Brian Demers: Security Vulnerabilities for Java Developers

Wednesday February 9th, 2022

Watch on YouTube: https://www.youtube.com/watch?v=M9AbUTXSmPc

5:30-5:45: Announcements

5:45-7:15: Security Vulnerabilities for Java Developers

Ever seen a security-related issue that you felt should be reported? Unsure of how reporting security issue is different than a regular bug? Developers of any level should know how to report a vulnerability. In this talk, we will talk about what CVEs are, some general vulnerability classifications, look at a few ways you can report security issues, as well as look at a few common mistakes.

Knowing how to report a vulnerability is just half the battle, you also need to keep your applications free of them. We will dig into the recent Log4Shell vulnerability and discuss lessons learned when scrambling to update versions. Finally, we will talk about how this scramble can be avoided by getting notifications when new security issues are announced, and how to keep your applications updated automatically.

This talk is geared toward non-security professionals.

About Brian Demers

Brian Demers is a Developer Advocate at Okta, a Java Champion, and a PMC member for the Apache Shiro project. He spends much of his day contributing to OSS projects in the form of writing code, tutorials, blogs, and answering questions. Along with typical software development, Brian also has a passion for fast builds and automation. Away from the keyboard, Brian is a beekeeper and can likely be found playing board games.

You can find Brian on Twitter at @briandemers (https://twitter.com/briandemers).

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Brian Demers: Security Vulnerabilities for Java Developers

Gordon Weakliem: Coding Interviews for Java Developers

Wednesday, January 12th, 2022

Watch on YouTube: https://www.youtube.com/watch?v=3LH9tJ6qSGQ

5:30-5:45: Announcements

5:45-7:15: Coding Interviews for Java Developers

In the year 2000 – Joel Spolsky released his first “guerilla guide to interviewing” (most current version from 2006) https://www.joelonsoftware.com/2006/10/25/the-guerrilla-guide-to-interviewing-version-30/

This really started to set the standard for the modern software engineer interview. In particular, this quote set the tone:

Most of the time in the interview, though, should be spent letting the candidate prove that they can write code.

Somewhere along the line, we started to suspect that maybe there were a lot of SE candidates who couldn’t actually write code, so making candidates write code became a standard practice.

Not all of us are performers or perform well under pressure, or with someone watching. Some of us don’t spend our nights and weekends working on toy problems, and the day-to-day code we work on is anything but a toy problem, or we work in an application framework or work on code that’s in maintenance mode where we’re not really writing tons of new code from scratch – when was the last time you wrote a main() method? So the coding exercise is an alien environment.

I’ll talk about general advice for live coding, as well as some strategies for succeeding in these coding exercises, particularly the live coding variety, with an emphasis on pitfalls for using Java in live coding interviews and strategies for getting around them.

About Gordon Weakliem

Gordon Weakliem has worked as a professional software developer for over 25 years. He has worked in distributed systems since the days when CORBA was the next big thing, and has worked extensively with HTTP based services, as well as large scale distributed data platforms. He has worked in the travel industry at companies like Sabre, Galileo, and Vrbo, and currently works for SiriusXM / Pandora Media supporting the Marketing team with big data analytics. In addition, Gordon is a Senior Interview Engineer with Karat, an online interview platform, and has conducted hundreds of coding interviews.

You can find Gordon on LinkedIn at @gweakliem (https://www.linkedin.com/in/gweakliem/).

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Gordon Weakliem: Coding Interviews for Java Developers

Sharat Chander: Moving Java Forward…Together

Watch on YouTube: https://youtu.be/TTc7rZACvQk

5:30-5:45: Announcements

5:45-7:15: Moving Java Forward…Together

The last 25 years have shown that Java has enriched the world we live in. Applications of all shapes and all sizes target a wide and diverse set of use cases. The foundation is strong! But, how will the next 25 years and beyond look like? That future is influenced so much by you, the developer community. And this session will focus on what you can do to participate to ensure the future remains bright. Learn about the many channels you can use to move Java forward.

