Øredev 2022
2022-11-08..2022-11-10
Malmö, Sweden
Øredev ·
[Øredev 2015, Øredev 2016, Oredev 2017, Øredev 2018, Øredev 2019, Øredev 2022, Øredev 2023, Øredev 2024, Øredev 2025]
who it's for
software developers, frontend developers, platform engineers, engineering managers, software architects, data engineers, security engineers
topics
Android tracker protection; Web3 horizontal scaling; gossip failure detection; generic math in .NET 7; building platform engineering at scale; securing developer workstations; serverless with MongoDB; production ready deep learning workflows; data mesh for analytics; WebAssembly for the web; threat modeling practices; optimising Largest Contentful Paint
| title | author | length |
|---|---|---|
| A comprehensive guide to tracker protection on Android | David González | 31m |
Claims a working system that blocks trackers from any app by combining a crawled tracker dataset and Android APIs, with a root certificate + MITM capture for… | ||
| Thriving in a Insecure World | Martin McVay | 39m |
Survey data from 5,000 respondents shows concrete shifts: 53% of developers say they own security, 70% deploy at least every few days and 27% deploy multiple… | ||
| Horizontal Scaling of a Web3 system | Paolo Insogna | 43m |
Migrated web3.storage off a slow bootstrap IPFS setup into a design using S3, SQS, Lambda, DynamoDB and EKS to become a fully stateless system that removes… | ||
| Automate everything with CDK in AWS | Johannes Pelto-Piri | 28m |
Claims that CDK with TypeScript CDK replaces YAML/CloudFormation templates with real code, shows building a small API (Lambda + API Gateway), wiring a CI/CD… | ||
| Are you Dead or Alive? Using Gossip for Failure Detection | Jinal Parikh | 42m |
Gossip protocols claim fast, scalable failure detection by having each node gossip only to a few peers so updates diffuse in log n rounds; Xerox’s 1987… | ||
| Updates from the .NET Libraries Team | Jeff Handley | 45m |
Covers concrete .NET 7 deliverables: reimplemented System.Console.ReadKey for reliable Unix terminals, new System.IO ReadAtLeast/ReadExactly methods… | ||
| Generic Math in .NET 7 | Jeff Handley | 41m |
Generic Math in .NET 7 introduces a concrete claim and a working toolset: dozens of new numeric interfaces applied to primitives that let one write a single… | ||
| Privacy preserving machine learning | Håkan Jonsson | 28m |
Models leak real examples: GPT‑2 reproduces phone numbers, reconstruction attacks recover identifiable photos, and membership inference reveals presence in… | ||
| Dynamic Reteaming at Fast Changing Companies | Heidi Helfand | 41m |
Talk claims there are five patterns of dynamic reteaming (one‑by‑one, grow‑and‑split, merge, isolation, switching) and shows concrete tactics: pair programming… | ||
| How we scaled a payments system with MongoDB | Johannes Brännström, Tahir Jamal | 42m |
Nets migrates the Easy payment platform from an RDBMS to MongoDB Atlas, embedding most payment data as single documents to avoid joins and using sharding… | ||
| Architecture Modernization with DDD | Nick Tune | 40m |
Claims a concrete modernization path: use Event Storming and Domain Message Flow Modelling to map domains, then validate boundaries with process modeling and a… | ||
| Let's pin that dependency | Rasmus Selsmark, Darío Cutillas Carrillo | 32m |
Claims that deterministic CI improves reproducibility and reduces flaky builds by pinning concrete versions across the stack, backed by a practical rollout… | ||
| The 1970's called; they want their office model back! | Lisette Sutherland | 40m |
Argues the future of work is choice and backs it with surveys and concrete fixes: productivity holds but burnout rises, teams check inboxes every few minutes… | ||
| A cheapskate's guide to Azure | Karl Syvert Løland | 40m |
Compares Azure services using a self‑made Stinginess-scale and runs concrete cost exercises with the Azure pricing calculator and Azure Advisor, showing… | ||
| Practical tips to elevate your UX and accessibility | Jessica Engström | 46m |
