Development

Frontend и Backend, Database, DevOps, Highload, Mobile, Security, Requirements management, Testing, Project Management and Production for project managers, web-producers and programmers.

As well as Advanced Engineering and Machine Learning.

Sections
Profession
Level
Auditorium

Anna Obukhova
Agile Coach @ ScrumTrek
St. Petersburg

The era of management is coming to an end—we work on complex systems which are developed by intellectual people, and in such an environment leadership becomes the only effective management model. But how to become a person who people will follow? How to continue to bear significant responsibility when, ultimately, the only working tool available is the power of personality? And how to boost this power so that it’s clear for everyone that you are the person who can lead to success? And what does Agile have to do with that?


Alexey Natekin
Founder, Firekeeper @ DM Labs, Open Data Science
Moscow

Many have heard about the impressive successes of Machine Learning and Data Science: while some technologies alter entire industries, others long ago unnoticeably became part of our lives.

However, here's the mishap: excessive attention of press and marketers to the success of common scientists and engineers has created so much information noise, that it became difficult understand what is what.

In this lecture, we will figure out what Machine Learning and Data Science are in general; learn how to ‘cook and eat’ them; and most importantly - what to do to join this feast of life and technology.



David Busby
Information Security Architect @ Percona
London

In this talk we will cover what is an attack surface and what you can do to limit it.

  • Acronym hell what does all these acronyms associated with security products mean and what do they mean?
  • Vulnerability media naming stupidity or driving the message home ?
  • Detection or Prevention avoiding the boy who cried wolf.
  • Emerging technologies to keep an eye on or even implement yourself to help improve your security posture.
  • 2014 -> 2017 what's been going on, why have there been so many compromises ?

Mikhail Rakhmanov
iOS @ Headhunter
Moscow

History of emergence

Basic concepts and principles

Design of reactive libraries: "under the hood"

Approaches to building architecture (service and presentation layers)

A review of proposed approaches in terms of an open source application

Advantages and disadvantages of reactive programming



Igor Tsupko
CTO @ Notamedia
Moscow

The truth about implementation of projects documenting and the documents you do not actually need.

You'll learn what means to use, how to help developers formulate their thoughts and to protect the project from the torturous search for the truth a couple of months after the release.

Is there always-up-to-date working documentation on Internet projects? Let's sort it out.


Andrey Vaganov
Senior front-end developer @ Aggregion
Kazan

- Show main ideas of Angular 2

- Real work examples

- Redux with Angular 2. Why it's cool and easy?

- Functional reactive programming (FRP) with Angular 2

- Quick start with all of this


Aleksandr Shitikov
Development manager @ AGIMA.Mobile
Ulyanovsk
Cross-platform VIPER
of Reports

    1. Business logic as a cross-platform module.

    2. VIPER. Where does cross-platform interchange start and finish?

    3. Android-friendly VIPER. Lifecycle.

    4. Development tools.

    5. Test methods.


    Load testing in Lazada

    * How we came to this and why we need it;

    * What we use ready-made and what we had to develop ourselves;

    * How we analyze test results and what statistics collect;

    * Why we trust the results of testing;

    * How we shoot on production and do not fear anything;

    * What resources are needed to build a load testing system;

    * What we want to do in the future.


    Maxim Nikitin
    Big Boss @ ITSalt.ru
    Moscow

    Who the analysts are, what they are doing and why they are needed in the process of developing IT systems. I will tell you:

    - the difference between business analysis and system analysis,

    - the difference between use-cases of the system and business functions;

    - how to link business functions, usage scenarios, interface structures, and data classes into a single model;

    - how to use the obtained model of requirements to develop test scenarios;

    - how to link the steps of the test script with the requirements to understand what needs to be re-tested when the requirements change.

    Based on examples from real projects.


    Alexander Kirillov
    Software engineer @ Evrone

    Most web projects have long outgrown the level of monolithic applications and broke into the world of microservices. It's no secret that many developers choose containerization as one of the ways to deploy infrastructure. In my speech I will tell you why we chose Kubernetes, what difficulties we faced and wat solutions we found. Also, speaking in the context of Docker cluster I'll discuss the main points that web developers encounter, and will also address the issue of using the developer-environment based on Docker-containers.


    Maksim Milyutin
    Programmer @ Postgres Professional
    Ulyanovsk

    Foreign Data Wrapper implementation enables sub-querying remote data sources within the current query. Combined with sharding (using pg_pathman, in particular) this engine allows a distributed store of large tables mostly for hard-case analytic queries.

    As part of the master class, this report will demonstrate such a way of a horizontal partition of data in a database, and compare it with the sharding solutions available in PostgreSQL.



    Nikolai Chubarov
    @ Castle
    Samara

    Offline Mobile JS application in the browser and how to work with it:

    - Functions

    - Data storage

    - Caching

    - Updates

    - Browser support


    • Notes on the specifics of practical implementation of some network attacks.

    Aleksey Rybakov
    Senior Engineer, Technical Evang @ DataArt
    Kharkiv

    An outline of AR/MR/VR and industry trends

    Let’s talk about what Samsung Gear VR, Google Cardboard and Google Daydream are like, and what are the similarities and differences from the point of view of the programmer

    And—what SDK/Tool may be used along with them



    Anton Bravin
    Senior VR Engineer @ ITECH.group
    Ulyanovsk

    In my report, I will tell you how to evolve from a gamedev-developer to a developer of VR-applications. What unexpected problems can arise in your path, and what to do about them. How to design an application that will not make your users sick. Literally!


