A Closed Source Developer's Journey into Openness

•

0 gefällt mir•731 views

Slides from my DevConfCZ 2016 talk - lessons learned about Open Source, why being an open source developer is inherently different and how do to it right

Technologie

1Allon Mureinik - A Closed Source Developer’s Journey into Openness
A Closed Source
Developer’s
Journey into
Openness
Allon Mureinik
Associate Manager, RHEV Storage R&D
amureini@redhat.com / @mureinik
DevConfCZ, Feb. 2016

2Allon Mureinik - A Closed Source Developer’s Journey into Openness
A Confession...

3Allon Mureinik - A Closed Source Developer’s Journey into Openness
Who REALLY Contributes to Open Source?

4Allon Mureinik - A Closed Source Developer’s Journey into Openness
A State of Mind, Not a Source Repository
See: http://opensource.com/open-source-way

5Allon Mureinik - A Closed Source Developer’s Journey into Openness
Nobody knows you’re a...
Steiner, P. (1993), The New Yorker

6Allon Mureinik - A Closed Source Developer’s Journey into Openness
Truth Happens

7Allon Mureinik - A Closed Source Developer’s Journey into Openness
Open Source is not Anarchy

8Allon Mureinik - A Closed Source Developer’s Journey into Openness
Feedback Appreciated
Feedback form: http://www.devconf.cz/f/350?q=/f&select=350
Email: amureini@redhat.com
Twitter: @mureinik
LinkedIn: https://il.linkedin.com/in/mureinik

Weitere ähnliche Inhalte

Mehr von Allon Mureinik

Most of us don’t wear capes to work. Most of us don’t have colleagues who are tricked by supervillains into killing their wives and blowing up their cities. However, some, if not most, of us have colleagues who think of themselves as heroes, but if they would take a step back and ask how others see them, they might be surprised to hear they are the unintentional villains of the story. In this talk from SciFiDevCon 2024 I’ll go over some of the worst ways developers may harm their teams and colleagues while meaning well, and how those who try to keep them grounded are the real unsung heroes of software development.

Injustice - Developers Among Us (SciFiDevCon 2024)

Allon Mureinik

Default to Async - Prevent DoS attacks on your app and your day

Allon Mureinik

Most people don’t set out to be toxic on purpose (and if you do – this talk probably isn’t for you), but many of us may have toxic behavior we aren’t even aware of. In this talk I’ll discuss accidental toxicity, how to recognize it, and how to avoid it to make your workplace truly inclusive, or at the very least, better than a vat of acid. Talk from SciFiDevCon 2023 https://www.scifidevcon.com/courses/2023-may-the-fourth-event/contents/6445c71664185

What an episode of Rick and Morty taught me about (accidental) toxicity

Allon Mureinik

When I started interviewing for my first job, back in 2006, I noticed that most of the interviewers I had were asking the exact same questions, and expecting the exact same answers. Either they had all been reading the same Interviewing 101 book, or I was been interviewed by a hive mind. In this talk from SciFiDevCon 2022, I've shared how I passed those interviews not by providing the best answer, but by doing something the hive mind would never – by showcasing my individuality. Ironically, I did that by introducing the Borg to the interview process. Recording: https://youtu.be/kiSVdnKy7fM

We are the Borg, you will be interviewed

Allon Mureinik

Eighteen years into my career, I decided to pivot and move from infrastructure-related work to the world of application security. If there’s one thing I’ve learned in the three years of working in application security is that it’s a funny business. Our entire business model is based on pointing out the mistakes of other programmers. In this talk, I want to shoot myself in the foot and share some concepts that could help eliminate a lot of those mistakes, and reduce my job to snuffing out the more interesting mistakes.

