uk: Комп'ютерні науки

description: In this talk, we will introduce the Universal Packaging Tool (upt), a modular tool meant to help packagers in their daily tasks. We will show how it is an improvement over similar existing tools, which upt means to replace. This will be especially interesting for distribution developers that have had to deal with upstream platforms such as PyPI, CPAN or RubyGems. Nowadays, most languages come with a package manager (such as pip or gem) that can install packages from an upstream package archive (such as pypi.org or rubygems.org). Traditional distributions (such as Debian, Fedora or OpenBSD) still package these same pieces of software, making them available through their own package manager (such as apt, dnf or the OpenBSD ports). Over the years, multiple scripts have been written in order to automate part of the packaging process. Tools like pypi2deb (which turns a package from PyPI into a Debian package) or gem2rpm (which turns a package from RubyGems into an RPM package) make the work of packagers much easier. There are a lot of these tools, and they all behave a bit differently, expose a different interface to their users, and duplicate a lot of code. In this presentation, I will introduce the Univesal Packaging Tool (upt), a modular program that allows packagers to create packages from any language-specific upstream archive to any GNU/Linux or *BSD distribution. We will show how this is done without any code duplication, and how any improvement to this tool will benefit developers from all distributions.

uk: вхід без авторизації

name: Package software for any distribution with upt


Bruno Cornec

type: Person

cs: Informatika

de: Informatik

fi: tietojenkäsittelytiede

uk: Комп'ютерні науки

en: Computer Science

fr: Informatique

da: Datalogi

es: Ciencias de la Computación

nl: Informatica

cs: Technické vědy

de: Ingenieurwissenschaften

fi: tekniikka

uk: Інженерія

en: Engineering Sciences

fr: Ingénierie

da: Ingeniørvidenskab

es: Ingeniería

nl: Engineering

description: Docker has brought an ease of use without comparison with VMs typically to build native upstream distribution packages. Where before it was needed to launch a complete environment, copy the sources into it, invoke the build tools to create the packages and then copy them back to the host, Docker has made all these steps much easier and straight forward, allowing for more rapid package production and automation. This presentation will show a detailed use case for building packages for the Mageia Linux distribution with bm and mgarepo usages encapsulated in Docker containers. It should help any upstream packager adopt a similar approach to make his packaging task a breathe. Please note that this talk replaces one entitled "Do Linux Distributions Still Matter with Containers?" by Scott McCarty who has sent his apologies but is now unable to attend as he has fallen ill.

TIB AV-Portal

type: Service

type: WebContent

type: MediaObject

@language: en

cs: přihlášení není vyžadováno

de: keine Anmeldung erforderlich

uk: вхід без авторизації

en: no login required

nl: geen login vereist

name: Packaging for Mageia Linux with Docker containers

FOSDEM VZW

type: Organization

cs: Video

de: Video

fi: Video

uk: Відео

en: Video

fr: Vidéo

da: Video

nl: Video

es: Video


uk: Комп'ютерні науки

description: Open discussion about getting more designers participating in Open Source projects and better understanding of the barriers that may be preventing them from contributing. We will invite several designers into the panel, to share their experience with their open source communities and provide insight on the topic. Some questions will be interactive and the public can also vote and respond, representing their opinion.

uk: вхід без авторизації

name: Difficulties in having more designers involved in Open Source


uk: Комп'ютерні науки

description: "Don't expect patches to the core. It's just too complex for external developers." Nearly twenty years ago, that was the broadly-held opinion at MySQL AB. Now, with MariaDB, there are 174 contributors to the server alone and Monty isn't the top contributor by commits or even LoC. Clearly, some things have changed, but what are they and how much impact have they had? In this fast-paced session Zak Greant, MySQL's first community advocate, will walk through some of the critical changes over the years and share some of the best (and worst) practices. In the early days of MySQL, we had the idea that people didn't contribute to the core because the code base was too difficult to get into. Perhaps this was correct at the time, perhaps not. Nearly twenty years later, the MariaDB project sees contributions from a wide range of contributors and to many different parts of the project - including the MariaDB server. Clearly, many things have changed in this time. In this session, I'll present some of the key macro and micro changes, and present conclusions about how they have come about. For instance, if the server was the most difficult part of the MySQL/MariaDB code to contribute to, why are there so many more contributors and contributions now? Potential causes could include: the widespread adoption of MySQL and MariaDB the popularity and maturity of the projects the change in corporate control maturation of the broad Free Software/Open Source community improvements in collaborative development infrastructure better community management practices more senior project members or senior project members having more time to mentor contributors better incentives for contribution better contribution management processes the long time span has let people learn the code base better (as many contributors were or are MySQL/Oracle/MariaDB Corp. staff) I'll support the talk with a written report and I'll share my research, including: analysis of commits and contributors over time maps of contributors journeys over time (eg. what did one have to do to get a patch into MySQL in ca. 2000 vs. MariaDB in 2018) a timeline of changes to key policies, contribution infrastructure, corporate involvement, etc.

uk: вхід без авторизації

name: Patterns and anti-patterns in Open Source participation: Lessons from MySQL AB, the MariaDB Foundation, and others


uk: Комп'ютерні науки

description: In this presentation, we introduce PennyLane, a Python-based software framework for optimization and machine learning of quantum and hybrid quantum-classical computations. PennyLane’s core feature is the ability to compute gradients of quantum circuits in a scalable way that is compatible with classical techniques such as backpropagation. PennyLane extends the automatic differentiation algorithms common in optimization and machine learning to be compatible with quantum and hybrid computations. The library provides a unified architecture for near-term quantum computing devices, supporting both discrete- and continuous-variable paradigms of quantum computation. A plugin system makes the framework compatible with any gate-based quantum simulator or hardware, including leading quantum software platforms such as Xanadu's Strawberry Fields, IBM's Qiskit, and Rigetti's PyQuil. PennyLane can be used for the optimization of variational quantum eigensolvers, quantum approximate optimization, quantum machine learning models, and many other applications.

uk: вхід без авторизації

name: PennyLane - Automatic differentiation and machine learning of quantum computations


uk: Комп'ютерні науки

description: Running Twitter services on Graal has been very successful and saved Twitter a lot of money on datacenter cost. But we would like to run more efficient to reduce cost even more. I mean, who doesn’t? In order to do this we are using our Machine Learning framework called Autotune to tune Graal inlining parameters. This talk will show how much performance improvement we got by autotuning Graal.

uk: вхід без авторизації

name: Performance tuning Twitter services with Graal and Machine Learning


uk: Комп'ютерні науки

description: Electromagnetic (EM) side-channel attacks exploit the EM radiation that inherently leaks from electronic systems during various computations. Patterns in the amplitude or frequency of this radiation can be analyzed to break even theoretically secure cryptographic algorithms such as RSA and AES. In this presentation, we will cover the various challenges involved with successfully performing EM side-channel attacks using relatively low-cost Software Defined Radios (SDRs) and EM probes. More concretely, we will discuss the measurement setup, trace capture process, trace alignment / filtering, and Correlation Electromagnetic Attack (CEMA) for a scenario in which an Arduino Duemilanove is executing a software AES algorithm with an unknown key. Finally, we will see how artificial neural networks can be used to reduce the complexity of performing successful EM side-channel attacks. In present-day communications systems, cryptographic algorithms (ciphers) provide confidentiality and integrity of data through secret pieces of information (i.e. shared or private keys) known only to the communicating parties. However, as shown in numerous previous works, measuring the physical properties of hardware during executions of a cipher can reveal information about its current state. When sufficient information leaks through these so-called "side-channels", an adversary can compute the key. In this presentation, we will examine the EM side channel, which originates from electromagnetic radiation leaking from a device. Performing EM side-channel attacks used to require rather expensive oscilloscopes with high sample rate ADCs. With the advent of inexpensive SDRs such as the RTL-SDR and advances in AI, the bar to perform such attacks has been adequately lowered. We will learn how to use the open-source ElectroMagnetic Mining Array (EMMA) tool to capture leakages emanated by an Arduino Duemilanove during the execution of an AES encryption operation. Next, a standard CEMA attack will be performed. This attack correlates the measured amplitude of a signal with the hamming weight of part of the key in order to determine which key was used during the execution of the cipher. Finally, we will examine applications of neural networks to side-channel analysis. Both traditional deep Convolutional Neural Networks (CNNs) as well as a novel "correlation optimization" (CO) method using shallow neural networks will be discussed.

