Severless PHP Case : Agile Dashboard via GitLab Board API
0 likes591 views
The document discusses serverless technology in the context of PHP development, emphasizing its appeal due to reduced operational complexity and cost-effectiveness through pay-as-you-go models. It touches upon the evolution of serverless from agile methodologies and its advantages like granular scaling and observability. Additionally, it highlights resources and tools for implementing serverless PHP solutions and addresses considerations like cold starts and performance optimization.
1 of 67
Download to read offline
Ad
Recommended
Progressive Deployment & NoDeploy
Progressive Deployment & NoDeployYi-Feng Tzeng The document discusses various concepts of progressive deployment and DevOps methodologies, emphasizing the importance of resilience and control in deployment processes. It outlines the complexities of contemporary application development, including the need for continuous integration, delivery, and deployment in distributed microservices environments. Key strategies such as feature flags, testing in production, and chaos engineering are highlighted to improve software reliability and reduce integration issues.
Dev(Sec)Ops - Architecture for Security and Compliance
Dev(Sec)Ops - Architecture for Security and ComplianceYi-Feng Tzeng The document discusses the integration of security within DevOps and Agile methodologies, emphasizing the need for a DevSecOps culture that embeds security throughout the software development lifecycle (SDLC). It outlines various practices such as secure coding, compliance with regulations like GDPR, and the importance of involving security stakeholders in the development process. The author highlights challenges in maintaining security during Agile practices and the necessity of automated security testing within continuous integration and delivery pipelines.
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...JPCERT Coordination Center The document discusses the vulnerabilities associated with SSL/TLS certificate verification, highlighting that many applications fail to validate SSL certificates, making them susceptible to man-in-the-middle attacks. It presents case studies of various applications where certificate verification failures occurred and details the implications of these vulnerabilities. Additionally, the document explains the processes involved in certificate verification, such as checking the authenticity and ensuring the proper certificate path.
Android Secure Coding
Android Secure CodingJPCERT Coordination Center The document discusses secure coding practices for Android app development. It begins with an introduction that notes the growing number of Android users and prevalence of Android vulnerabilities reported in news headlines. The document then covers various categories of Android app security issues and explores examples of specific vulnerabilities, including unintended activity exposure, local servers accessible to other apps, and unintended content provider exposure. Root causes and solutions are provided for each vulnerability along with references for developers. The goal is to help developers learn from real-world examples and avoid common vulnerabilities through secure coding techniques.
Under the Hood of Reactive Data Access (1/2)
Under the Hood of Reactive Data Access (1/2)VMware Tanzu The document discusses the evolution of Spring Data modules towards reactive programming, emphasizing asynchronous, non-blocking data access. It highlights the implementation of reactive templates and repositories, showcasing the differences from traditional JPA and JDBC methods. Key features include project reactor integration and support for reactive data flows and queries.
OpenChain 2.0 specification in a nutshell
OpenChain 2.0 specification in a nutshellSZ Lin The OpenChain 2.0 Specification defines essential requirements for open source policy compliance to establish trust among organizations using open source software. It outlines key aspects such as policy frameworks, documentation, and compliance processes for organizations to adhere to, accommodating varied organizational goals and scales. The specification promotes a structured approach to open source software governance, facilitating predictable B2B compliance initiatives.
OpenChain - The Industry Standard for Open Source Compliance
OpenChain - The Industry Standard for Open Source ComplianceSZ Lin The document outlines the compliance strategies for managing open source software, presenting standards defined by the OpenChain project, which helps organizations maintain quality open source compliance programs. It describes various assessment methods such as self-certification, independent compliance assessments, and third-party certification to ensure adherence to open source policies. Additionally, it highlights the advantages for Taiwanese ICT companies in engaging with OpenChain and provides resources for further involvement.
Marcin Grzejszczak - Contract Tests in the Enterprise
Marcin Grzejszczak - Contract Tests in the EnterpriseSegFaultConf The document discusses effective testing strategies in software development, focusing on the use of consumer-driven contracts, integration testing, and stub generation for legacy services. It highlights challenges with traditional manual and unit testing approaches and proposes improvements through generated stubs and collaboration between service providers and consumers. The author emphasizes the importance of maintaining reliable testing processes to support agile development and continuous delivery.
SBA Live Academy: A Primer in Single Page Application Security by Thomas Konrad
SBA Live Academy: A Primer in Single Page Application Security by Thomas KonradSBA Research This presentation discusses security concerns and best practices for single page applications (SPAs). It begins with an overview of SPAs and popular frameworks like Angular and React. It then covers cross-site scripting (XSS) risks, with a focus on DOM-based XSS issues that are common in SPAs. The presentation provides examples of XSS vulnerabilities and recommendations for mitigation using input sanitization libraries and content security policy (CSP). It also addresses risks from outdated dependencies and provides checklists for secure SPA development.
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...SBA Research The document provides an overview of a presentation titled 'The Forest Has Eyes' by Reinhard Kugler, detailing various cybersecurity topics, including NTLM relay attacks, SMB signing, and delegation in Active Directory. It emphasizes the importance of security measures like least privilege roles, trust relationship checks, and reviews of delegation attributes. Additionally, it features links to further resources and upcoming webinars related to cybersecurity.
DevSecOps for Developers: How To Start
DevSecOps for Developers: How To StartPatricia Aas The document outlines the importance and implementation of DevSecOps in software development, emphasizing that integrating security enhances both delivery performance and security quality. It discusses the Cynefin framework for classifying problems and proposes various DevSecOps strategies such as trunk-based development and leveraging existing crisis processes. Additionally, it highlights the necessity of automating processes and involving developers to enhance security measures effectively.
Nsc42 security knights slayer of dragons 0-5_very_short_15m_share
Nsc42 security knights slayer of dragons 0-5_very_short_15m_shareNSC42 Ltd The document presents a framework for improving cybersecurity within organizations by emphasizing the integration of development, security, and operations (DevSecOps). It outlines the importance of addressing vulnerabilities, governance, and organizational culture in making security a shared responsibility. The author, Francesco Cipollone, shares insights on trust, verification, and educational strategies to foster a proactive security environment.
