20th Nov: [OSDClub] Security, Privacy and Anonymity && Database Out-Scaling

This month is an OSDClub month, where talks are language-agnostic and of general interest to most developers. Please share widely.

If you’re on Facebook and don’t mind making your attendance public knowledge, please find the event on our page (which will appear soon) and mark yourself as coming, so we have an idea of how many people to expect.

We’re kindly hosted by Inspire9, our lovely venue sponsors, so join us at about 6.30pm at Level 1, 41 Stewart Street, Richmond.

Security, Privacy and Anonymity; When a Little Information Becomes a Dangerous Thing by Ben Dechrai

Security is paramount when communicating online. Closely tied to authentication, we need to know that we’re talking with whom we intend to talk to, and that what we tell each other isn’t altered mid-transmission.

Privacy is required for sensitive transactions. We don’t want our online banking password shared, we might want to keep our current location confidential.

Anonymity is desirable in sensitive situations such as discussing health concerns and battling persecution of religious belief.

You can usually tell when you have one of these three. Secure servers offer security, encryption offers privacy, and relay services provide anonymity.

But sometimes it’s not so clear. Are your details really private? What if someone gets access to the raw data? Can you trust that expired SSL certificate? Who can see your location on foursquare?

Can we expect everyone to understand the implications of logging in to Google whilst connected to Tor? At what point does the obligation fall on the online service providers to inform their users when they’re about to perform a potentially privacy breaking operation?

Do users have a reasonable right to expect all private data is encrypted, and if not, how can we manage those expectations. Who do these users expect the data to be private from; other users, other companies, their spouses or family, the government?

This talk will discuss a number of systems that address security, privacy or anonymity, how they work, where they don’t, and what we can do to help increase the protection our users have.

An Exercise in Database Out-Scaling by Rick Giner

Using a component I developed for the Joomla! CMS called HyperMySQli as a case study (original article on the topic can be viewed here) and potentially also exploring other CMSs like WordPress and Drupal, I’ll introduce the various complications of reading and writing data to multiple databases and how the issue can be dealt with.

I’ll cover the configuration of the MySQL databases and other ways to deal with database scaling, keeping the discussion as language-agnostic as possible for a general developer audience.

Question Time

After our two talks, we have some question time for anyone to talk about whatever they want to (group related) and then head off to a nearby venue for food (if still being served) and drink.

18th Sept: Security and Testing

Come one come all to the first phpMelb in a year or so. We’re kindly hosted by Inspire9, our lovely venue sponsors, so join us at about 6.30pm at Level 1, 41 Stewart Street, Richmond.

Understanding PHP; a Guide to Security by Ben Dechrai

“The good thing about PHP, is it’s really easy to learn. The bad thing about PHP, is it’s really easy to learn” — me, all the time.

PHP has a mixed reputation. On the one hand, some people swear never to use it citing numerous security concerns. On the other, some people love it because it’s one of the more flexible and arguably easier to learn languages for web development out there. It should come as no surprise that this latter statement is, at least in part, the cause of the aforementioned concerns.

So why is it, despite these issues, that PHP is still one of the most supported hosting platforms and the underlying language that powers enterprise applications built on platforms such as Drupal and Symfony?

This talk is aimed at those who are relatively new to PHP and want to understand more about the issues that can cause them to come unstuck.

Ben will discuss the wider topic of HTTP requests and web servers in order to give a thorough understanding of the process by which a web request results in an HTML web page being returned to the web browser.

He will then go on to discuss the PHP interpreter’s modus operandi and configuration options, something that will help with anticipating security weaknesses in applications and attack vectors used by those trying to break the system.

Examples will generally be based on a typical Linux, Apache, MySQL, PHP stack but will apply to most environments.

Automated testing with PHP: Why and how? by Michael Gall

The talk will start off with a discussion of why testing helps and why you should be doing it. It will then break down the few different types or styles of test and possibly (if it’s to a showable state) present a new library that helps doing tests that interact with a database.

Michael has been a freelancer-come-developer for about 2.5 years and before that as a worker bee with PHP for about 6 years. He’s really interested in solving real world business problems with (web) technology, and finds learning about different businesses and how they tick fascinating.

Question Time

After our two talks, we have some question time for anyone to talk about whatever they want to (group related) and then head off to a nearby venue for food (if still being served) and drink.

phpMelb Writing Maintainable Code and Security Meetup October 17th, 18:30

When?

6pm for a 6.30pm start, Monday 17th October 2011.

Where?

Click for directions

Seminar Room, RMIT Carlton Library Building 94, Level 3 23 Cardigan St. Carlton

What?

Writing Maintainable Code, by Shaun Moss

Maintenance of web applications is often the longest phase of the software development life cycle, and is frequently performed by programmers other than those who originally built the app. To reduce the cost of maintenance, and also for improved productivity during implementation and testing, coding standards are imperative. Coding standards, along with naming patterns, standard abbreviations and documentation conventions, greatly improve code readability and comprehension, significantly reduce bugs, and can significantly reduce software development time and costs. Shaun will discuss typical coding standards and conventions used in PHP. Shaun is the CEO of the International Web Development Academy.