uk: вхід без авторизації

name: Performing Low-cost Electromagnetic Side-channel Attacks using RTL-SDR and Neural Networks


uk: Комп'ютерні науки

description: Perl 6 grammars are a great way to describe the grammar and implement an interpreter or a compiler of DSL or a programming language. In this talk, I will demonstrate how you can do it. During the talk, we will create an interpreter for a tiny programming language. The engine behind the implementation will be the so-called Grammars that are available in today's Perl 6. We will create the full language specification and describe all the actions it needs to do to execute the program. The great part is that you no longer need to split your language implementation in traditional phases: lexer, parser, etc.. Neither you need a compiler of compilers to process the formal grammar rules and emit the lexer/parse code that you will later use in your compiler. All you need is just to write some Perl 6 code. You even don't need to be a specialist in compilers or learn numerous tools like bison etc. to create your own language in a few hours.

uk: вхід без авторизації

name: Perl 6 as a new tool for language compilers: Using Perl 6 grammars to design and implement a programming language


Persistence with Ada Database Objects

uk: Комп'ютерні науки

description: The presentation describes how Ada Database Objects helps in connecting to an SQLite/MySQL/PostgreSQL database from Ada. It explains how by mapping SQL tables in Ada records, it simplifies saving and updating database records and makes the application more safe and reliable. The presentation will briefly describe the Ada code generator (Dynamo) that is behind this. Ton erst ab Minute 5

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This is a proposal to give a presentation about PipeWire and the current state of affairs. See also

uk: вхід без авторизації

name: PipeWire: PipeWire wants to take over your multimedia


uk: Комп'ютерні науки

description: The hardware comes with a firmware, desktop app, android app - all open source. This tiny pocket lab provides an array of sensors for doing science and engineering experiments. It comes with functions of numerous measurement devices including an oscilloscope, a waveform generator, a frequency counter, a programmable voltage, current source and as a data logger. During this session, PSLab team will speak about the current development of the project, new features, usage, communities and a story of production in China and lesson learned.

uk: вхід без авторизації

name: Pocket Science Lab: Powerful and Portable Mini Open Hardware Device for Open Science


uk: Комп'ютерні науки

description: The goal of Pocket Science Lab is to miniaturize laboratories with FOSS and Open Hardware. We have released the first commercial FOSS version. The talk covers our journey from developing FOSS Hardware and to scaling up to large scale production. The goal of Pocket Science Lab is to miniaturize laboratories. We have released the first commercial FOSS version. The talk covers our journey from developing FOSS Hardware and to scaling up to large scale production. PSLab is a tiny pocket science lab that provides an array of test and measurement instruments for doing science and engineering experiments. It can function like an oscilloscope, waveform generator, frequency counter, programmable voltage and current source and also as a data logger. An Android app is developed and available on app stores. A desktop version is available in Python. In the session we will also explain how the software applications with their unique functionalities help to grow the PSLab and Open Science community.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Portable Services bring certain aspects of containers to classic systemd service management. With systemd v239 Portable Services are for the first time complete and ready for users to take advantage of. In this talk we'll have a look on the underlying technical concepts, how things fit together and what the precise limitations and benefits are.

uk: вхід без авторизації

name: Portable Services are Ready to Use: Portable Services bring some container features to classic service management


uk: Комп'ютерні науки

description: The talk tells the story of how the Debian GNU/Linux port for the RISC-V architecture came to life and describes the steps and challenges involved in adding support for a completely new architecture to one of the major Linux distributions. It provides an overview of the current state of the port and gives an outlook on further developments.

uk: вхід без авторизації

name: Porting Debian to the RISC-V architecture: Tales from a long quest


uk: Комп'ютерні науки

description: Currently, Das U-Boot and Linux use device tree to specify how the different hardware components are connected to each other on a board. If a board has a way via which the user can plug in another hardware component, unless we are talking about universal buses like USB or SDIO, the device tree has to be updated to corresponding to the change. There are several ways how this issue can be solved. One may, for example, have a different device tree for each configuration, or one can use device tree overlays. But what if you have a device which can, via one bus, connect several devices, and these may or may not be of the same kind? The number of different device trees would grow rapidly, and one could not use the same device tree overlay when the same device is connected more than one time without editing the overlay. Fortunately U-Boot can fixup the loaded device tree before booting. In this talk we shall describe how we used this fixup feature (hopefully in an elegant and upstreamable way) to solve this issue on Turris MOX, a modular SOHO router.

uk: вхід без авторизації

name: Porting U-Boot to a Modular Device: Booting Linux via U-Boot on a board which can be composed of several different modules


PostgreSQL Goes to Eleven!

uk: Комп'ютерні науки

description: The latest and greatest version of PostgreSQL is PostgreSQL 11. This talk will start off with some history of the community and a description of the development process including some metrics trends. It will then cover a high level overview of the features which will be part of PostgreSQL 11, and prognosticate a bit about the future of PostgreSQL. Community * History * Development Process PostgreSQL 11 * Patches committed 12 and Beyond * Actively worked items * Under active discussion

uk: вхід без авторизації


uk: Комп'ютерні науки

description: About a year ago the PostgreSQL community discovered that fsync (on Linux and some BSD systems) may not work the way we always thought it is, with possibly disastrous consequences for data durability/consistency (which is something the PostgreSQL community really values). I'll walk you through fsync basics, explain how we always thought/assumed it works and how it actually behaves. I'll also discuss where the misunderstanding likely comes from - which is a mix of cultural and technical reasons rooted in the past. We'll see how this issue impacts current PostgreSQL deployments, what you can (and can't) do about it, and finally outline some plans for addressing it properly in the future.

uk: вхід без авторизації

name: PostgreSQL vs. fsync: How is it possible that PostgreSQL used fsync incorrectly for 20 years, and what we'll do about it.


Predicting PR Comments

uk: Комп'ютерні науки

description: Many of us have seen the small PR changing 20 lines with 20 comments and the large PR with over 1k line changes sail through (or stall) with no comments because who has the time to read all that text? What if we could predict areas of the PR that are more likely to need attention? Many of us have seen the small PR changing 20 lines with 20 comments and the large PR with over 1k line changes sail through (or stall) with no comments because who has the time to read all that text? What if we could predict areas of the PR that are more likely to need attention? This talk will explore creating a model to predict areas of PRs that will generate comments on, using a combination of historic comment data and mailing list stack traces. Then once we’ve built this model we’ll explore how to serve it live with Kubeflow as well as how Kubeflow and K8s can work together to allow us to scale our model training to a larger set of projects.

uk: вхід без авторизації


Preserving numerical algorithms

uk: Комп'ютерні науки

description: A typical result in Numerical Analysis is an algorithm to solve a mathematical problem. The main ingredients are the precise statement of the problem, an algorithm to solve it, and an assessment of the errors. From algorithm, there is a long journey to a program: the method needs to be more user-friendly (handling of error cases, etc.), has to be implemented in a programming language, and tested. The resulting program is not only a practical product, but also a very precise description of the algorithm. If the reader is a computer, nothing is left to interpretation as long as the translator is correct. In my talk, I would like to introduce an effort to preserve mathematical software: the histoRicalg project, and summarize some of its results. In two decades from 1970 to 1990, there was an upsurge in the writing and publication of mathematical software. Much of this has been collected in subroutine libraries or published in print or in machine readable form. Traditionally, scientific results are published in journals, and journal papers are archived in libraries. However, as programs grew larger, they were no longer printed with the papers, but sent to interested readers on tape, diskettes, or other forms of data storage. The knowledge accumulated in these codes is extensive and valuable. Its preservation, however, is more difficult than that of papers. Storage technologies come and go, programming languages come into fashion, then become forgotten. To preserve the algorithms, one needs to constantly copy their source code from old computers to newer ones and preserve the tools needed to compile them. In this poster, I plan to introduce one effort to preserve mathematical codes: the histoRicalg project. Its primary objective is to find, document, and preserve the originals of the numerical codes that have found their way into the R statistical programming system. In particular, I will summarize my experience with attempts to run the originals of these codes on a modern Linux PC. PRESERVING NUMERICAL ALGORITHMS A typical result in Numerical Analysis is an algorithm to solve a mathematical problem. The main ingredients are the precise statement of the problem, an algorithm to solve it, and an assessment of the errors. From algorithm, there is a long journey to a program: the method needs to be more user-friendly (handling of error cases, etc.), has to be implemented in a programming language, and tested. The resulting program is not only a practical product, but also a very precise description of the algorithm. If the reader is a computer, nothing is left to interpretation as long as the translator is correct. In two decades from 1970 to 1990, there was an upsurge in the writing and publication of mathematical software. Much of this has been collected in subroutine libraries or published in print or in machine readable form. Traditionally, scientific results are published in journals, and journal papers are archived in libraries. However, as programs grew larger, they were no longer printed with the papers, but sent to interested readers on tape, diskettes, or other forms of data storage. The knowledge accumulated in these codes is extensive and valuable. Its preservation, however, is more difficult than that of papers. Storage technologies come and go, programming languages come into fashion, then become forgotten. To preserve the algorithms, one needs to constantly copy their source code from old computers to newer ones and preserve the tools needed to compile them. I plan to introduce one effort to preserve mathematical codes: the histoRicalg project. Its primary objective is to find, document, and preserve the originals of the numerical codes that have found their way into the R statistical programming system. In particular, I will summarize my experience with attempts to run the originals of these codes on a modern Linux PC. Present status: SLATEC codes: Fortran 77. Modifications only needed for machine dependent parts; code is well preserved. LINPACK and EISPACK parts are largely superseded by LAPACK. PORT Library: Bell Labs has changed owners and the web site is gone. Fortran 77. What code we have runs without changes. Contains an interesting collection of optimization algorithms. CMLIB: large overlap with SLATEC. Fortran 77. So far UNCMIN has been tested. NSWC: large overlap with SLATEC. Fortran 77. Needs changes in machine dependent parts. Large collection of special functions routines. So far, I have checked machine parameters: integer parameters match x86_64-linux-gnu. NUMAL: one of the early attempts at a mathematical software collection. Algol 60. Needs a translator to run. I have created Ubuntu packages for two translators (MARST and JFF-ALGOL). CALGO: Fortran 77 and Algol 60 parts, not all available in machine readable form. Prof. Tim Hopkins, ACM Algorithms Editor, …

