses for all libraries in your project. I will show you how to set up and how to use them. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Where is your license, dude? - Viacheslav Miroshnychenko | Ruby Meditation 29

Ruby Meditation

Talk of Aleksandra Stolyar, Ruby developer at DataArt, at Ruby Meditation #29 Kyiv 14.12.2019 Next conference - http://www.rubymeditation.com/ Description: I will talk about dry-rb ecosystem and it’s major components - dry-validation and dry-schema which are very helpful for validations. This year dry-rb introduced a major update to its’ gems and I faced some problems when decided to marry these updates with a project. This talk will cover some of differences and specifics of dry-validation and dry-schema updates. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Dry-validation update. Dry-validation vs Dry-schema 1.0 - Aleksandra Stolyar ...

Ruby Meditation

Talk of Bohdan Parshentsev, senior backend engineer at P2H, at Ruby Meditation #28 Kyiv 26.10.2019 Slideshare - ** Next conference - http://www.rubymeditation.com/ This presentation is connected with presentation How to cook Rabbit on Production - Serhiy Nazarov | Ruby Meditation 28 Why we need a Rabbit? Let's try to cook it tasty. And what else? - Live demo of several useful dishes. Be ready to use Telegram to have fun with us. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation * The channel of the organizers of the meetup https://t.me/incredevly

How to cook Rabbit on Production - Bohdan Parshentsev | Ruby Meditation 28

Ruby Meditation

Talk of Serhiy Nazarov, founder QPARD, system architect, at Ruby Meditation #28 Kyiv 26.10.2019 Next conference - http://www.rubymeditation.com/ This presentation is connected with presentation How to cook Rabbit on Production - Bohdan Parshentsev | Ruby Meditation 28 Why we need a Rabbit? Let's try to cook it tasty. And what else? - Live demo of several useful dishes. Be ready to use Telegram to have fun with us. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

How to cook Rabbit on Production - Serhiy Nazarov | Ruby Meditation 28

Ruby Meditation

Talk of Julik Tarkhanov, senior backend engineer, WeTransfer, Amsterdam, at Ruby Meditation #28 Kyiv 26.10.2019 Next conference - http://www.rubymeditation.com/ It is often a choice, sometimes a whim, and sometimes an act of desperation. We idolise reuse while sometimes the road not taken is just as exciting. Let's chat about where it is appropriate to "do the thing again", take the scenic route and enjoy the view. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation * The channel of the organizers of the meetup https://t.me/incredevly

Reinventing the wheel - why do it and how to feel good about it - Julik Tarkh...

Ruby Meditation

Speech of Nihad Abbasov, Senior Software Engineer at Digital Classifieds, at Ruby Meditation 27, Dnipro, 19.05.2019 Slideshare - Next conference - http://www.rubymeditation.com/ How fast is your code? Performance is crucial as your startup grows, and optimizing your application can make a huge impact on user experience. During this talk, you will learn hints, techniques and best practices for improving the overall speed of your Ruby application. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Performance Optimization 101 for Ruby developers - Nihad Abbasov (ENG) | Ruby...

Ruby Meditation

Speech of Ruslan Tolstov, Ruby Developer at MLSDev, at Ruby Meditation 27, Dnipro, 19.05.2019 Slideshare - Next conference - http://www.rubymeditation.com/ During this talk, we’ll discuss serverless technologies. In particular, we will talk about popular serverless platforms like AWS Lambda, Google CF, and Microsoft AF and also dwell upon serverless frameworks for managing and deploying your functions. As well, we will touch upon the potential use cases of this new approach in your existing projects. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Use cases for Serverless Technologies - Ruslan Tolstov (RUS) | Ruby Meditatio...

Ruby Meditation

Speech of Orban Botond, Ruby Developer at Toptal, at Ruby Meditation 27, Dnipro, 19.05.2019 Slideshare - Next conference - http://www.rubymeditation.com/ Software development is a domain where everybody can make a beautiful sculpture or can quickly build an unsolvable maze. According to my observations the later happens more often unfortunately. In the title for my presentation both the If Jungle and the Civilised Railway Station are methaphors representing the opposite ends of the scale of quality code. In my presentation I am going to present my personal experiences on how to get out from the trap of the if jungle by making the code to adhere to the SRP and DRY principles. I am also going to show the advantages of the Railway Oriented Programing using the 3 different libraries. The examples are going to be stereotypical errors, fun and easy to follow. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

The Trailblazer Ride from the If Jungle into a Civilised Railway Station - Or...

