The PTags Linux Security Module

uk: Комп'ютерні науки

description: What should be done of the PTags Linux Security Module? PTags means Process-Tags, it allows to tag processes and is compatible withuser namespaces. What problem does it solves? How does it works? How can it be used and forwhat purposes? Answers to these questions would allows to answer the main question: should itbe part of linux tree? PTags allows a system to attach tags to processes. The tags can receivevalues. The semantic of tags and of the values is not enforced and that is thebig strength of that model that can be widely used for several purposes. This talk will answer the following questions: \- What problem does it solves?\- How does it works? (including user namespace) \- How can it be used and forwhat purposes? It firstly came from studies on "user land" capabilities attached to APIs. Butas the process of tagging can be more widely used in system, it became moregeneric and simply solve the problem of attaching data (or meta-data) to aprocess and its possibly forked children. It works by writing or reading the file /proc/PID/attr/ptags. When reading thefile, the tag list is read. When writing the file, the tag list can be changedunder conditions. The file can be monitored using inotify to be alerted onwrite accesses that presumely change the content. An available C libraryimplements common operations. The implementation is aware of user namespace. It can thus be used safely incontainers because a same process is able to expose different tags indifferent namespaces, depending on there history. Examples will show that it can be used for: \- managing capabilities in theuser land \- setting cookies on processes \- publishing, or exposing, data orstate of a process \- passing data without IPC \- managing lifecycle ofprocesses \- tracking forks \- ...

uk: вхід без авторизації


Laurent Bercot

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: s6 is the most modern of the "daemontools family" of process supervisionsuites. It is used to provide lightweight multi-service container images, orextremely fast init systems on real machines - smaller, simpler, faster, andmore reliable than systemd. This presentation explains what processsupervision is, why it is a good pattern to have, how s6 implements it and howyou can use it to your advantage. What does sysvinit do? Why are gettys treated differently in /etc/inittab?What is process supervision? What is s6 and how does it work? What is aservice manager? How can I use s6 today to run my services? How can weoverthrow systemd and rule the world? All these questions find their answers in this lightning talk!

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: The s6 supervision suite: A modern alternative to systemd

FOSDEM VZW

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: The state of Go, updated until go 1.8

uk: вхід без авторизації

name: The state of Go: Where we are in February 2017


The State of OpenJDK

uk: Комп'ютерні науки

description: A review of the past year in the life of the OpenJDK Community, and a look atwhat's ahead.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: When the Ingress game started in 2013, quite a few people world-wide found outthat augmented reality gaming in the real world was a great new invention, andthe game grew to become a success for the then-project inside Google. With itsPokémon themed update in 2016, Niantic got the whole world playing - andsponsoring them with all their personal details. Veripeditus opens up theworld of AR game creation to the public. The Pokémon Go hype is spreading and more and more people are playing - on areal map with real objects. With the ever growing possibilities of smartphones and apps, interest for Augmented Reality is getting bigger. But thereare obvious problems: current developers don't care about privacy and data iscollected, sold and freely provided to others at will. About time to make a change! Veripeditus is entirely free, open sourcesoftware and easy to use. The server can be run entirely by yourself andeveryone can develope games and custom clients if they wish. The frameworkdallows for the development of augmented reality games, so called "cartridges",that can be played in the real world in any scope, be it locally, like on thepremises of a museum, or on global scope, like an augemented reality MMORPG. In the development of Veripeditus, we aim at making game development as easyas possible. The only thing needed is basic knowledge of Python and, ofcourse, ideas for the game. Veripeditus itself also employs basic, well-knowntechnologies like a relational database, the SQLAlchemy object-relationalmapper and a (glorified) RESTful API. This talk will give an introduction to how Veripeditus was developed, howgames can be created and what can be done with it - some ideas include usingVeripeditus in education, local group activities, tourism amd, of course,plain fun gaming. We will also showcase a mini game that will be playable on the ULB campus!

uk: вхід без авторизації

name: The Veripeditus AR Game Framework: Enabling everyone to freely create Augmented Reality Games


uk: Комп'ютерні науки

description: The virtual file system (switch) is an instrinsic element of traditionaloperating systems and the majority of alternative OSes alike. For the mostpart, this is caused by existing applications that depend on the fileabstraction and to some extent on a global view on system resources. Incontrast, component-based OSes with strong security ambitions strive to applythe principle of least authority and shun one global view on the system. Thiswas the starting for the VFS developments for Genode. The talk will presentour design considerations and the current state of the VFS in Genode as acomponent and capability-based microkernel operating system.

uk: вхід без авторизації

name: The VFS paradigm from the perspective of a component OS


uk: Комп'ютерні науки

description: The G1 garbage collector is currently proposed to become the default garbagecollector in JDK 9. Recently three new ideas for G1 were described on thehotspot-gc-dev at openjdk.java.net mailing list: \- parallel full GC \-throughput write barriers \- rebuilding remembered sets during concurrent mark This talk will present these three new ideas so that people who are interestedin getting into G1 development know where to start, see what the existing codelooks like today and highlight how one can contribute (it is not only aboutcode!). The presentation can be made longer if people want to dive deeper into thedetails (but it can also fit in a 25 minute slot).

uk: вхід без авторизації

name: Three ideas for the G1 GC (and how to get involved)


uk: Комп'ютерні науки

description: The Transport Layer Protocol is becoming more and more complex. With more than4 versions deployed side-by-side, the complexity of servers is increasing evenfaster. To fight this, we've started to work on TLS test framework that hopefullywe'll later be able to turn into a dedicated TLS protocol fuzzer. Currently wehave a battery of tests for obscure and not so obscure bugs as well as generalcompliance with RFCs defining the TLS protocol.

uk: вхід без авторизації

name: TLS Test Framework: How to check if your SSL server is standards compliant and client compatible


Tour de (PostgreSQL) Data Types

uk: Комп'ютерні науки

description: Ever wondered what might be the best data type for a certain use case? Is itbetter to use INTEGER or BIGINT, and should you use TIMESTAMP or is it betterto use TIMESTAMPTZ? When is the last time you migrated a legacy database andwondered what to use as replacement for VARCHAR2 or CHAR(255)? How to store IPaddresses or geographical data, does that fit into VARCHAR or is theresomething more suitable? PostgreSQL 9.6 comes with around 40 different data types preinstalled. Thistalk looks beyond INTEGER and VARCHAR and dives into some of the lesser knownPostgreSQL data types. Use cases and examples show which data type is a goodfit for a certain situation.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Xen is a hypervisor using a microkernel design that allows running multipleconcurrent operating systems on the same hardware. One of the key features ofXen is that it is OS agnostic, meaning that any OS (with proper support) canbe used as a host. Xen has a long history going back to the 90s when it wasdesigned and the early 2000s when it was released. As a consequence of this,many of the assumptions and virtualization techniques backed into it are nowsuperseeded by new hardware features, that make virtualization moretransparent from an OS point of view. This talk provides an overview on the different kind of guests supported byXen and how these new hardware features are used in order to improve andevolve them. It also describes the design and implementation of a new guesttype, called PVHv2, and how it can be used as a control domain (Dom0).

uk: вхід без авторизації

name: Towards a HVM-like Dom0 for Xen: reducing the OS burden while taking advantage of new hardware features


uk: Комп'ютерні науки

description: Nowadays Trusted Platform Module is present in most computers, and it ismaking its way into embedded platforms as well. In this talk I will explainhow to use the (firmware)TPM2.0 available on the Minnowboard MAX/Turbot (seealso https://fb.me/MinnowBoardMax and https://fb.me/MinnowBoardTurbot) foreveryday's encryption (https://fb.me/tpm2-openssl) Even though TPMs are cryptographic processors, it is surprisingly hard to usethem for common cryptographic operations like signatures and decryption. Moreover, as opposed to its predecessor TPM1.2, TPM2.0 gets a very littlesupport in Linux and the TGC Software Stack has no support for the most commonencoding formats (e.g. PEM and DER).

uk: вхід без авторизації

name: TPM2.0 practical usage: Using a firmware TPM 2.0 on an embedded device


uk: Комп'ютерні науки

description: Transaction tracing is typically thought of something that only developers dowhen they need to troubleshoot a piece of their software. And lately, it’salso been used for tracing microservice-based transactions too. These are really useful capabilities, but what if you could profileeverything? Yes everything - software functions, microservice calls, fileaccess, network requests, even bash scripts. How would this change your viewon your systems? How would this enable you to better understand what yoursoftware is actually doing? In this talk I’ll show you how to trace everything using open source sysdig.We’ll cover: \- How to trace everything from a method in your software, aservice call, a network request, a shell command execution, a script, and more\- How to report on your traces to make the most sense of the data \- Usereal-world examples of tracing that show its benefits

uk: вхід без авторизації

name: Trace Everything: When APM meets SysAdmins


uk: Комп'ютерні науки

description: While small updates normally don't disturb the services running on yoursystem, bigger or intrusive updates can break your running services orDesktop. There are different ways of doing transactional updates like newpackage formats or different partitions. This talk will show how to use thefeatures of btrfs for this with traditional package managers. Applying small updates is normally no problem in a running system. But whatabout if there is a new major release of your favorite Desktop? Or a majorversion update of your used Linux distribution? Today’s concepts are most ofthe time to apply the patches in the running system and risk that a runningservice or Desktop breaks, or apply them all by booting an installation mediaand wait for quite some time until you can access your machine again. Asolution for this are transactional updates. Transactional updates are atomic, means either they applied successful, or ifan error occurred, you have the same state as before. And if an update doesnot work, there is an easy way to go back to the last working state. There are different solutions for this, some require new package formats,other require a second partition and you can switch during the next reboot tothe other partition. I want to present a third solution: using a standardpackage manager and leverage btrfs for this. With snapshots and rollback onbtrfs, there is already everything available what you need. This talk willgive a short introduction into snapshots and rollback with btrfs and show howto combine and use this technologies to your advantage.