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The goals of a privacy and anonymity network like Tor are not easily combined with extensive data gathering, but at the same time data is needed for monitoring, understanding, and improving the network. The Tor Metrics team collects data and analyses the public Tor network. This talk will discuss safety principles that are followed, the tooling and workflows used, and also share some plans for future work to further enhance safety of data collection.

uk: вхід без авторизації

name: Privacy-preserving monitoring of an anonymity network: Data Collection, Analysis, and Visualisation from the public Tor network


uk: Комп'ютерні науки

description: HawkTracer is low-overhead instrumentation-based profiler built at Amazon Video for platforms with limited capabilities. It's highly extensible (at compile time) and portable so it can be run on almost any embedded device. In this talk I'll briefly talk about history of the profiler (why did I start it, and how did I manage to publish it to open source world), introduce the architecture of the profiler, present it's advantages and limitations, show how can you instrument the code and demonstrate the profiler in action by running it with an example project.

uk: вхід без авторизації

name: Profiling Low-End Platforms using HawkTracer Profiler


Profiling PHP applications

uk: Комп'ютерні науки

description: Help my client is complaining some parts of the application are slow. Now what? Profiling! What is profiling and how can we measure the performance of our application? There are several tools we can use. Once we have the tools, how do we approach profiling. What to look for. And caveats to avoid when profiling. To finish up, we should avoid that our client is complaining about performance, how can we pro actively use profiling to improve our application. When finished we will end up with a nice toolbox of profiling tools and good ideas how to do profiling and avoid some common mistakes that might distract you from the real optimisation.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: With the advent of the IoT, are we really making our lives simpler or diving ourselves in a vast ocean by uploading our lives to the internet? Project Things is an experimental framework of software and services from Mozilla for connecting "things" without any Middleman. Mozilla is working to create a Web of Things framework of software and services that can bridge the communication gap between connected devices. By providing these devices with web URLs and a standardized data model and API, we are moving toward a more decentralized Internet of Things that is safe, open and interoperable. Using the Internet of Things today is a lot like sharing information on the Internet before the World Wide Web existed. There were competing hypertext systems and proprietary GUIs, but the Internet lacked a unifying application layer protocol for sharing and linking information. The “Web of Things” (WoT) is an effort to take the lessons learned from the World Wide Web and apply them to IoT. From this talk audience will take away an understanding of the privacy concerns related to IoT, and how they may be putting their personal information at risk by connecting my physical entities to the internet and how project things come to the rescue. The goal is for visitors to leave with a better understanding of some of the issues surrounding the Internet of Things today, and how Mozilla is working to build a decentralised IoT with the Web of Things, to improve interoperability, privacy and security through standardization. Visitors Project Things initially focuses on developing three components: Things Gateway — An open source implementation of a Web of Things gateway which helps bridge existing IoT devices to the web Things Cloud — A collection of Mozilla-hosted cloud services to help manage a large number of IoT devices over a wide geographic area Things Framework — Reusable software components to help create IoT devices which directly connect to the Web of Things A) Without Demos Time Duration: 20-40 mins (flexible depending on the time allocation) Talk Structure: A.Without Live Demos: General Discussion on What Is IoT and its future. The pros and cons of connecting things to the internet. How exploiters can breach the security and know our lifestyles. Introduction to project things Details about the project things framework. How project things is secure and solve the problem of privacy and security B) With Demos (can be converted to a workshop if needed) Points included above (without demos). Demo of DIY web things that makers can build themselves using the Things Framework. Examples will be shown using several low-cost developer boards such as Arduino, Espressif, BBC micro: bit, Adafruit Circuit Playground, and Raspberry Pi. Demo and discussion of Implementing basic IoT attacks (education purposes) : accessing the devices using the physical, remote or local network. Live demo & session on increasing security: Participants will learn how to increase the security and bypass few of these attacks.

uk: вхід без авторизації

name: Project Things: A secure gateway to connect your things to Internet


uk: Комп'ютерні науки

description: Following on from Project Icestorm; Project Trellis has created bitstream documentation for the substantially larger Lattice ECP5 FPGAs. This has been combined with a new multi-architecture FOSS place-and-route tool, nextpnr, and the existing Yosys Verilog synthesis tool to build a fully-FOSS FPGA flow for these parts; capable of building advanced designs including SoCs running Linux! This talk will include an overview of the flow for developers and end users alike; as well as how you can contribute to the FOSS FPGA ecosystem.

uk: вхід без авторизації

name: Project Trellis and nextpnr: FOSS Tools for ECP5 FPGAs: FOSS FPGA flow for the Lattice ECP5


uk: Комп'ютерні науки

uk: вхід без авторизації

name: Promotion of open source and role of standardization in Quantum Computing: Open panel discussion


uk: Комп'ютерні науки

description: Pointers are a notorious "defect attractor", in particular when dynamic memory management is involved. Ada mitigates these issues by having much less need for pointers overall (thanks to first-class arrays, parameter modes, generics) and stricter rules for pointer manipulations that limit access to dangling memory. Still, dynamic memory management in Ada may lead to use-after-free, double-free and memory leaks, and dangling memory issues may lead to runtime exceptions. The SPARK subset of Ada is focused on making it possible to guarantee properties of the program statically, in particular the absence of programming language errors, with a mostly automatic analysis. For that reason, and because static analysis of pointers is notoriously hard to automate, pointers have been forbidden in SPARK until now. We are working at AdaCore since 2017 on including pointer support in SPARK by restricting the use of pointers in programs so that they respect "ownership" constraints, like what is found in Rust. In this talk, I will present the current state of the ownership rules for pointer support in SPARK, and the current state of the implementation in the GNAT compiler and GNATprove prover, as well as our roadmap for the future.

uk: вхід без авторизації

name: Proof of Pointer Programs with Ownership in SPARK


uk: Комп'ютерні науки

description: In the 1940s, Shannon proved that we can transmit data error-free depending on rate and SNR. In practical radios, we need to employ forward error correction (FEC) to achieve those rates. GNU Radio has a built-in component to handle FEC, called gr-fec. After some basics of FEC, we will see how GNU Radio does this, and how it can be extended.

uk: вхід без авторизації

name: Protect your bits: Introduction to gr-fec: A look into the error-correction capabilities of GNU Radio


