Øredev 2019
2019-11-06..2019-11-08
Malmö, Sweden
Øredev ·
[Øredev 2015, Øredev 2016, Oredev 2017, Øredev 2018, Øredev 2019, Øredev 2022, Øredev 2023, Øredev 2024, Øredev 2025]
as the organisers put it
PSYCHED: Although Freud died long before GitHub, assembly, and Twitter, we want to argue that several of his theories are expressed in the ways we develop tech, and in the tech itself. We like to think of software as something completely rational, unbiased, running on cold-hearted machines. But our minds that design and write the programs come loaded with a hefty set of issues. This year, our keynote speakers will reflect on topics such as cognitive aspects of software design, the drives behind the development of tech, morality and biases in AI, etc. Technology changes but we are bringing it into the world using the same brains that were around 1,000 years ago, even 10,000. We are not implying Freud was right about everything. We simply want to explore technology from the vantage point of psychology, morality, and philosophy. We the curious!
who it's for
software engineers, engineering managers, platform engineers, devops engineers, data engineers, security engineers
topics
DORA metrics and continuous delivery; GitOps and progressive delivery; Jenkins X for Kubernetes; TypeScript infrastructure as code; hostless substrates with IPFS; WebAssembly for portable compute; Apache Kafka streaming architectures; data quality with Airflow and Deequ; recommendation systems with ElasticSearch; SSRF and cloud metadata leaks; testing in production
| title | author | length |
|---|---|---|
| The Secrets of High Performing Technology Organizations | Jez Humble | 39m |
Six years of DORA research use statistical predictive analysis on 30,000 data points to claim software delivery is a competitive advantage: high performers are… | ||
| Modern WebApp Vulnerabilities | Erlend Oftedal | 50m |
Walks through concrete bugs and exploit paths: XXE via XSLT onParsedText exfiltrates files and internal HTTP metadata, deserialization gadgets (why so… | ||
| Diversity of Thought - The Key to Innovation | Carmen Medina | 38m |
An analyst recounts a CIA team split over South Africa in the 1980s to show how personality and optimist vs pessimist outlooks change judgments, cites studies… | ||
| Escher in Elm: Picture combinators and recursive fish | Einar W. Høst | 39m |
Recreates Escher’s Square Limit by implementing Henderson’s 1982 picture algebra in Elm, defining concrete primitives like turn, flip and toss and combinators… | ||
| A Universal "Hostless" Substrate for a Post-Serverless Futur | Brooklyn Zelenka | 39m |
Claims a working stack that turns apps into hostless artifacts: content-addressed storage with ipfs, decentralized identities (W3C DIDs), OrbitDB and hashed… | ||
| XXSS: Exotic Cross-Site Scripting vectors | Benedek Gagyi | 40m |
Starts from a concrete historical exploit (Samy MySpace worm infects 1,000,000 profiles in ~20 hours) and demonstrates techniques that actually work: non-JS… | ||
| Engineering data quality | Lars Albertsson | 37m |
Argues that data quality is an engineering problem with concrete tactics: use Luigi or Airflow for orchestration, emit counters and invariants to monitor… | ||
| What the game industry taught me about performance | Brian Rasmussen | 32m |
Shows concrete, measurable techniques: uses BenchmarkDotNet on .NET Core 3.0, demonstrates cache-aware vs cache-unfriendly matrix loops (row wins), converts… | ||
| Don't Take It Personally | Bailey Hanna | 39m |
Shows concrete tactics and outcomes: replace blaming phrasing with team-focused scripts, cut out "failure" and watch usage drop across the org in weeks… | ||
| Modern Enterprise Java from the ground up | Sebastian Daschner | 39m |
Builds a tiny thin WAR with Maven (Java 12), runs it on Open Liberty in Docker, and demonstrates tiny Docker diffs that push over slow networks; adds… | ||
| From YAML to TypeScript - Developer’s View on Cloud Automation | Mikhail Shilkov | 39m |