What I wish I knew about security - Allon Mureinik DevConf.CZ 2022

Allon Mureinik

Somebody set up us the bomb DevConf.CZ 2022 Lightning Talk

Allon Mureinik

Zoom out

Allon Mureinik

Open source thrives on diversity. The last couple of years has seen huge strides in that aspect with codes of conduct and initiatives like the Contributor Covenant. While these advancements are crucial, they are not enough. In order to truly be inclusive, it’s not enough for the community members to be welcoming and unbiased, the communities’ processes and procedures really support inclusiveness by not only making marginalized members welcome, but allowing them to fully participate. Slides from my talks at FOSDEM 2020 and DevConf.CZ 2020

Cognitive biases, blind spots and inclusion

Allon Mureinik

Node.js’ single-threaded nature makes it very susceptible to DOS attacks. While Node.js’ event loop allows performing some operations in an asynchronous fashion, it’s still quite easy to write a vulnerable Node.js application by making a few simple mistakes. In this talk I’ll cover some common ways a Node.js application may be vulnerable to DoS attacks and some common best-practices and counter measures to defend against such attacks. This first-ever talk at FlawCon, hosted at OggCamp 2019

This DoS goes loop-di-loop

Allon Mureinik

Management seems like a simple job - you tell people what to do, they do it, rinse, repeat. For bad managers, it really is this simple. Good managers do things differently. They let team members affect, if not drive, the team's direction. They allow the best ideas to guide the team's activity, no matter who brings them up. They are not intimidated by non-managers displaying leadership qualities, they encourage them. While these sentiments aren't unique to open source, they are the core of open source communities - allowing individuals to exert influence without any official authority. That's why I think working in open source is the best way to learn how to be a good manager, and I'll try to share this concept in my talk.

How open source made me a better manager

Allon Mureinik

Being a maintainer, or even a notable contributor in an open source project is a damn hard job. Not only are you expected to tackle the hardest programming tasks, but suddenly you're also expected to do all these "softer" things - review other people's work, provide feedback, ramp up other contributors, etc. In this talk from DevConf.us 2018, I've shown how your gut instinct as an engineer - to automate everything - can actually work here too (at least to a certain degree), and take a lot of the load off your shoulders.

Automatic for the People

Allon Mureinik

Being a maintainer, or even a notable contributor in an open source project is a damn hard job. Not only are you expected to tackle the hardest programming tasks, but suddenly you're also expected to do all these "softer" things - review other people's work, provide feedback, ramp up other contributors, etc. In this session, I'll show how your gut instinct as an engineer - to automate everything - can actually work here too (at least to a certain degree), and take a lot of the load off your shoulders. Slides from my DevConf.CZ 2018 talk

Automatic for the people

Allon Mureinik

Mockito - How a mocking library built a real community

Allon Mureinik

Mockito - how a mocking library built a real community (August Penguin 2017)

Allon Mureinik

Java prides itself in not allowing you to shoot yourself in the foot, but doesn't always live up to the hype. Recent editions have introduced powerful new syntactic tools which make development much easier, but can often result in "WAT" moments. This lightening talk (given in Reversim Summit 2016), inspired by Gary Bernhardt's famous WAT talk will showcase some of the cases where Java has left me scratching my head and asking "WAT?".

Reversim Summit 2016 - Ja-WAT

Allon Mureinik

Virtualization Management The oVirt Way (August Penguin 2015)

Allon Mureinik

Designing monolithic infrastructures is a common mistake in large projects. However, more often than not, these infrastructures are too generic, make false assumptions or are simply delivered too late for feature developers to use, becoming "white elephants". This presentation is a case study of the work done by my team to deliver Live Merging of Snapshots oVirt from the initial steps in oVirt 3.1.0 to the full delivery in 3.5.0, and how good design can be feature-driven, building infra-structures step by step, while gaining small wins during the process.

Step by Step - Reusing old features to build new ones

Allon Mureinik

Retro Testing (DevConTLV Jan 2014)

Allon Mureinik

Mehr von Allon Mureinik (18)

Injustice - Developers Among Us (SciFiDevCon 2024)

Default to Async - Prevent DoS attacks on your app and your day

What an episode of Rick and Morty taught me about (accidental) toxicity

We are the Borg, you will be interviewed

What I wish I knew about security - Allon Mureinik DevConf.CZ 2022

Somebody set up us the bomb DevConf.CZ 2022 Lightning Talk

Zoom out

Cognitive biases, blind spots and inclusion

This DoS goes loop-di-loop

How open source made me a better manager

Automatic for the People

Automatic for the people

Mockito - How a mocking library built a real community

Mockito - how a mocking library built a real community (August Penguin 2017)