uk: вхід без авторизації

name: FOSDEM 2017 - Transactional Updates with btrfs: Don't take the system down


uk: Комп'ютерні науки

description: Let's look at how to migrate a legacy PHP application to a modern scalable setof services. The presentation will focus on best practices, pitfalls to avoid,and tools that will help you to safely achieve this long-term task. We'll alsogive some hints to move further to a fully micro-services environment.

uk: вхід без авторизації

name: Transform your monolith into a nice SOA app


uk: Комп'ютерні науки

description: Internet Transport is changing, some changes have been incremental updates tomechanisms (e.g., RACK, BBR), others demand new protocol options (e.g., MPTCP)or entirely new protocols (e.g., QUIC, SCTP). However significant changes arestill difficult to deploy - requiring modifications to application code andsupport by the stack. Even when updates happen, the network needs to supportthe new method to allow applications to use it. Long deployment times havemotivated the need to change how protocols are handled in the stack. We reviewthe state of the art in Internet Transport, and the status of deployment in thBSD's and then propose a new direction for the transport interface, developedin the EU NEAT Project, that can ease deployment of new transports across allplatforms. We conclude by showing the advantages and its prospects forstandards adoption.

uk: вхід без авторизації

name: neat - Transport Evolution on top of the BSD's


Troubleshooting Kubernetes

uk: Комп'ютерні науки

description: Kubernetes is a tremendous system for orchestrating your containers ontophysical infrastructure. But troubleshooting Kubernetes can be incrediblychallenging due to the dynamic and isolated nature of the containers itorchestrates. Sysdig leverages the powerful concept of container-aware systemevents and correlates each one of them with super rich metadata Kubernetes. In this session we’ll go deep into a real Kubernetes issue involving wget,search domain, glibc, SkyDNS and etcd, and we’ll see how to track them downusing Sysdig. Kubernetes is a tremendous system for orchestrating your containers ontophysical infrastructure. But troubleshooting Kubernetes can be incrediblychallenging due to the dynamic and isolated nature of the containers itorchestrates. Sysdig leverages the powerful concept of container-aware systemevents and correlates each one of them with super rich metadata Kubernetes. In this session we’ll go deep into a real Kubernetes issue involving wget,search domain, glibc, SkyDNS and etcd, and we’ll see how to track them downusing Sysdig.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: tslib is a more than 14 years old library that reads your touchscreen's inputin order to help you optimize it for you. It took a break but now it's back. * where does tslib come from? (pre-uinput days) * what does it do? * why still use it? * the state of multitouch * let's bring it back to debian (it's only in wheezy)

uk: вхід без авторизації

name: tslib - the touch screen access library is back


uk: Комп'ютерні науки

description: You have no hardware knowledge and want to know how people design chips ? Youare a software guy, having heard of VHDL or Verilog but never used it ? Inthis 25 min tutorial, you will learn the basis of hardware design and how towrite a simple FPGA design using only FOSS tools. (This tutorial is not aboutPCB design, but reprogrammable chips design)

uk: вхід без авторизації

name: Tutorial: my first hardware design: Basic course to create a simple FPGA design using OSS tools


uk: Комп'ютерні науки

description: Presentation of the original vision of the Twitter Stream Importer, from startto current situation with "experience feedback". If possible showing a demoreal-time and "open discussion" about improvement on going, visualisationusage etc... Since some years now, the particularity of Twitter is to be "reactive" or realtime compare to other Social Network. The massive stream of data generated by some events (going from Tv shows tomore serious event) can't be digested with traditional tools (Twittdecketc...). The visual representation of a twitter activity could help to revealinsights on a running topic. Graph allows to contextualize and visualise theinteraction between users and thematic within this topic. To do that, the Twitter Stream Importer brings tools to start tracking a topicand visualise data with different "Network logic" that act like a particularprojection of the data. The integration within Gephi then, makes easy to usethe integrated tools (statistics, filter, exports) to works easily on yousubject. We will see what are the main concept, what are the pro and cons and thefollowing evolution of the plugin.

uk: вхід без авторизації

name: Twitter Streaming Importer: Real Time Graph with Gephi


Unbreakable unit tests

uk: Комп'ютерні науки

description: How often have you rewritten your unit tests from scratch just because thecode it was testing evolved slightly? In this session we will explore someunit testing techniques from other languages to produce more robust tests inPHP. You’ll never have to send your unit test to the trashcan again.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: JESD204B is a industry standard for interfacing high-speed converters (ADC,DAC) to logic devices (FPGA, ASIC). This presentation will give a introductionto the JESD204B standard which is gaining increasing adoption in SDR solutionsto connect the RF-fronted device to the processing device. JESD204B is a industry standard for interfacing high-speed converters (ADC,DAC) to logic devices (FPGA, ASIC). Software-defined-radio solutions follow a trend of ever increasing channelbandwidth and diversity (e.g. MIMO). Another trend is the transition fromzero-IF to direct-IF, which bypasses the analog modulator and samples the fullspectrum up to the desired signal. Both of them require additional datathroughput rates which can reach the limits of more traditional interfaceslike CMOS or LVDS. The JESD204B standard has been designed to overcome theserestrictions and allow higher throughput data rates between the converter andthe logic device. It is as such not surprising that to accommodate theincreased data rate demands of such solutions JESD204B is often adopted, bothfor discrete as well as integrated RF designs. In addition to specifying the physical layer the JESD204B specification alsohas a protocol layer defining data mapping and encoding as well as standardmethods for commonly needed features like data integrity checks, multi-chipsynchronization and deterministic latency. This presentation will provide an introduction to the JESD204B standard in thecontext of software-defined-radio explaining how the different layers insidethe JESD204B standard interact, giving developers a understanding of how tosetup and configure a JESD204B system.

uk: вхід без авторизації

name: Understanding JESD204B: High-speed inter-device data transfers for SDR


Using a generic distro to redefine IoT

uk: Комп'ютерні науки

description: Generic distributions such as Fedora, CentOS, RHEL and others have welldefined update and security mechanisms as well as other processes that havebeen established and proven to work over a multiple decades. How can we makeuse of these positives of distributions along with modern tools andtechnologies to produce a secure, stable, scaleable OS for IoT products?

uk: вхід без авторизації


uk: Комп'ютерні науки

description: After 25 years of copyleft enforcement and compliance work, is copyleftsucceeding as a strategy to defend software freedom? This talk explores thehistory of enforcement of the GPL and other copyleft licenses, and considersthis question carefully. Attendees who have hitherto not followed the currentand past debates about copyleft licenses and their enforcement can attend thistalk and learn the background, and can expect to learn enough to providesalient and informed feedback of their own opinions about the processes behindupholding copyleft. The [first GPL enforcement action was done by Richard Stallman against NeXTComputers in 1989](https://www.gnu.org/philosophy/pragmatic.en.html),regarding Objective C support in GCC. For 25 years, GPL enforcement hasremained a regular but rarely mainstream activity in Open Source and FreeSoftware projects. Very few projects enforce their[copyleft](https://copyleft.org/) licenses; most live with regular violationsand merely ignore them, or simply beg violators to comply. Even under the now-published and publicly discussed [Community Principles ofGPL Enforcement](https://sfconservancy.org/copyleft-compliance/principles.html), co-drafted by Software Freedom Conservancy andthe Free Software Foundation, GPL enforcement is regularly criticized andquestioned. Those of us who enforce the GPL get wildly inconsistent feedbackfrom the community: some copyright holders recruit organizations likeConservancy and FSF to enforce as much as possible, others often complainingthat we simply don't enforce enough, and still others call for a completemoratorium on GPL enforcement. Meanwhile, not all enforcement abides by community principles. For-profitenforcers, who have existed for decades, use copyleft licenses in a manner notintended by the license drafters: to captiously convince "customers" that theymust buy proprietary licenses, or otherwise pay, to incorporate Open Sourceand Free Software into their products. This complex landscape has become almost impenetrable for the average FLOSSdevelopers who merely wish their code to remain forever free and libre. Thistalk will provide the basic history and background information about the stateof copyleft in our community, and set the stage for all developers to giveinformed feedback to organizations that stand up for copyleft.

uk: вхід без авторизації

name: Understanding The Complexity of Copyleft Defense: After 25 Years of GPL Enforcement, Is Copyleft Succeeding?


uk: Комп'ютерні науки

description: Increased uses of cryptography in web environments, particularlyauthentication, have driven a set of new RFCs: JSON Object Signing andEncryption. While these standard data formats have dominated web-basedapplications, they also have further applicability in a wide variety of non-web contexts. This talk will introduce you to José, a plug-able, open source Cimplementation of these RFCs which provides both an API for direct integrationand a usable command-line interface. We will discuss the techniques that weused to keep our API usable across all the possible input parameters and showexample of how you can implement José in your own infrastructure. We will alsodiscuss some of our plans for the future, including how you can helpcontribute.

uk: вхід без авторизації

name: Usable Cryptography with José: C and command-line JSON Object Signing and Encryption


uk: Комп'ютерні науки

description: The guile implementation of scheme provides a Turing complete languageenabling any computable problem to be solved. In the community however thereis a perception that scheme is not suited to user interface applications. Thistalk discusses why that perception exists, and aims to counter it bypresenting an example of graphical user interface application using guile-ncurses which may be used to configure and install the GuixSD operating systemon a bare computer. The structure of the program will be briefly presented, how it uses the guile-ncurses library and issues which were encountered during its development

uk: вхід без авторизації

name: User interfaces with Guile and their application


uk: Комп'ютерні науки

description: Now, when many IT-related services are delegated to external parties,government, medical, financial, and other organizations need tight tracking ofwhat users and administrators do on their critical systems. Up to recordingeverything they see on the screen, the commands they execute, and files theyaccess. In this presentation Nikolai Kondrashov will review available solutions foruser session recording, open-source and otherwise, their benefits andshortcomings, and will present a new effort to create an integrated Open-Source solution. While there are many capable solutions for session recording, which cancentrally collect, search and playback sessions, there is no such open-sourcecode. The best we have is jump servers with script(1), or sudo I/O logging,all manually set up. This presentation will show an approach that would meetthe needs of the modern enterprise. The presentation will include a demo of a user session and accompanying databeing recorded, stored centrally, inspected and played back. The intended audience is developers of security, identity and policymanagement systems, as well as system administrators and security officersresponsible for maintaining critical systems and preventing insider attacks.