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...SBA Research The document outlines a presentation by Thomas Konrad on software security and the importance of integrating DevSecOps into the software development lifecycle. It discusses various strategies for improving security practices, such as simplifying processes, promoting continuous learning, and automating security tools. Key takeaways emphasize the need for cultural change in organizations to enhance security integration and collaboration among teams.
PyConPL 2017 - with python: security
PyConPL 2017 - with python: securityPiotr Dyba The document is a presentation by Piotr Dyba at PyConPL 2017 discussing cybersecurity from a developer's perspective, emphasizing the importance of cybersecurity awareness in organizations. It covers topics such as threat modeling, common attack vectors, and automated security testing, highlighting the need for proactive security measures in web applications and Python programs. The presentation also outlines various security frameworks and tools for identifying and mitigating vulnerabilities.
Data Security and the Hard Outer Shell
Data Security and the Hard Outer ShellMatt Turner Matt Turner, CTO of Media & Entertainment at MarkLogic Corporation, discusses evolving security threats and the need to move beyond perimeter-based network security approaches. Current approaches focus outward on external threats but the threat landscape has changed, with nearly half of financial services breaches caused by insiders. MarkLogic argues for implementing security within systems rather than just at barriers and boundaries between systems. The presentation includes slides on MarkLogic's database platform and its flexibility, security and ability to ask questions of stored data.
Take a step forward from user to maintainer or developer in open source secur...
Take a step forward from user to maintainer or developer in open source secur...SZ Lin The document outlines the evolution from users to maintainers/developers in open source security tools, highlighting the roles and responsibilities at each stage. It discusses the principles of the Debian Free Software Guidelines and the importance of license compliance, sustainability, and quality assurance in maintaining security-related software. Additionally, it encourages involvement in the Debian security tools packaging team, providing links to resources for new maintainers.
Trusted Third Parties are NOT Trust Worthy!
Trusted Third Parties are NOT Trust Worthy!nettitude_labs The document summarizes a simulated attack on an organization via compromise of a trusted third party supplier. It demonstrates how threat actors used phishing to deliver malware, abused active directory trusts to move laterally between the supplier and target networks, and extracted credentials and customer data from the target organization's systems after gaining initial access through the third party. It stresses that such trusted third party attacks are a real risk and organizations need to carefully restrict access and monitor for signs of compromise when connecting suppliers to their internal networks and assets.
Abusing Glype Proxies - Attacks, Exploits and Defences
Abusing Glype Proxies - Attacks, Exploits and DefencesAditya K Sood Proxies play a critical privacy role by allowing anonymous web surfing and identity cloaking. Glype is an open source PHP proxy that is commonly used and provides anonymity. However, Glype proxies also have weaknesses that can allow attackers to exploit them. Misconfigured Glype proxies can leak users' sensitive information through log files and cookies. Attackers can also use Glype proxies to distribute malware by modifying the proxy software and using plugins. Strong authentication, disabling logs, and removing vulnerabilities are recommended to prevent abuse of Glype proxies.
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍Ray Song The document discusses the Rise of the Machines Cyber Grand Challenge and DEFCON 24 Capture the Flag (CTF) finals, detailing participating teams such as CB, Poller, POV, IDs, and Shellphish. It covers various aspects of the competitions including capture the flag formats, challenges faced, and technologies used such as cyber reasoning systems. The finals took place over multiple days, showcasing advanced cybersecurity and algorithmic competition among entrants.
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610Cisco DevNet The document provides an overview of the Webex Teams API for administrators, detailing how to manage users, roles, licenses, and compliance through coding. It outlines the various API endpoints available, compliance capabilities, and best practices for secure implementation. Additionally, it includes instructions for using a Postman tool to facilitate API interaction and customization of Webex devices.
重新想像：如何做技術選型決策 / Rethinking : Technical Decision
重新想像：如何做技術選型決策 / Rethinking : Technical DecisionYi-Feng Tzeng 本文件探讨了如何进行技术选型决策，强调人、事、物在技术管理中的关键作用。文中引用了敏捷及DevOps的理论与实践，讨论了团队结构及组织文化对质量和责任的影响。通过不同的案例和提问，引导读者自省并重新思考技术决策过程中的各种因素。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版Yi-Feng Tzeng 本文件探讨了企业如何有效利用开源技术，以防范潜在的法律和授权问题。讨论内容涵盖Linux内核、云服务与端的开源应用差异、MongoDB授权的变化及相关公司如Elastic和Amazon的授权合作模式等热点话题。此外，文中还列举了企业在部署开源软件时常见的法律和授权问题，以及如何应对这些问题的建议。
Testing in Production, Deploy on Fridays
Testing in Production, Deploy on FridaysYi-Feng Tzeng 本文件讨论了在生产环境中进行测试的必要性，尤其是在微服务架构和FaaS环境中。同时，提到在周五进行部署的风险和团队文化对部署信心的影响，以及渐进式部署的优点，以减少对系统的潜在影响。作者强调团队应该具备24/7的服务信心，以应对任何时间的部署。
COSCUP 2020 Day 2 - Opening Keynote
COSCUP 2020 Day 2 - Opening KeynoteYi-Feng Tzeng 本文回顾了作者参与开源活动的20年历程，强调了开源社区的价值和人际关系的重要性。作者希望通过开源向下一代传递知识和精神，并感激参与活动的人们和志愿者。文中还提到活动的安排和对防疫的注意事项。
COSCUP 2020 Day 1 - Opening Keynote
COSCUP 2020 Day 1 - Opening KeynoteYi-Feng Tzeng 本文回顾了一个参与开源活动的20年旅程，包括COSCUP大会的体验和感染力。强调开源精神的包容性，呼吁每个人都能参与其中。文中也介绍了多项活动安排和防疫措施。
