Devnexus 2022
2022-04-12..2022-04-14
Atlanta, United States
Devnexus ·
[Devnexus 2020, Devnexus 2021, Devnexus 2022, Devnexus 2023, Devnexus 2025, Devnexus 2026]
| title | author | length |
|---|---|---|
| Hacking the OSS Supply Chain | Stephen Chin | 32m |
Covers concrete attacks and fixes: SolarWinds uses a compromised CI/CD to inject ~400 lines of backdoor code; Equifax leak costs $1.43 billion and 143 million… | ||
| Application Gateway Security What Developers Really Need to Know | Matthew Close | 46m |
Defines an application gateway as a Layer 7 proxy that inspects methods, MIME types and payloads, terminates SSL in many deployments and enforces regex/header… | ||
| Java Design Patterns 2022 | Daniel Hinojosa | 01h 03m |
Modernizes GoF patterns for Java 2022 by showing concrete rewrites and working code: uses Supplier<LocalDate> injection so tests can fake "today", provides a… | ||
| Software Architecture by Example | Neal Ford | 55m |
Uses an architecture kata to design an online auction that must scale from hundreds to thousands of participants, concluding the domain forces a distributed… | ||
| The New ExcitementAround Good Old Java | Venkat Subramaniam | 57m |
Java now ships every six months (release cadence starts March 2018) while individual features take years to design — Java 8’s lambdas plus streams (lazy… | ||
| Building a Distributed Datastore in 8 Weeks | Yoel Spotts | 54m |
Four students build a working distributed datastore in eight weeks: a REST API (Spring Boot, H2, Postman) with a hub coordinator with DB that registers nodes… | ||
| How Does a Matching Engine Work | Juan D Bustamante | 01h 09m |
Explains how a futures exchange matching engine is built as a modular monolith that processes all state changes via a single delivery queue, uses Vertex early… | ||
| The Lost Art of Software Design | Simon Brown | 52m |
Many teams stop at vague whiteboard sketches that score “7 out of 10” in workshops and then rush to code, which produces brittle systems and surprise rework. A… | ||
| Bridging the Gap CICD Mind the Gap | Nathaniel Schutta | 54m |
Argues that automation, small batches and SRE practices let teams push changes in days not months, citing banks doing thousands of deploys and recommending… | ||
| Spring Cleaning | M. Jeff Wilson | 59m |
Shows how to structure a Spring Boot service so business logic lives in pure Java domain packages, use cases become first‑class objects, and the domain owns… | ||
| An Introduction to Apache Pinot | Tim Berglund | 54m |
Apache Pinot is a real-time analytics DB that cuts per-query cost by orders of magnitude and targets user-facing OLAP needs rather than batch warehouses. It… | ||
| The Not So Subtle Price of Microservices | Freddy Guime | 46m |
Traces show flight search spiked to ~10s because five microservices exchange ~6–7 XML messages, each ~1 MB payload and costing ~1s to encode, leaving the core… | ||
| Mother Nature vs Java - The Security Face Off | Steve Poole, Grace Jansen | 57m |
Claim: ransomware is being used as a live testbed for cyberwarfare and supply chains are the target, with ransomware revenue estimated at $6 trillion and… | ||
| From DevOps to DevSecOps | Larry Maccherone | 53m |
A step-by-step framework proven at Comcast across 600 teams and 10,000 developers that moves teams from words to actions through 90‑day workshops: a coach-led… | ||
| Double plus Ungood Why Log4Shell Is So Bad | Josh Cummings | 51m |
Log4Shell exploits a Log4j feature that resolves JNDI LDAP lookup strings, causes remote class loading and runs attacker code via static initializers; a live… | ||
| DevSecOps | Brian Vermeer | 52m |
Live demos show an RCE via an Apache Struts OGNL header against a Heroku app, a zip path traversal overwrite of native2ascii, and a Tomcat 8.5.21 base-image… | ||
| Lock That Sh*t Down! | Brian Demers, Matt Raible | 56m |
Practical rules and concrete tools: prefer OAuth 2.1 + PKCE and OpenID Connect with MFA over implicit or password grants, avoid rolling your own JWT schemes… | ||
