Steve Poole
where else to find them
github:spoole167
bluesky:spoole167.bsky.social
linkedin:noregressions
speakerdeck:spoole167
devto:spoole167
what they talk about
all 10 in the filters
where they keep going back
- Devoxx France3 editions2022–2026
- JCON EUROPE3 editions2024–2026
- Great International Developer Summit2 editions2023–2024
all 18 in the filters
on a stage with
all 4 in the filters
who talks about the same things
- Brian Vermeer66 talks
- Olimpiu Pop8 talks
- Julien Topçu52 talks
- Jeff Williams13 talks
- Simon Maple18 talks
- Aaron Bedra14 talks
| title | conference | date |
|---|---|---|
| Engineering a Modern Java Platform | Devoxx France 2026 | 2026-04-22 |
Practical migration checklist for moving from JDK 8/11 to JDK 21–25: run jdeps, jdeprscan, jnativescan and JVM flags to list obsolete GC and logging options… | ||
| Steel for Vulnerabilities, Silver for Zombies: Hunting Java's Unseen Monsters | Devoxx France 2026 | 2026-04-22 |
Dependabot and Snyk catch CVEs but miss libraries that are End‑of‑Life: modern Java apps are ~10% original code, rely on ~150 dependencies, and about 75% of… | ||
| curl | bash | hacked: The Unseen Dangers in Your Dev Lifecycle | JCON EUROPE 2026 | 2026-04-20 |
curl | bash routinely hands attackers full user privileges by hiding malicious scripts behind browser-only responses and altered copy buttons; demos show a… | ||
| Engineering a Modern Java Platform | JCON EUROPE 2026 | 2026-04-20 |
Move from JDK 8/11 to 21–25 and you hit concrete breakages: removed internal APIs, jdeps, jdeprscan, jnativescan flag every use of sun.misc.Unsafe and JNI so… | ||
| JDK 8 to 25 Without the Pain - Engineering a Modern Java Platform | JavaOne 2026 | 2026-03-17 |
Migration from JDK 8/11 to 21–25 requires tooling and concrete fixes: run jdeps and jdeprscan across every JAR, use JNativeScan and Xlog:exceptions to find… | ||
| Mastering Resilient Java API Design: From Principles to Practice | JCON EUROPE 2025 | 2025-05-12 |
Claims that Maven Central shows semantic versioning often fails because bugfix, minor and major bumps break consumers at the same rate, demonstrates that… | ||
| Future-Proofing Java: The Art of Crafting Resilient APIs | Voxxed Days Thessaloniki 2024 | 2024-10-18 |
Maven Central analysis shows version numbers rarely predict breakage so rely on tests not tags; IntelliJ warnings and generics help but type erasure and… | ||
| Hidden Security Features of the JVM - Everything You Didn’t Know and More | JCON EUROPE 2024 | 2024-05-13 |
JVM design relies on a tiny stack-machine model, verifier, dynamic JIT and moving GC which together make memory targeting hard; modularity, jlink and sealed… | ||
| The New Normal: Collaborative Strategies in a Regulated, Secure, and AI World | JCON EUROPE 2024 | 2024-05-13 |
Claims that software crime costs about $9 trillion and that only 11% of open source has a maintainer, with a startling 35% of recent Log4j Maven downloads… | ||
| More Tales from the Dark Side: How AI is the Bad Guys New Friend | Great International Developer Summit 2024 | 2024-04-23 |
Claims rapid growth from ~$450B in 2016 to ~$6T now and ~57% yearly rise, and shows concrete attacks: a fake USB charger with GSM chip that phones home and… | ||
| Java Reimagined: AI, Cybersecurity, and the Modern Software Supply Chain | Great International Developer Summit 2024 | 2024-04-23 |
Java projects must now manage AI, security and regulation together: most large models and tooling run in Python so Java backends integrate via bindings or… | ||
| AI Showdown: The Good, The Glitchy, and The Risky | Voxxed Days Bucharest 2024 | 2024-03-27 |
Generative vs discriminative models are practical mappings that lose information: ChatGPT creates text prompts that DALL·E and Adobe Generative Fill turn into… | ||
| A radiography of a SBOM vulnerability scanner | Voxxed Days Iași 2023 | 2023-05-23 |
SBOMs are not a silver bullet but they let packaging produce a provable ingredients list so vulnerability matching beats after-the-fact dependency scanning… | ||
| A New Hope for 2023? What Developers Must Learn Next | Great International Developer Summit 2023 | 2023-04-25 |
Cybercrime revenue rises from about $415 billion in 2016 to roughly $6 trillion today, turning dependency attacks and supply-chain corruption into weapons of… | ||
| Superman or Ironman Can Everyone be a 10x Developer? | Great International Developer Summit 2023 | 2023-04-25 |
Company runs Maven Central and shows Java realities: use Git, small CI (Jenkins in Docker), Gradle tips and tests-as-molds to enable fast, safe changes… | ||