Pulp 3: Ready for a Test Drive

uk: Комп'ютерні науки

description: Pulp is a platform for managing repositories of software packages, and its plugin architecture allows management of any type of content. Pulp’s web API enables users to synchronize, upload, and publish versioned repositories with simple but flexible workflows. This presentation will build on last year’s talk by Dennis Kliban 0, and will highlight simplified installation and deployment, better performance, new features, and a growing collection of plugins including rpm, python, docker, ansible, chef, ruby, file, and more in development. Pulp 3 is approaching maturity and is ready for you to test drive.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: by At: FOSDEM 2019 https://video.fosdem.org/2019/H.1302/protecting_secrets_with_hardware.webm Using special purpose hardware devices to protect secrets is a staple of cryptocurrency enthusiasts. We share the lessons learned of creating secure hardware wallets and insecure conference badges at Monero Hardware. In this half hour presentation, we work backwards disassembling parts of a series of hardware security devices capable of participating in blockchain networks. We consider devices like the Signet, Nitrokey, SC4-HSM, Trezor, and the Monero Hardware Wallet. In our high level comparison we identify common hardware components and common strategies to defeat MITM and other forge attempts at network edges. Shifting gears, we disassemble and put devices under the microscope to study circuits. Explanations are kept at novice level hardware competence to ensure we're all on the same page. An interesting angle involves counting the generic blockchain use cases provided by special purpose cryptocurrency wallet hardware, and we conclude by a whirlwind hypothetical workflow illustrating the steps involved in building a new secure hardware device. Room: H.1302 (Depage) Scheduled start: 2019-02-03 13:50:00+01

uk: вхід без авторизації

name: Protecting Secrets with Hardware: Secure elements, hardware wallets, and device support for cryptocurrencies


uk: Комп'ютерні науки

description: How to obtain maximum performance from your Progressive web app In this talk i want to explain what PWA is and how to obtain maximum performance for your project focusing on the caching strategies, use cases when you can prefer your caching data vs use cases when it's better to try to fetch your data first.

uk: вхід без авторизації

name: PWA caching strategies: How to obtain maximum performance from your Progressive web app


Quo vadis, LibreOffice extensions?

uk: Комп'ютерні науки

description: The way how users can extend Libreoffice underperform the known usability from the office suite by a special kind of storage and a cumbersome way to load it. The talk will present one possible solution, open collaboration service, and show the improvements on both sides, the contributors who upload as well ideas on how users may easier customize and enhance the program. Our extensions are hosted on a Plone-based content management site. The procedure to upload an extension is cumbersome as neither a wizard nor clear steps are provided. And also because the administration is hard work and a one-person show. Furthermore, the site lacks on good search and filter capabilities for the users and has no categories beyond Extensions and Templates. The talk will present two aspects: The first is how the open collaboration service works on https://www.opendesktop.org/ and the second part gives an idea how a tight integration into LibreOffice similar to GetHotNewStuff known from KDE might substantially improve the usability with also benefits for the development.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: This talk will cover the characteristics and requirements of Scylla's Raft implementation, how it enables strongly consistent updates, and how it improves the reliability and safety of internal processes, such as schema changes, node membership, and range movements. Eventually consistent databases choose to remain available under failure, allowing for conflicting data to be stored in different replicas (later repaired by background processes). Weakening the consistency guarantees improves not only availability, but also performance, as the number of replicas involved in a given operation can be minimized. There are, however, use-cases that require the opposite trade-off. Indeed, Apache Cassandra and Scylla provide Lightweight Transactions (LWT), which allow single-key linearizable updates. The mechanism underlying LWT is asynchronous consensus in the form of the Raft algorithm. In this talk, we'll describe the characteristics and requirements of Scylla's consensus implementation, and how it enables strongly consistent updates. We will also cover how consensus can be applied to other aspects of the system, such as schema changes, node membership, and range movements, in order to improve their reliability and safety. We will thus show that an eventually consistent database can leverage consensus without compromising either availability or performance.

uk: вхід без авторизації

name: Raft in Scylla: Consensus in an eventually consistent database


RAPIDS: Data Science on GPUs

uk: Комп'ютерні науки

description: The next big step in data science will combine the ease of use of common Python APIs, but with the power and scalability of GPU compute. The RAPIDS project is the first step in giving data scientists the ability to use familiar APIs and abstractions while taking advantage of the same technology that enables dramatic increases in speed in deep learning. This session highlights the progress that has been made on RAPIDS, discusses how you can get up and running doing data science on the GPU, and provides some use cases involving graph analytics as motivation. GPUs and GPU platforms have been responsible for the dramatic advancement of deep learning and other neural net methods in the past several years. At the same time, traditional machine learning workloads, which comprise the majority of business use cases, continue to be written in Python with heavy reliance on a combination of single-threaded tools (e.g., Pandas and Scikit-Learn) or large, multi-CPU distributed solutions (e.g., Spark and PySpark). RAPIDS, developed by a consortium of companies and available as open source code, allows for moving the vast majority of machine learning workloads from a CPU environment to GPUs. This allows for a substantial speed up, particularly on large data sets, and affords rapid, interactive work that previously was cumbersome to code or very slow to execute. Many data science problems can be approached using a graph/network view, and much like traditional machine learning workloads, this has been either local (e.g., Gephi, Cytoscape, NetworkX) or distributed on CPU platforms (e.g., GraphX). We will present GPU-accelerated graph capabilities that, with minimal conceptual code changes, allows both graph representations and graph-based analytics to achieve similar speed ups on a GPU platform. By keeping all of these tasks on the GPU and minimizing redundant I/O, data scientists are enabled to model their data quickly and frequently, affording a higher degree of experimentation and more effective model generation. Further, keeping all of this in compatible formats allows quick movement from feature extraction, graph representation, graph analytic, enrichment back to the original data, and visualization of results. RAPIDS has a mission to build a platform that allows data scientist to explore data, train machine learning algorithms, and build applications while primarily staying on the GPU and GPU platforms.

uk: вхід без авторизації


Raspberry Pi history, tips and use case

uk: Комп'ютерні науки

description: Raspberry Pi is now 6 years old, there are several tips and use cases.it was born for kids programming education, though, it is now also used for electric DIY hobbies, industrial use, Edge Computing, IoT and more. Masafumi will talk Raspberry Pi history and latest updates and discuss several its use cases and tips for our business and daily use. Raspberry Pi histories, tips and use case What is Raspberry Pi 1.Raspberry Pi history 1.1 The opportunity at programming education in latest kids generation 1.2 Concept of Raspberry Pi 1.3 Release in 2012 and now 1.4 Related vendors (resellers) encourage Raspberry Pi market. 1.5 Review its effects and results 1.6 Road maps and future 2.Raspberry Pi models 2.1 Raspberry Pi 1 2.2 Raspberry Pi 1+ 2.3 Raspberry Pi 2 2.4 Raspberry Pi 2 (v1.2) 2.5 Raspberry Pi 3 2.6 Raspberry Pi 3+ 2.7 compare other card-sized board machines Raspberry Pi tips 3.Tips you should know 3.1 look inside hardware 3.2 check inside software 3.3 check inside related license and etc to sell your Raspberry Pi embedded products. 3.4 other useful tips you should check Raspberry Pi use case 4.Learn from its use case 4.1 Not only for kids but also young engineers 4.2 Small and speedy starts gain your business with Raspberry Pi 4.3 Prototype and production 4.4 Daily DIY hobby expand your life Conclusion

uk: вхід без авторизації


uk: Комп'ютерні науки

description: Every team working on information retrieval software struggles with the task of evaluating how well their system performs in terms of search quality(currently and historically). Evaluating search quality is important both to understand and size the improvement or regression of your search application across the development cycles, and to communicate such progress to relevant stakeholders. In the industry, and especially in the open source community, the landscape is quite fragmented: such requirements are often achieved using ad-hoc partial solutions that each time require a considerable amount of development and customization effort. To provide a standard, unified and approachable technology, we developed the Rated Ranking Evaluator (RRE), an open source tool for evaluating and measuring the search quality of a given search infrastructure. RRE is modular, compatible with multiple search technologies and easy to extend. The focus of the presentation will be on a live demo showing an example project with a set of initial relevancy issues that we will solve iteration after iteration: using RRE output feedbacks to gradually drive the improvement process until we reach an optimal balance between quality evaluation measures. Every team working on information retrieval software struggles with the task of evaluating how well their system performs in terms of search quality(currently and historically). Evaluating search quality is important both to understand and size the improvement or regression of your search application across the development cycles, and to communicate such progress to relevant stakeholders. To satisfy these requirements an helpful tool must be: - flexible and highly configurable for a technical user - immediate, visual and concise for an optimal business utilization In the industry, and especially in the open source community, the landscape is quite fragmented: such requirements are often achieved using ad-hoc partial solutions that each time require a considerable amount of development and customization effort. To provide a standard, unified and approachable technology, we developed the Rated Ranking Evaluator (RRE), an open source tool for evaluating and measuring the search quality of a given search infrastructure. RRE is modular, compatible with multiple search technologies and easy to extend. It is composed by a core library and a set of modules and plugins that give it the flexibility to be integrated in automated evaluation processes and in continuous integrations flows. This talk will introduce RRE, it will describe its functionalities and demonstrate how it can be integrated in a project and how it can help to measure and assess the search quality of your search application. The focus of the presentation will be on a live demo showing an example project with a set of initial relevancy issues that we will solve iteration after iteration: using RRE output feedbacks to gradually drive the improvement process until we reach an optimal balance between quality evaluation measures.