Practical, testable fixes: moving labels on top cuts visual fixations from 32 to 18 visual fixations, chunking credit‑card and phone numbers improves recall… | ||
| Failing Fast with Data: Bringing CI to the Land of Data | Micha Kunze | 30m |
Claims that CI for data pipelines works are backed by specifics: a YAML config plus a JSON schema registry generates auto-generated schema tests that run the… | ||
| Building the missing links between Strategy and Operations | Cliff Hazell | 39m |
Argues that agility fails when fixes stop at team boundaries and shows concrete alternatives: visualize end-to-end flow from idea to value, use boards… | ||
| A Data Mesh Reference Implementation on AWS | Emily Gorcenski | 46m |
A concrete AWS reference implementation claims to make Data Mesh repeatable by offering one-click creation of data products from a declarative data product… | ||
| Optimising Largest Contentful Paint | Harry Roberts | 46m |
LCP is the measured time to render the page’s largest contentful element and Google’s „good“ threshold is 2.5s; only ~54% of sites hit acceptable LCP and a… | ||
| Secure Coding: Back to basics | Erlend Oftedal | 38m |
Claims that making domain concepts explicit stops many bugs: use domain primitives (email/password/phone types) so wrong strings become compile errors… | ||
| DevOps meets reality | Jessica Andersson | 28m |
Claim: a small platform team that builds an opinionated developer product actually makes DevOps work. It provides Platform Engineering as a service: Kubernetes… | ||
| GraphQL APIs – Through the Looking Glass | Charly Poly | 38m |
Claims that modern GraphQL APIs should be easy to build, secure, realtime and portable, and shows concrete tooling and patterns: GraphQL Yoga and Envelop with… | ||
| How to Implement a Production Ready Deep Learning Model in 12 Weeks | Dat Tran | 40m |
Claims a production-ready image aesthetic classifier in 12 weeks by combining Lean Startup cycles with ML engineering. Uses a pretrained CNN (initially VGG16… | ||
| esting in modern times: A story about quality and value | Huib Schoots | 34m |
Argues that testing is about informing decisions and managing tradeoffs, not just finding bugs; claims automated checks detect regressions like dashboard… | ||
| Coding Complex App Logic, Visually | David Khourshid | 40m |
Claim: modeling app flow as state machines avoids impossible boolean combos and lets code generate docs and tests. Demonstration builds a Lego checkout demo… | ||
| Maximizing the Value of Your Event Driven Architecture | Hari Rangarajan | 34m |
Explains how to turn enterprise events into documented, versioned event API products and claims value grows with processing recency (citing Gartner). Gives a… | ||
| C# with sugar on top | Iris Classon | 38m |
Recap focuses on concrete surprises: default List capacity = 4 (Java uses 10), dynamic introduces runtime overhead that hurts performance, async/await lowers… | ||
| Cracking a ransomware family | Alexander Andersson | 38m |
Claims a practical exploit that breaks an entire family of ransomware and restores files without private keys. Shows the exact flaw: predictable .NET Random… | ||
| Building Platform Engineering from scratch at scale up | Jessica Andersson | 32m |
Builds a platform function at Kognic for a ~90‑person company with ~45 engineers, running on Google Cloud GKE single cluster. Claims: unblock developers and… | ||
| A Database DevOps Pipeline | Rob Richardson | 46m |
A concrete CI/CD pipeline for databases that actually versions schema and data and runs integration tests end to end is built using Docker containers, GitHub… | ||
| The top list of securing your developer workstation | Thomas Andolf | 37m |
Data from TrueSec and Microsoft shows rapid escalation — 58% of breaches reach full domain control within two hours and Microsoft reports a median time of 1… | ||
| The Cry Wolf Vulnerability Paradox | Emil Wåreus | 27m |
Shows measured claims not slogans: open source scanners hit 800 days to disclosure median for vuln discovery, teams report 25–75% perceived false positives… | ||