Reversim Summit 2016 - Ja-WAT

Virtualization Management The oVirt Way (August Penguin 2015)

Step by Step - Reusing old features to build new ones

Retro Testing (DevConTLV Jan 2014)

Kürzlich hochgeladen

Sidekick Solutions uses Bonterra Impact Management (fka Social Solutions Apricot) and automation solutions to integrate data for business workflows. We believe integration and automation are essential to user experience and the promise of efficient work through technology. Automation is the critical ingredient to realizing that full vision. We develop integration products and services for Bonterra Case Management software to support the deployment of automations for a variety of use cases. This video focuses on the deployment of external web forms using Jotform for Bonterra Impact Management. This solution can be customized to your organization’s needs and deployed to support the common use cases below: - Intake and consent - Assessments - Surveys - Applications - Program registration Interested in deploying web form automations for Bonterra Impact Management? Contact us at sales@sidekicksolutionsllc.com to discuss next steps.

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Jeffrey Haguewood

Artificial Intelligence Chap.5 : Uncertainty

Khushali Kathiriya

When you’re building (micro)services, you have lots of framework options. Spring Boot is no doubt a popular choice. But there’s more! Take Quarkus, a framework that’s considered the rising star for Kubernetes-native Java. It always depends on what's best for your situation, but how to choose the best solution if you're comparing 2 frameworks? Both Spring Boot and Quarkus have their positives and negatives. Let us compare the two by live coding a couple of common use cases in Spring Boot and Quarkus. After this talk, you’ll be ready to get started with Quarkus yourself, and know when to select Quarkus or Spring Boot.

Spring Boot vs Quarkus the ultimate battle - DevoxxUK

Jago de Vreede

Polkadot JAM Slides - Token2049 - By Dr. Gavin Wood

Juan lago vázquez

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

MadyBayot

Boost Fertility New Invention Ups Success Rates.pdf

sudhanshuwaghmare1

In the thrilling conclusion to 2023, ransomware groups had a banner year, really outdoing themselves in the "make everyone's life miserable" department. LockBit 3.0 took gold in the hacking olympics, followed by the plucky upstarts Clop and ALPHV/BlackCat. Apparently, 48% of organizations were feeling left out and decided to get in on the cyber attack action. Business services won the "most likely to get digitally mugged" award, with education and retail nipping at their heels. Hackers expanded their repertoire beyond boring old encryption to the much more exciting world of extortion. The US, UK and Canada took top honors in the "countries most likely to pay up" category. Bitcoins were the currency of choice for discerning hackers, because who doesn't love untraceable money?

Ransomware_Q4_2023. The report. [EN].pdf

Overkill Security

MS Copilot expands with MS Graph connectors

Nanddeep Nachan

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Edi Saputra

Three things you will take away from the session: • How to run an effective tenant-to-tenant migration • Best practices for before, during, and after migration • Tips for using migration as a springboard to prepare for Copilot in Microsoft 365 Main ideas: Migration Overview: The presentation covers the current reality of cross-tenant migrations, the triggers, phases, best practices, and benefits of a successful tenant migration Considerations: When considering a migration, it is important to consider the migration scope, performance, customization, flexibility, user-friendly interface, automation, monitoring, support, training, scalability, data integrity, data security, cost, and licensing structure Next Wave: The next wave of change includes the launch of Copilot, which requires businesses to be prepared for upcoming changes related to Copilot and the cloud, and to consolidate data and tighten governance ShareGate: ShareGate can help with pre-migration analysis, configurable migration tool, and automated, end-user driven collaborative governance