uk: вхід без авторизації

name: Rated Ranking Evaluator: an open-source approach for Search Quality Evaluation: How to automate the Search Quality Evaluation process using a completely based FOSS solution


uk: Комп'ютерні науки

description: Mgmt is a next gen config management tool that takes a fresh look at existing automation problems. The tool has two main parts: the engine, and the language. The engine has a number of resources, including a container resource. We will feature a number of demos of this resource, and discuss how the language can be used to build a custom container automation solution. The language is a minimalistic, functional, reactive DSL. It can be used to build a real-time, distributed container automation solution, or something else entirely! We'll also use it to demo, service discovery, auto-scaling, and scheduling! Finally we'll talk about some of the future designs we're planning and make it easy for new users to get involved and help shape the project.

uk: вхід без авторизації

name: Mgmt Config:: Real-time Container Automation and Scheduling


uk: Комп'ютерні науки

description: Mgmt is a next gen config management tool that takes a fresh look at existing automation problems. The tool has two main parts: the engine, and the language. This presentation will demo both and include many examples showing how monitoring is built-in to each resource, and how events can cause the system to react and fix a problem before your pager even goes off. The language demos will show how you can feed real-time monitoring data from a tool such as prometheus, into your code and use that data to make real-time decisions. Lastly, we'll talk about our existing prometheus integration for exporting useful information about mgmt. Mgmt is a next gen config management tool that takes a fresh look at existing automation problems. The tool has two main parts: the engine, and the language. This presentation will demo both and include many examples showing how monitoring is built-in to each resource, and how events can cause the system to react and fix a problem before your pager even goes off. The language demos will show how you can feed real-time monitoring data from a tool such as prometheus, into your code and use that data to make real-time decisions. Lastly, we'll talk about our existing prometheus integration for exporting useful information about mgmt.

uk: вхід без авторизації

name: Mgmt Config: Merging Config Management and Monitoring (in real-time)


uk: Комп'ютерні науки

description: Many security problems have been discovered in communication protocols in the past, examples are: BlueBorne, a set of security vulnerabilities in the Bluetooth implementation which affect millions of devices Heartbleed, a security bug in the OpenSSL library that lead to exposure of sensitive data CVE-2018-10933, a critical bug in libssh which allows successful authentication without any credentials Still today many critical issues remain in protocol implementations, as their root causes have not been addressed. Two classes of faults dominate: runtime errors like buffer overflows, and logic errors in protocol state machines. The main reasons for runtime errors is the use of unsafe programming languages. Better alternatives with formal guarantees like Rust, SPARK or Frama-C exist, but re-implementing complex protocols means a lot of effort. Logic errors are caused by the complexity of protocols and imprecise specifications in natural language. RecordFlux is a framework for the secure implementation of communication protocols. From a formal protocol specification written in a domain-specific language the tools generate SPARK code, for which the absence of runtime errors can be proven automatically. In the future RecordFlux will also allow the specification of dynamic protocol semantics and support formal correctness proofs for protocol state machines. In this talk we give an overview of the current state and speak about an upcoming project that uses RecordFlux for a complex real-world application, the compartmentalized implementation of TLS 1.3 for component-based operating systems.

uk: вхід без авторизації

name: RecordFlux: Facilitating the Verification of Communication Protocols


uk: Комп'ютерні науки

description: Redfish is an IPMI replacement standardized by the DMTF. It provides a RESTful API for server out of band management and a lightweight data model specification that is scalable, discoverable and extensible. (Cf: http://www.dmtf.org/standards/redfish). This presentation will start by detailing its role and the features it provides with examples. It will demonstrate the benefits it provides to system administrator by providing a standardized open interface for multiple servers, and also storage systems. We will then cover various tools such as the python-redfish library (Cf: https://github.com/openstack/python-redfish) offering Redfish abstractions useful to provide Redfish support for python based solutions such as Ironic in OpenStack, cobbler or anaconda. The recently OpenSource python-redfish-utility client will also been covered. Finally, we'll show how to combine that to add CMDB support (with the Open Source iTop tool as an example) into a Software Defined Infrastructure. Live or Recorded demos will be displayed in order to illustrate the different aspects covered during the presentation.

uk: вхід без авторизації

name: Redfish: the new standard for a Software Defined Infrastructure


uk: Комп'ютерні науки

description: In August 2018, Redis Labs relicensed a number of AGPL-licensed Redis modules with the "Commons Clause" amendment on the grounds that it prevents abuse and therefore ensures the sustainability of its development. As this renders the software no-longer free and open source, GNU/Linux distributions such as Debian and Fedora are unable to ship Redis Labs' versions of the affected modules to their users. This talk from a long-time (2009) Redis user & developer will outline the history, background & response to this flavour of license, as well explain how this it at odds with communities in which they participate in and are ultimately are a short-sighted & retrograde step for the companies and individuals that are advocating for them. Furthermore, this talk will ask some thought-provoking questions about how the the conversation around "sustainability" in open source is being co-opted by foregrounding of financial elements to the detriment of the principles & people that have so clearly and demonstratively served us so well in the past four decades.

uk: вхід без авторизації

name: Redis Labs & the tragedy of the Commons Clause


uk: Комп'ютерні науки

description: During recent work to implement software double precision (fp64) support in Mesa's shading language compiler, some shaders were found to use excessive amounts of memory. One pessimal test case used over 80GiB. This talk will discuss techniques that were used to reduce that memory usage to less the 2GiB. This reduction was achieved through a combination of optimizing existing data structures, use of more compact data structures, and improved memory management. Use of tools such as Valgrind and pahole will be covered.

uk: вхід без авторизації

name: Reducing Memory Usage of Mesa's Shader Compiler (Again): Why does this shader need 80GiB to compile?


uk: Комп'ютерні науки

description: Regression testing of HPC systems is of crucial importance when it comes to ensure the quality of service offered to the end users. At the same time, it poses a great challenge to the systems and application engineers to continuously maintain regression tests that cover as many aspects as possible of the user experience. In this presentation, we present ReFrame, a new framework for writing regression tests for HPC systems. ReFrame is designed to abstract away the complexity of the interactions with the system and separate the logic of a regression test from the low-level details, which pertain to the system configuration and setup. Regression tests in ReFrame are simple Python classes that specify the basic parameters of the test plus any additional logic. The framework will load the test and send it down a wel-defined pipeline which will take care of its execution. All the system interaction details, such as programming environment switching, compilation, job submission, job status query, sanity checking and performance assessment, are performed by the different pipeline stages. Thanks to its high-level abstractions and modular design, ReFrame can also serve as a tool for continuous integration (CI) of scientific software, complementary to other well-known CI solutions. Finally, we present the use cases of two large HPC centers that have adopted or are now adopting ReFrame for regression testing of their computing facilities.

uk: вхід без авторизації

name: ReFrame: A Regression Testing and Continuous Integration Framework for HPC systems


uk: Комп'ютерні науки

description: The MVC pattern has been one of the most important architectural patterns for server-side web development - it has been implemented and popularized by frameworks like Ruby On Rail or ASP.NET MVC. However, this pattern was traditionally coupled with object-oriented programming. In the talk, I will show how to reinvent MVC pattern, and structure your web application in a functional language - F#. The talk will cover some brief introduction to F# - modern functional programming language running on .Net platform, show how to model MVC layers using functional composition, and at the end show some examples of applying MVC pattern with Saturn - opinionated, web development framework for F# which implements the server-side, functional MVC pattern

uk: вхід без авторизації

name: Reinventing MVC pattern for F# web programming


Singularity: Simple. Fast. Secure.