uk: вхід без авторизації

name: User Session Recording for the Enterprise: An Open-Source Effort by Red Hat


uk: Комп'ютерні науки

description: BigBench is the brand new standard for benchmarking and testing Big Datasystems. This talk first introduces BigBench and how problems can it solve.Then, presents both Hive and Spark benchmark results with with theirrespective 1 and 2 versions under different configurations. Results arefurther classified by use cases, showing where each platform shines (ordoesn't), and why, based on performance metrics and log-file analysis. BigBench is the brand new standard (TPCx-BB) for benchmarking and testing BigData systems. The BigBench specification describes several application usecases combining the need for SQL queries, Map/Reduce, user code (UDF), MachineLearning, and even streaming. From the available implementation, we can testthe different framework combinations such as Hadoop+Hive+Tez (with Mahout) andSpark (SparkSQL+SparkML) in their different versions and configurations,helping us to spot problems and possible optimizations of our data stacks. This talk first introduces BigBench and how problems can it solve. Then,presents both Hive and Spark benchmark results with with their respective 1and 2 versions under different configurations including: Tez, LLAP, and fileformats. Experiments are run on Cloud and On-Prem clusters of differentnumbers of nodes and testing data scales, taking into account interactive andbatch usage. Results are further classified by use cases, showing where eachplatform shines (or doesn't), and why, based on performance metrics and log-file analysis. The talk concludes with the main findings, the scalability andlimits of each framework.

uk: вхід без авторизації

name: Using BigBench to compare Hive and Spark: BigBench in Hive and Spark


uk: Комп'ютерні науки

description: ESBMC is a SMT-based context-bounded bounded model checker that aims toprovide bit-precise verification of both ANSI-C and C++ programs. Thepresentation will briefly introduce the tool and then show the usage oflibtooling as a frontend for the tool, including the problems we had duringthe development and what we hope for the future. On the first half of the talk, I'll describe the tool and present someexamples of its usage, including the verification of concurrent programs. I'll then focus on the tool's new frontend, which generates the AST of theprogram using clang's libtooling and converts it to an internal format that'sused for the verification. This second half of the presentation will befocused on the development of the C frontend and the yet to be C++ frontend,including how we had to adjust to the libtooling API. The aim of the talk is to present the difficulties that we faced when movingaway from our frontend to clang, including limitations we found during thedevelopment. I'll end the talk with what we hope for the future, as users ofclang, which translates to easier access to some of clang's internals(specially the static analyser).

uk: вхід без авторизації

name: Using clang as a Frontend on a Formal Verification Tool


uk: Комп'ютерні науки

description: Building and testing is a great use case for containers, both due to thedynamic and isolation aspects, but running in just one machine is not enoughand quickly needs to scale to a clustered setup. But which cluster technologyshould be used? Docker Swarm? Apache Mesos? Kubernetes? how do they compare?All of them can be used to dynamically run a cluster of containers. Building and testing is a great use case for containers, both due to thedynamic and isolation aspects, but running in just one machine is not enoughand quickly needs to scale to a clustered setup. But which cluster technologyshould be used? Docker Swarm? Apache Mesos? Kubernetes? how do they compare?All of them can be used to dynamically run a cluster of containers. The Jenkins platform is an example of dynamically scaling by using severalDocker cluster and orchestration platforms, using containers to run buildagents and jobs, and also isolate job execution. This talk will cover these main container clusters, outlining the pros andcons, the current state of the art of the technologies and Jenkins support. The presentation will allow a better understanding of using Docker in the mainDocker cluster/orchestration platforms out there (Docker Swarm, Apache Mesos,Kubernetes), sharing my experience and helping people decide which one to use,going through Jenkins examples and current support.

uk: вхід без авторизації

name: Using Containers for Building and Testing: Docker, Kubernetes and Mesos


uk: Комп'ютерні науки

description: Traditionally CMSs use SQL databases that are really fast when you need allthe information stored together in a record row, but are a bad fit when youneed to search for relationship patterns that are not already stored togetherin your database. A significant performance penalty is incurred for everyadditional table that needs to be joined for a query. That is why SQLdatabases are notoriously bad at deducting relationships from datasets. Graphdatabases however are really good at this task. In this talk we discusspotential application areas of graph databases in existing open source CMSslike Drupal. We believe graph databases could make a big difference when used in key areaswhere traditionally CMSs would fail: Explore large non-uniform datasets: Neo4jgot a lot of attention after it was used by investigative journalists to[identify the organisations and individuals involved in offshore tax evasionin the Panama papers leak](https://neo4j.com/blog/analyzing-panama-papers-neo4j/). Recommend content: Media companies like [the Financial Times areusing Neo4j to display relatedcontent](https://www.youtube.com/watch?v=k47aC01Uy64 their website, this helps them to increase engagement with higherclickthrough rates. Personalisation: [Addidas uses the Neo4j graph database tocreate it’s internal metadata service](https://neo4j.com/news/adidas-neo4j-customer-experience/), offering access and searchability to their dataand making sense of complex interdependencies and relationships. We've created a basic integration that makes it possible for non-developers towork with Neo4j. Combined with Drupal’s content modelling capabilities webelieve it could be a powerful tool for people to explore graph databasesusing a GUI. There is also a case to be made for the use of graph databases inthe Drupal ecosystem: sites that already use Drupal could benefit from itscapabilities.

uk: вхід без авторизації

name: Graph dbs 6 CMSs: A match made in heaven


uk: Комп'ютерні науки

description: How can Open Source Software and safety critical systems work together? DFSGmbH relies on Linux for its core air traffic control systems. We havesuccessfully managed to standardize a highly reliable, modular operatingsystem and hardware platform at DFS. In a brief overview we explain the challenges, technical and non-technicalones, we have faced getting to the modular platforms. What approaches did wetake and why? Which ones did work out in the long end? We will cover a broadrange of aspects ranging from hardware life cycles, application lifecycles,regulations, deployment solutions, user acceptance, cost cutting and testing.

uk: вхід без авторизації

name: Using Linux in Air Traffic Control: Hardware and Operating System Platforms


Using LNT to track performance

uk: Комп'ютерні науки

description: Last year, at the 2016 LLVM dev room, I presented ideas on how to improve LNTto make performance tracking of LLVM generated code easier. We've implementedmost ideas since, and we're happy to see that our ideas work out in practice:quite often, understanding the root cause for a performance regression nowtakes about 5 to 10 minutes of work, whereas before it typically took us halfa day to produce all data that is now recorded automatically. I intend to give a demo of how we use LNT at ARM's LLVM teams. I'll alsodiscuss how LNT is useful for other projects that need to track performance ofgenerated code. LNT is starting to be used by at least also some GCC, java jitand even a Verilog-to-C++ compiler teams. I'll also give the necessary pointers on what you need to get started on LNTfor your own projects.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The introduction of non-volatile memory changes how applications, databases,and virtual machines will work in the future. NVDIMM is not simply a fasterblock device. Programs can avoid block I/O entirely and use byte-addressableNVDIMM to benefit from the performance characteristics of RAM. This requiresnew storage APIs that applications must use instead of traditional block I/O. These new programs run successfully inside KVM virtual machines thanks to thevNVDIMM support already available in QEMU. Virtualization offers additionaloptions for managing and using NVDIMM beyond what is available on bare metal. This talk covers the NVDIMM programming model and how KVM virtual machines canuse NVDIMM for faster I/O, reduced memory footprint, and faster boot times. Xiao Guangrong recently gave a talk at KVM Forum covering the ACPI andhardware interface for NVDIMM under KVM. I want to follow that up with a talkfor a wider audience of developers and system administrators who care moreabout the use of NVDIMM than its implementation. This talk covers recent work on NVDIMM in QEMU and focuses on how applicationscan take advantage of this new class of storage device. It is suitable for anaudience interested in storage or virtualization. Most of the concepts carryover to other hypervisors besides KVM.

uk: вхід без авторизації

name: Using NVDIMM under KVM: Applications of persistent memory in virtualization


uk: Комп'ютерні науки

description: How can we secure IoT and provide for a robust single point of access? XMPPPowered by Tigase can provide an easy touchless setup, a single point ofaccess, and secure access to connected devices. Currently the IoT world is a wild west of open devices and insecure access.Given the recent DDoS attack on the eastern seaboard of the US being spawnedby such technology, it may be easy to disregard the IoT as a flash in the pantechnology without much promise. But to do this would be to discount thebenefits the Internet of Things can offer. Using the real time communicationpower and built in security of XMPP, we at Tigase have developed an instantaccess box to serve as a unified device for IoT devices while providing easysetup for your internet connected devices. Consider a home thermostat that is IoT enabled. Currently, the device itselfis forward facing using some sort of HTTP page, protected by a simple passwordchallenge. To be able to access this device while outside your home network,you will need to leave this device exposed to the greater internet. Yourpublicly available IP now has a front door that can be beaten by brute force.Granted, the worst somebody could do in that situation is inflate your HVACbill for a day until you figure out that 18°C is not an appropriate housetemperature. Still, many devices that feature IoT come with very littleunified security built in, and even then may have the most rudimentary ofsecurity built in. XMPP can provide the solution; a single device to unify, secure, and provideaccess to IoT devices in the home.