| Going serverless with MongoDB | Emil Nildersen | 40m |
Builds a React event‑registration site backed by MongoDB Atlas App services, provisioning a serverless instance (AWS Ireland), creating events and… | ||
| How I built a ZX Spectrum emulator from scratch using C# and Blazor | Jimmy Engström | 40m |
Claims a from-scratch ZX Spectrum emulator written in C# and Blazor WebAssembly, implements Z80 registers, 48k/128k banked memory and attribute-based 256×192… | ||
| Everything YOU need to Know About Jakarta EE 10 | Ivar Grimstad | 45m |
Live demos show concrete howtos not corporate slogans: creates a runnable JAR with the Java SE Bootstrapping API and a Jakarta REST endpoint that starts… | ||
| Hypermedia actors in F# | Einar W. Høst | 46m |
Claim: combine actors, finite state machines and hypermedia to make "living" web resources. Implementation uses F-sharp agents on asp.net core with giraffe… | ||
| Bash: the #1 Skill of a DevOps Engineer | Anders Janmyr | 40m |
Argues Bash is the most practical glue for DevOps and shows working examples: small scripts that read stdin, set -e -o pipefail, debug with set -x, and trap… | ||
| How Quarkus operates with GraalVM demonstrated with Neo4j | Michael Simons | 40m |
Quarkus extensions and GraalVM native-image are used to run the Neo4j Java driver and OGM natively, with build-time augmentation that generates bytecode… | ||
| Life of a data scientist | Jeanine Schoonemann | 37m |
Claims that most time goes to data prep not building AI, follows CRISP-DM, and modeling is often the easiest step — sometimes automated to produce 42 models at… | ||
| Tangible Software Quality | Gojko Adzic, Sigurdur Birgisson | 47m |
Provides a concrete model for deciding quality: a Maslow‑style pyramid of needs for software, a Cooper cost/benefit curve to pick useful performance targets… | ||
| Embracing gRPC in .NET | Irina Scurtu | 42m |
Shows a working .NET gRPC setup with generated C# from .proto files, a template gRPC server and four console clients (unary, server/client/bi‑directional… | ||
| Playing with serverless and state: Let's create a serverless chatbot! | Karl Syvert Løland | 45m |
Demonstrates that Azure Durable Functions’ Entity functions actually store per-entity JSON state so a serverless app can keep conversation context; uses Azure… | ||
| ASP .NET Basics for Experts | Layla Porter | 42m |
Demonstrates .NET 6 features by building a waffle API with code on GitHub (Layla-hyphen-P): adoption of Minimal APIs, top‑level statements and global usings… | ||
| Building Android apps in 2022 | Erik Hellman | 38m |
Concrete takeaways: Kotlin becomes the default—suspend Retrofit calls replace RxJava so threading and disposables vanish and lifecycleScope auto-cancels on… | ||
| Four years of team self selection at Redgate Software | Chris Smith | 38m |
Redgate runs an annual, employee-led re-teaming process that uses team charters and trios, an open two‑hour selection session plus one‑to‑one coaching, and a… | ||
| Designing and Deploying Scalable and Secure Applications on Kubernetes | Lars Larsson | 43m |
Practical checklist: use Deployment vs StatefulSet correctly (misused for SQL Server in examples), separate stateful from stateless, require at least two… | ||
| React Native in 40 minutes | Truls Skeie | 31m |
Clear claims and concrete tooling: demonstrations show animations running at 60 fps even while the JavaScript thread is blocked, using reanimated and… | ||
| A month entrenched in the Metaverse | Pär Sikö | 31m |
Claims a mainstream Metaverse in 10–15 years and treats today as early VR experiments. Uses Valve Index and legacy Oculus Rift DK2 with Unity to build a… | ||
| Data Management with Ruby | Sergey Sergyenko | 36m |
Claims that Ruby suffices for real data work and startups need not switch to Python are supported by concrete tooling and outcomes: uses Kiba and Faker for… | ||
| Data engineering in 10 years | Lars Albertsson | 41m |
Predicts that data engineering industrializes into data factory engineering, moving from Hadoop and data lakes through the modern data stack and lakehouse to… | ||