給資安工程師開源授權觀念
給資安工程師開源授權觀念Yi-Feng Tzeng 本文件讨论了开源软件的授权问题，涵盖了多种相关许可的许可条件、互相兼容性及对开发者的影响。文中还反驳了一些关于开源的误解，并提供了相关案例和链接以支持论点。总体上，文件旨在为信息安全工程师提供对开源授权的深入理解和实用建议。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊Yi-Feng Tzeng 本文件探討企業如何有效利用開源技術以獲利與防範風險，並由多位專家分享開源技術授權的案例和分析。在文章中提到開源軟體的使用可能違反授權規定，並強調企業應瞭解各種授權條款及其相容性，以避免法律風險。作者同時指出開源與商業化之間的平衡，以及開源軟體在現代開發中的無所不在。
淺談量子機器學習 - 當機器學習遇見量子計算
淺談量子機器學習 - 當機器學習遇見量子計算Yi-Feng Tzeng 本文探讨了量子机器学习的基本概念和量子计算的特点，包括量子纠缠、叠加态和干涉现象。双缝实验揭示了粒子的波动性和量子测量的复杂性。作者还提到了量子领域的投资趋势和量子技术的应用。
A Modern Web Architecture for (GDPR) Compliance
A Modern Web Architecture for (GDPR) ComplianceYi-Feng Tzeng 本文件探讨了 GDPR（通用数据保护条例）的合规性，以及如何构建现代网站架构以确保符合这一法律要求。它提到许多企业在数据安全和法律合规方面的不足，并指出新的个人数据保护趋势正在全球范围内变得愈加严格。文件中还讨论了 GDPR 合规的原则、权利及企业应采取的最佳实践。
量子技術 (2018 03-31)
量子技術 (2018 03-31)Yi-Feng Tzeng 文档探讨了量子力学中的关键实验和理论，包括双缝实验和量子纠缠等概念，展示了量子状态如何在观测下变化。爱因斯坦和波尔之间的争论揭示了量子理论的复杂性和人们对其理解的挑战。量子技术的应用，如量子计算和量子通信，基于这些基本原理的发展。
More Related Content
What's hot (12)
SBA Live Academy: A Primer in Single Page Application Security by Thomas Konrad
SBA Live Academy: A Primer in Single Page Application Security by Thomas KonradSBA Research This presentation discusses security concerns and best practices for single page applications (SPAs). It begins with an overview of SPAs and popular frameworks like Angular and React. It then covers cross-site scripting (XSS) risks, with a focus on DOM-based XSS issues that are common in SPAs. The presentation provides examples of XSS vulnerabilities and recommendations for mitigation using input sanitization libraries and content security policy (CSP). It also addresses risks from outdated dependencies and provides checklists for secure SPA development.
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...SBA Research The document provides an overview of a presentation titled 'The Forest Has Eyes' by Reinhard Kugler, detailing various cybersecurity topics, including NTLM relay attacks, SMB signing, and delegation in Active Directory. It emphasizes the importance of security measures like least privilege roles, trust relationship checks, and reviews of delegation attributes. Additionally, it features links to further resources and upcoming webinars related to cybersecurity.
DevSecOps for Developers: How To Start
DevSecOps for Developers: How To StartPatricia Aas The document outlines the importance and implementation of DevSecOps in software development, emphasizing that integrating security enhances both delivery performance and security quality. It discusses the Cynefin framework for classifying problems and proposes various DevSecOps strategies such as trunk-based development and leveraging existing crisis processes. Additionally, it highlights the necessity of automating processes and involving developers to enhance security measures effectively.
Nsc42 security knights slayer of dragons 0-5_very_short_15m_share
Nsc42 security knights slayer of dragons 0-5_very_short_15m_shareNSC42 Ltd The document presents a framework for improving cybersecurity within organizations by emphasizing the integration of development, security, and operations (DevSecOps). It outlines the importance of addressing vulnerabilities, governance, and organizational culture in making security a shared responsibility. The author, Francesco Cipollone, shares insights on trust, verification, and educational strategies to foster a proactive security environment.
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...SBA Research The document outlines a presentation by Thomas Konrad on software security and the importance of integrating DevSecOps into the software development lifecycle. It discusses various strategies for improving security practices, such as simplifying processes, promoting continuous learning, and automating security tools. Key takeaways emphasize the need for cultural change in organizations to enhance security integration and collaboration among teams.
PyConPL 2017 - with python: security
PyConPL 2017 - with python: securityPiotr Dyba The document is a presentation by Piotr Dyba at PyConPL 2017 discussing cybersecurity from a developer's perspective, emphasizing the importance of cybersecurity awareness in organizations. It covers topics such as threat modeling, common attack vectors, and automated security testing, highlighting the need for proactive security measures in web applications and Python programs. The presentation also outlines various security frameworks and tools for identifying and mitigating vulnerabilities.
Data Security and the Hard Outer Shell
Data Security and the Hard Outer ShellMatt Turner Matt Turner, CTO of Media & Entertainment at MarkLogic Corporation, discusses evolving security threats and the need to move beyond perimeter-based network security approaches. Current approaches focus outward on external threats but the threat landscape has changed, with nearly half of financial services breaches caused by insiders. MarkLogic argues for implementing security within systems rather than just at barriers and boundaries between systems. The presentation includes slides on MarkLogic's database platform and its flexibility, security and ability to ask questions of stored data.
Take a step forward from user to maintainer or developer in open source secur...
Take a step forward from user to maintainer or developer in open source secur...SZ Lin The document outlines the evolution from users to maintainers/developers in open source security tools, highlighting the roles and responsibilities at each stage. It discusses the principles of the Debian Free Software Guidelines and the importance of license compliance, sustainability, and quality assurance in maintaining security-related software. Additionally, it encourages involvement in the Debian security tools packaging team, providing links to resources for new maintainers.
Trusted Third Parties are NOT Trust Worthy!