| Supercharge your Kubernetes Ingress with Kong | Viktor Gamov | 54m |
Shows how Kong Gateway turns a Kubernetes Ingress into a full API platform by installing CRDs and using annotations to enable plugins; demos include a REST… | ||
| I'm Tracing You! | Roberto Cortez | 47m |
OpenTelemetry instruments applications end to end using a Java agent or library hooks, exports via OTLP to a collector and was shown pushing traces into Jaeger… | ||
| How Microsoft Learned to Love Java | Reza Rahman | 59m |
Microsoft now claims Azure is one of the best places to run Java workloads and backs that with concrete tooling: marketplace solution templates for JVM… | ||
| Apache Kafka Simply Explained | Olena Kutsenko | 36m |
A clear, practical walkthrough of Kafka fundamentals that builds a runnable demo: a Java client producer sends continuous JSON messages over SSL to a topic… | ||
| Bootiful Edge Services | Josh Long | 57m |
Builds a small demo: a customers service (H2 + R2DBC) and an orders service over RSocket for orders, then a single edge service using Spring Cloud Gateway and… | ||
| Divide and Conquer Send Forth the Microservices | Jennifer Reif | 46m |
Builds two Java microservices with Spring Boot (service1 on 8081, service2 on 8080), a MongoDB container seeded with ~10,000 Goodreads books, and a reactive… | ||
| Exploring Stateful Microservices in the Cloud Native World | Grace J, Mary G | 51m |
Argues that stateful microservices are practical in cloud-native setups and shows concrete tools and patterns: runtime runs with mvn liberty:run, persistence… | ||
| Practical Cloud Pipelines | Danica Fine | 45m |
A home system uses a Raspberry Pi and four capacitive soil sensors (I²C limit = 4) to produce moisture and temperature events every 5 seconds into Apache Kafka… | ||
| (Mis)Understanding Cloud Native | Ana-Maria Mihalceanu, Rustam Mehmandarov | 53m |
CNCF’s cloud‑native definition gets reduced to myths here: containerizing does not equal modernizing, lift‑and‑shift requires code analysis, migration tooling… | ||
| The Hidden Gems of Distributed Tracing | Ana-Maria Mihalceanu | 39m |
Shows how to use OpenTelemetry collector with Jaeger and Prometheus to find real bottlenecks: a Quarkus demo app with two services (hobby → activity) exports… | ||
| Peanut Butter Jamstack | Raymond Camden | 45m |
Argues that moving dynamic work to build time keeps production as simple flat files and shows a concrete stack: Eleventy (11ty) for static generation, Netlify… | ||
| Typescript for the busy Java developer | Orlando Valdez | 54m |
Live code demos demonstrate that TypeScript compiles with tsc and tsserver, runs on backend Node, and adds a structural typing system that accepts objects by… | ||
| Alpine js Declare and React with Simplitcy | Luis F. Majano | 52m |
Alpine.js is a 4–6 KB reactive library that lets HTML carry state and behavior using attributes like x-data, x-model and x-transition. Demo builds include a… | ||
| May JavaFX be with you always | Gerrit Grunwald | 51m |
Recreates a macOS diabetes-monitoring app as GlucoStatusFX and gets it running on desktop, browser and mobile; CSS replicates the mac header (height 52.5, four… | ||
| AI in Web: TensorFlow js | Gant Laborde | 41m |
Uses TensorFlow.js and models from TensorFlow Hub (MobileNet SSD v2, BlazePose 3D) to run browser-side inference at roughly 34 FPS, with model sizes from ~2–20… | ||
| ARIA A Grande Method Of Accessible Markup | Chris DeMars | 49m |
Explains ARIA as the fallback when semantics fail, shows concrete attributes (role, aria-label, aria-describedby, aria-live, aria-hidden, aria-checked), and… | ||
| On the Edge of My Server | Brian Rinaldi | 52m |
Edge functions replicate code across CDN nodes to cut latency and can intercept requests and responses for A/B testing and personalization; Cloudflare… | ||
| Observability Beyond the three pillars with Spring | Jonatan Ivanov | 58m |
Concrete claim: having logs metrics and traces is not enough — real observability needs meaningful outputs, quick ad hoc questions, and context propagation… | ||