Claim: replace YAML/JSON templates with real code so developers get TypeScript tooling, types and abstractions. Evidence: moving a real app required 4–5… | ||
| Applied Machine Learning Playbook: From Idea to Production | Gabriel Bianconi | 36m |
Practical checklist of what actually works: simulate scarce sensors by staging activity in an empty hospital room and doubled the dataset in a day; prefer… | ||
| Striving towards more productive development workflows | Sebastian Daschner | 41m |
Live coding demonstrates a concrete workflow: a tiny Java EE hello service built with Maven package, deployed as a thin WAR into Docker, then iterated in… | ||
| Visual thinking - simplify complex | Yuri Malishenko | 33m |
Claim: simple hand drawings turn sequential words into spatial models that people parse far faster and sketchnoting boosts memorization (research-backed)… | ||
| Inclusive Architecture - Building a Sustainable Dev Team | Tracy Lee, Rob Ocel | 40m |
Claims that an explicit Pam stack — Process, Abstractions, Mentorship makes teams cheaper and faster: concrete steps include writing plans and checklists… | ||
| API Management, Meet Event Management | Jeremy Meiss | 34m |
Argues that API management patterns—portals, catalogs, gateways and code generators—apply to event-driven systems, and shows concrete tools: AsyncAPI schemas… | ||
| Own your speed | Pia Nilsson | 39m |
Spotify measures onboarding as days until the 10th PR and finds it rising, so the org pushes t-shaped cross-skilling and builds a thin, pluggable platform… | ||
| Common Component Decomposition Pitfalls (And How To Avoid Them!) | Rob Ocel | 40m |
Argues that component decomposition succeeds when concrete choices are clear: use rule of three before abstracting, split a three‑step wizard into routable… | ||
| Shift Your Leadership | Pete Behrens | 45m |
Claims that tiny interventions move culture: swapping a single metric pushes Dev and Ops into collaboration and produces DevOps; a one-policy rule at… | ||
| Understanding Test Driven Development with Javascript | Roy Osherove | 42m |
Builds a working boolean verifier for a password-kata called password verifier kata by writing failing tests then making them pass and refactoring, using Jest… | ||
| Dealing with eventual consistency | Dennis van der Stelt | 39m |
Covers practical strategies for handling eventual consistency in web apps using message queues like Azure Service Bus or plain queues to accept requests… | ||
| Let's (not) get rid of all the managers! | Julia Wester | 39m |
Argument: managers matter because they explain at least 70% of the variance in employee engagement and flat org experiments fail without guidance. Historical… | ||
| Advent of Code: Behind the Scenes | Eric Wastl | 44m |
Advent of Code runs as a 25‑day December puzzle calendar that grows from an estimated 70 users to 52,000 in year one and about 250,000 today, forcing a switch… | ||
| The Rise of JAMStack | Shawn Swyx Wang | 35m |
Argues that the web shifts from server-rendered LAMP/MEAN assumptions to a CDN‑served architecture where JavaScript, APIs and markup are prebuilt: JAMstack… | ||
| From single container to applications at scale | Hardy Ferentschik | 44m |
Shows concrete tradeoffs and working demos: Docker for local images, Kubernetes as the orchestrator, and Istio-style service mesh for observability and traffic… | ||
| Maximizing performance with GraalVM | Oleg Šelajev | 45m |
GraalVM replaces the JVM JIT and often removes abstractions: a JMH benchmark comparing a hand‑tuned raw hash and an abstracted Objects.hash version shows… | ||
| Breaking Changes | James Coglan | 41m |
Maintains NPM WebSocket libraries with 20 million downloads a week and traces concrete breakages: changing a numeric status to a string that breaks strict… | ||
| Business Agility in practice - an introduction to Beyond Budgeting | Bjarte Bogsnes | 41m |
Claims that traditional annual budgets are replaced by separated target forecast and resource allocation processes and event-driven decisioning; a live… | ||