Trusted Third Parties are NOT Trust Worthy!nettitude_labs The document summarizes a simulated attack on an organization via compromise of a trusted third party supplier. It demonstrates how threat actors used phishing to deliver malware, abused active directory trusts to move laterally between the supplier and target networks, and extracted credentials and customer data from the target organization's systems after gaining initial access through the third party. It stresses that such trusted third party attacks are a real risk and organizations need to carefully restrict access and monitor for signs of compromise when connecting suppliers to their internal networks and assets.
Abusing Glype Proxies - Attacks, Exploits and Defences
Abusing Glype Proxies - Attacks, Exploits and DefencesAditya K Sood Proxies play a critical privacy role by allowing anonymous web surfing and identity cloaking. Glype is an open source PHP proxy that is commonly used and provides anonymity. However, Glype proxies also have weaknesses that can allow attackers to exploit them. Misconfigured Glype proxies can leak users' sensitive information through log files and cookies. Attackers can also use Glype proxies to distribute malware by modifying the proxy software and using plugins. Strong authentication, disabling logs, and removing vulnerabilities are recommended to prevent abuse of Glype proxies.
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍Ray Song The document discusses the Rise of the Machines Cyber Grand Challenge and DEFCON 24 Capture the Flag (CTF) finals, detailing participating teams such as CB, Poller, POV, IDs, and Shellphish. It covers various aspects of the competitions including capture the flag formats, challenges faced, and technologies used such as cyber reasoning systems. The finals took place over multiple days, showcasing advanced cybersecurity and algorithmic competition among entrants.
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610Cisco DevNet The document provides an overview of the Webex Teams API for administrators, detailing how to manage users, roles, licenses, and compliance through coding. It outlines the various API endpoints available, compliance capabilities, and best practices for secure implementation. Additionally, it includes instructions for using a Postman tool to facilitate API interaction and customization of Webex devices.
More from Yi-Feng Tzeng (20)
重新想像：如何做技術選型決策 / Rethinking : Technical Decision
重新想像：如何做技術選型決策 / Rethinking : Technical DecisionYi-Feng Tzeng 本文件探讨了如何进行技术选型决策，强调人、事、物在技术管理中的关键作用。文中引用了敏捷及DevOps的理论与实践，讨论了团队结构及组织文化对质量和责任的影响。通过不同的案例和提问，引导读者自省并重新思考技术决策过程中的各种因素。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版Yi-Feng Tzeng 本文件探讨了企业如何有效利用开源技术，以防范潜在的法律和授权问题。讨论内容涵盖Linux内核、云服务与端的开源应用差异、MongoDB授权的变化及相关公司如Elastic和Amazon的授权合作模式等热点话题。此外，文中还列举了企业在部署开源软件时常见的法律和授权问题，以及如何应对这些问题的建议。
Testing in Production, Deploy on Fridays
Testing in Production, Deploy on FridaysYi-Feng Tzeng 本文件讨论了在生产环境中进行测试的必要性，尤其是在微服务架构和FaaS环境中。同时，提到在周五进行部署的风险和团队文化对部署信心的影响，以及渐进式部署的优点，以减少对系统的潜在影响。作者强调团队应该具备24/7的服务信心，以应对任何时间的部署。
COSCUP 2020 Day 2 - Opening Keynote
COSCUP 2020 Day 2 - Opening KeynoteYi-Feng Tzeng 本文回顾了作者参与开源活动的20年历程，强调了开源社区的价值和人际关系的重要性。作者希望通过开源向下一代传递知识和精神，并感激参与活动的人们和志愿者。文中还提到活动的安排和对防疫的注意事项。
COSCUP 2020 Day 1 - Opening Keynote
COSCUP 2020 Day 1 - Opening KeynoteYi-Feng Tzeng 本文回顾了一个参与开源活动的20年旅程，包括COSCUP大会的体验和感染力。强调开源精神的包容性，呼吁每个人都能参与其中。文中也介绍了多项活动安排和防疫措施。
給資安工程師開源授權觀念
給資安工程師開源授權觀念Yi-Feng Tzeng 本文件讨论了开源软件的授权问题，涵盖了多种相关许可的许可条件、互相兼容性及对开发者的影响。文中还反驳了一些关于开源的误解，并提供了相关案例和链接以支持论点。总体上，文件旨在为信息安全工程师提供对开源授权的深入理解和实用建议。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊Yi-Feng Tzeng 本文件探討企業如何有效利用開源技術以獲利與防範風險，並由多位專家分享開源技術授權的案例和分析。在文章中提到開源軟體的使用可能違反授權規定，並強調企業應瞭解各種授權條款及其相容性，以避免法律風險。作者同時指出開源與商業化之間的平衡，以及開源軟體在現代開發中的無所不在。
淺談量子機器學習 - 當機器學習遇見量子計算
淺談量子機器學習 - 當機器學習遇見量子計算Yi-Feng Tzeng 本文探讨了量子机器学习的基本概念和量子计算的特点，包括量子纠缠、叠加态和干涉现象。双缝实验揭示了粒子的波动性和量子测量的复杂性。作者还提到了量子领域的投资趋势和量子技术的应用。
A Modern Web Architecture for (GDPR) Compliance
A Modern Web Architecture for (GDPR) ComplianceYi-Feng Tzeng 本文件探讨了 GDPR（通用数据保护条例）的合规性，以及如何构建现代网站架构以确保符合这一法律要求。它提到许多企业在数据安全和法律合规方面的不足，并指出新的个人数据保护趋势正在全球范围内变得愈加严格。文件中还讨论了 GDPR 合规的原则、权利及企业应采取的最佳实践。
量子技術 (2018 03-31)
量子技術 (2018 03-31)Yi-Feng Tzeng 文档探讨了量子力学中的关键实验和理论，包括双缝实验和量子纠缠等概念，展示了量子状态如何在观测下变化。爱因斯坦和波尔之间的争论揭示了量子理论的复杂性和人们对其理解的挑战。量子技术的应用，如量子计算和量子通信，基于这些基本原理的发展。
Swoole Love PHP
Swoole Love PHPYi-Feng Tzeng Swoole is a C extension for PHP designed to enhance performance through multi-threading and async capabilities, allowing for various server implementations like HTTP, WebSocket, and TCP. The document discusses Swoole's architecture, installation, performance features, and provides examples of asynchronous MySQL connections and HTTP clients. Additionally, it addresses the reasons why some organizations prefer Swoole over Go, citing factors like developer familiarity and training time.