About Sharat Chander

Sharat Chander (Senior Director, Java Developer Advocacy) has been driving the Java ecosystem forward for over 20 years. His focus is to help raise the value of the Java community, which helps keep the technology relevant for now and the future, as well as grow the visibility of Java to drive its adoption worldwide.

You can find Sharat on Twitter at https://twitter.com/Sharat_Chander.

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Sharat Chander: Moving Java Forward…Together

Jeremy Gustine: Java Logging Deep Dive

Wednesday October 13, 2021

Watch on YouTube: https://youtu.be/Jg0Oa7UMGTs

5:30-5:45: Announcements

5:45-7:15: Java Logging Deep Dive

SLF4j, JUL, Log4j, Logback….huh? Logging in the world of Java is a surprisingly deep subject. This presentation will explore the history of logging in the Java landscape and the needs that led to that evolution. We will look at various logging implementations and the popular SLF4j facade to see how they work together. We will also look at how to debug interesting scenarios that we may unwittingly find ourselves in due to the complexity of Java logging.

About Jeremy Gustine

Jeremy is a software developer and consultant at Crafted, a consultancy that utilizes a balanced-team model to efficiently deliver the right product for clients. Prior to Crafted, Jeremy worked at Pivotal Labs where he originally became involved with the consulting side of software delivery. He has worked in a variety of tech stacks (including .Net, Python, and Unity), and definitely has a soft spot for Java and Spring. Outside of work you can usually find Jeremy in the mountains – sliding down them in the winter and climbing them in the summer.

You can find Jeremy on LinkedIn at https://www.linkedin.com/in/jeremy-gustine-91434a73/.

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Jeremy Gustine: Java Logging Deep Dive

Daniel Hinojosa: Spinnaker and Kubernetes

Watch on YouTube: https://www.youtube.com/watch?v=yynucMPwmRk, September 8th,  2021 starting at 5:30pm MT

5:30-5:45: Announcements

5:45-7:15: Spinnaker and Kubernetes

Back in 2005, when an unknown program called Hudson came onto the scene, I was pretty excited. I had used CruiseControl up to that point and was getting pretty comfortable with the notion of Continuous Integration. Hudson had terrific graphics and an intuitive UI, unlike Cruise Control with XML-laden directives. I thought the future was here. Then some cracks started showing, particularly in the delivery aspect of Hudson. I had used a Tomcat plugin, but trying to get a jar, use various environments, became a juggling act. Then came Docker, and I loved it because we get to deploy an image! No more SSHing into a box and messing things up. We had immutability.

Now, we have Kubernetes, a system that takes these immutable containers and monitors them, among other great features. Jenkins still has its place but as CI, Continuous Integration. In this presentation, I will demonstrate Spinnaker, a system developed by Netflix for CD, Continuous Delivery. I will demonstrate how to set up, deploy, monitor, rollback, and scale our pods with the ease of just selecting an item on a menu.

Topics include:

– Discuss Artifacts and Accounts
– Administering with Halyard
– Run a Jenkins Job to Triggering a Kubernetes Job
– Manage Deployments
– Baking

About Daniel Hinojosa

Daniel is a programmer, consultant, instructor, speaker, and recent author. With over 20 years of experience, he does work for private, educational, and government institutions. He is also currently a speaker for the No Fluff Just Stuff tour. Daniel loves JVM languages like Java, Groovy, and Scala; but also dabbles with non-JVM languages like Haskell, Ruby, Python, LISP, C, C++. He is an avid Pomodoro Technique Practitioner and makes every attempt to learn a new programming language every year. For downtime, he enjoys reading, swimming, Legos, football, and barbecuing.

You can find Daniel on Twitter at @dhinojosa (https://twitter.com/dhinojosa).