uk: Комп'ютерні науки

description: One of the biggest problems in scientific HPC is ensuring that results are reproducible. That is, the code a scientist runs locally must be able to run identically on any computational resource. Until recently, the job of ensuring that fell to system administrators who needed to manage a complex web of tools and dependencies on those resources. However, with the introduction of HPC containers via Singularity, the ability to mobilize the compute environment has never been easier. Singularity allows anybody to run their own containers on HPC, ushering in a new era of computational mobility, validity, and reproducibility. Singularity is the most widely used container solution in high-performance computing (HPC). Enterprise users interested in AI, Deep Learning, compute drive analytics, and IOT are increasingly demanding HPC-like resources. Singularity has many features that make it the preferred container solution for this new type of “Enterprise Performance Computing” (EPC) workload. Instead of a layered filesystem, a Singularity container is stored in a single file. This simplifies the container management lifecycle and facilitates features such as image signing and encryption to produce trusted containers. At runtime, Singularity blurs the lines between the container and the host system allowing users to read and write persistent data and leverage hardware like GPUs and Infiniband with ease. The Singularity security model is also unique among container solutions. Users build containers on resources they control or using a service like the Sylabs Remote Build Service. Then they move their containers to a production environment where they may or may not have administrative access and the Linux kernel enforces privileges as it does with any other application. These features make Singularity a simple, secure container solution perfect for HPC and EPC workloads. One of the biggest problems in scientific HPC is ensuring that results are reproducible. That is, the code a scientist runs locally must be able to run identically on any computational resource. Until recently, the job of ensuring that fell to system administrators who needed to manage a complex web of tools and dependencies on those resources. However, with the introduction of HPC containers via Singularity, the ability to mobilize the compute environment has never been easier. Singularity allows anybody to run their own containers on HPC, ushering in a new era of computational mobility, validity, and reproducibility. Singularity is the most widely used container solution in high-performance computing (HPC). Enterprise users interested in AI, Deep Learning, compute drive analytics, and IOT are increasingly demanding HPC-like resources. Singularity has many features that make it the preferred container solution for this new type of “Enterprise Performance Computing” (EPC) workload. Instead of a layered filesystem, a Singularity container is stored in a single file. This simplifies the container management lifecycle and facilitates features such as image signing and encryption to produce trusted containers. At runtime, Singularity blurs the lines between the container and the host system allowing users to read and write persistent data and leverage hardware like GPUs and Infiniband with ease. The Singularity security model is also unique among container solutions. Users build containers on resources they control or using a service like Singularity Hub. Then they move their containers to a production environment where they may or may not have administrative access and the Linux kernel enforces privileges as it does with any other application. These features make Singularity a simple, secure container solution perfect for HPC and EPC workloads. Singularity blocks privilege escalation within the container so if a user wants to be root inside the container, it must be root outside the container. This usage paradigm mitigates many of the security concerns that exists with containers on multi-tenant shared resources. You can directly call programs inside the container from outside the container fully incorporating pipes, standard IO, file system access, X11, and MPI. Keywords HPC, Linux Containers, Singularity, Docker, LXC, portability References Kurtzer, G. M. (2016). Singularity 2.1.2 - Linux application and environment containers for science. Zenodo. http://doi.org/10.5281/zenodo.60736 LinuxContainers.org Infrastructure for container projects. Project sponsored by Canonical Ltd. https://linuxcontainers.org/

uk: вхід без авторизації


Resurrecting Personas for LibreOffice

uk: Комп'ютерні науки

description: Past, present, and the future of LibreOffice's Personalization dialog. LibreOffice has had the ability to use Mozilla Themes (Personas) for some time (Tools ❯ Options ❯ Personalization); but it kept breaking all the time, and never had an acceptable UX. Also tons of errors/warnings, and very slow search and apply processes almost brought it to the point of being killed for good. But I couldn’t let it die, started looking into the related code and the bug reports. Now it has a better UX/UI, and got most annoying bugs/crashers fixed, and is much faster. I will try to present a summary about the journey so far, and the plans for the future.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: RetroShare is a platform that allows users to create a fully decentralized network with a high level of security, privacy and confidentiality. It offers a unique combination of features (File transfer, publishing channels, forums, distributed chat, asynchronous email,...) that provide users lots of ways to interact. Its generic nature allows to create new services based on an existing cryptographic and networking backend. The presentation will start with a short overview of the RetroShare software and motivate the need for a JSON API to safely access the features offered by the core of the software. Our JSON API, to be released in December 2018, uses clever techniques to automatically generate handles from existing code based on Doxygen capabilities as well as a very compact serialization technique. We will explore the potential of the JSON API with concrete examples including the --preliminary-- web interface and Android RetroShare clients. Finally, a call to developers will be made, based on generic examples, while proposing multiple ideas of distributed services to be developed on top of it. The detailed plan for the presentation will be the following. Each line indicates the approximate time duration and number of slides. The presentation is tuned to approximately 20 mins. Overview of the Retroshare platform Services offered by the application (FT, channels, forums, identities, etc) Architecture (libretroshare + Qt UI, main components) Motivation for a JSON API (use of RetroShare as a background library for decentralized communication, Android client, web interface, getting rid of old UI...) The JSON API Automated serialization Automated JSON API code stub generation Interaction, syntax Authentication Concrete examples RetroShare's new web interface Experimental mobile chat app based on RetroShare JSON API ElRepo.io App based on RetroShare JSON API

uk: вхід без авторизації

name: Retroshare JSON: API Making libRetroshare a generic service for decentralized and private communication


Root Zone KSK Rollover update

uk: Комп'ютерні науки

description: The new root DNSKEY is in use since October 11th 2018. The old root DNSKEY is still present in the root zone, and will have the revoked bit set on January 11th, 2019. The intent is to monitor RFC8145 data from all the root-server operators. The DNSKEY roll for the root is a major event. The most noticeable step was using the new DNSKEY, which started on October 11th. The next step is revoking the old key. This is a minor event, but should still be visible in our RFC8145 data. We will monitor this event and track what happens via various measurement techniques.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The bcc project [1], mostly known for its collection of Linux tracing tools, is a framework to ease the development of BPF programs for Linux. Indeed, in its recent releases, the Linux kernel can be extended with small BPF bytecode programs whose memory and fault safety is statically verified at load time. These programs are usually written in a subset of C and compiled to the BPF bytecode. To access kernel memory they must use special functions, called helpers. The bcc framework provides Python, Lua, and C++ wrappers to install and interact with these programs, as well as syntactic sugar for the C subset. In particular, bcc allows developers to access kernel memory as easily as they would access the BPF stack. C programs are transparently rewritten at load time, before their compilation to BPF bytecode, to translate all dereferences of pointers to kernel memory (called external pointers) into calls to the appropriate helpers. In this talk, after providing the necessary background on BPF, we will discuss bcc's use of Clang to track external pointers throughout the code and rewrite their dereferences. We will describe the problems we had to overcome with code examples and detail the limitations of the current implementation. Among other things [2], bcc performs three traversals of the AST to track external pointers across BPF programs (through persistent data structures), follows external pointers through assignments, return values, and structure members, and keeps track of their indirections levels.

uk: вхід без авторизації

name: Rewriting Pointer Dereferences in bcc with Clang: Syntactic sugar for BPF programs


uk: Комп'ютерні науки

description: A close look at IR code generation inside a Modula-2 compiler. With LLVM, one of the main tasks of an compiler engineer is to design the IR code generation from an abstract syntax tree (AST). How easy is it? Although I have worked with and on LLVM for several years now I have not yet written an compiler from scratch. So I began to work on my own compiler for an simple yet powerful language: Modula-2. In this talk I introduce the architecture of the m2lang compiler. My main focus is the generation of basic blocks and IR code from the AST. I show which general patterns emerged and which areas of the languages caused trouble. I also give hints when it is useful to introduce yet another intermediate language between the AST and the IR.

uk: вхід без авторизації

name: Roll your own compiler with LLVM: Easy IR generation


Rspamd in FreeBSD Mail

uk: Комп'ютерні науки

description: After years using SpamAssassin on FreeBSD.org, we have moved towards Rspamd last year to improve spam filtering and integrate it as milter to postfix. With this step we could impressively drop spam rate and increased performance comparing to SpamAssassin. In this presentation, we plan to describe the current architecture of the email system and how Rspamd fits into it. Then we will describe the main challenges for AS system when dealing with lots of technical discussions and mailing lists. We will also explain the unique features of Rspamd and cover the outstanding issues (e.g. with DKIM).

uk: вхід без авторизації


uk: Комп'ютерні науки

description: You can run Android on a wide range of devices, not just phones and tablets. Building Android from scratch is fun and a great way to learn about the lower levels of the operating system. Imagine - here is a chance to create ANY Android configuration you want. In this presentation, I will describe how to take a Raspberry Pi 3 and build Android completely from scratch, using source code from the AOSP (Android Open Source Project). One issue is finding an implementation of the OpenGL ES libraries and GPU drivers with the appropriate Android additions. Luckily, there is a cross-platform graphics layer called SwiftShader that we can use. Another pain point is that the Raspberry Pi doesn’t have a USB OTG port, so we can’t use adb in the normal way. No problem, we can use adb over Ethernet instead. This presentation focuses on the Raspberry Pi, but in a similar way you can port Android to many other devices. If it can run Linux, there is a good chance it can run Android.