| Social Implications of Bias in Machine Learning | Fiona Coath | 38m |
Shows concrete failures and fixes: a pothole app finds only wealthy neighborhoods until buses are instrumented; image search mislabels cats and hides why until… | ||
| Debunking the Myth: Extending Cyberpsychology Beyond Freud | Alison Attrill Smith | 31m |
Covers concrete claims and methods: cyberpsychology treats technology as a goal-directed tool and blends cognitive and social frameworks to predict behavior… | ||
| Psyched about Outcomes | Margaret Dineen | 39m |
Argues that measuring business outcomes beats counting features and shows how Mobius outcome delivery loop aligns engineering to revenue goals. Runs discovery… | ||
| Panel: Web | Doug Sillars, Shawn Swyx Wang, Tracy Lee | 41m |
Panelists debate concrete tradeoffs: micro frontends lacks a shared definition so applicability varies; run sites through webpagetest and Lighthouse to see… | ||
| All our aggregates are wrong | Mauro Servienti | 45m |
Starts from a shopping cart example and argues the cart is not a single aggregate but a projection of multiple bounded contexts (sales, warehouse, shipping… | ||
| Customize Your App with MLKit | Victoria Gonda | 39m |
Shows how MLKit actually runs real models on-device and in the cloud, using Smart Reply and language detection to pick language codes and generate up to three… | ||
| Live Coding Kotlin - Native Snake | Dmitry Kandalov | 44m |
Live-codes a playable Snake written in Kotlin/Native that uses ncurses for terminal UI, Gradle for builds and Kotlin/Native C interop via LLVM, with tiny unit… | ||
| Eventually, time will kill your data processing | Lars Albertsson | 36m |
Lists concrete failure modes — daylight savings, leap seconds, client clocks, late mobile events, and duplicated hours — and shows where they break data… | ||
| Smarter Home Automation without the Cloud | Aaron Parecki | 38m |
Claim: keep the smarts at home and avoid cloud outages. Demonstrates a working stack with Home Assistant as the local controller, Node-RED for visual rules… | ||
| From Caesar Cipher To Quantum Cryptography | Joel Lord | 41m |
A clear throughline from Caesar shifts to quantum claims how concrete problems get solved: historical one-time pad is provably unbreakable but logistics kill… | ||
| Real-Time Arch for Modern ASP.NET Core Web Apps | Tomasz Pęczek | 39m |
Opinionated architecture for ASP.NET Core real time apps that names concrete tools and tradeoffs it recommends using an in-memory queue before moving to… | ||
| Creating socially awkward wearables with ML & JS | Stephanie Nemeth | 33m |
A wearable necklace uses a camera on a choker to snap photos every few seconds, runs inference on a Raspberry Pi running Node.js and TensorFlow.js to count… | ||
| Giving Clarity to LINQ Queries by Extending Expressions | Ed Charbeneau | 39m |
Deep dive into .NET Expression trees shows how expression visitors rewrite and compile lambdas, produces a tiny predicate extensions library that composes… | ||
| The psychology of communicating online | Joanne Meredith | 38m |
Psychology claims that online communication is shaped both by missing nonverbal cues and by users repurposing features, arguing for an affordances view between… | ||
| Blockchain and cryptocurrencies - a deep dive | Badi Sudhakaran | 41m |
Claims that Bitcoin is a new digital bearer asset backed by public/private keys and three primitives — decentralization, incentives, cryptography — get… | ||
| Panel: Architecture | James Lewis, Marianne Bellotti, Tomer Gabel | 42m |
Panel argues specific tradeoffs: start with a monolith because it’s easier for small teams and split only when uneven growth forces independent scaling… | ||
| Recommendations at scale with Elastic Search | Omri Fima | 36m |
Shows a concrete pipeline using Elastic Search for content recommendations: a demo index of LEGO products, scripted scoring that combines tag scores… | ||