| CSS for internationalisation | Chen Hui Jing | 35m |
Concrete CSS hooks for language handling decide whether to watch: selectors like :lang and attribute matching, font controls such as font-synthesis and… | ||
| Cloud Native Java for This Decade With Quarkus | Sebastian Daschner | 49m |
Quarkus claims build-time wiring that produces a runnable jar starting under one second (demo shows ~0.9s) with hot-reload ~400ms and continuous tests running… | ||
| Building a serverless event driven Slack Bot | Jimmy Dahlqvist | 44m |
Builds a serverless event-driven Slack bot for a pizzeria using AWS EventBridge, Step Functions, API Gateway, DynamoDB and a single small Lambda (only code… | ||
| Becoming a Good Bearer of Bad News | Caitlin Moorman | 35m |
Data teams show concrete specifics: an optimization model with constraint turns a theoretical ideal (change 50 of 100 surgeons) into a practical menu of… | ||
| Architecture for Flow with Wardley Mapping, DDD, and Team Topologies | Susanne Kaiser | 41m |
Combines Wardley mapping, Domain‑Driven Design and Team Topologies into a concrete plan: re‑platformed infrastructure to cloud‑hosted services to cut ops… | ||
| Aligning Architecture with Responsibility Indices | Michael Feathers | 33m |
A concrete process for creating Responsibility Indices maps each primary responsibility to the exact code locations, records quality measures, planned… | ||
| Why one model can’t fit all creating fulfilling engineering organizations | Jacob volman | 41m |
Panel claims that one-size frameworks fail and gives concrete alternatives: dynamic reteaming and self-selection (one company lets people choose among 16… | ||
| The Ethical Engineer | Cennydd Bowles | 49m |
Argues that ethics is actionable not vague and gives five practical steps: make time for ethics in sprints, use the designated dissenter role and persona non… | ||
| Are all programming languages in English? | Michele Riva | 29m |
Claim: not all languages use English keywords; there are 8,900 known programming languages with about 2,500 born in the US and roughly 35 percent from… | ||
| Securing Journalists in 2022 | Runa A. Sandvik | 44m |
Defines the threat landscape as harassment, phishing, targeted malware and 0day, and insists journalists need practical, layered defenses not abstract advice… | ||
| Easing the daily grind with the awesome JDK command line tools | Michael Hunger | 35m |
Brief demos show actual commands and outcomes: jshell with Loom virtual threads runs short examples inline, jbang temporary project pulls Maven deps and opens… | ||
| What are the odds? Transforming forecasts through probabilities | Julia Wester | 40m |
Claims that probabilistic forecasts built from cycle time (finish − start + 1) and throughput match or beat traditional estimates, needing only ~10–15… | ||
| Through the Looking Glass, or the Tech Revolution that Is | Emily Gorcenski | 48m |
Claims that matter: governments hire Tiktok influencers to shape youth opinion, volunteer hackers use 3D-printed drone fins to stall a Russian convoy and stop… | ||
| Democratize your data with Analytics Engineering | Max Dyrhage | 35m |
Claim: analytics engineering democratizes data by delivering relevant, trustworthy, cohesive data models that users actually adopt. It requires four concrete… | ||
| Data Visualization for Humans | Alan Rutter | 40m |
Shows why a 19th century Jon Snow map stops a cholera pandemic and how clear visuals lead to real investment in sanitation, then gives concrete rules: define… | ||
| The Definitive Deep Dive into the git Folder | Rob Richardson | 53m |
Explores every file under .git and shows exactly how commits become zlib‑compressed objects, how commit → tree → blob links map working files, and how parent… | ||
| Reawakening Agile with OKRs | Allan Kelly | 46m |
Claims that OKRs actually work with agile after experiments across multiple teams and that they can reawaken radical agile by aligning leadership missions with… | ||