邏輯優化的灰色面：針對網頁應用的時序攻擊 (2018臺灣資安大會: 軟體安全論壇)
邏輯優化的灰色面：針對網頁應用的時序攻擊 (2018臺灣資安大會: 軟體安全論壇)Yi-Feng Tzeng This document discusses timing attacks against web applications. It begins by referencing a previous conference presentation on timing attacks and front-end performance vulnerabilities. It then demonstrates how subtle differences in response times can reveal privileged information, like whether a username is valid. The document advocates adding random delays to responses to mitigate these timing attack vectors. It provides several examples of timing attacks in practice and potential mitigation techniques to obscure timing patterns and prevent secret information leakage.
Modern Web Architecture Design Journey
Modern Web Architecture Design JourneyYi-Feng Tzeng 本文件讨论现代网络架构设计的旅程，涵盖了技术选型的决策过程及其对公司文化的影响。强调技术架构并非一成不变，需根据场景不断演进，同时提到技术债务和需求变化对架构的挑战。最后，指出在快速发展的公司中，需平衡技术转型与现有团队的能力。
善用 MySQL 及 PostgreSQL - RDBMS 的逆襲 - part1
善用 MySQL 及 PostgreSQL - RDBMS 的逆襲 - part1Yi-Feng Tzeng 该文档探讨了在大数据架构中使用关系数据库管理系统（RDBMS）和新SQL（NewSQL）的重要性，强调优化数据和系统架构的重要性。提出了在各种工作负载（在线交易处理和在线分析处理）中应对不同要求的策略，以及如何在技术层面实现更好的性能和安全性。最后，文章着眼于数据库连接、应用性能和存储优化的关键因素。
恰如其分的 MySQL 設計技巧 [Modern Web 2016]
恰如其分的 MySQL 設計技巧 [Modern Web 2016]Yi-Feng Tzeng 本文件讨论了现代网站和MySQL设计的最佳实践，强调架构演进和防止技术债务的重要性。建议在面对技术变更时要预先策划，避免过早优化和盲目使用他人架构。作者还提到性能优化的多种策略，包括硬件扩展、数据库设计和连接管理。
談 Uber 從 PostgreSQL 轉用 MySQL 的技術爭議
談 Uber 從 PostgreSQL 轉用 MySQL 的技術爭議Yi-Feng Tzeng 本文件讨论了Uber将数据库从PostgreSQL迁移到MySQL的技术理由，分析了两种数据库在频繁更新、无模式以及异地同步等业务需求下的表现。文中强调了架构对企业文化和业务扩展的影响，提出架构不是完美的，而是最适合的。最后，PostgreSQL团队开始考虑并改善Uber面临的热更新问题。
資料庫索引數據結構及主鍵設計(b+tree)(part 1)
資料庫索引數據結構及主鍵設計(b+tree)(part 1)Yi-Feng Tzeng 本文探讨了数据库索引数据结构及主键设计，特别是UUID和B+树。讨论了UUID在Mysql中的应用以及B+树索引的优缺点与支持数据库的列表。此外，文中还分析了索引页分裂、子页结构及其对性能的影响，比较了顺序和随机插入的IO开销。
軟體接案自由職業者 (Freelancer) 意想不到的風險
軟體接案自由職業者 (Freelancer) 意想不到的風險Yi-Feng Tzeng 本文件探讨了软件自由职业者在承接项目时可能遇到的法律和风险问题，包括智慧财产权、合同约定和保密义务等。强调了在签署合同前需慎重考虑知识产权归属、法律责任及保密条款等因素，以避免未来的法律纠纷。文中还提到，承接项目应注重积累经验和避免偏离专业领域，确保职业发展方向明确。
Enterprise Architecture Case in PHP (MUZIK Online)
Enterprise Architecture Case in PHP (MUZIK Online)Yi-Feng Tzeng The document presents a comprehensive overview of enterprise architecture in PHP, detailing the evolution of the 'muzik' architecture from its inception through various stages, each named after classical composers. Key themes include the significance of architectural decisions, the transition from monoliths to microservices, and the impact of these choices on performance and scalability. Additionally, it emphasizes the importance of adapting technological strategies without falling into the pitfalls of adopting architectures that do not fit specific contexts.
Redis, another step on the road
Redis, another step on the roadYi-Feng Tzeng The document outlines the history, features, and comparisons of Redis, Memcached, and Aerospike, detailing key developments in Redis from its inception to version 3.0. It highlights the architectural differences between Redis and Memcached, emphasizing Redis's single-threaded simplicity and in-memory persistence, while noting Memcached's multi-threaded advantages. Additionally, it discusses Aerospike's strengths, such as ACID compliance and scalability, and the challenges of benchmarking different database systems effectively.
Ad
Recently uploaded (20)
FME for Good: Integrating Multiple Data Sources with APIs to Support Local Ch...
FME for Good: Integrating Multiple Data Sources with APIs to Support Local Ch...Safe Software Have-a-skate-with-Bob (HASB-KC) is a local charity that holds two Hockey Tournaments every year to raise money in the fight against Pancreatic Cancer. The FME Form software is used to integrate and exchange data via API, between Google Forms, Google Sheets, Stripe payments, SmartWaiver, and the GoDaddy email marketing tools to build a grass-roots Customer Relationship Management (CRM) system for the charity. The CRM is used to communicate effectively and readily with the participants of the hockey events and most importantly the local area sponsors of the event. Communication consists of a BLOG used to inform participants of event details including, the ever-important team rosters. Funds raised by these events are used to support families in the local area to fight cancer and support PanCan research efforts to find a cure against this insidious disease. FME Form removes the tedium and error-prone manual ETL processes against these systems into 1 or 2 workbenches that put the data needed at the fingertips of the event organizers daily freeing them to work on outreach and marketing of the events in the community.