| Elixir & Phoenix - Fast, Concurrent and Explicit | Tobias Pfeiffer | 44m |
Elixir compiles to the BEAM and uses pattern matching, immutable data and actors to get cheap concurrency and fault tolerance, with hot code swapping available… | ||
| Microservices: A retrospective | Tomer Gabel | 45m |
Microservices are pitched as velocity, scale and resilience but the real payoff is organizational scaling: teams gain independence and less synchronization… | ||
| Fast and Beautiful: Modern Image Delivery Techniques | Doug Sillars | 36m |
Average mobile pages are ~50% images so concrete fixes matter: use 85% JPEG -> half the filesize or run a structural‑similarity auto quality step (example… | ||
| Getting Started with AndroidX Test | Victoria Gonda | 38m |
Concrete workflow and results not philosophy AndroidX Test unifies running instrumentation tests on device or locally with Robolectric and shows the exact… | ||
| Goodbye client side JavaScript, Hello C#'s Blazor | Ed Charbeneau | 36m |
Blazor claims to let C# run in the browser by compiling the .NET runtime to WebAssembly and shipping DLLs to the client so browser code executes on Mono; the… | ||
| Developing for Everyone | Sergei Kriger | 31m |
Shows concrete fixes and demos: making checkboxes and chart bars focusable with aria-label and tabindex, replacing visual drag‑and‑drop with a keyboard select… | ||
| How Eyetracking can be Beginning of the End of Privacy | Az Balabanian | 34m |
Claims: eye tracking enables foveated rendering that cuts GPU load by ~50%, hardware exists today in Magic Leap dev kits, Vive Pro Eye and prototypes like… | ||
| Inside a hacker’s mind | Maria Shoaib | 35m |
Covers concrete exploits: OGNL expression injection in Apache Struts (the Equifax-style remote code execution), live demos that show arbitrary Java execution… | ||
| Test Automation without Assertions | Jeremias Rößler | 38m |
Claim: assertion-free, snapshot-based testing (also called Golden Master Testing) catches meaningful UI changes with less brittle maintenance. Tools: Approvals… | ||
| Increase your .NET Productivity Tips & Tricks in Visual Studio 2019 | Pratik Nadagouda | 37m |
Demo-heavy tour of Visual Studio 2019 shows exact changes: hundreds of new refactorings and one‑click code cleanup via EditorConfig, Roslyn analyzers packaged… | ||
| 100,000 Orange Stickies Later | Alberto Brandolini | 42m |
EventStorming history condenses into concrete moves: thousands of orange stickies on a wall form a timeline that surfaces contradictions, magenta notes mark… | ||
| Conflict resolution | James Coglan | 37m |
Explains that Git stores full snapshots and performs a three-way merge by finding the nearest common ancestor and adding the two branch deltas, shows concrete… | ||
| Everyone can Data! - A Practical Data Science Intro | Dalya Gartzman | 40m |
Shows concrete projects and outcomes: builds an Ender’s Game word2vec embedding over a weekend and demonstrates it returns analogies; composes an automatic… | ||
| Is DevOps Still Relevant in a Cloud Native World? | Jez Humble | 36m |
Argues DevOps remains essential and gives measurable evidence: four metrics (lead time, deploy frequency, change‑fail rate, time‑to‑restore, plus availability)… | ||
| Kotlin DSL in under an hour | Anton Arhipov | 41m |
Live coding shows a real Kotlin DSL built atop existing Java classes: Java Consumer becomes a Kotlin lambda, builders turn into nested createClient/create… | ||
| The Story of why we migrate to gRPC and how we go about it | Mattias Grüter | 35m |
Spotify abandons Hermes for gRPC, claims a multi‑year migration of migrating 1000+ services to cut boilerplate and tap open‑source tooling. Migration uses… | ||
| Introduction to Ktor | Hadi Hariri | 46m |
Ktor claims to be a lightweight, coroutine-first web framework that actually ships a working stack: an embedded Netty server example boots instantly, routing… | ||
| Psychotherapy for Code | Adam Tornhill | 50m |