PHP Security, by John Sherwood

PHP is a powerful language and the interpreter, whether included in a web server as a module or executed as a separate CGI binary, is able to access files, execute commands and open network connections on the server. These properties make anything run on a web server insecure by default. John will be covering what to look out for when developing and hosting PHP code. John Sherwood is a developer at Open Universities Australia.

Then?

We head to the Lincoln Hotel‎ (Crn Queensberry St) at about 9pm for drinks and socialising.

phpMelb Doctrine 2 and Online Marketing 101 Meetup September 19th, 19:00

When?

6.30pm for a 7pm start, September 19th August 2011.

Where?

Click for directions

Seminar Room, RMIT Carlton Library
Building 94, Level 3
23 Cardigan St. Carlton

 

What?

Doctrine 2, by Phil Brown

We look at version 2 of Doctrine. Doctrine is an object relational mapper (ORM) for PHP that sits on top of a powerful database abstraction layer (DBAL). One of its key features is the option to write database queries in a proprietary object oriented SQL dialect called Doctrine Query Language (DQL), inspired by Hibernates HQL. This provides developers with a powerful alternative to SQL that maintains flexibility without requiring unnecessary code duplication.

Phil is the Senior Developer at Open Universities.

Online Marketing 101, by Graeme Bryan

Every entity that makes a trade could use a marketing plan. Marketing is the process used to determine what products or services may be of interest to customers, and the strategy to use in sales, communications and business development. Online marketing is marketing over the internet.

I will cover basic marketing theory and then describe traditional marketing and relate these methods to the online world. I will spend more time on marketing through social networking sites particularly FaceBook. SEO needs a topic of its own so it is mentioned but not covered well.

Graeme Bryan has a Bachelors Degree in Commerce and another one in Science. He has worked at multiple marketing companies and as a web developer. He is now founder of a new business called Webbinago to specialise in management of online presence.

Then?

We head to the Lincoln Hotel‎ (Crn Queensberry St) at about 9pm for drinks and socialising.

phpMelb PHP Crypto and SilverStripe CMS Meetup August 15th, 19:00

When?

6.30pm for a 7pm start, Monday 15th August 2011.

Where?

Click for directions

Seminar Room, RMIT Carlton Library
Building 94, Level 3
23 Cardigan St. Carlton

 

What?

PHP Crypto, by Tristan Penman

PHP provides a rich set of cryptography primitives via the PHP Cryptography Extensions library. This talk will introduce you to PHP Crypto through a variety of small but practical examples, with a focus on Hash and Mcrypt. OpenSSL support will also be covered, with a simple Client/Server example.

Tristan is a Computer Security enthusiast, and occasional freelance software developer. He is currently studying Computer Science at RMIT.

SilverStripe CMS, by Marcus Nyeholt

SilverStripe CMS is an open source web content management system used by governments, businesses, and non-profit organisations around the world. SilverStripe CMS started life as an in-house web framework developed by a group of New Zealanders, which over time developed to being a full fledged CMS, subsequently being released as open source in 2006. Since then it has steadily made in-roads in around the world in many varied applications.

This session will be a high level introduction to the CMS’s capabilities, and a quick tour of the underlying Sapphire framework, along with a preview of the upcoming SilverStripe 3.0 release.

Marcus is the Development Manager for SilverStripe Australia.

Then?

We head to the Lincoln Hotel‎ (Crn Queensberry St) at about 9pm for drinks and socialising.

phpMelb HTML5 and SimpleInvoices.org Meetup April 18th, 19:00

When?

6.30pm for a 7pm start, Monday 18th April 2011. (Weekend before Easter)

Where?

Click for directions


Seminar Room, RMIT Carlton Library
Building 94, Level 3
23 Cardigan St. Carlton

What?

HTML5, by Graeme Bryan

HTML5 is going to make a major impression on our industry. What is new and how did it come about? You all know the W3C but what about the WHATWG and how did they influence the current direction of web standards. This will be a lightning presentation of everything (20 to 40 mins) and will send you on your way to finding out about this new standard. For homework reading have a look at the free online book Dive Into HTML5.

Graeme Bryan is one of the organisers of the Melbourne PHP Users Group. He has been developing PHP for 7 years. After having worked in the publishing industry for a few years he is now developing a web service for small business in the hospitality, tourism and his local area under Webbinago.

Case Study: Running a PHP Open Source App and Hosting Service: SimpleInvoices.org by Justin Kelly

SimpleInvoices.org

  • what is Simple Invoices and why you should use it for invoicing
  • starting and running a php open source app and community
  • positives/negatives
  • in hindsight what should of been done
  • whats the best way forward for open soruce php apps
  • etc..