Strategize a Smooth Tenant-to-tenant Migration and Copilot Takeoff

sammart93

Webinar Recording: https://www.panagenda.com/webinars/why-teams-call-analytics-is-critical-to-your-entire-business Nothing is as frustrating and noticeable as being in an important call and being unable to see or hear the other person. Not surprising then, that issues with Teams calls are among the most common problems users call their helpdesk for. Having in depth insight into everything relevant going on at the user’s device, local network, ISP and Microsoft itself during the call is crucial for good Microsoft Teams Call quality support. To ensure a quick and adequate solution and to ensure your users get the most out of their Microsoft 365. But did you know that ‘bad calls’ are also an excellent indicator of other problems arising? Precisely because it is so noticeable!? Like the canary in the mine, bad calls can be early indicators of problems. Problems that might otherwise not have been noticed for a while but can have a big impact on productivity and satisfaction. Join this session by Christoph Adler to learn how true Microsoft Teams call quality analytics helped other organizations troubleshoot bad calls and identify and fix problems that impacted Teams calls or the use of Microsoft365 in general. See what it can do to keep your users happy and productive! In this session we will cover - Why CQD data alone is not enough to troubleshoot call problems - The importance of attributing call problems to the right call participant - What call quality analytics can do to help you quickly find, fix-, and prevent problems - Why having retrospective detailed insights matters - Real life examples of how others have used Microsoft Teams call quality monitoring to problem shoot problems with their ISP, network, device health and more.

Why Teams call analytics are critical to your entire business

panagenda

2024: Domino Containers - The Next Step. News from the Domino Container commu...

Martijn de Jong

The value of a flexible API Management solution for Open Banking Steve Melan, Manager for IT Innovation and Architecture - State's and Saving's Bank of Luxembourg Apidays New York 2024: The API Economy in the AI Era (April 30 & May 1, 2024) ------ Check out our conferences at https://www.apidays.global/ Do you want to sponsor or talk at one of our conferences? https://apidays.typeform.com/to/ILJeAaV8 Learn more on APIscene, the global media made by the community for the community: https://www.apiscene.io Explore the API ecosystem with the API Landscape: https://apilandscape.apiscene.io/

Apidays New York 2024 - The value of a flexible API Management solution for O...

apidays

Abhishek Deb(1), Mr Abdul Kalam(2) M. Des (UX) , School of Design, DIT University , Dehradun. This paper explores the future potential of AI-enabled smartphone processors, aiming to investigate the advancements, capabilities, and implications of integrating artificial intelligence (AI) into smartphone technology. The research study goals consist of evaluating the development of AI in mobile phone processors, analyzing the existing state as well as abilities of AI-enabled cpus determining future patterns as well as chances together with reviewing obstacles as well as factors to consider for more growth.

Exploring the Future Potential of AI-Enabled Smartphone Processors

debabhi2

💉💊+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHABI}}+971581248768 +971581248768 Mtp-Kit (500MG) Prices » Dubai [(+971581248768**)] Abortion Pills For Sale In Dubai, UAE, Mifepristone and Misoprostol Tablets Available In Dubai, UAE CONTACT DR.Maya Whatsapp +971581248768 We Have Abortion Pills / Cytotec Tablets /Mifegest Kit Available in Dubai, Sharjah, Abudhabi, Ajman, Alain, Fujairah, Ras Al Khaimah, Umm Al Quwain, UAE, Buy cytotec in Dubai +971581248768''''Abortion Pills near me DUBAI | ABU DHABI|UAE. Price of Misoprostol, Cytotec” +971581248768' Dr.DEEM ''BUY ABORTION PILLS MIFEGEST KIT, MISOPROTONE, CYTOTEC PILLS IN DUBAI, ABU DHABI,UAE'' Contact me now via What's App…… abortion Pills Cytotec also available Oman Qatar Doha Saudi Arabia Bahrain Above all, Cytotec Abortion Pills are Available In Dubai / UAE, you will be very happy to do abortion in Dubai we are providing cytotec 200mg abortion pill in Dubai, UAE. Medication abortion offers an alternative to Surgical Abortion for women in the early weeks of pregnancy. We only offer abortion pills from 1 week-6 Months. We then advise you to use surgery if its beyond 6 months. Our Abu Dhabi, Ajman, Al Ain, Dubai, Fujairah, Ras Al Khaimah (RAK), Sharjah, Umm Al Quwain (UAQ) United Arab Emirates Abortion Clinic provides the safest and most advanced techniques for providing non-surgical, medical and surgical abortion methods for early through late second trimester, including the Abortion By Pill Procedure (RU 486, Mifeprex, Mifepristone, early options French Abortion Pill), Tamoxifen, Methotrexate and Cytotec (Misoprostol). The Abu Dhabi, United Arab Emirates Abortion Clinic performs Same Day Abortion Procedure using medications that are taken on the first day of the office visit and will cause the abortion to occur generally within 4 to 6 hours (as early as 30 minutes) for patients who are 3 to 12 weeks pregnant. When Mifepristone and Misoprostol are used, 50% of patients complete in 4 to 6 hours; 75% to 80% in 12 hours; and 90% in 24 hours. We use a regimen that allows for completion without the need for surgery 99% of the time. All advanced second trimester and late term pregnancies at our Tampa clinic (17 to 24 weeks or greater) can be completed within 24 hours or less 99% of the time without the need surgery. The procedure is completed with minimal to no complications. Our Women's Health Center located in Abu Dhabi, United Arab Emirates, uses the latest medications for medical abortions (RU-486, Mifeprex, Mifegyne, Mifepristone, early options French abortion pill), Methotrexate and Cytotec (Misoprostol). The safety standards of our Abu Dhabi, United Arab Emirates Abortion Doctors remain unparalleled. They consistently maintain the lowest complication rates throughout the nation. Our Physicians and staff are always available to answer questions and care for women in one of the most difficult times in their lives. The decision to have an abortion at the Abortion Cl