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Daniel Hinojosa: Spinnaker and Kubernetes

Ken Sipe: Are you Mocking Me (with Spock)

Wednesday, August 11, 2021

Watch on YouTube: https://www.youtube.com/watch?v=vFh6em8jPYo

5:30-5:45: Announcements

5:45-7:15: Are you Mocking Me (with Spock)

Spock is a Groovy-based testing framework that leverages all the “best practices” of the last several years taking advantage of many of the development experiences of the industry. So combine Junit, BDD, RSpec, Groovy, and Vulcans… and you get Spock!

There are 3 tools I use on every Java project I control… this is one of them and with good reason.

This session assumes some understanding of testing and junit and builds on it. We will introduce and dig deep into Spock as a test specification and mocking tool.

Topics include:

– Unit testing
– Data-driven tests
– Mocking
– Stubbing Partial Mocks Spock Extensions

About Ken Sipe

Ken is a cloud architect & distributed application engineer. Ken has worked with Fortune 500 companies to small startups in the roles of developer, designer, application architect, and enterprise architect. Ken’s current focus is on containers, container orchestration, high-scale microservice design, and continuous delivery systems.

Ken is an international speaker on the subject of software engineering speaking at conferences such as JavaOne, JavaZone, Great Indian Developer Summit (GIDS), and The Strange Loop. He is a regular speaker with the No Fluff Just Stuff Software Symposium Tour Series where he is best known for his architecture and dev tools talks.

You can find him online at @kensipe (https://twitter.com/kensipe).

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Ken Sipe: Are you Mocking Me (with Spock)

Matt Raible: Reactive Microservices with Spring Boot and JHipster

Details

Wednesday, June 9th, 2021

Watch on YouTube: https://www.youtube.com/watch?v=8OuZMFyh0xE

5:30-5:45: Announcements

5:45-7:15: Reactive Microservices with Spring Boot and JHipster

Microservice architectures are all the rage in JavaLand. They allow teams to develop services independently and deploy autonomously.

Why microservices?

IF
you are developing a large/complex application
AND
you need to deliver it rapidly, frequently, and reliably over a long period of time
THEN
the Microservice Architecture is often a good choice.

Reactive architectures are becoming increasingly popular for organizations that need to do more, with less hardware. Reactive programming allows you to build systems that are resilient to high load.

In this session, I’ll show you how to use JHipster to create a reactive microservices architecture with Spring Boot, Spring Cloud, Keycloak, and run it all in Docker. You will leave with the know-how to create your own resilient apps!

About Matt Raible

Matt Raible is a well-known figure in the Java community and has been building web applications for most of his adult life. For over 20 years, he has helped developers learn and adopt open source frameworks and use them effectively. He’s a web developer, Java Champion, and Developer Advocate at Okta. Matt is a frequent contributor to open source and a big fan of Java, IntelliJ, TypeScript, Angular, and Spring Boot.

He’s a member of the global JHipster development team and loves classic VWs. You can find him online at @mraible (https://twitter.com/mraible) and https://raibledesigns.com.

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Matt Raible: Reactive Microservices with Spring Boot and JHipster

Johan Janssen: How and Why to Upgrade to Java 16 or 17

Wednesday May 12th, 2021

Watch on YouTube: https://www.youtube.com/watch?v=6NHBI2MojA8

5:30-5:45: Announcements

5:45-7:15: How and Why to Upgrade to Java 16 or 17

Java upgrades are sometimes seen as difficult and many applications are still running on an older version of Java. This session describes Java’s current six months release process and why applications should use a recent Java version.

After that, I’ll explain the challenges of upgrading and provide some useful tips to make the process easier. Concrete examples (including solutions) will be used to show you how to upgrade your application to Java 16 or 17.

About Johan Janssen

Johan is working as a software architect at Sanoma Learning. He has been working for various demanding companies where rapidly delivering high-quality software was very important. Johan regularly writes articles and presents about various subjects, but mainly around Java. He has spoken in 20 countries at more than 40 different conferences such as JavaOne, GOTO Amsterdam/Berlin/Copenhagen, Devoxx BE/UK/PL, JavaZone, J-Fall, Jfokus, JavaLand, Scala Days Berlin/New York. Johan received the JavaOne Rock Star and Oracle Code One Star awards.