| Hidden security features of the JVM - everything you didn’t know and more | Devoxx France 2023 | 2023-04-12 |
Java 17 deprecates the Security Manager but the JVM still defends via its simple stack‑based VM, bytecode verification, JIT diversification, classloader… | ||
| Log4J, SpringShell and all that Jazz (or why bad things can happen to good software) | EclipseCon 2022 | 2022-10-24 |
Log4j contains a JNDI lookup feature added in 2014 that allows user-controlled strings to trigger remote lookups and arbitrary code execution so Log4Shell's… | ||
| The Secret Life of Maven central | EclipseCon 2022 | 2022-10-24 |
Maven Central serves over 10 billion requests a week and hosts roughly 496 billion downloads, backing a repo built on Fastly, large S3 storage, Solr indexing… | ||
| Log4Shell Armageddon or Opportunity | JNation 2022 | 2022-06-07 |
Log4j’s lookup feature lets logged input trigger recursive JNDI lookups that can call out to attacker-controlled LDAP/RMI/DNS servers, return serialized… | ||
| Game over or game changing? Why software development may never be the same again | Jfokus 2022 | 2022-05-02 |
A US executive order pushes mandatory software provenance so by 2025 vendors selling to government must produce SBOM (CycloneDX/SPDX) records, prove build… | ||
| Game Over or Game Changing? Why Software Development May Never be the same again | Devoxx France 2022 | 2022-04-20 |
Ransomware and state-backed attackers shift from quick cash to long-term disruption, with estimates of ransomware income reaching about $6 trillion and global… | ||
| Java application security the hard way - a workshop for the serious developer | Devoxx France 2022 | 2022-04-20 |
Live demo of Log4Shell RCE via JNDI/LDAP shows how a logged string can trigger remote classloads, gadget chains and full command execution; setup uses… | ||
| Mother Nature vs Java - The Security Face Off | Devnexus 2022 | 2022-04-12 |
Claim: ransomware is being used as a live testbed for cyberwarfare and supply chains are the target, with ransomware revenue estimated at $6 trillion and… | ||
| Java and Ransomware - what’s in it for you | Devnexus 2022 | 2022-04-12 |
Explains how attackers reach remote code execution through phishing, CVEs and supply‑chain vectors like typo‑squatting, dependency confusion and malicious… | ||
| Mother Nature vs Java – the security face off | Voxxed Days Bucharest 2022 | 2022-03-23 |
Compares concrete security practices from biology to Java: lays out threats, prevention, detection, mitigation with specifics — claims supply chain attacks… | ||
| Practical steps for creating safer software (Code included) | Joker 2021 | 2021-10-25 |
Cybercrime grows far faster than expected with forecasts from about $445B to $2T then $6T and reality worse, and the talk gives concrete developer actions… | ||
| Containing Your Development – Why Cloud IDEs Are the Future | Devnexus 2020 | 2020-02-19 |
Claim: moving IDE tooling and build pipelines into containers brings local development much closer to production behavior. Demonstrations show Eclipse Che… | ||
| The Anatomy of Java Vulnerabilities | Voxxed Days Cluj-Napoca 2018 | 2018-11-21 |
Java vulnerabilities often boil down to tiny bugs that become huge in practice: a malformed floating-point value causing an double-to-infinite-loop DoS that… | ||
| What's new for Java in clouds? | W-JAX 2018 | 2018-11-05 |
Java and the JVM shift from long‑running, heap‑heavy servers to fast‑starting, small‑memory cloud units: examples include OpenJ9 vs HotSpot showing measurable… | ||
| A Modern Fairy Tale: Java Serialization | Oracle Code One 2018 | 2018-10-22 |
Java serialization still moves object graphs easily but its self‑defining format lets attackers alter field types, bypass constructors and trigger static… | ||
| The Anatomy of Java Vulnerabilities | Devoxx Belgium 2017 | 2017-11-06 |
Shows a real double-to-string parsing hang from 2001 that can crash servers by sending a crafted header, cites 692 Java CVEs and $450B/year cybercrime (2016)… | ||
| The Anatomy of Java Vulnerabilities | Oracle OpenWorld 2017 | 2017-10-01 |
Machine-visible examples show tiny mistakes causing huge damage: a 2001 infinite-loop double parse DoS that trivially spins CPU, a URL/URI decode mismatch… | ||
| 10 simple rules for writing great testcases | Devoxx US 2017 | 2017-03-21 |
Ten concrete rules for reliable tests: write tests that document actual behaviour, keep each test small and single‑purpose, use frameworks like JUnit and mocks… | ||
| nothing matches | ||