| Closing the Developer Experience Gap in the Kubernetes Ecosystem | Mark Fisher | 54m |
Argues Kubernetes gives powerful primitives but leaves developers stitching them together, and shows concrete extensions that close that gap: Carvel (kapp/ytt)… | ||
| Java on CRaC Superfast JVM Application Startup | Simon Ritter, Gerrit Grunwald | 51m |
CRaC implements checkpoint/restore for JVMs inside OpenJDK using Linux’s CRIU to snapshot a warmed JVM, adding a Resource API with… | ||
| Take a Walk on the Client Side | Erin Schnabel | 51m |
Uses JBang installs scripts and Quarkus command-mode with picocli to build a native-feeling CLI (avoids native image because H2 + native is flaky), backed by… | ||
| Preparing for the Java Cert and Learning New Features (Part 2) | Scott S, Jeanne B | 56m |
Covers concrete Java 12–17 changes with examples that matter: text blocks show backslash-s to force trailing spaces, line-continuation backslash, and… | ||
| Preparing for the Java Cert and Learning New Features (Part 1) | Scott S, Jeanne B | 45m |
Covers concrete Java 9–17 cert material: var only for local variables with rules (must be initialized, not for fields, null allowed only with cast, cannot mix… | ||
| DevOps for Java Shops | Brian Benz | 01h 02m |
Shows a working Java CI/CD flow using GitHub Actions (runs on Ubuntu hosted runners) to build with Maven, deploy to Azure App Service, and toggle features via… | ||
| Getting Caught up with Kotlin | Justin Lee | 59m |
Kotlin specifics covered: nullability in the type system, var/val semantics, by lazy delegates for deferred initialization, extension functions and extension… | ||
| What's Looming in Java The Why and What of Project Loom | Venkat Subramaniam | 51m |
Project Loom adds JVM-managed virtual threads built on continuations that detach task state from OS threads so blocking IO no longer pins a thread. A demo… | ||
| Brewing the Best of All Worlds | Mark Heckler | 51m |
Builds a mini microservice portfolio live: a Spring Cloud Config Server (git-backed with encrypted tokens), a Eureka discovery registry, an airport service… | ||
| What is Adoptium | George Adams | 20m |
Adoptium is the Eclipse-hosted successor to AdoptOpenJDK delivering Temurin builds produced by a Jenkins CI pipeline from OpenJDK source, supporting about 58… | ||
| Spring Cloud Gateway Recipes | Spencer Gibb | 53m |
Spring Cloud Gateway recipes show concrete, working demos: a gateway that performs OAuth2 token relay with Spring Authorization Server and JWT-validated… | ||
| The Future is Reactive | Cecili Reid | 50m |
A hands‑on demo builds a tiny Spring Boot app (Java 11+, Spring 5, Reactor Core) backed by H2 with JPA and Lombok that generates registrant events every… | ||
| Clean Application Development with Records, Sealed Classes and Pattern Matching | JP | 01h 08m |
Shows Java 17/18 features with live code: demonstrates text blocks for multi-line strings, builds a Range record with canonical constructor and validation, and… | ||
| Container Usage Patterns | Raju Gandhi | 01h 00m |
Shows exactly which container patterns matter and how to use them: use named volumes for host-agnostic persistent storage, create user networks for automatic… | ||
| Migrating from Imperative to Reactive | Terry Walters | 01h 00m |
Shows how to migrate a Spring Boot webmvc app to WebFlux by switching annotations to the functional route+handler API, replacing spring-webmvc with… | ||
| Pattern Matching for Java | Neha Sardana | 27m |
Project Amber features are shown with concrete Java versions and code effects: Java 16 brings the instanceof pattern that removes casts and introduces… | ||
| How Amber is Driving Java’s Evolution | Billy Korando | 43m |
Project Amber delivers concrete language changes: records generate equals/hashCode/toString and make data classes shallowly immutable, switch gains arrow… | ||
| A Tour of the Modern Java Platform | James Ward | 52m |
Shows concrete modern Java moves: records and sealed types for immutable data, pattern matching with compiler-enforced exhaustiveness and improved NPE… | ||