Gives concrete techniques and data: version-control hotspots and change-frequency graphs that reveal a power-law distribution across ~250–300 codebases, a… | ||
| Hacking Humans: Social Engineering Techniques | Stephen Haunts | 44m |
Claims that Social engineering causes most breaches with concrete stats: phishing is ~77% of social attacks, clicking links ~88%, phone fraud hit 2.4M US… | ||
| On Track with Apache Kafka | Robin Moffatt | 38m |
Public Network Rail train feeds ingest via ActiveMQ into Kafka Connect and lightweight tools like kafka‑cat, transformed and enriched with ksql and Avro… | ||
| You have a security problem - your users | Sebastian Wallin | 40m |
Shows actual attack data and defenses: credential stuffing tools run on proxies and botnets, sometimes 900,000 attempts over 30 hours yielding 0.1% valid… | ||
| Improving with C# 8.0 | Filip Ekberg | 40m |
Shows concrete C# 8 features and tradeoffs: nullable reference types opt in via project file and produce many warnings but catch null dereferences… | ||
| A reasonable guide to security practices | Niall Merrigan | 41m |
Shows concrete, actionable defenses and real attacks: a Wi‑Fi pineapple man‑in‑the‑middle steals a Gmail password, a $20–$25 tool (Con‑Boot) bypasses Windows… | ||
| What's In A Model? | Asbjørn Ulsberg | 35m |
Argues a concrete alternative to MVC: refactor a simple customer UI through an onion core domain with ports/adapters so all inputs pass core rules… | ||
| How we introduced Agile to the non-profit sector | Stephanie Gasche | 41m |
Shows a concrete fast build: domain bought end of 2016, site live March 2017, translations by May, team of ~7 volunteers, no government funding. Explains use… | ||
| Integration testing a cloud native application with JavaScript｜ | Markus Tacker | 43m |
Walks through testing a cloud‑native app on AWS that uses MQTT to webhooks and REST, driven with JavaScript and a BDD/gherkin setup, showing a working test… | ||
| Flow, microservices and scale｜ | James Lewis | 44m |
Recent research connects biological scaling laws to software orgs: metabolic rate follows a 3/4 exponent, public companies’ revenue scales ~0.85 per doubling… | ||
| The Pipeline Driven Organization｜ | Roy Osherove | 44m |
Argues that a Pipeline Driven Organization moves tactical decisions into a single automated pipeline so deployments happen in minutes not months, with… | ||
| How shit works: Time｜ | Tomer Gabel | 42m |
A website-builder called Wix Adi uses event sourcing and a relational DB but finds persisted events arrive out of order; system timestamps prove unreliable (OS… | ||
| The Changing Face Of ETL: Event-driven Architectures for Data Engineers | Robin Moffatt | 40m |
Argues that modeling everything as events avoids brittle ETL and shows concrete patterns with Apache Kafka: stream‑table duality, Kafka Connect for… | ||
| Can We Still Build Technology for the Right Reasons | Emily Gorcenski | 39m |
The talk traces concrete failures and fixes: Therac-25: six radiation overdoses, four deaths exposes software race conditions; Mirai botnet knocks out about a… | ||
| The Good, The Bad, The Ugly: Technology in the Refugee Aid Movement | Taylor Fairbank | 42m |
Review lists concrete claims, constraints and outcomes: grassroots networks (≈600 groups, tens of thousands of volunteers) rely on spreadsheets, Google Drive… | ||
| Python For .Net Developers | Dennis Vroegop | 45m |
Introduces how .NET developers can quickly learn and use Python for scripting and extending applications, demonstrating practical interop and prototyping… | ||
| Mission Impossible: The Product Owner | Allan Kelly | 45m |
Argues the Product Owner role is often impossible because one person must cover skills authority legitimacy time, owning a single backlog and negotiating… | ||
| IoT Is Fun With Micropython | Sebastian Roll | 39m |
Shows how to flash MicroPython onto an ESP32 with esptool and USB serial, run REPL commands, and use the machine module to toggle pins, PWM LEDs, read a BME280… | ||
| Jenkins X Progressive Delivery For Kubernetes | Carlos Sanchez | 39m |