uk: вхід без авторизації

name: Using XMPP to Connect and secure the world of IoT: XMPP backed IoT


uk: Комп'ютерні науки

description: Come and hack on Valgrind together. Open discussion about small (or big) ideasto improve or change Valgrind. Valgrind developers and users are encouraged to participate either bysubmitting ideas/suggestions or by joining the discussion. And of course bykindly (or bitterly) complain about bugs you find important that are _still__Not_ _YET_ solved for _that_ many years!?@!!! Afterwards we will sit together and try to fix or implement some of the thingsdiscussed. Discuss any kind of possible improvement (technical or functional) toValgrind. If you want to put something on the agenda please send a small description(one or two paragraphs) to the the moderator Mark Wielaard[mjw@redhat.com](mailto:mjw@redhat.com) with in the subject: "FOSDEM devroomdiscuss: ..." If you want to discuss a somewhat larger topic please do feelfree to send two or three slides in advance. Mark will collect ideas/suggestions/... and present these and coordinate thediscussion (and keep track of the time, so every idea will be discussed). Some discussion topic ideas: * Release/bugfixing strategy/policy. * Can we move to git yet? * Valgrind and transactional memory. * Making Valgrind really multi-threaded, parallelising Memcheck, parallelising the rest of the framework, and tools. * Instant leak detector. Modify memcheck to report the last leaked pointer to a block. Integrate "omega" as a memcheck option or omega as a separate tool. http://www.brainmurders.eclipse.co.uk/omega.html * Make Callgrind work sanely on ARM (and PPC). The Callgrind algorithm to track call and return is to be improved to work properly on these platforms. Is there a way to make this better? E.g. by having a fast way working in most cases, and rely on unwind info in the difficult cases. Can we detect at instrumentation time that an instruction is a difficult case? * Packaging valgrind for distros, handling patches, suppressions, etc. * 32-bit x86 vs modern instruction sets (avx, etc.) * VEX is in theory cross-architecture. What would it take to make valgrind cross-arch? How about starting with i686 on x86_64? * Which CPUID is it anyway? Valgrind isn't completely consistent in handling host CPU capabilities vs VEX emulation capabilities. What can we do to improve that? Make it user tunable? * ❮YOUR SUGGESTION HERE!❯ And now is the time on Sprockets when we hack!

uk: вхід без авторизації

name: Valgrind BoF and Hackaton: Open discussion of ideas for Valgrind - and then we hack!


uk: Комп'ютерні науки

description: Valgrind and its different tools are providing a rich set of functionality totrack memory problems such as dangling pointers, memory leaks, raceconditions, etc. In this talk, we will describe some old and new features that help tounderstand what happens in your application. Among others, we will give a demoand/or discuss: * how to use valgrind with your application specific memory pool * how to (interactively) ask Valgrind to describe a piece of memory * some heuristics used by Valgrind to reduce the number of 'possibly lost' leaks with C++ code * ... We will discuss more in detail the concept of execution trees, which will beavailable in the next Valgrind release. An execution tree associates stacktraces of your program with some data. Execution trees allow Memcheck andHelgrind to provide a memory profile of your application. We will show howsuch an execution tree memory profile can be visualised using tools such asMassif visualiser or kcachegrind.

uk: вхід без авторизації

name: Valgrind, the anti-Alzheimer pill for your memory problems


uk: Комп'ютерні науки

description: VEX is the JIT at the core of Valgrind. It unpicks blocks of machine code,hands them off to the tool for instrumentation, recompiles the result, andlinks the instrumented version into the running image. By using a targetindependent intermediate representation, it insulates tools from thecomplexity of the underlying instruction sets. Back in 2003, when the framework was designed, I never dreamt that it wouldend up supporting X86, ARM, POWER, MIPS, S390 and TILEGX in both 32- and64-bit variants. From that perspective VEX has been amazingly successful. Butthe framework is now showing its age. Recent instruction set features(transactional memory, LoadLinked/StoreConditional, wide vectors) have provendifficult to implement. It supports precise memory exceptions only poorly. Andperhaps worst, its simplistic compilation pipeline causes it to generate codethat is uncompetitive compared to other frameworks, particularly DynamoRIO andPIN. In this talk I'll outline VEX's structure, then talk about these problems andwhat can be done about them. And I'd be particularly interested to hearopinions on how much effort, and for which problem areas, should be investedin upgrading it. For the audience, some background in compiler internals and assembly codeprogramming would be helpful, but is not essential.

uk: вхід без авторизації

name: VEX: Where next for Valgrind's dynamic instrumentation infrastructure?


uk: Комп'ютерні науки

description: This talk will present a new method to estimate the bearing of a radiotransmitter with a mobile, single-antenna receiver, and its implementation ona software-defined radio (SDR) testbed. The bearing estimation method relieson the following principle: by considering the signal received at severalpoints along its trajectory, the receiver implicitly creates a virtual multi-antenna array (similarly to synthetic aperture radar systems) that can be usedto estimate the bearing of the radio transmitter. Virtual multi-antenna arrayshave two major differences with conventional multi-antenna arrays: 1) theposition and orientation of each antenna in the virtual array depends on themovement of the receiver and must be estimated; and 2) the local oscillator(LO) offset between transmitter and receiver adds a phase offset to the signalreceived by each “virtual” antenna, which must be estimated and compensatedfor. The first problem is solved by using an inertial measurement unit (IMU),which can provide the relative position and orientation of the receiver forshort time periods. The second problem is solved by expanding the signal modelthat is used in bearing estimation algorithms (such as MUSIC) to account forLO offset. The proposed system is implemented on a USRP-N210 SDR with anexternal high-end IMU and tested in an anechoic chamber. The SDRimplementation is a mixture of FPGA and software development, while some partsof the data are processed off-line. The results show that our method is indeedfeasible, with bearing estimation errors of only a few degrees. We thenpresent the first efforts of an implementation on a USRP-E310 SDR which has anintegrated, lower-quality IMU.

uk: вхід без авторизації

name: Virtual multi-antenna arrays for estimating the bearing of radio transmitters: or How to do synthetic aperture radar with cell phones?


Virtualization on the Hurd

uk: Комп'ютерні науки

description: Virtualization is one aspect of our everyday life where multiserver operatingsystems can shine. Given the right underlying architecture, one gets robustand fine-grained virtualization with little effort and code. Achieving thesame on conventional monolithic systems requires careful and invasive changesto the whole system, and the security merely depends on the implementation athand. This talk describes and demos how both fine- and coarse-grained virtualizationis implemented on the Hurd, and how virtualization helps users gain freedom#0, i.e. the freedom to shape her computation environment anyway she wants.

uk: вхід без авторизації


Virtuozzo: container templates

uk: Комп'ютерні науки

description: openvz containers, how it works and how it looks We'll talk about how Virtuozzo Linux create lightweight virtual environments -containers, preloaded with the Linux distribution and a given set ofapplications. In our approach we use a modified version of the packagemanagement tools, i.e yum, dpkg, zypper for creating caches and file systemimages, which need for the fast deployment and for package management inalready deployed environments. In this presentation we will look at theadvantages and disadvantages of our approach compared to other solutions -such as templates and Docker Lxc.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Why settle for boring numbers and static graphs to describe your project whenyou can dynamically display the movements and activity within your project?Gource is a flexible open source tool that can be used to display activityfrom your repositories using a video visualization that people love! Gource is an amazing and flexible open source tool that can be used to displayactivity from your repositories using a video visualization that people love! With this flexibility comes a dizzying array of options and configurations.This talk will show some of the more useful options within Gource to help youselect the ones that will work best for your project. Gource can also be usedto display non-repository information (bug trackers or mailing lists) usingthe custom log format. Other topics include related tools, generating videofiles, and more. The goal is for you to walk away from this talk with ideas and techniques forhow to create awesome videos showing the activity within your open sourceprojects and communities.

uk: вхід без авторизації

name: Visualize Your Code Repos and More with Gource


uk: Комп'ютерні науки

description: The workloads and scenarios for virtual machines grow more complex every year.So do the interactions, availability, and performance requirements. All thatrequires the administrators to carefully plan where to start the VMs thatdepend on each other and/or specific hosts. This talk will present the concepts that allow the administrator to expressthe rules for affinity between virtual machines and between virtual machinesand hosts to form complex relationships that will cover for example: * licensing rules - limiting group of VMs to only use certain hosts * overhead - web + database VMs running together * performance - eg. storage VMs running on hosts with better IO performance * failover recovery - VMs returning to “their” hosts * reservation - There is place for only one of us! oVirt is an open source project for managing virtual data centers that willnow help the administrator with exactly the above tasks. We have introducedthe virtual machine affinity feature in the past and a huge improvement inthat area is coming right now. And the best part is that all this works in a fully dynamic environment withautomatic conflict resolution and no manual management of host pinning rules,saving the administrator his precious time.

uk: вхід без авторизації

name: VM: Hey VM, can I share a host with you?: Affinity rules in a virtual cluster


uk: Комп'ютерні науки

description: A recording of a presentation from Nick Car for the June 2018 AVSIG meeting.

uk: вхід без авторизації

name: The G-NAF vocabularies – current technical SKOS vocab publication approaches

Australian Research Data Commons (ARDC)

addressCountry: AU

addressLocality: Melbourne

addressRegion: Victoria


Web Development and Perl 6

uk: Комп'ютерні науки

description: Long before Perl 6 was declared stable, people have started exploring webrelated technologies. They have started to write libraries and frameworks.This talk gives an overview of what's there, what's missing and how to bridgethe holes.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: With Mozilla shutting down its Persona web login service in late 2016, apretty decent solution for logging into small websites became unavailable. Theproblem that Persona set out to solve is not gone, we still need solutions tolog into all kinds of sites without a few central and big players analyzingall data about when and where we log in. I ran into that issue for my sites[as documented in myblog](https://home.kairo.at/blog/2016-10/the_neverending_question_of_login_system)\- this talk will discuss the problem itself and my solution to it. This mayinclude opening up some source code to the public!