War_And_Cyber_3_Years_Of_Struggle_And_Lessons_For_Global_Security.pdf
War_And_Cyber_3_Years_Of_Struggle_And_Lessons_For_Global_Security.pdfbiswajitbanerjee38 Russia is one of the most aggressive nations when it comes to state coordinated cyberattacks — and Ukraine has been at the center of their crosshairs for 3 years. This report, provided the State Service of Special Communications and Information Protection of Ukraine contains an incredible amount of cybersecurity insights, showcasing the coordinated aggressive cyberwarfare campaigns of Russia against Ukraine.
It brings to the forefront that understanding your adversary, especially an aggressive nation state, is important for cyber defense. Knowing their motivations, capabilities, and tactics becomes an advantage when allocating resources for maximum impact.
Intelligence shows Russia is on a cyber rampage, leveraging FSB, SVR, and GRU resources to professionally target Ukraine’s critical infrastructures, military, and international diplomacy support efforts.
The number of total incidents against Ukraine, originating from Russia, has steadily increased from 1350 in 2021 to 4315 in 2024, but the number of actual critical incidents has been managed down from a high of 1048 in 2022 to a mere 59 in 2024 — showcasing how the rapid detection and response to cyberattacks has been impacted by Ukraine’s improved cyber resilience.
Even against a much larger adversary, Ukraine is showcasing outstanding cybersecurity, enabled by strong strategies and sound tactics. There are lessons to learn for any enterprise that could potentially be targeted by aggressive nation states.
Definitely worth the read!
Enabling BIM / GIS integrations with Other Systems with FME
Enabling BIM / GIS integrations with Other Systems with FMESafe Software Jacobs has successfully utilized FME to tackle the complexities of integrating diverse data sources in a confidential $1 billion campus improvement project. The project aimed to create a comprehensive digital twin by merging Building Information Modeling (BIM) data, Construction Operations Building Information Exchange (COBie) data, and various other data sources into a unified Geographic Information System (GIS) platform. The challenge lay in the disparate nature of these data sources, which were siloed and incompatible with each other, hindering efficient data management and decision-making processes.
To address this, Jacobs leveraged FME to automate the extraction, transformation, and loading (ETL) of data between ArcGIS Indoors and IBM Maximo. This process ensured accurate transfer of maintainable asset and work order data, creating a comprehensive 2D and 3D representation of the campus for Facility Management. FME's server capabilities enabled real-time updates and synchronization between ArcGIS Indoors and Maximo, facilitating automatic updates of asset information and work orders. Additionally, Survey123 forms allowed field personnel to capture and submit data directly from their mobile devices, triggering FME workflows via webhooks for real-time data updates. This seamless integration has significantly enhanced data management, improved decision-making processes, and ensured data consistency across the project lifecycle.
Integration of Utility Data into 3D BIM Models Using a 3D Solids Modeling Wor...
Integration of Utility Data into 3D BIM Models Using a 3D Solids Modeling Wor...Safe Software Jacobs has developed a 3D utility solids modelling workflow to improve the integration of utility data into 3D Building Information Modeling (BIM) environments. This workflow, a collaborative effort between the New Zealand Geospatial Team and the Australian Data Capture Team, employs FME to convert 2D utility data into detailed 3D representations, supporting enhanced spatial analysis and clash detection.
To enable the automation of this process, Jacobs has also developed a survey data standard that standardizes the capture of existing utilities. This standard ensures consistency in data collection, forming the foundation for the subsequent automated validation and modelling steps. The workflow begins with the acquisition of utility survey data, including attributes such as location, depth, diameter, and material of utility assets like pipes and manholes. This data is validated through a custom-built tool that ensures completeness and logical consistency, including checks for proper connectivity between network components. Following validation, the data is processed using an automated modelling tool to generate 3D solids from 2D geometric representations. These solids are then integrated into BIM models to facilitate compatibility with 3D workflows and enable detailed spatial analyses.
The workflow contributes to improved spatial understanding by visualizing the relationships between utilities and other infrastructure elements. The automation of validation and modeling processes ensures consistent and accurate outputs, minimizing errors and increasing workflow efficiency.
This methodology highlights the application of FME in addressing challenges associated with geospatial data transformation and demonstrates its utility in enhancing data integration within BIM frameworks. By enabling accurate 3D representation of utility networks, the workflow supports improved design collaboration and decision-making in complex infrastructure projects
Edge-banding-machines-edgeteq-s-200-en-.pdf
Edge-banding-machines-edgeteq-s-200-en-.pdfAmirStern2 מכונת קנטים המתאימה לנגריות קטנות או גדולות (כמכונת גיבוי).
מדביקה קנטים מגליל או פסים, עד עובי קנט – 3 מ"מ ועובי חומר עד 40 מ"מ. בקר ממוחשב המתריע על תקלות, ומנועים מאסיביים תעשייתיים כמו במכונות הגדולות.
MuleSoft for AgentForce : Topic Center and API Catalog
MuleSoft for AgentForce : Topic Center and API Catalogshyamraj55 This presentation dives into how MuleSoft empowers AgentForce with organized API discovery and streamlined integration using Topic Center and the API Catalog. Learn how these tools help structure APIs around business needs, improve reusability, and simplify collaboration across teams. Ideal for developers, architects, and business stakeholders looking to build a connected and scalable API ecosystem within AgentForce.
“Why It’s Critical to Have an Integrated Development Methodology for Edge AI,...
“Why It’s Critical to Have an Integrated Development Methodology for Edge AI,...Edge AI and Vision Alliance For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2025/06/why-its-critical-to-have-an-integrated-development-methodology-for-edge-ai-a-presentation-from-lattice-semiconductor/
Sreepada Hegade, Director of ML Systems and Software at Lattice Semiconductor, presents the “Why It’s Critical to Have an Integrated Development Methodology for Edge AI” tutorial at the May 2025 Embedded Vision Summit.