You can find Johan on Twitter @johanjanssen42 (https://twitter.com/johanjanssen42).

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Johan Janssen: How and Why to Upgrade to Java 16 or 17

Aleks Seović: Managing State in Elastic Microservices

Wednesday, April 14, 2021
Watch on YouTube: https://www.youtube.com/watch?v=ddK4Wu1fY4I

5:30-5:45: Announcements

5:45-7:15: Managing State in Elastic Microservices

Scaling stateless services is easy, but scaling their stateful data stores, not so much. This is true whether you are using an “old fashioned” relational database, or one of the popular, “modern” KV data stores, such as MongoDB or Redis.

In this presentation, we will discuss some of the issues with state management in elastic microservices today, and look into how Coherence Community Edition, with its Helidon and Eclipse MicroProfile integration, provides a better alternative you can use tomorrow.

About Aleks Seović

Aleks Seović is an architect at Oracle, where he works on Oracle Coherence, a leading in-memory data grid product, and contributes to the Helidon microservices framework. Most recently, Aleks led the design and implementation of the Helidon gRPC framework, as well as CDI and Eclipse MicroProfile support in Coherence. He currently leads the implementation of Coherence native clients, GraphQL support, and Spring integration.

Prior to joining Oracle in 2016, Aleks led a boutique consultancy practice, where he worked with customers around the world to help them implement mission-critical applications on top of Coherence.

Aleks is the author of “Oracle Coherence 3.5” (Packt Publishing, 2010) and frequently speaks about and evangelizes Coherence at industry conferences, Java and .NET user group events, and Coherence SIGs.

You can find Aleks on Twitter @aseovic (https://twitter.com/aseovic).

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Aleks Seović: Managing State in Elastic Microservices

Steve Chin: Modern Java Clients with JavaFX – The Definitive Guide

Online Event – Wednesday March 10, 2021. Watch live at https://www.youtube.com/watch?v=TbCOVruJGHc

Foojay (http://foojay.io) is the new Java community platform with everything you need to do your daily Java development work — with reference materials on the latest OpenJDK versions, vendors, and distributions, together with insights into the latest quarterly updates, articles, blogs, tips and tricks, and much more. And all for free, accompanied by a Slack channel for discussion on all things Java and OpenJDK. Follow @foojaio on Twitter (https://twitter.com/foojayio).

To celebrate and introduce Foojay.io, members of the Foojay community are doing a JUG tour and one of the stops is right here. Come join in, learn about Foojay, and hear Steve Chin speak on JavaFX.

5:45-7:15: Modern Java Clients with JavaFX: The Definitive Guide

This session is for professionals building Java applications for desktop, mobile, and embedded devices in the Cloud age. It will help you to build enhanced visual experiences and to deploy modern, easy to maintain, client applications across a variety of platforms.

These applications can take advantage of the latest user interface components, 3D technology, and cloud services to create immersive visualizations and allow high-value data manipulation. Learn how to leverage the latest open-source Java client technologies to build rich, responsive, and modern UIs from the authors of the definitive Java Client reference.

About Steve Chin

Stephen Chin is Senior Director of Developer Relations at JFrog, author of Raspberry Pi with Java, The Definitive Guide to Modern Client Development, and Pro JavaFX Platform. He has keynoted numerous Java conferences around the world including Oracle Code One (formerly JavaOne), where he is an 8-time Rock Star Award recipient. Stephen is an avid motorcyclist who has done evangelism tours in Europe, Japan, and Brazil, interviewing hackers in their natural habitat and posting the videos on http://nighthacking.org/. When he is not traveling, he enjoys teaching kids how to do embedded and robot programming together with his teenage daughter.

You can find Steve on Twitter @steveonjava (https://twitter.com/steveonjava).

7:15-7:30: Q & A

The live streaming of this meetup is sponsored by Okta (https://developer.okta.com/).

Posted in Uncategorized | Comments Off on Steve Chin: Modern Java Clients with JavaFX – The Definitive Guide