uk: вхід без авторизації

name: Web Logins after Persona: How I solved logins on my small websites


uk: Комп'ютерні науки

description: Introduction to Computer Vision via WebCam game example. * Try WebCam game during presentation * Understand, how motion detection works with the help of `OpenCV` libraries * Understand, the problem of low lighting and noise * Hear real-world example of using WebCam games * Fork and create your own WebCam game ### Who should attend * _[Mostly]_ **Software developers** , especially with the background of `C`/`C++` or willing to learn `OpenCV` – because speaker would be illustrating principles, how his game works, so later you could (fork and) create your own version. * **Project managers and entrepreneurs** , because some business cases would also be discussed * **Bored people** , who just want some interactive game during the presentation. ### Back-story for the presentation * Colleague from HR: _I found a video about augmented gaming climbing wall, would it be hard to implement something like it_. * _Well... I was playing with similar technology some time ago_ – answered. Found my **6 years old project** and to my surprise – it **was still working** (actually spent about an hour to install dependencies and fix `include` values). That is what _backward-compatible_ open source software really means :) **WebCam based games still gives _WOW_ effect** (still trending, still looksnew). **But why it is not mainstream after 6 years?** To answer that question,lets dig into some implementation and bussiness use cases. ### Content of the presentation/DEMO * **Introduction** : LIVE demonstration of WebCam based game: Yes – audience could play from their seats by moving their hands :) * **Business case** : Why not mass production? Example: advertisement for IT recruitment and meetups * **Implementation details** : rocket science or comparing pixels (visual debugging info would be shown, while others are playing)? The problem of lighting and noise. * **Discussion/question** : Why not mainstream: hardware problems, trend to (not) learn `C`/`C++`, difficulty of `OpenGL` lighting (if there would not be other questions)

uk: вхід без авторизації

name: WebCam based games: OpenCV in practice: example for developers and business


uk: Комп'ютерні науки

description: After introducing the Kinto project I am working on, I will explain why pushnotifications can be useful in the web environment and how I integrated theweb push API in Python in Kinto as well as on the client using serviceworkers. What is Kinto? Kinto is a minimalist JSON storage service with synchronisationand sharing abilities. It is easy to use and to self-host. Kinto is used anddeveloped at Mozilla and released under the Apache v2 licence. Why use Kinto? Kinto lets you focus on writing great user-facing interfacesand takes care of storing, sharing and synchronizing your application statewith multiple devices or users. It is often a big deal for developers todevelop web APIs that handle CORS, are secure, respect users privacy bysupporting encryption when building applications that work offline, store dataremotely, and synchronise across devices. Existing solutions either rely onbig corporations that crave user data, or require a non-trivial amount of timeand expertise to develop a new server for every new project. We want to helpdevelopers focus on their business logic and value proposition, and we don’twant the challenge of storing user data or developing backends to get in theirway. The path between a new idea and deploying to production should be short!Also, we are firm believers of the fact that data belongs to users, and notnecessarily to the application authors. Applications should be decoupled fromthe storage location, and users should be able to choose where their personaldata is stored. The backend can often be universal, generic and reusable. Weenvision mutualisation of services and self-hosting: the backend is deployed,secured and scaled only once for several applications, which is amazing! Why Web Push? Push notifications allow users to opt-in to timely updates fromthe sites they love and allow you to effectively re-engage them with not onlycustomized and engaging content but also enable real time interactions withother users of the application, realtime updates and real time data sharingthrough websockets With Web Push, the notification payload is encrypted by theserver sending the notification which makes it really secure and privacyaware. Web push is a browser API feature so that you don't need to pay or todeploy anything on the server side to have it working out of the box. HOW TO PUSH: What is a service worker? A service worker is a worker working in thebackground of your browser that can handle events for a given origin and path.It takes the form of a JavaScript file that can control the web page/site itis associated with. They will also allow handling of push notification eventsand background sync APIs. Service workers keep working after the page orwebsite is closed and between browser restarts. How to use push notifications? On the client side, it means to setup a serviceworker and to get a subscription for the user browser. The resultingPushSubscription includes all the information that the application needs to beable to send a push message: an endpoint and the encryption key needed forauthenticating and encrypting the data. What is the Kinto Push Service? In the Kinto use case, all users of the sameweb application will probably want to receive notifications informing themabout the creation, updation or deletion of a collection or a record fromanother device. Each device will have its own subscription endpoint andencryption key and the payload will need to be sent to each one of them. Myproject was about creating a service that can handle subscriptions managementand notification broadcast for a given channel. When the web applicationstarts, it will start a service worker that will be configured to receive pushnotification and sent them back to all the active browser pages of the webapplication. The application will call the push service to register the pushsubscription on some events. A Kinto plugin will be triggered each time theapplication collection changes and it will call the ‘send the notifications’on the push service channel. The push service will get the notification,encrypt it and publish it to all the subscriptions for that user. Role of the PushAPI: \- So, once you’ve got the permission for notifs,registered the service worker and suscribed to push notifs! Congratulations,major breakthrough has been achieved already. \- Send the endpoint associatedwith the subscription and generate a client public key(PushSubscription.endpoint and PushSubscription.getKey()) to the server so itcan send push message when required. \- Using the Channel Messaging API set upa new message channel (MessageChannel.MessageChannel()) to communicate withthe service worker and by calling Worker.postMessage() on the service worker,in order to open up the communication channel. \- On the server side, storethe endpoint and any other required details so they are available when a pushmessage needs to be sent to a push subscriber. In a production app, it needsto be…

uk: вхід без авторизації

name: Webpush Channels: The pub-sub channels based push service...


WebRender: overview

uk: Комп'ютерні науки

description: A technical talk about the web rendering architectures of today and tomorrow.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The session will look at the issues developers run into when developing theirown WebRTC applications. It looks at the problematic elements in the API, thecompatibility problems between browsers, missing infrastructure, and even thehuman element. All in all, it's a demonstration that a true WebRTC applicationcan't be built in a snap. Last year, I presented a talk explaining how easy it is to build a WebRTCapplication. This year, I'll tell you the truth! It will cover both the ideas and code necessary to move your basic applicationinto something that resembles production-ready.

uk: вхід без авторизації

name: WebRTC - Low barrier to entry. Low barrier to exit?


uk: Комп'ютерні науки

description: In the modern real time communication world, WebRTC is being paired withmultiple channels and services to provide an unparalleled customer experience.Utilizing automated speech recognition allows us to build advanced assistiveservices such as real time captioned phone calls for hearing impaired people,simultaneous translation tools and automated bot assistants. All of that canbe achieved leveraging modern open source software such as Adhearsion, theRuby telephony application framework, FreeSWITCH, Flite, PocketSphinx and(optionally) external APIs such as IBM Watson. Our experience in developingthat kind of service will be presented and discussed, plus code samples and alive demo. Wrapping FreeSWITCH's WebRTC capabilities with Adhearsion acting as the calllogic and the "glue" between parts makes creating rich ASR-enabledapplications easier. Adhearsion allows you to leverage the full power of Rubyto access APIs, send messaging and updates, and use databases. IntegratingFreeSWITCH with third party APIs who do not provide a direct interface, suchas IBM Watson and Wit.ai, through Adhearsion and Ruby. ASR and sentimentanalysis will provide our IVRs with an unparalleled ability to not onlyunderstand what callers say, but also what their desires and intent are.Dialplan applications can be complex to set up to use those APIs, and webapplications are not well suited to that type of application. Adhearsion, theRuby voice application framework, makes it easy and fun!

uk: вхід без авторизації

name: WebRTC and speech recognition services with Adherasion


Welcome to FOSDEM 2017

uk: Комп'ютерні науки

description: FOSDEM welcome and opening talk. Welcome to FOSDEM 2017!

uk: вхід без авторизації


Welcome to the Ruby Devroom 2017

uk: Комп'ютерні науки

description: Welcome to the Ruby Devroom 2017

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This will constitute the traditional ceremonial introduction of the Backup andDisaster Recovery devroom

uk: вхід без авторизації

name: Welcome Word Backup and Disaster Recovery devroom: Introduction and welcome word


uk: Комп'ютерні науки

description: A short introduction of the devroom and some warm words.

uk: вхід без авторизації

name: Welcome to the Microkernel and Component-based OS devroom


uk: Комп'ютерні науки

description: The FOSDEM Networking team has managed the network for FOSDEM since its earlydays. Through our time operating this network, we have learned a few thingsabout keeping networking up for a large group of highly-connected hackers,without an SDN controller managing the network. We discuss how you can get traffic and monitoring information out oftraditional routers and how to program them using NETCONF/YANG.

uk: вхід без авторизації

name: What do you mean ’SDN’ on traditional routers?


uk: Комп'ютерні науки

description: Monitoring can mean very different things to different people, and this oftenleads to confusion and misunderstandings. There are many offerings both freesoftware and commercials, and it's not always clear where each fits in thebigger picture. This talk will look a bit at the history of monitoring, andthen into the general categories of Metrics, Logs, Profiling and Distributedtracing and how each of these is important in Cloud-based environment.