Ruby Meditation

Speech of Valentyn Ostakh, Ruby Developer at Ruby Garage, at Ruby Meditation 27, Dnipro, 19.05.2019 Slideshare - Next conference - http://www.rubymeditation.com/ This talk explores basic concepts of GraphQL. The main goal is to show how GraphQL works and of what parts it consists of. From the Ruby side we will look at how to create a GraphQL schema. In addition, we will consider what pitfalls can be encountered at the start of work with GraphQL. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

What/How to do with GraphQL? - Valentyn Ostakh (ENG) | Ruby Meditation 27

Ruby Meditation

Speech of Nihad Abbasov, Backend Engineer at Digital Classifieds, at Ruby Meditation #26 Kyiv 16.02.2019 Next conference - http://www.rubymeditation.com/ What to expect from Rails 6? Review of new features. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

New features in Rails 6 - Nihad Abbasov (RUS) | Ruby Meditation 26

Ruby Meditation

Speech of Tetiana Chupryna, Backend developer at GitLab, at Ruby Meditation #26 Kyiv 16.02.2019 Next conference - http://www.rubymeditation.com/ We’ll talk about different types of vulnerabilities, scanning tools and the whole process per se. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Security Scanning Overview - Tetiana Chupryna (RUS) | Ruby Meditation 26

Ruby Meditation

Speech of Dmytro Shapovalov, Infrastructure Engineer at Cossack Labs, at Ruby Meditation #26 Kyiv 16.02.2019 Next conference - http://www.rubymeditation.com/ Most modern applications live in a close cooperation with each other. We will talk about the ways to effectively use the modern techniques for monitoring the health of applications and look on tasks and typical implementation mistakes through the eyes of an infrastructure engineer. And we will also consider the Ruby libraries that help to implement all of this. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Teach your application eloquence. Logs, metrics, traces - Dmytro Shapovalov (...

Ruby Meditation

Speech of Ike Kurghinyan, Senior Software Engineer at VChain LLC, at Ruby Meditation #26 Kyiv 16.02.2019 Next conference - http://www.rubymeditation.com/ «Is there one grand unifying rule to software engineering? Can so-called best practices be somehow derived from that unifying rule? This speech is a humble attempt to explore the subject and provide you with tools for your own explorations.» Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation * The channel of the organizers of the meetup https://t.me/incredevly

Best practices. Exploring - Ike Kurghinyan (RUS) | Ruby Meditation 26

Ruby Meditation

Speech of Alexey Vasiliev, Software Engineer at Railsware, at Ruby Meditation #25 Kyiv 08.12.2018 Next conference - http://www.rubymeditation.com/ In this talk, Alexey will tell about the project in which was necessary to implement A/B testing and what came out of it in result Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Road to A/B testing - Alexey Vasiliev (ENG) | Ruby Meditation 25

Ruby Meditation

Speech of Dmytro Herasymuk, WEB developer at Softermii, at Ruby Meditation #25 Kyiv 08.12.2018 Next conference - http://www.rubymeditation.com/ The modern world demands to be faster and faster. Engineers create more powerful CPUs every day, but our app depends on third party apps too often in the WEB world. So, even the fastest CPU can't cope with I/O delays. On the one hand multithreading could help in such cases, but on the other hand, it seems to be a hard decision of using concurrency in production. Dmytro would like to share his experience in this field Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Concurrency in production. Real life example - Dmytro Herasymuk | Ruby Medita...

Ruby Meditation

Speech of Dmytro Shapovalov, Infrastructure Engineer at Cossack Labs, at Ruby Meditation #25 Kyiv 08.12.2018 Next conference - http://www.rubymeditation.com/ Making secure applications is not easy, especially when encryption tools are difficult and incomprehensible. We will talk about typical data security problems in web apps and how to implement encryption properly. We will review cryptographic approaches and exact tools that ensure that no sensitive data leaks from the application or database. Announcements and conference materials https://www.fb.me/RubyMeditation News https://twitter.com/RubyMeditation Photos https://www.instagram.com/RubyMeditation The stream of Ruby conferences (not just ours) https://t.me/RubyMeditation

Data encryption for Ruby web applications - Dmytro Shapovalov (RUS) | Ruby Me...

Ruby Meditation

Rails App performance at the limit - Bogdan Gusiev

Ruby Meditation

GDPR. Next Y2K in 2018? - Anton Tkachov | Ruby Meditation #23

Ruby Meditation

Postgres vs Elasticsearch while enriching data - Vlad Somov | Ruby Meditaiton...

Ruby Meditation

Plus de Ruby Meditation (20)