| Apathy in the online world | Renata Salecl | 52m |
Research finds 6,000 Twitter users who spread misinformation are mostly sharing to provoke, not because they believe it; interviews report 24% wanted society… | ||
| Data Mesh: Data Analytics for Engineers | Jochen Christ | 39m |
Argues that teams own analytical data and use existing tools to act: operational Kafka events are streamed into BigQuery, cleaned with SQL and DBT, cataloged… | ||
| Deep down the rabbit hole of state management and server cache | Natalia Tepluhina | 27m |
Argues that local UI state and server cache need different solutions, demonstrating with Vue + Pinia and Vue Query (react-query) cache instead of custom flags… | ||
| Managing Circularity in Data Product Development | Caitlin Moorman | 34m |
Argues data work splits into linear vs circular projects and that circular work often has unknown outcomes — sometimes after years of feature engineering a… | ||
| Five Sins of Data Observability | Tom Baeyens | 34m |
Argues that silent data failures cripple business logic and proposes a pragmatic stack: lightweight ML to spot row‑count and distribution anomalies plus domain… | ||
| Why should you care about WebAssembly? | Adrian Cole | 43m |
WebAssembly is shown as a practical in‑process sandbox: real C binaries like dcraw compiled to wasm run inside a Go app without crashing the host, using the… | ||
| What WebGPU means for Web platform? | Denis Radin | 34m |
WebGPU is a ground‑up browser GPU API backed by Intel Microsoft Google and Apple and replaces WebGL’s legacy OpenGL path with a more direct mapping to Metal… | ||
| Threat modeling is on the rise | Emil Kvarnhammar | 46m |
Claim: doing collaborative threat modeling with C4 diagrams uncovers concrete risks and workable fixes. Example findings include server-side request forgery… | ||
| This is application purple teaming | Christoffer Jerkeby | 45m |
Application purple teaming applies red/blue exercises to development so developers run detection in production, backed by playbooks mapping bug classes to… | ||
| Free security resources that your competitors use! | Johan Lindfors | 38m |
A rapid catalog of concrete, usable artifacts: OWASP Top 10 (now showing Broken Access Control as the top risk), the ASVS level 2 verification matrix, the… | ||
| The socio technical developer | Einar W. Høst | 44m |
The core claim is that software is a socio-technical system: organizational incentives, law and financing shape code and are reinforced by it, illustrated by… | ||
| The Leaders Leap - When your work becomes about people | Martin Mazur | 40m |
Lays out a concrete five-step path — call fear leap abyss declimb — and claims leadership is about providing vision and facilitating voluntary movement not… | ||
| From zero to hero in 6 months | Kjetil Klaussen | 34m |
Claim is concrete: a data platform that replaces 60k Excel files and 150 Access databases, covers ETL, time‑series storage, self‑learning models, and a web… | ||
| The 7 habits of data effective companies | Lars Albertsson | 42m |
Argues that data efficiency shows order-of-magnitude gaps — a 1000x span in outcomes and even a 10000x cost example from Lego versus Mojang — and ties that to… | ||
| SQL Server on premises is not dead | Mikael Wedham | 43m |
Argues that on‑prem SQL Server stays necessary with concrete numbers and failures: a CNC setup reads 1000 Hz over 34 channels and needs under 30 ms so moving… | ||
| Shift Left or Squish Right - Testing in a Shifting World | Michael Bolton | 52m |
Argues that shifting tests left often collapses testing into automated output checks and leaves deep experiential testing squeezed into production… | ||
| Retrospectives Antipatterns Avoid my Mistakes | Aino Vonge Corry | 38m |
Retrospectives get specific fixes not pep talks: she names five stages (setting the stage, gather data, generate insights, decide, close) and seven… | ||
| Remix, the hottest JavaScript framework as of today | Devlin Duldulao | 41m |