uk: вхід без авторизації

name: What does "Monitoring" mean?: Let's Stop Talking Past Each Other


uk: Комп'ютерні науки

description: When Free and Open Source Software (FOSS) are becoming more broadly deployed(sometimes as part of proprietary systems) amongst organisations who havelimited pre-understanding of the philosophy underlying FOSS there are a numberof challenges which need to be successfully addressed. Such challenges includelicensing obligations for FOSS and a number of associated legal issues, suchas patents, trademarks, procurement law, and various conditions (e.g. FRAND-terms) for use of standards. Many companies and public sector organisationsstruggle with these challenges and there are sometimes tensions and legaldisputes between different interests, which may involve organisations andindividuals contributing to specific open source projects. This panel seeks to address the following overarching question: Which are thecontemporary legal and policy challenges needed to be better understoodthrough systematic research studies, and what relevant studies should bedesigned and conducted in order to produce relevant research results as wellas practical outcomes in order to shed light on these challenges? The (45 minutes) panel will start with short position statements by thepanellists and a dialogue between them. Significant time will be allocated toan open discussion on the issues with the audience, and those attending areinvited to raise their own concerns and share their own experiences. When Free and Open Source Software (FOSS) are becoming more broadly deployed(sometimes as part of proprietary systems) amongst organisations who havelimited pre-understanding of the philosophy underlying FOSS there are a numberof challenges which need to be successfully addressed. Such challenges includelicensing obligations for FOSS and a number of associated legal issues, suchas patents, trademarks, procurement law, and various conditions (e.g. FRAND-terms) for use of standards. Many companies and public sector organisationsstruggle with these challenges and there are sometimes tensions and legaldisputes between different interests, which may involve organisations andindividuals contributing to specific open source projects. This panel seeks to address the following overarching question: Which are thecontemporary legal and policy challenges needed to be better understoodthrough systematic research studies, and what relevant studies should bedesigned and conducted in order to produce relevant research results as wellas practical outcomes in order to shed light on these challenges? The (45 minutes) panel will start with short position statements by thepanellists and a dialogue between them. Significant time will be allocated toan open discussion on the issues with the audience, and those attending areinvited to raise their own concerns and share their own experiences. About the panellists: Björn Lundell (Ph.D.) is a senior researcher at the University of Skövde,Sweden. Associate Professor Björn Lundell (Ph.D.) is a senior researcher at theUniversity of Skövde, Sweden. He leads the Software Systems Research Group,has conducted research related to free and open source software for a numberof years and participated in a number of research projects in differentleading roles. His research is reported in over 100 publications in a varietyof international journals and conferences. He was the program co-chair for the8th and 12th International Conference on Open Source Systems (OSS 2012 and OSS2016) and is the project leader for the collaborative research project LIM-IT(www.his.se/lim-it), which address fundamental FOSS challenges incollaboration with several industrial partners. Dr. Matthias Stürmer is head of the Research Center for Digital Sustainabilityat the Institute of Information Systems at University of Bern since 2013. As apost-doc he is researching, teaching, and consulting on digitalsustainability, open source software, open data, open government and ICTprocurement. Previously he worked as IT advisory manager at EY (Ernst & Young)and as project leader at Liip AG, a Swiss software company creating agileInternet solutions based on open source technologies. In 2009 Matthiasfinished his doctoral dissertation at the Chair of Strategic Management andInnovation at ETH Zürich focussing on open source communities and firminvolvement. He studied business administration and computer science atUniversity of Bern until 2005 (lic.rer.pol) and wrote his master thesis onOpen Source Community Building. Currently Matthias Stürmer is president oftcbe.ch ICT Cluster Bern, member of the board of the open source associationCH Open, co-founder and member of the board of Opendata.ch, and secretary ofthe Swiss Parliamentarian Group for Digital Sustainability. Since 2011 he ismember of the city parliament of Bern having initiated the increased use ofand contribution to open source software in public administration and schools. Andrew Katz is a UK-based lawyer specialising…

uk: вхід без авторизації

name: Panel: What legal and policy issues concerning FOSS need to be systematically researched?


uk: Комп'ютерні науки

description: TruffleRuby runs Optcarrot 9 times faster than MRI 2. TruffleRuby is new optimizing implementation of Ruby. Optcarrot is a NESemulator. MRI 3 targets to run Optcarrot 3 times faster than MRI 2. We willexplore the techniques which allow TruffleRuby to achieve high performance inOptcarrot. TruffleRuby runs Optcarrot 9 times faster than MRI 2. TruffleRuby is new optimizing implementation of Ruby. Optcarrot is a NESemulator. MRI 3 targets to run Optcarrot 3 times faster than MRI 2. We willexplore the techniques which allow TruffleRuby to achieve high performance inOptcarrot. We’ll discuss splitting, inlining, array strategies, Procelimination, etc.

uk: вхід без авторизації

name: What makes TruffleRuby run Optcarrot 9 times faster than MRI?


uk: Комп'ютерні науки

description: In 2016 Mozilla did a qualitative exploration project into the experiences andmotivations of community members from several different open source projects. The results have been crucial in understanding what we are doing well, not sowell and what others are doing better in open source engagement. The presentation will go through the identified motivations and experiences aswell as present the 4 persona's that were developed. The research will giveyou concrete understanding of how people engage with new open sourceopportunities and set examples for how to use the research in your owncommunity work.

uk: вхід без авторизації

name: We're building a better internet: Our mission is to promote openness, innovation & opportunity on the Web


uk: Комп'ютерні науки

description: One of the most well-known writers of literature, J.K. Rowling is a master ofstorytelling. What you might not have guessed is that open source and J.K.Rowling have something in common. The importance of storytelling in opensource projects is as important as some of Rowling's famous characters inHarry Potter. In this session, speaker Justin W. Flory introduces the role ofstorytelling in open source projects and how to uncover that narrative. Therea variety of tools and methods that can be used to help tell the story ofproject, particularly with data analysis. By the end audience members willunderstand the role of crafting the story of their open source project and howit motivates the community, what methods are available for writing this story,and what the outcome of focusing on storytelling results in. J.K. Rowling has an ability to see a story and bring it to life throughpowerful methods of storytelling. But what you might not have guessed is thatopen source and J,K. Rowling both have something in common. The importance ofstorytelling in open source projects and communities is as important as someof Rowling's famous characters in Harry Potter. Finding ways to derive thestory of a project community from lines of code, commit messages, and IRCconversations is a challenging but worthwhile task. In this session, speaker Justin W. Flory introduces the role of storytellingin open source projects and how to best uncover that narrative. There are avariety of tools available to project communities to help them extract data toperform an analysis and mix of methods you can use regardless of what data youhave available. Justin pulls from his experience as one of the foundingmembers of the Fedora Community Operations team, working with team memberswith backgrounds in writing and data analysis, and the editor-in-chief of theFedora Magazine. By the end of the session, audience members will understand the role ofcrafting the story of their open source project and how it motivates thecommunity, what methods are available for writing this story, and what theoutcome of focusing on storytelling results in.

uk: вхід без авторизації

name: What open source and J.K. Rowling have in common: Importance of storytelling in open source projects


uk: Комп'ютерні науки

description: This talk will give an overview over the last 2 years of the GStreamer projectand gives an outlook into the future. It is targeted at both applicationdevelopers and anyone interested in multimedia on the Linux desktop andelsewhere. GStreamer is a highly versatile plugin-based multimedia framework that catersto a whole range of multimedia needs, whether desktop applications, streamingservers or multimedia middleware; embedded systems, desktops, or server farms.It is also cross-platform and works on Linux, *BSD, Solaris, macOS, Windows,iOS and Android. Since the last GStreamer status updated at FOSDEM in 2014, there were 4 newmajor releases of GStreamer, packed with lots of new features and otherimprovements for everybody, making the life of application developers,GStreamer plugin developers and also end-users easier and hopefully better. Join us to find out more and why you should care!

uk: вхід без авторизації

name: What's new in GStreamer land: The last 2 years and the future


uk: Комп'ютерні науки

description: Some examples of weird behavior encountered while developing / bug fixing theLibreOffice Calc spreadsheet application.

uk: вхід без авторизації

name: What the Cell?!: Unexpected things happening under the grid.


What to expect from MySQL 8.0?

uk: Комп'ютерні науки

description: GIS development was ramped up in MySQL 5.7, and we expect GIS support to begreatly improved in the coming versions. MySQL 8.0 is still in development,but we're starting to see the first GIS enhancements pushed into developmentreleases. What is new? In which direction is MySQL going? In this talk, we will look at the plans for GIS in future versions of MySQL,and in MySQL 8.0 in particular. We'll cover the big overarching designdecisions, what it means for the future direction of GIS in MySQL, and how ittranslates into implementation of specific new functionality. This talk is both for those that know GIS and would like to know what MySQLcan offer, and for those that know MySQL GIS today and want to know what toexpect in future versions.

uk: вхід без авторизації


When configuration management meet SDN

uk: Комп'ютерні науки

description: In the system administration world, Ansible is a well know tool used to deployand manage systems easily and seamlessly. However, few people know this canalso be used by network engineer to manage manage all kind of switches andnetwork equipement thanks to the flexibility of the agent-less design. This inturn open the doors of automation of the network layer without the disruptionof a complete SDN solution, permitting to adopt modern best practices ofmanagement with small step, and starting the culture change required forembracing SDN. The talk will quickly present Ansible, its principles, and how you can use itto manage a simple server. Then we will go deeper in the topic of network, thephilosophy behind the network modules, their limitations, and how to use them.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The importance of usability activities in free open source softwaredevelopment has been acknowledged in the research literature and practice.However the decentralized and engineering-driven approach of open sourceprojects can conflict with UX methodologies. As these cultures mergedevelopers and designers may be exposed to situations where the values clash.We will review existing academic papers on UX in open source and discuss howthese two philosophies can co-exist in OSS development and how designers canbecome part of the open source community.

uk: вхід без авторизації

name: When Cultures Clash: Integrating UX with FOSS Development


uk: Комп'ютерні науки

description: We know the expression ‘Open Source’; what about ‘Open Design’? How could wedefine ‘Open Design’? Design creative process is not disclosed. The secrecyaround it is of the utmost importance in order to prevent the originalcreations from being stolen. The different stages of the process and thetechniques used are only known by those involved in the design. How could wecall this stance into question and open the creative process? This talk willpresent existing initiatives and thoughts to make Graphic Design and OpenFonts fields more available to the public. First I will introduce graphic designers and typographers who open theirprocess: why do they share their practice? why is it interesting? how and whyis it useful? I will talk about originality and copy: we should not be afraidof copying. Moreover copying can be an opportunity to improve the originaldesign. About Mozilla rebranding: I will point out some suggestions to furtherthat initiative. How could designers take part and get committed? Finally Iwill give designers food for thought to defend their work, explain andcommunicate it, and better collaborate with their team and people who are notdesigners.