| Java on Kubernetes What I Wish I Knew First | Abel Salgado, Alberto C. Ríos | 01h 00m |
Argues that developers need a fast, CI-friendly local cluster and a repeatable dev loop, so the team evaluates microk8s, minikube, kind (30s startup) and… | ||
| Java Project Amber - Not Just a Rare Fossil | Chandra Guntur | 01h 02m |
Project Amber’s changes are demonstrated live in IntelliJ against Java 18, with runnable GitHub examples. It shows local variable type inference (var) caveats… | ||
| Prod like Integration Testing for Cloud Native Microservices | Daniel Oh | 47m |
Shows that Quarkus Dev Services auto-starts real infrastructure for local prod‑like tests, bringing up PostgreSQL via Testcontainers and seeding three rows… | ||
| Java 19 Project Panama 4 Newbies | Carl Dea | 55m |
Shows using OpenJDK’s Foreign Linker/Memory APIs (JEP 419/424 preview, successor to JEP 412) plus the jextract generator to replace messy JNI, claiming… | ||
| Configuration as Data, GitOps and Multi Cluster The Key to Successful Servic | CP | 43m |
Argues that GitOps plus a small set of controllers is required not optional and shows a management cluster that watches Git and generates lower level Istio… | ||
| Making A Strong Case For Accessibility | Todd Libby | 37m |
WebAIM finds 50.8 million+ accessibility errors across one million homepages, a 1.1% drop but 96.8% still fail WCAG checks; common failures are low-contrast… | ||
| Using Byte Code Analysis to Modernize Your Java EE Applications | Cindy High | 41m |
A command-line bytecode-level scanner opens EAR/WAR/JAR files with ASM, inventories servlets/EJBs/JSPS, finds duplicate libraries (examples include two copies… | ||
| JOOQ Data Abstractions Without Distraction | Jason Lee | 50m |
jOOQ provides a Java DSL that compiles SQL into type-safe queries, with code generation from live DB that creates table/record/DAO classes via a Maven plugin… | ||
| Meta Modern Software Architecture | Neal Ford | 48m |
Argues that architecture styles emerge from new platform capabilities and that a metamodern holism demands trade-off analysis not silver bullets. Cites the… | ||
| Building With Zero Trust Architecture | Sendil Kumar N | 39m |
Claims that remote work drove a shift from perimeter trust to continuous verification, citing a ~125% rise in cyber attacks and an average data‑breach cost… | ||
| Getting Started with Spring Authorization Server | Joe Grandja | 01h 02m |
Spring Authorization Server implements OAuth 2.1 and OpenID Connect basics, adds JWT and opaque token support, a pluggable OAuth 2 token generator and token… | ||
| Introduction to SLSA | Veer Muchandi | 59m |
SLSA defines four measurable levels (build → source → dependency) and claims you can raise supply-chain trust incrementally; the talk cites a 650% jump in… | ||
| Keeping Kubernetes Secrets | Alex Soto | 54m |
Kubernetes Secrets are base64 not encrypted and live in etcd as readable data unless extra layers are added; kubeseal + SealedSecrets encrypts YAML for Git but… | ||
| Java and Ransomware - what’s in it for you | Steve Poole | 50m |
Explains how attackers reach remote code execution through phishing, CVEs and supply‑chain vectors like typo‑squatting, dependency confusion and malicious… | ||
| Exploring Stateful Microservices in the Cloud Native World | Grace J, Mary G | 51m |
Claims that stateful microservices are practical in cloud-native environments and shows concrete tooling and patterns: Open Liberty examples (mvn liberty:run)… | ||
| Understanding Amazon Alexa | Jeff Blankenburg | 01h 08m |
Demo unpacks Alexa internals: wake word triggers on‑device capture, STT maps phonemes to text, NLU resolves intents into a JSON payload sent to a backend, and… | ||
| Single Page Apps in a Microservice Architecture | Zachary Klein | 55m |
Demonstrates concrete patterns: uses Micronaut for an API gateway with compile‑time generated HTTP clients, JWT token propagation for multi‑tenancy, and… | ||
| nothing matches | ||