The deployment of neural networks near sensors brings well-known advantages such as lower latency, privacy and reduced overall system cost—but also brings significant challenges that complicate development. These challenges can be addressed effectively by choosing the right solution and design methodology. The low-power FPGAs from Lattice are well poised to enable efficient edge implementation of models, while Lattice’s proven development methodology helps to mitigate the challenges and risks associated with edge model deployment.
In this presentation, Hegade explains the importance of an integrated framework that tightly consolidates different aspects of edge AI development, including training, quantization of networks for edge deployment, integration with sensors and inferencing. He also illustrates how Lattice’s simplified tool flow helps to achieve the best trade-off between power, performance and efficiency using low-power FPGAs for edge deployment of various AI workloads.
AI VIDEO MAGAZINE - June 2025 - r/aivideo
AI VIDEO MAGAZINE - June 2025 - r/aivideo1pcity Studios, Inc AI VIDEO MAGAZINE - r/aivideo community newsletter – Exclusive Tutorials: How to make an AI VIDEO from scratch, PLUS: How to make AI MUSIC, Hottest ai videos of 2025, Exclusive Interviews, New Tools, Previews, and MORE - JUNE 2025 ISSUE -
ENERGY CONSUMPTION CALCULATION IN ENERGY-EFFICIENT AIR CONDITIONER.pdf
ENERGY CONSUMPTION CALCULATION IN ENERGY-EFFICIENT AIR CONDITIONER.pdfMuhammad Rizwan Akram DC Inverter Air Conditioners are revolutionizing the cooling industry by delivering affordable,
energy-efficient, and environmentally sustainable climate control solutions. Unlike conventional
fixed-speed air conditioners, DC inverter systems operate with variable-speed compressors that
modulate cooling output based on demand, significantly reducing energy consumption and
extending the lifespan of the appliance.
These systems are critical in reducing electricity usage, lowering greenhouse gas emissions, and
promoting eco-friendly technologies in residential and commercial sectors. With advancements in
compressor control, refrigerant efficiency, and smart energy management, DC inverter air conditioners
have become a benchmark in sustainable climate control solutions
FME for Distribution & Transmission Integrity Management Program (DIMP & TIMP)
FME for Distribution & Transmission Integrity Management Program (DIMP & TIMP)Safe Software Peoples Gas in Chicago, IL has changed to a new Distribution & Transmission Integrity Management Program (DIMP & TIMP) software provider in recent years. In order to successfully deploy the new software we have created a series of ETL processes using FME Form to transform our gas facility data to meet the required DIMP & TIMP data specifications. This presentation will provide an overview of how we used FME to transform data from ESRI’s Utility Network and several other internal and external sources to meet the strict data specifications for the DIMP and TIMP software solutions.
FIDO Seminar: Perspectives on Passkeys & Consumer Adoption.pptx
FIDO Seminar: Perspectives on Passkeys & Consumer Adoption.pptxFIDO Alliance FIDO Seminar: Perspectives on Passkeys & Consumer Adoption
No-Code Workflows for CAD & 3D Data: Scaling AI-Driven Infrastructure
No-Code Workflows for CAD & 3D Data: Scaling AI-Driven InfrastructureSafe Software When projects depend on fast, reliable spatial data, every minute counts.
AI Clearing needed a faster way to handle complex spatial data from drone surveys, CAD designs and 3D project models across construction sites. With FME Form, they built no-code workflows to clean, convert, integrate, and validate dozens of data formats – cutting analysis time from 5 hours to just 30 minutes.
Join us, our partner Globema, and customer AI Clearing to see how they:
-Automate processing of 2D, 3D, drone, spatial, and non-spatial data
-Analyze construction progress 10x faster and with fewer errors
-Handle diverse formats like DWG, KML, SHP, and PDF with ease
-Scale their workflows for international projects in solar, roads, and pipelines
If you work with complex data, join us to learn how to optimize your own processes and transform your results with FME.
Providing an OGC API Processes REST Interface for FME Flow
Providing an OGC API Processes REST Interface for FME FlowSafe Software This presentation will showcase an adapter for FME Flow that provides REST endpoints for FME Workspaces following the OGC API Processes specification. The implementation delivers robust, user-friendly API endpoints, including standardized methods for parameter provision. Additionally, it enhances security and user management by supporting OAuth2 authentication. Join us to discover how these advancements can elevate your enterprise integration workflows and ensure seamless, secure interactions with FME Flow.
vertical-cnc-processing-centers-drillteq-v-200-en.pdf
vertical-cnc-processing-centers-drillteq-v-200-en.pdfAmirStern2 מכונות CNC קידוח אנכיות הן הבחירה הנכונה והטובה ביותר לקידוח ארונות וארגזים לייצור רהיטים. החלק נוסע לאורך ציר ה-x באמצעות ציר דיגיטלי מדויק, ותפוס ע"י צבת מכנית, כך שאין צורך לבצע setup (התאמות) לגדלים שונים של חלקים.
Supporting the NextGen 911 Digital Transformation with FME
Supporting the NextGen 911 Digital Transformation with FMESafe Software Next Generation 911 involves the transformation of our 911 system from an old analog one to the new digital internet based architecture. The evolution of NG911 opens up a host of new opportunities to improve the system. This includes everything from device based location, to real time text. This can improve location accuracy dramatically as well as provide live updates from the citizen in need along with real time sensor updates. There is also the opportunity to provide multi-media attachments and medical records if the end user approves. This digital transformation and enhancements all require the support of new NENA and CRTC standards, along with integration across a variety of data streams.
This presentation will focus on how FME has supported NG911 transformations to date, and how we are positioning FME to support the enhanced capabilities to come. This session will be of interest to emergency services, municipalities and anyone who may be interested to know more about how emergency services are being improved to provide more accurate, localized information in order to improve the speed and relevance of emergency response and ultimately save more lives and provide better outcomes for those in need.