uk: вхід без авторизації

name: Running Android on the Raspberry Pi: Android Pie meets Raspberry Pi


uk: Комп'ютерні науки

description: This talk presents status of Russian national crypto standards and their support in OpenSource projects. In parallel to mainstream cryptography world, Russia has a strong school of crypto algorithms development, including block ciphers, hash functions, digital signature, etc. There is slow but ongoing trend of harmonizing GOST algorithms usage with the rest of Internet community. This talk is dedicated to debunking several myths and presenting current state of support in open source project. GOST Myth busting: insecure, Russian-only, unnecessary to the rest of the World Major areas: PKI, CMS, TLS, DNSSEC, XML DSIG New areas of contribution: rekeying, new crypto modes OSS support: OpenSSL GnuTLS LibreSSL Linux kernel libgcrypt you name it

uk: вхід без авторизації

name: Russian crypto algorithms in the OpenSource world: GOST crypto demystified


rust-vmm: shared virtualization crates

uk: Комп'ютерні науки

description: rust-vmm aims to create a common base of virtual machine monitor (vmm) components written in Rust. It's organized as a shared-effort, shared-ownership open-source project that includes (so far) the crosvm, Kata Containers, and Firecracker teams . We believe that Rust is a great fit for a vmm: its memory management guarantees simplify the task of security hardening, while its roots as a system programming language ensure C-like performance. So far, we've started with the initial KVM wrapper crate, and, while separating out a few more basic functionality crates is underway, we still have to answer questions like "can independent teams compose reliable yet different vmms out of a set of decoupled components?", "how much can be decoupled?", "what's the right way to import/build these components into the larger vmm projects?", or, "does the world even need that many vmms?". During this talk, we'll look at some ways to answer these questions, but we're really here to get the room's feedback and opinions!

uk: вхід без авторизації


uk: Комп'ютерні науки

description: A tour through out the adoption of Rust in the GNOME and Freedesktop communities. Showcasing existing projects that adopted Rust like Librsvg and Gstreamer, but also desktop applications from scratch, new infrastructure tooling, and the challenges of integrating Rust with the rest of the ecosystem.

uk: вхід без авторизації

name: Rust and GNOME: Adoption and impact of Rust through out GNOME


uk: Комп'ютерні науки

description: Which crates call a vulnerable function? Which deprecated functions are central to crates.io and should not be deleted? Am I breaking important clients and their dependencies with my new release? These are questions that package publishers and owners of package repositories crave for answers to. To solve this problem, we created RustPräzi: a call-based dependency network that represents a gigantic single large versioned call graph of all crates.io packages. In this talk, I will describe how RustPräzi is developed, the challenges we faced while compiling the entire crates.io and the future directions. Our goal is to make RustPräzi a community effort that can help in maintaining the stability of crates.io. For example, bad releases which may negatively impact crates.io can be detected and avoided.

uk: вхід без авторизації

name: RustPräzi: a tool to build an entire call graph of crates.io: From package-based to precise call-based dependency network analysis


uk: Комп'ютерні науки

description: Rust is a relatively new programming language aimed as a safe competitor of C. There are already attempts to write extension modules in rust and load them into CPython. A whole new approach would be to re-implement the Python language in rust. This is what RustPython is about. RustPython is a relatively new project. The aim of the project is to create a Python interpreter written entirely in Rust. Until now we used many of the language features available in rust, such as vectors, hashmaps, iterators. To implement standard library modules, we would like to wrap existing rust crates. This is what we did with the json module for example. During this talk, we will demo the current state of the art of the project. We will take a dive into the internals of RustPython, from parsing, compilation, bytecode to actual execution on the Python virtual machine. Next to this we will cover the growing community, and the road ahead!

uk: вхід без авторизації

name: RustPython: a Python implementation in Rust: Building a Python 3 interpreter in Rust


uk: Комп'ютерні науки

description: "Salut à Toi" is a Python based multi-platforms decentralized communication ecosystem. It is using a standard protocol (XMPP) and offers a lot of features like chat, e2e encryption, files sharing, photo albums, events, (micro)blogging, forums, remote control, tickets, merge-requests and even a decentralized web framework. This talk is an overview and a demonstration of the project, and it will explain how the Python technologies helped. "Salut à Toi" is a large communication ecosystem based on a daemon/frontends architecture, and available on many platforms (desktop, mobile, web, console). It uses the power of XMPP far beyond instant messaging, and takes profit of many exciting python technologies such as Twisted, Kivy, python-for-android, Jinja2, or Urwid. This talk will be a quick tour of the project mainly focusing on desktop/mobile frontend and web frontend. After a brief explanation of the project, the association behind, and its goals, a demo of the desktop/mobile frontend will be done on GNU/Linux and on Android, with features likes: - one2one and group chat with e2e encryption (OTR and OMEMO) - sharing a folder either in P2P or through a server à la Owncloud/Nextcloud, with easy permission handling - remote controlling a VLC instance running on the desktop through the Android app Then a demo of the web frontend will take place with blogging, events, forums, tickets and merge-requests. This will be the occasion to have some words on the Python technologies used and how, and why Python has helped a lot. More details on the project can be found on https://salut-a-toi.org or on the blog of the main developer: https://www.goffi.org.

uk: вхід без авторизації

name: Salut à Toi: A Python Based Social Network And More: A multi-platforms communication ecosystem based on XMPP and Python


uk: Комп'ютерні науки

description: Implementing network protocols is a hard task, especially considering the support of conflicting implementations, or long term maintenance. And it does not help that testing them often requires complex client or server setups. By removing IO from the equation, and instead working directly with buffers, we’ll see that testing instantly becomes easier to setup, the core implementation becomes completely deterministic, and the protocol gets more reusable. This talk draws heavily from experience implementing protocols such as HTTP or AMQP. It will show how to build protocols in such a way, using the nom parsing library, cookie-factory serialization library, and a new state machine development library. And we will see how to reuse the resulting protocols, by swapping out the underlying transport (TCP, various TLS libraries, unix sockets…) or wrapping it in a nice futures based API.

uk: вхід без авторизації

name: Sans IO: safe and testable network protocols: Building safe, deterministic and testable network protocols by removing IO


uk: Комп'ютерні науки

description: SAYMON is a software platform. It makes possible to build a kind of specific problem solution in days. There's a great technology stack we would like to describe and discuss on FOSDEM19. MQTT, HTTP, WebSockets, NodeJS Actors, Redis, Kafka, Hierarchy and Documents Storage, Time-Series Storage, Front and Back Ends. ICT and IoT SW projects made by SAYMON team description. SAYMON use for tech people opportunities. We will talk for modern technologies and for it's business appliances. SAYMON architecture review. Object information model. Trees and graphs of hierarchies of objects. Infrastructure and smart things control methods review. Time-series collections and storage as well as current and future usage - visualisation, simple aggregates and machine-learning. Event processing. Incidents register and processing. Incidents correlations. Notifications and alerts implementation aspects. We will make demo and show cases.

uk: вхід без авторизації

name: SAYMON - object-oriented monitoring and management for both ICT&IoT: object hierarchies and time-series for robust back-end and visual front-end on top


Scale Your Auditing Events

uk: Комп'ютерні науки

description: The Linux Audit daemon is responsible for writing audit records to the disk, which you can then access with ausearch and aureport. However, it turned out that parsing and centralizing these records is not as easy as you would hope. Elastic's new Auditbeat fixes this by keeping the original configuration, but ships them to a centralized location where you can easily visualize all events. You can also use Auditbeat to detect changes to critical files, like binaries and configuration files, and identify potential security policy violations. This talk shows you what can you do to discover changes, events, and potential security breaches as soon as possible on interactive dashboards. Additionally, we are combining Auditd events with logs, which are security relevant.

uk: вхід без авторизації


SDR Makerspace sdrmaker.space

uk: Комп'ютерні науки

description: SDR Makerspace is a collaboration between the European Space Agency and Libre Space Foundation with the objective of bringing innovative open-source SDR technologies to space communications. Makers, open-source hackers, SDR enthusiasts, and researchers are brought together to work on small SDR hardware and software projects, focusing on rapid prototyping and development of reusable open-source SDR components for future CubeSat missions. In this presentation, we give an overview of the current activities and present the results achieved so far. SDR Makerspace is a collaboration between the European Space Agency and Libre Space Foundation with the objective of bringing innovative open-source SDR technologies to space communications. Makers, open-source hackers, SDR enthusiasts, and researchers are brought together to work on small SDR hardware and software projects, focusing on rapid prototyping and development of reusable open-source SDR components for future CubeSat missions. In this presentation, we give an overview of the current activities and present the results achieved so far.