+971581248768>> SAFE AND ORIGINAL ABORTION PILLS FOR SALE IN DUBAI AND ABUDHA...

?#DUbAI#??##{{(☎️+971_581248768%)**%*]'#abortion pills for sale in dubai@

Join our latest Connector Corner webinar to discover how UiPath Integration Service revolutionizes API-centric automation in a 'Quote to Cash' process—and how that automation empowers businesses to accelerate revenue generation. A comprehensive demo will explore connecting systems, GenAI, and people, through powerful pre-built connectors designed to speed process cycle times. Speakers: James Dickson, Senior Software Engineer Charlie Greenberg, Host, Product Marketing Manager

Connector Corner: Accelerate revenue generation using UiPath API-centric busi...

DianaGray10

Corporate and higher education. Two industries that, in the past, have had a clear divide with very little crossover. The difference in goals, learning styles and objectives paved the way for differing learning technologies platforms to evolve. Now, those stark lines are blurring as both sides are discovering they have content that’s relevant to the other. Join Tammy Rutherford as she walks through the pros and cons of corporate and higher ed collaborating. And the challenges of these different technology platforms working together for a brighter future.

Corporate and higher education May webinar.pptx

Rustici Software

Manulife - Insurer Transformation Award 2024

The Digital Insurer

The microservices honeymoon is over. When starting a new project or revamping a legacy monolith, teams started looking for alternatives to microservices. The Modular Monolith, or 'Modulith', is an architecture that reaps the benefits of (vertical) functional decoupling without the high costs associated with separate deployments. This talk will delve into the advantages and challenges of this progressive architecture, beginning with exploring the concept of a 'module', its internal structure, public API, and inter-module communication patterns. Supported by spring-modulith, the talk provides practical guidance on addressing the main challenges of a Modultith Architecture: finding and guarding module boundaries, data decoupling, and integration module-testing. You should not miss this talk if you are a software architect or tech lead seeking practical, scalable solutions. About the author With two decades of experience, Victor is a Java Champion working as a trainer for top companies in Europe. Five thousands developers in 120 companies attended his workshops, so he gets to debate every week the challenges that various projects struggle with. In return, Victor summarizes key points from these workshops in conference talks and online meetups for the European Software Crafters, the world’s largest developer community around architecture, refactoring, and testing. Discover how Victor can help you on victorrentea.ro : company training catalog, consultancy and YouTube playlists.

Modular Monolith - a Practical Alternative to Microservices @ Devoxx UK 2024

Victor Rentea

presentation ICT roal in 21st century education

jfdjdjcjdnsjd

Kürzlich hochgeladen (20)