TrustArc Webinar - 2025 Global Privacy Survey
TrustArc Webinar - 2025 Global Privacy SurveyTrustArc How does your privacy program compare to your peers? What challenges are privacy teams tackling and prioritizing in 2025?
In the sixth annual Global Privacy Benchmarks Survey, we asked global privacy professionals and business executives to share their perspectives on privacy inside and outside their organizations. The annual report provides a 360-degree view of various industries' priorities, attitudes, and trends. See how organizational priorities and strategic approaches to data security and privacy are evolving around the globe.
This webinar features an expert panel discussion and data-driven insights to help you navigate the shifting privacy landscape. Whether you are a privacy officer, legal professional, compliance specialist, or security expert, this session will provide actionable takeaways to strengthen your privacy strategy.
This webinar will review:
- The emerging trends in data protection, compliance, and risk
- The top challenges for privacy leaders, practitioners, and organizations in 2025
- The impact of evolving regulations and the crossroads with new technology, like AI
Predictions for the future of privacy in 2025 and beyond
Tech-ASan: Two-stage check for Address Sanitizer - Yixuan Cao.pdf
Tech-ASan: Two-stage check for Address Sanitizer - Yixuan Cao.pdfcaoyixuan2019 A presentation at Internetware 2025.
FIDO Seminar: Targeting Trust: The Future of Identity in the Workforce.pptx
FIDO Seminar: Targeting Trust: The Future of Identity in the Workforce.pptxFIDO Alliance FIDO Seminar: Targeting Trust: The Future of Identity in the Workforce
Securing Account Lifecycles in the Age of Deepfakes.pptx
Securing Account Lifecycles in the Age of Deepfakes.pptxFIDO Alliance Securing Account Lifecycles in the Age of Deepfakes
“Why It’s Critical to Have an Integrated Development Methodology for Edge AI,...
“Why It’s Critical to Have an Integrated Development Methodology for Edge AI,...Edge AI and Vision Alliance
Ad
Severless PHP Case : Agile Dashboard via GitLab Board API
- 1. 曾義峰 (Ant) [email protected] 2020-07-25 Severless PHP Case Agile Dashboard via GitLab Board API
- 2. 2/67 LeadBest Consulting Group» 首席執行顧問 TGONetworks» 台北分會學籍委員 » 資安技術社群 CHROOT 成員 13 年互聯網研發經驗， 4 年顧問資歷。 具備銀行安全交易系統、電子票證系統、清分清算系統、機載娛樂系統、 數位廣告 (Adtech) 平台、古典樂線上平台及高效能電腦集群入口平台等 開發經驗。
- 3. 3/67Credit : http://90sheji.com/png/wanshouji.html Pay for what I use (pay-as-you-go) Granular scaling Personalization (vs. SaaS)
- 5. 5/67Credit : The Emergent Cloud Securiyt Toolchain for CI CD (2018-04).pdf
- 8. 8/67Credit : Cloud Native Security 101 (2019-02-02).pdf
- 9. 9/67Credit : Cloud Native Security 101 (2019-02-02).pdf
- 11. 11/67Credit : Monitoring Serverless Architectures (2017-06-21) - p9
- 12. 12/67 Serverless != No Server Serverless != No Server Serverless != NoOps ”Serverless” 非指不再涉及伺服器。 ”Serverless” 意味著開發人員不再需為 ” Server” 煩惱太多。
- 13. 13/67 Serverless != No Server Serverless != No Server Serverless != NoOps ”Serverless” 非指不再涉及伺服器。 ”Serverless” 意味著開發人員不再需為 ” Server” 煩惱太多。 Serverless == LessOps
- 14. 14/67 如果說 Agile + IaaS 孵化了 DevOps ， 那麼， Agile + BaaS + FaaS 則孕育了 Serverless 。
- 16. 16/67
- 17. 17/67
- 18. 18/67
- 19. 19/67
- 20. 20/67 Why Excel ? Stakeholders & MVP (GUI friendly)
- 21. 21/67
- 22. 22/67
- 23. 23/67
- 24. 24/67
- 25. 25/67
- 26. 26/67
- 27. 27/67
- 28. 28/67
- 33. 33/67 Cold Start
- 34. 34/67 Cold Start ( 冷啟動 ) Credit : https://azure.microsoft.com/en-us/blog/understanding-serverless-cold-start/
- 35. 35/67Credit : Cloud Native Security 101 (2019-02-02).pdf
- 41. 41/67 PHP runtime for Serverless
- 46. 46/67 雲架構
- 47. 47/67 CloudWatch Simple Email Service Simple Notification Service Simple Storage Service Lambda Step Functions Lambda Lambda
- 48. 48/67 CloudWatch Simple Email Service Simple Notification Service Simple Storage Service Lambda Step Functions Lambda Lambda 解析
- 49. 49/67 Lambda
- 53. 53/67 CloudWatch Simple Storage Service Lambda Step Functions Lambda Lambda
- 54. 54/67 CloudWatch Simple Email Service Simple Storage Service Lambda Step Functions Lambda Lambda
- 55. 55/67 CloudWatch Simple Email Service Simple Notification Service Simple Storage Service Lambda Step Functions Lambda Lambda
- 57. 57/67 經驗與分享
- 59. 59/67Credit : Oracle Performance Triangle
- 60. 60/67 Lower latency ? 嘗試移除沒利用到的 PHP Extensions 。
- 61. 61/67Credit : Anticorrupting the Enterprise - Serverlessconf NYC 2017 (2019-01-06).pdf
- 62. 62/67Credit : Anticorrupting the Enterprise - Serverlessconf NYC 2017 (2019-01-06).pdf 需視你的情況而定
- 65. 65/67Credit : http://90sheji.com/png/wanshouji.html Lower Cost Granular scaling LessOps Observability
- 66. 66/67Credit : http://90sheji.com/png/wanshouji.html Pay for what I use (pay-as-you-go) Granular scaling Personalization (vs. SaaS)