    Wire Snark
    co-founder @ DEF CON Nizhny Novgorod
    Nizhny Novgorod

    Let us talk about how source code security analysis for Android applications should be

    conducted. We are going to identify the most common mistakes—OWASP Mobile Top 10—and

    review Android-specific examples.

    The report discusses the methodology and major steps in source code security analysis for

    Android applications. It tells about what a Threat Model is, and how it can be built in practice.

    Application architecture analysis issues in terms of security will be also addressed. The report

    will cover hands-on experience of using static source code analyzers to find defects that impact

    application security. The most frequent mistakes according to OWASP Mobile Top 10 will be

    reviewed with examples from experience.


    Alexander Chistyakov
    Principal Engineer @ Git in Sky
    St. Petersburg

    Practicing DevOps is not only necessary, but also boring, so I'll try to be a visionary, despite having Cassandra complex. Before my eyes, the world has changed several times, and each time not everyone got into the brave new world. Is DevOps engineer position safe enough to remain a well-paid specialist at the next change? How and where will the world change next time? Will the Docker survive, or the ‘blue whale’ on the logo will inevitably lead to a suicide? As always, a bit of shock content: why Jenkins is still in the trend, and why Java is not as bad as it's thought of.



    Valentin Bartenev
    Core Developer @ NGINX, Inc.
    Moscow

    Linux core software interface is, perhaps, one of the software interfaces that are most frequently used by API-developers of server software. So, it may seem to an outside observer that such an important interface must follow the most stringent standards, meet interests of programmers and be elaborated down to the last detail.

    However, this is far from it, as my personal experience shows. In my report, I will tell you in detail about what defects I used to face, and what capabilities Linux API is strongly lacking, to make nginx our other developments even better and faster. I will draw parallels between how those issues are being resolved in other unix-like operating systems.

    I do hope that my report will be useful not only for those who deal with Linux core directly, but also for a wider audience, as vivid negative example of how software interfaces still should not be designed.


    Sergey Kuleshov
    Deputy CEO @ 1C-Bitrix
    Moscow

    During the report we will:

    - find out why you need to change;

    - analyze the problems of choosing ideas and directions for innovation;

    - learn to determine the leaders of changes in the team.

    We will consider practical experience of dealing with changes within the company, we will find answers to these and other questions of a business head.


    • TL; DR
      • About you all for a long time everyone knows,
      • And what you are doing,
      • And browser history :)
    • I'll tell you about OSINT and how to "find by IP"
      • And even practice will be, yeah :)
    • And who else and how does your data store and sell where and for how much $$$
    • "XSS? Phishing? Wut? And why are we to blame?" (c) Everyone
    • Well, yes, what to do with it and how to live with this knowledges :)

    Nikita Samokhvalov
    Deputy CTO @ Notamedia
    Moscow

    При слове «госпроект» вы думаете об абсолютном водопаде, неисправимой бюрократии и неповоротливой эксплуатации? Всё гораздо хуже. Но мы их победили. Давайте разберёмся, как?

    Я расскажу про опыт Notamedia и наших коллег по рынку:

    — Что из себя представляет госпроект с точки зрения инженера.

    — Как в таких проектах сочетаются Dev-ы и Ops-ы.

    — Какие трудности возникают при внедрении новых фич и как с ними можно бороться.

    — DevOps-практики в госсекторе.


    Ivan Mikheev
    Deputy Technical Director @ AGIMA
    Moscow

    Any large company at the implementation of a web-project should in some way integrate it with internal accounting systems. Each integration of this kind implies tight interaction between a contractor for the development of the client side with customer IM IT and contains a lot of non-obvious risks. In the report we will cover the following poins:

    - Work at large integration projects. Where to start and how to finish;

    - Technical documentation on the project: what, who and when;

    - Problems of web services, methods of response and ways to eliminate them.

    - Project infrastructure: typical layout of system components.


    Arthur Esсhenbrener
    Architect @ Megaplan
    Moscow

    1. How bad it was: complete absence of backend-frontend protocol, lack of auto-documentation, and many different parts of the system that had to be maintained separately.

    2. The choice of the ‘point of truth’ – backend.

    3. Backend uses PHP, and therefore, it is necessary to teach it the strict typing of entities - all that endpoints return should be entities expressed in the form of a class in PHP with typification in the form of annotations to the fields.

    4. Static class analysis and generation of raml descriptions

    5. Generation of the typescript scheme by raml description to be used on the client side.

    6. To show how it's great when changing the data scheme without any respective edits on the client side breaks the compilation.



    Dmitry Fronin
    Head Developer @ Alfa-Bank
    Ulyanovsk

      We will not talk with you about the processes and tools of flexible approaches, but about what lies behind these processes and tools. I would like to bring you the understanding of their philosophy and values. After all, to successfully use flexible approaches it is not enough just to mechanically apply the methodologies, it is important to think differently.

      We'll consider:

      · Problems in software development;

      · Why do we need Agile, and what benefits will we get?

      · Values and principles of Agile;

      · The values and principles of Scrum;

      · Team Motivation Problems;

      · Influence of the Leader on the team.