uk: вхід без авторизації

name: Typography: Velvetyne Type Foundry & OSP Foundry


uk: Комп'ютерні науки

description: The world of PKI and the interactions between browsers and CertificateAuthorities are very complex these days. We are creating a Trusted ServiceProvider (TSP) to deploy to the public reliable certificates for free, free asin "free beer". What are the requirements to deliver extended validatedcertificates? Why do you have to pay for it? What will be the price? Webelieve that it is one of our principle rights to secure our identity andprivacy in the digital space. You can't buy a basic right but you can organizean environment to make the best use of it. The talk gives an overview of our setup of a new Trusted Service Provider. Theheart of all is a non-profit organization in Austria which will lead somelegal bodies required to operate successfull. This NPO is open for all peoplewho accept the United Declaration of Human Rights. We think this is a keyfactor for success. But a NPO like this is not a Certificate Authority. Weneed another organisation to take over all tasks of a CA which has to pass anaudit with flying colours. A successfull performed audit is the key factor toplay a reliable role in the market. Certificates will be accepted. Trustbetween this CA and the end users will be established. Last but not least amoney flow must be organized. Individuals will get their certificates alwaysfor free. What about organizations? I will point out that a special kind ofassociation will do and will work. The software to operate the CA is developedfrom scratch. Of course the software will be published under a FLOSS license.

uk: вхід без авторизації

name: Why we need a legal framework to operate a Trusted Service Provider successfully: An overview of some internals of our Trusted Service Provider


uk: Комп'ютерні науки

description: When working with BigData & IoT systems we often feel the need for a CommonQuery Language. The platform specific languages are often harder to integratewith and require longer adoption time. To fill this gap many NoSql (Not-only-Sql) vendors are building SQL layers fortheir platforms. It is worth exploring the driving forces behind this trend,how it fits in your BigData stacks and how we can adopt it in our favoritetools. However building SQL engine from scratch is a daunting job andframeworks like Apache Calcite can help you with the heavy lifting. Calciteallow you to integrate SQL parser, cost-based optimizer, and JDBC with yourbig data system. Calcite has been used to empower many Big-Data platforms such as Hive, Spark,Drill Phoenix to name some. I will walk you through the process of building a SQL access layer for ApacheGeode (In-Memory Data Grid). I will share my experience, pitfalls andtechnical consideration like balancing between the SQL/RDBMS semantics and thedesign choices and limitations of the data system. Hopefully this will enable you to add SQL capabilities to your prefered NoSQLdata system. ❯ It will be interesting to see what happens if an established NoSQL databasedecides to implement a reasonably standard SQL; the only predictable outcomefor such an eventuality is plenty of argument. \- NoSQL Distilled, MartinFowler - 2012 The Relational Databases (RDBMS) are an essential component of the computingecosystem. Yet in the past decade we have witnessed a wave of alternative datamanagement technologies often branded as NoSQL and BigData - an ambiguous andlacking prescriptive definition names. To understand the NoSQL/BigData "movement" one need to understand the forcesfueling it: * The rise of Internet (Web, Mobile, IoT...) leading to Data {Volume, Velocity and Variety} challenges * Object-relational impedance mismatch * Cloud computing - Infrastructure Automation and Elasticity * Shift from Integration to Application databases * Data-Value vs. Storage-Cost Economics Shift The various approaches in addressing those challenges have led to a multitudeof over 150 commercially supported NoSQL/BigData platforms. Such diversity means that an organization will adopt a mixture of data storagetechnologies for handling different circumstances (Polyglot Persistence). How does an organization integrate the mix of data technologies? To fill the gap many NoSql/BigData vendors are (or are considering) buildingSQL and SQL-based layers for their platforms. It is worth exploring the driving forces behind this trend ...

uk: вхід без авторизації

name: SQL for NoSQL and how Apache Calcite can help


uk: Комп'ютерні науки

description: WireGuard is a next generation VPN protocol, which lives in the Linux kernel,and uses state of the art cryptography. One of the most exciting recentcrypto-networking developments, WireGuard aims to drastically simplify securetunneling. The current state of VPN protocols is not pretty, with popularoptions, such as IPsec and OpenVPN, being overwhelmingly complex, with largeattack surfaces, using mostly cryptographic designs from the 90s. WireGuardpresents a new abuse-resistant and high-performance alternative based onmodern cryptography, with a focus on implementation and usability simplicity.It uses a 1-RTT handshake, based on NoiseIK, to provide perfect forwardsecrecy, identity hiding, and resistance to key-compromise impersonationattacks, among other important security properties, as well as highperformance transport using ChaCha20Poly1305. A novel IP-binding cookie MACmechanism is used to prevent against several forms of common denial-of-serviceattacks, both against the client and server, improving greatly on those ofDTLS and IKEv2. Key distribution is handled out-of-band with extremely shortCurve25519 points, which can be passed around in the likes of OpenSSH.Discarding the academic layering perfection of IPsec, WireGuard introduces theidea of a "cryptokey routing table", alongside an extremely simple and fullydefined timer-state mechanism, to allow for easy and minimal configuration;WireGuard is actually securely deployable in practical settings. In order torival the performance of IPsec, WireGuard is implemented inside the Linuxkernel, but unlike IPsec, it is implemented in less than 4,000 lines of code,making the implementation manageably auditable. These features converge tocreate an open source VPN utility that is exceedingly simple, yet thoroughlymodern and secure. The presentation will be divided up into several parts. First, there will bean overview of the problems with IPsec, OpenVPN, and other popular VPNs,outlining attacks and weaknesses. Next, the WireGuard idea of the "cryptokeyrouting table" will be introduced, and we’ll walk through several propertiesderived from it. This will transition into a discussion of the timer statemechanism, and how secure protocols are necessarily stateful, but it’spossible to make them appear stateless to the user by exhaustively definingall possible state transitions. Then we’ll get into the hardcore meat of thepresentation: the cryptography and various crypto innovations behindWireGuard. We will discuss the triple Diffie-Hellman, the role of combiningstatic and ephemeral keys, the performance and DoS-potential of Curve25519point multiplication, using a PRF chaining for rotating keys, identity hidingand remaining silent on a network, and clever usage of authenticatedencryption with additional data. We will examine the various attack models,and enumerate the cryptographic mitigations employed by WireGuard. The sumwill be a comprehensive overview of modern day crypto tricks, attacks, anduseful constructions, and how these insights have been funneled intoWireGuard. Finally, we’ll examine the Linux kernel implementation ofWireGuard, seeing how it’s possible to avoid allocations in response tounauthenticated packets as a defense coding technique. During thepresentation, a live WireGuard endpoint will be provided to audience memberswho wish to send packets, whether encrypted, legitimate, malformed, dubious,or otherwise curious. Threaded throughout will be an enumeration of attacks on existing protocolsand cryptographic tricks for their mitigation. My background is in security -- kernels, hardware, reversing, crypto, largenetworks, etc -- and as such I've broken a lot of systems with some noveltricks and protocol insights. WireGuard is motivated by a sort of cornucopiaof clever attacks (crypto and otherwise) against other networks. I made itbecause I wanted something I could actually confidently run on my owninfrastructure, and none of the other tools were nearly up to the task. So,this talk is going to go into depth about real attacks on various protocols,in addition to unveiling some techniques to avoid entire classes of attacks. Finally, since WireGuard is initially implemented for the Linux kernel, therehave been some very interesting considerations to account for with kernelprogramming. Cross platform implementations are also in the works, written inGo and Rust.

uk: вхід без авторизації

name: WireGuard: Fast, Modern, Secure VPN Tunnel


Workflow management with GNU Guix

uk: Комп'ютерні науки

description: Combining programs to perform more powerful actions using scripting languagesseems a good idea, until portability and parallel execution on computingclusters become the main concerns of the script. GNU Guix used GNU Guile as adomain-specific language to describe software packages. In the same way, thecomponents that make up a workflow description can be expressed using GNUGuile. In this talk I would like to present the work I have done to implement asimple workflow language and a workflow execution engine (both in GNU Guile)to run programs on computing clusters.

uk: вхід без авторизації


Working with geodata in Go

uk: Комп'ютерні науки

description: I'm going to talk about some features that we've done recently for one of ourclients "Namba Taxi": * Show nearest available drivers in our mobile app and moving single car on map * Help our partner build traffic jam map based on our data In my talk I want to reveal: * How we collect GPS tracks from driver apps and save mobile traffic * How we implemented lightweight network interaction between the driver app and backend services * What solutions were used for high performance on backend * How we store GPS tracks for client history * How animation of car works inside the client app * How to perform monitoring and ensure that service works fine * Geocoding problems in developing countries with lack of maps data

uk: вхід без авторизації


uk: Комп'ютерні науки

description: A talk to take a user from a basic understanding of the Data Plane DevelopmentKit (DPDK), through writing a simple but functional forwarding application. This is a presentation to introduce users to the Data Plane Development Kit(DPDK) a set of cross platform open source libraries and drivers for fastpacket processing. We will take the user through the steps of building up asimple but functional packet forwarding application, and some tips, tricks,and best know methods of writing an efficient and performant DPDK application. The talks will be approximately 30 mins each (including 5 mins for questions).

uk: вхід без авторизації

name: Writing a functional DPDK application from scratch


uk: Комп'ютерні науки

description: To publish it's documentation, SUSE has developed not only a comprehensiveOpen Source toolchain to create and publish documentation but also an openworkflow that allows community and partners to provide feedback andcontribute. These tools and processes can easily be adopted by other projectsto write high quality software documentation. SUSE has been around as Linux vendor for a long time and from it's early daysonwards, delivered not only software but also the documentation to use it. Infact, SUSE is not only writing the documentation for it's own distributionsbut for upstream projects like OpenStack as well. Over time, the SUSEdocumentation team has developed not only a comprehensive, completely Free andOpen Source toolchain to create, edit, manage, and publish documentation butalso an open workflow that allows community and partners to provide feedbackand contribute. These tools and processes can easily be adopted by otherprojects to write high quality software documentation, everything from a manpage to a reference guide. In this talk, Christoph will introduce the complete SUSE/openSUSEdocumentation workflow and tool chain. It will cover both the technicaldetails like formats, tools, or branching model and the organizational aspectssuch as the feature planning and tracking, distribution of work and feedbackprocess.