Claims Remix is SSR only no SSG and uses loaders and actions to run server code for GET and mutating requests; forms use native POST/PUT/PATCH/DELETE and work… | ||
| Refactoring large JavaScript codebases | Michele Riva | 30m |
Upgrading to newer Node versions and language features forces concrete fixes not vague guidance: promise rejections start terminating processes on Node 16… | ||
| Micro frontends anti patterns | Luca Mezzalira | 38m |
Argues micro‑frontends suit large, team‑scaled apps and lists concrete anti‑patterns: treating widgets as domains, the multi‑framework “hydra” as a temporary… | ||
| Let's Flutter for 40 minutes! | Majid Hajian | 56m |
Live coding shows a concrete claim: a simple Hacker News client is written and runnable in about 40 minutes using Flutter and Dart, with the UI, network calls… | ||
| Keep it simple! How to apply KISS principle in modern frontend | Nir Kaufman | 36m |
Argues that mighty frameworks often add unnecessary complexity and shows concrete alternatives: a working repo that mixes Backbone models with React hooks, a… | ||
| IoT enabled smoker for great BBQ | Jimmy Dahlqvist | 34m |
A working IoT smoker is built: a RasperryPi and AWS Greengrass device reads a food thermistor via an MCP3008 thermistor probe, sends data to AWS IoT Core then… | ||
| How to create maintainable and testable Blazor components | Egil Hansen | 36m |
Concrete claim: a maintainable Blazor data-table is simpler when reflection logic moves to a helper and rendering splits into DataTableHeader and DataTableRow… | ||
| How to control insanely complex stuff in a simple way | Gojko Adzic | 43m |
A solo builder creates nairaki to generate videos from Markdown with realistic TTS, serving 1 million files a month to 250,000 users, and controls it by… | ||
| Herding Cats - to lead and work with intelligent people | Monika Orski | 35m |
Claims that intelligence correlates with longevity income and even nearsightedness and height and that highly intelligent people need novelty and clear goals… | ||
| Grow Together Over Distance | Simon Harper | 50m |
A small team codes together all day, five days a week, for 3.5 years full-time remote Ensemble programming, rotating the person on the shared screen every… | ||
| Modernize your ASPNET based systems using the Strangler Fig pattern | Robert Folkesson | 44m |
Claims an incremental migration converts an ASP.NET 4.7.2 MVC app to .NET 6 using YARP reverse proxy as a facade and system.web adapters (RC) to share cookies… | ||
| Mindfulness for people like us | Markus Wittwer | 43m |
Claims that mindfulness trains three specific mental skills — concentration clarity and equanimity — and that training reduces half of interruptions that are… | ||
| Intro to FastAPI | Sebastián Ramírez | 18m |
FastAPI uses standard Python type annotations to produce automatic validation and interactive OpenAPI docs with zero boilerplate: path, query and JSON body… | ||
| How to get it right by being wrong all the time | Johan Öbrink | 42m |
Neo is a small product built inside Sab to test a new BaaS and recruit younger customers; the team implements trunk-based development (Bitrise for mobile… | ||
| Hacked on national television | Linus Kvarnhammar | 32m |
Swedish TV series documents four hackers attempting six real attacks with three recording days and one calendar week per episode: planted a Raspberry Pi beacon… | ||
| Code change the world, but for good? | Christian Landgren, Niels Paarup-Petersen | 44m |
Claims are concrete: a Facebook social-graph visualization found a botnet by matching identical interaction patterns; reverse-engineering Öppna Skolplattformen… | ||
| Building software for the “Next” Economy | Smita Mishra | 32m |
Concrete claims and actionable constraints: the World Economic Forum ranks cybersecurity failure and digital inequality as immediate risks, climate failures… | ||
| Always time for tea | Allan Kelly | 43m |
Claim: the natural state is "always time for tea" — there never appears a clean block of time to refactor so organize for constrained, recurring deadlines… | ||
| nothing matches | ||