Jenkins X runs on Kubernetes and wires together Tekton, Skaffold, Helm, Kaniko, Istio and Flagger so commits and PRs build in ephemeral preview namespaces and… | ||
| Keeping Up With Java | Sander Mak | 43m |
Overview lists concrete changes since Java 8: six‑month releases start in 2017 so new major release every six months; module system with requires/exports and… | ||
| Smarten Up Your Pipeline and Reduce Test Execution Time｜ | Bart Szulc | 35m |
Claims a 30% cut in test runtime by building a coverage-driven filter: instrumented JVMs with jacoco, generated per-test coverage, stored mappings in a service… | ||
| How To Hack OAuth｜ | Aaron Parecki | 36m |
Covers concrete failures: leaked native app keys forcing adoption of PKCE; token forgery by manipulating headers in the JWT alg none bug; a fast‑spreading… | ||
| The Tricks of Game Programming in a Pure Functional Language | Jordy Moos | 31m |
Recreated the game Boulder Dash in Elm and built a small browser engine that renders to canvas with requestAnimationFrame and uses a JSON level format. Shows… | ||
| Building An ARt Gallery in the Browser | Doug Sillars | 34m |
A browser art gallery is implemented with A-Frame + AR.js and served via Cloudinary assets; full 3D glTF sculptures (David) and images (Mona Lisa, Starry… | ||
| Modern Development in Traditional Retail | Claes Adamsson IKEA | 29m |
IKEA explains concrete steps: migrating from legacy mainframes and an 80s Pascal system through large-scale outsourcing in 2011 to early cloud use in 2014… | ||
| Evolution From #Noprojects to Continuous Digital | Allan Kelly | 48m |
Claim: projects are a 1970s hangover and must be replaced by continuous digital practices that fund teams not temporary scopes. Cites Domino’s app as the… | ||
| Web Components Are Your Framework's Best Friend ｜ | Filip Bruun Bech-Larsen | 41m |
Claim: you can write your datepicker in React, use it in VueJS or even Angular. Demo actually builds a reusable custom button/date-picker using shadow DOM… | ||
| AI + AR Superpowers! | Andras Velvart | 38m |
Prototype AR apps use Hololens and Azure Cognitive Services to demo face ID over Twitter profiles, uploading ~1,200 profile images and reporting 0.7 seconds… | ||
| GitOps in Action | Jimmy Dahlqvist | 35m |
Claims Git becomes single source of truth and operations run through pull requests, demonstrates an AWS-based pipeline that uses CodeCommit, CloudFormation, a… | ||
| Full Stack Web in F# | Tomasz Heimowski | 37m |
Builds a TodoMVC subset with the SAFE Stack and live coding, using Saturn + Fable + Elmish + Azure; implements GET and POST /api/todos backed by Azure Blob… | ||
| Testing In Production | Talia Nassi | 36m |
Claims that running tests against live systems raises confidence and velocity by catching real-data bugs before release and lowering fix time, with concrete… | ||
| Intro to Kotlin Multiplatform | Kevin Galligan | 35m |
Kotlin Multiplatform compiles common code to JVM, JavaScript and Native (an LLVM backend targeting iOS, Windows, Linux and WebAssembly) and uses the… | ||
| Automate All The Things! | Nate Ebel | 40m |
Automated CI uses GitHub Actions (also shown on CircleCI) to run Gradle builds, ktlint pre-push hook copied from repo scripts so formatting fails locally not… | ||
| Everybody lies | Seth Stephens-Davidowitz | 59m |
Uses Google search logs and Google Trends to compare real behavior with surveys, finds multiple concrete surprises: horse racing success ties to left ventricle… | ||
| We Killed These Things With Fire | Marianne Bellotti | 41m |
Argues technology moves in cycles not a straight line, with concrete examples: mainframe patterns reappearing as cloud architectures, the 2010 shift to larger… | ||
| Technical Modeling as a Practice | Michael Feathers | 48m |
Asserts that Conway's Law and actor‑network thinking predict isomorphic structures across code, teams and orgs, shows a concrete case where multiple teams… | ||
| nothing matches | ||