SmarterInvoices.com

  • starting and running php app hosting service

Justin Kelly is an open source & freelance PHP developer. Having started SimpleInvoices.org 6 years ago, it has grown into a successful open source project used by thousands of small/micro businesses. When not busy coding on SimpleInvoices.org or doing Simple Invoices hosting at SmarterInvoices.com he does freelance PHP projects and commercial Simple Invoices extensions and customisations at kelly.org.au

Then?

We head to the Lincoln Hotel‎ (Crn Queensberry St) at about 9pm for drinks and socialising.

phpMelb Scrum and SuburbView.com Meetup February 21st, 19:00

When?

6.30pm for a 7pm start, Monday 21st February 2011.

Where?

Room 18, Level 3
Building 8, RMIT
368 Swanston St

Seminar Room, RMIT Carlton Library
Building 94, Level 3
23 Cardigan St. Carlton
Map: http://i.imgur.com/Gvgts.jpg

What?

Scrum, by Jens Østergaard

We have all heard of Scrum and know how beneficial it is to your team work, and also how hard it is to get it right. Here is your chance to hear about it from a world renowned Scrum expert.

Jens Østergaard is the founder of the ScrumFoundation, was the world’s first certified Certified Scrum Professional and one of the first Certified Scrum Trainer. He has led a number of highly successful Scrum implementations.

Case Study:Running a PHP Startup: SuburbView.com by Mark F.

Mark F. started SuburbView.com writing PHP code to bring the power of GIS to help you search for your next home. He now runs one of the busiest Real Estate website in Melbourne. Mark is going to give us his insight into the trials and tribulations of starting up a successful PHP website on a small budget.

Then?

We head to the John Curtin Hotel‎ or another nearby pub at about 9pm for drinks and socialising. (29 Lygon Street Carlton)

phpMelb Git and Regular Expressions Meetup November 15th, 19:00

When?

6.30pm for a 7pm start, Monday 15th November 2010.

Where?

Room 18, Level 3
Building 8, RMIT
368 Swanston St

What?

Getting Started with Git, by Kostas Avlonitis

In ‘Getting Started with Git’ we will examine Version Control Systems and Git in particular. We’ll start with why you shouldn’t fear Git, briefly skim over local vs. centralised vs. distributed VCS, then go a bit deeper with a few core Git concepts. Getting down on a practical level we’ll cover basic configuration, setting up a repository, tracking files, branching and merging. If time permits we’ll go hands-on.

Kostas has been programming and pulling computers apart since he was 7 (two words: Oric Atmos). A serial IT entrepreneur, he admires all things practical. When not involved in The-Next-Big-Thing™ he freelances.

Regular Expressions, by Ben Dechrau

With regular expressions (REs) rearing their ugly heads on the mailing
list again, Ben will introduce expressions, discuss the expression
engine and how to optimise expressions for performance, and give a
practical demonstration in to the use of Perl Compatible Regular
Expressions (PCRE) in PHP.

Time permitting, he will also discuss REs in other contexts such as the
mod_rewrite module for Apache’s httpd server.

Participants are encouraged to bring their RE related problems in order
to make the demonstration more applicable to real-life situations.

Then?

We head to the Oxford Scholar Hotel‎ or another nearby pub at about 9pm for drinks and socialising.

phpMelb Design Patterns Meetup September 20th, 19:00

When?

6.30pm for a 7pm start, Monday 20th September 2010.Meeting Map

Where?

Room 18, Level 3
Building 8, RMIT
368 Swanston St

What?

Design Patterns 101 for PHP, by Graeme Bryan

Graeme will discuss what Design Patterns are and the history behind it and then quickly go through some of the patterns from the Gang of Four (GoF). Although patterns can be applied to any code we will focus on PHP in this presentation.

Graeme has been doing web development for 7 years. He now mainly concentrates on PHP development. His most recent work has been in the magazine publishing industry. He has been presenting at computer user groups for a long time.

Web Design Patterns, by Russell Searle

The GoF design patterns are fundamental, but they are largely focused on back-end solutions, and coordination and integration of classes. A web developer also needs some familiarity with front-end and Web 2.0 patterns. We will look at a range of patterns in various areas of web development, and ways to approach and use them.

Russell is a 30-year IT lifer. For the last 15 years he has been an independent consultant working across a wide range of industries, roles and platforms. He has worked with PHP for seven years, and is now focussed on open source web apps, ERP, SOA etc.

Then?

We head to the Oxford Scholar Hotel‎ or another nearby pub at about 9pm for drinks and socialising.

Not orphaned after all

When?

6.30pm for a 7pm start, Monday 16th August 2010.

Where?

The Lounge
Melbourne VIC 3000

What?

Talking, drinking and eating.

We were unable to organise a presentation so we should try and find some more volunteer presenters. Come along and let us know if you want to volunteer.

We will have a casual chat. Bring any PHP questions or tips to share. We can also talk about the ternary operator issue covered in the mailing list.