uk: вхід без авторизації

name: Writing Open Source Documentation for Open Source Projects: How SUSE is documented and what we can learn from it


WTF my container just spawned a shell

uk: Комп'ютерні науки

description: While there have been many improvements around securing containers, there isstill a large gap in monitoring the behavior of containers in production.That’s why we created Sysdig Falco, the open source behavioral activitymonitor for containerized environments. Sysdig Falco can detect and alert on anomalous behavior at the application,file, system, and network level. In this session get a deep dive into Falco:\- How does behavioral security differ from existing security solutions likeimage scanning? \- How does Falco work? \- What can it detect? Building andcustomizing rules \- Next steps

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Xorn is a recent addition to the gEDA/gaf project. It implements a value-oriented data model which serves as an interface between core functionality,the user interface, and scripts. This talk provides an overview of what the design principles behind Xorn are,which particular technical decisions followed from these, how this has beenimplemented in gEDA/gaf so far and what possible paths of development thisopens up for both gEDA and other projects.

uk: вхід без авторизації

name: Xorn: A new approach to scripting for gEDA/gaf


uk: Комп'ютерні науки

description: Repoman is a tool developed in-house and used as a core tool in oVirt CI andrelease processes. It aids the process of integrating RPM packages frommultiple sources into the single repo. Made to be self-contained, so it iseasy to use from CI. Come and see what our use cases at oVirt are and how weuse repoman to solve them. Being developed with an abstraction in mind itmight be helpful to you too.

uk: вхід без авторизації

name: Yet Another repoman: How We Do CI at oVirt


Prototyping IoT with yocto

uk: Комп'ютерні науки

description: Yocto/OpenEmbedded is a very famous build system for embedded Linux andaccording to the last "IoT developper survey", it's the the most used OS forIoT devices. During the conference, we will describe some advanced Yocto/OEfeatures in order to build a simple sensor based on Raspberry Pi zero. Building a sensor with Yocto could be quite simple. During the conference wewill explain hown to integrate an I²C sensor with Raspberry Pi zero. * setting up Wi-Fi connection * writing recipe for I²C temperature/pressure device control * adding a Linux service to get data from sensor through I²C bus * adding NTP client with Yocto package management (SMART) * building a dedicated distro for the device * adding everything to a new layer (meta-iot)

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Thousands of contributors help building the curl software which runs onseveral billions of devices and are affecting every human in the connectedworld daily. How this came to happen, who contributes and how Daniel at thewheel keeps it all together. This is a description of a small project with a major reach. curl and libcurlcan probably be considered corner stones in a world of client-side Internettransfers and in particular HTTP, running on every imaginable operating systemand CPU architecture in use today. Started in the late 90s, the software nowruns in billions of devices and is quite likely one of the most widely usedsoftware components - any category. Daniel takes us through how it started,how it works and why it never gets done.

uk: вхід без авторизації

name: You know what's cool? Running on billions of devices: curl from A to Z


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Towards Knowledge Graph based Representation, Augmentation and Exploration of Scholarly Communications

Technische Informationsbibliothek (TIB)

addressCountry: DE

addressLocality: Hanover

addressRegion: Lower Saxony


uk: Комп'ютерні науки

description: In der Forschung ist Fortran noch an vielen Stellen anzutreffen. Insbesondere auf Höchstleistungsrechnern ist es nicht wegzudenken. Aber auch moderne Programmiersprachen wie Python erfreuen sich großer Beliebtheit in der Forschung. Damit bewährte Implementierungen nicht neu geschrieben werden müssen, kommt immer häufger ein Mix aus Programmiersprachen zur Anwendung. Das Programm F2x unterstützt dabei, in Fortran geschriebene Software aus anderen Programmiersprachen zugängliche zu machen. Dieser Vortrag versucht den Leidensdruck darzustellen, der schließlich zur Entwicklung von F2x geführt hat, warum das Werkzeug seine heutige Form hat und warum es Spaß macht mit und für Wissenschaftler*innen Software zu entwickeln.

@language: de

uk: вхід без авторизації

name: de-RSE e.V. - Gesellschaft für Forschungssoftware

name: Lebensverlängernde Maßnahmen für Fortran-Codes

Gesellschaft für Informatik e.V. (GI)

addressLocality: Bonn

addressRegion: North Rhine-Westphalia


uk: Комп'ютерні науки

description: Am Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ befasst sich der Arbeitskreis "Softwareentwicklung am GFZ" mit der Erarbeitung von Leitlinien und Hilfestellungen für Software entwickelnde MitarbeiterInnen und kümmert sich um die Etablierung eines offenen Prozesses für einen nachhaltigen Umgang mit Forschungssoftware. Neben der Erarbeitung eines einheitlichen Prozess für die Weitergabe und Zugänglichmachung von Software wird auch an einer Hilfestellung zur Anwendung und Umsetzung von Best Practices bei der Softwareentwicklung, Lizenz- und Verwertungsstrategien für Software und einem Leitfaden für die Publikation von Software gearbeitet. In dem Vortrag sollen die Arbeit und Ergebnisse des Arbeitskreises vorgestellt werden.

uk: вхід без авторизації

name: Rahmenbedingungen für einen nachhaltigen Umgang mit Forschungssoftware am Helmholtz-Zentrum Potsdam - Deutsches GeoForschungsZentrum GFZ


uk: Комп'ютерні науки

description: Während viele Fragestellungen der Nachhaltigkeit von Forschungssoftware weltweit ähnlich sind, müssen insbesondere finanzielle, rechtliche und organisatorische Herausforderungen im nationalen Kontext betrachtet werden. Dazu gehören die Förderlandschaft, rechtliche Rahmenbedingungen, steuerrechtliche Fragen, vorhandene Infrastruktur und historisch gewachsene Aufgabenverteilungen. Wir möchten diese Fragen nach kurzem Einstieg interaktiv in Kleingruppen diskutieren. Die Ergebnisse sollen als Grundlage für ein White Paper "Nachhaltige Forschungssoftware in Deutschland" dienen. Weitere Schritte werden abschließend geplant. Der Workshop steht in Zusammenhang mit einer geplanten Podiumsdiskussion zum Thema, die inhaltliche Impulse geben soll.

uk: вхід без авторизації

name: Rückblick: Herausforderungen für die nachhaltige Entwicklung, Bereitstellung und Pflege von Forschungssoftware in Deutschland


uk: Комп'ютерні науки

description: The wrapping of libraries like MPI requires an approach that is flexible in multiple aspects. Changes and additions to the library, updates to the wrapper logic, and bugfixes need to be handled. Problems will arise if the wrapper is hard coded: any required change to the wrapping logic would affect the whole implementation. The maintenance of such an approach is usually not feasible. The approach for in the code is to write a code generator. Changes to the wrapper logic only need to be made at one place and additions to the wrapped library can either be handled automatically or by updating a definition file. This talk will show the challenges of writing the generator, the tools used for the generation and the reasons why a wrapper is requi

uk: вхід без авторизації

name: Generation of a wrapper library for MPI - MeDiPack


RSE 2.0

uk: Комп'ютерні науки

description: Research Software Engineering is gaining in recognition as both a discipline and a career thanks to established bodies such as the SSI and newer initiatives including deRSE. But what does the future hold as RSE groups mature, research becomes increasing data-driven and the practice of software engineering evolves ever-more rapidly? This talk considers potentially disruptive developments in technology that RSEs may need to embrace to play a ongoing role in keeping their institutions at the forefront of research: from machine learning and "Software 2.0” to serverless deployments. I hope this will inspire discussion within the community regarding the future of Research Software Engineering and how we prepare ourselves for it.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Code reviews are an invaluable tool for improving code quality - not just by catching bugs, but also by improving readability, scalability and maintainability of code. But code reviews are challenging to do effectively, for reasons of personal psychology as well as organisational structure and culture. This talk will present tactics for constructive code review drawing on conflict resolution theory and lessons from the software industry, and discuss the particular challenges of applying these in a research setting.

uk: вхід без авторизації

name: The art of giving and receiving code reviews


uk: Комп'ютерні науки

description: The Challenge: Exponential increase in amounts of data from new microbial environments and non-model organisms requires “tailor-made” data mining solutions that are costly and frequently unavailable. The Vision: Simple data screening and analysis using a reproducible and easy to share open- source software environment. Shared interest of bioinformatic vision and microbiologist needs generated a generic visualization tool that can approach specific biological questions with the push of a button. We aim to present our project from the first steps of setting the needs and ideas to developed solutions and discuss our vision regarding scientific data analysis, review and publication.

uk: вхід без авторизації

name: Data mining made easy, reproducible and open-source


uk: Комп'ютерні науки

description: We evaluate the open source software CaosDB for its employment in glaciological ice-core research at the Alfred Wegener Institute in Bremerhaven. Here, the system is used for the logistical management of up to several kilometres long ice cores which are stored as ice-core sections in a freezer storage facility. We provided a loan work flow to facilitate and control the movement of ice samples during ice-core processing. Furthermore, we integrate data analysis algorithms for various processing procedures on the ice-core samples. The application of our research data management system (RDMS) to ice-core research demonstrates in particular how a flexible RDMS with a semantic data model can efficiently improve collaborative research.

uk: вхід без авторизації

name: Evaluation of the semantic research data management system CaosDB in glaciology


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Keynote: RSEs together - Building careers, collaborations, groups and communities


uk: Комп'ютерні науки

description: How can I make research software sustainable? Five basic rules from Software Engineering and Open Source development have the biggest effect: Use a repository, build automatically, test extensively, allow for extension, use examples. The biggest breakthrough, however, comes with modern environments such as Jupyter Notebooks, which integrate code, description, examples, and results in one single document. In this talk, I present the basic rules for sustainable software and show using our textbook "Generating Software Tests" (www.fuzzingbook.org), how software, documentation, textbook and slides fit in a single comprehensive package.

uk: вхід без авторизації

name: Keynote: Sustainable Research Software – as Code, as Paper, as Book