uk: вхід без авторизації


Secure Web Applications with AWA

uk: Комп'ютерні науки

description: Web application security is often underestimated, and using a secure framework can help reduce application vulnerabilities. Ada Web Application (AWA) is a web framework that leverages Ada's safety features to provide a secure environment on top of which safe applications are built. AWA is based on several Java-like technologies such as Java Beans, Java Servlet, Java Server Faces, other standards such as OAuth2, REST and OpenAPI, all implemented in Ada. This presentation briefly describes the AWA architecture and how applications are built with it. The presentation highlights some of the Ada functionalities that contribute to the safety and make applications secure and reliable.

uk: вхід без авторизації


Securing Secure Boot on Xen

uk: Комп'ютерні науки

description: UEFI is a replacement for the BIOS. It supports Secure Boot which is signature verification of bootloaders and OS kernels which helps prevent attacks where malware injects itself into the bootloader or kernel so that it can be loaded during startup. Despite the poor reputation that Secure Boot has in the free software community (mostly due to non-technical reasons), this would be useful to have for VMs running on Xen. It is also required for features in guests such as Windows Credential Guard. This talk describes how Secure Boot support has been added to Xen. Xen has long had support for running guests booted with UEFI using a build of edk2/Tianocore built for VMs called OVMF. Systems that use UEFI boot have a small amount of NVRAM that stores variables critical for booting the system. Secure Boot is built upon the concepts of authenticated variables and a set of keys. Authenticated variables require updates to be signed by particular keys. These keys themselves are stored in authenticated variables. Verifying updates to authenticated variables needs to be performed in a way that cannot be tampered with by the guest which may have been infected by malware. There are a few ways of dealing with this. The talk will look at the approach taken by bare metal, KVM, and finally how we have implemented it for Xen. This is done by introducing a new component called varstored which runs outside of the context of the guest. It acts as an interface to the guest's NVRAM and verifies updates to it. Actual storage of the NVRAM is delegated to a number of backends to support different uses cases. For example, for a single host it could store the NVRAM in a simple file. For a pool of hosts it could store the NVRAM in database server accessible poolwide.

uk: вхід без авторизації


uk: Комп'ютерні науки

description: The National Development Council in Taiwan have asked the OSSII, a local LibreOffice service provider, to develop a solution that can directly generate ODF reports, while the servers in public administrations do not need to change a lot. To adopt ODF and LibreOffice in Taiwan, a very important part, besides desktop applications, is to ask the reports generated from servers in all the public administrations to be in ODF format. Currently almost all reports are in Microsoft office format; some of them are even non-standard -- they can be opened by Microsoft Excel, but can not be converted by LibreOffice. Hence, the National Development Council asked the OSSII, a local LibreOffice service provider, to develop a solution that can directly generate ODF reports, while the server side do not need to change a lot. This talk gives a simple introduction of how this solution works.

uk: вхід без авторизації

name: Server side solution for generating ODF reports: An important step to adopt ODF in Taiwan


uk: Комп'ютерні науки

description: Consider a Java application in a private banking system. A new network administrator is hired, and while going around, he notices that the app is making network calls to an unknown external endpoint. After some investigation, it’s found that this app has been sending for years confidential data to a competitor (or a state, or hackers, whatever). This is awkward. Especially since it could have been avoided. Code reviews are good to improve the hardening of an application, but what if the malicious code was planted purposely? Some code buried in a commit could extract code from binary content, compile it on the fly, and then execute the code in the same JVM run… By default, the JVM is not secured! Securing the JVM for a non-trivial application is complex and time-consuming but the risks of not securing it could be disastrous. In this talk, I’ll show some of the things you could do in an unsecured JVM. I’ll also explain the basics of securing it, and finally demo a working process on how to do it.

uk: вхід без авторизації

name: Securing the JVM: Neither for fun nor for profit, but do you have a choice?


uk: Комп'ютерні науки

description: Set-versioned package dependencies is a free software technology invented in ALT and implemented in ALT package repositories and distributions since 2010 to prevent breakages caused by updates of shared libraries containing incompatible changes. Every time a shared library is going to be updated, there is a chance of incompatible changes in the library that will cause breakages in some of its clients. This happens, for example, when a symbol provided by the library is removed but the soname remains unchanged. Detecting such changes manually is getting more problematic nowadays when packages are updated automatically by scripts. The approach implemented in ALT package repositories to address this problem is to encode all symbols provided by shared libraries in package Provide tags, and to encode all symbols required by clients of shared libraries in package Require tags. In this talk the speaker will describe in detail how to implement such encoding efficiently, explain the computational costs associated with set-versioned package dependencies, and share his experience of maintaining package repositories based on set-versions. The primary auditory of this talk are maintainers of package repositories and distributions who might be interested in addressing the problem of shared library updates.

uk: вхід без авторизації

name: Set-versioned package dependencies: addressing the problem of shared library updates


uk: Комп'ютерні науки

description: PHCpack is a software package for solving polynomial systems with homotopy continuation. The talk will tell the story of the development of phcpy, a scripting interface for PHCpack, which has been under development for the past five years. One result is the availability of the software in a Python2, Python3, and SageMath kernel of JupyterHub. Other relevant details: The talk will tell the story of the development of phcpy, a scripting interface for PHCpack, which has been under development for the past five years. Working on phcpy involved the following activities: (1) Accessing code in a shared object file from Python. (2) Documenting the code with Sphinx. (3) CGI processing, managing user information and user data. (4) Making the code available online with JupyterHub. The presentation will provide examples of the expertise acquired for the four tasks mentioned above.

uk: вхід без авторизації

name: Solving Polynomial Systems in Python: phcpy: a scripting interface for PHCpack


uk: Комп'ютерні науки

description: This lightning talk highlights how to monitor OpenLDAP in detail with Python module slapdcheck. OpenLDAP servers are typically used as backed for authentication (login) and other mission-critical infrastructure components. Furthermore OpenLDAP setups can be non-trivial resulting in higher risk that something could go wrong. The talk will introduce the Python module package slapdcheck which implements monitor checks for OpenLDAP servers: * performance data * allocated back-mdb pages * need for restart * replication state slapdcheck parses cn=config to automatically adjust monitoring checks based on current running configuration.

uk: вхід без авторизації

name: slapdcheck: Monitoring OpenLDAP with Python


uk: Комп'ютерні науки

description: The SMB3 POSIX Extensions, a set of protocol extensions to allow for optimal Linux and Unix interoperability with NAS and Cloud file servers, have evolved over the past year, with test implementations in Samba and in the Linux kernel. These extensions address various compatibility problems for Linux and Unix clients (such as case sensitivity, locking, delete semantics and mode bits among others). This presentation will review the state of the protocol extensions, what was learned in the implementations in Samba and provide an opportunity for feedback and suggestions for future improvements to the POSIX extensions.

uk: вхід без авторизації

name: SMB3 UNIX Extensions: Where we are, what remains to be done.


uk: Комп'ютерні науки

description: Poor quality code contributes to increasing technical debt and makes the software difficult to extend and maintain. Code smells capture such poor code quality practices. Traditionally, the software engineering community identifies code smells in deterministic ways by using metrics and pre-defined rules/heuristics. Creating a deterministic tool for a specific language is an expensive and arduous task since it requires source code analysis starting from parsing, symbol resolution, intermediate model preparation, and applying rules/heuristics/metrics on the model. It would be great if we can leverage the tools available for one programming language and cross-apply them on another language. In this presentation, I would like to present our work on detecting smells using deep learning models. It will cover the tooling aspects summarizing the preparation goes behind the scene before the source code is fed into a deep learning model. The focus of the work is on two specific aspects: 1. to show that we can detect code smells with minimal pre-processing without converting them to a feature set. We compare the performance of smell detection among different deep learning models (CNN and RNN) in different configurations (i.e., model architectures). 2. to explore the feasibility of applying deep learning models across the programming languages. In other words, learning smell detection from samples in one programming language and using the model to detect smells in samples of another programming language. The presentation will bring out insights from this exploration.

uk: вхід без авторизації

name: Smelling Source Code Using: Deep Learning


uk: Комп'ютерні науки

description: I will present a new option added to the clang static analyzer (CSA) to refute false bug reports, using satisfiability modulo theory (SMT) solvers. In this talk, I will: (1) give a general overview of the CSA, how it works and its limitations; (2) show how we extended the existing heuristics to remove spurious bug reports: path constraints produced by CSA are encoded as SMT problems, SMT solvers precisely check them for satisfiability, and bug reports (whose associated path constraints are unsatisfiable) are removed; (3) show the evaluation of our refutation algorithm when analyzing twelve widely used open-source projects; (4) show how to set up an automated testing environment using scripts provided by the CSA infrastructure. As an example, I will show how to set up the twelve projects used to evaluate our refutation algorithm. The target audience of this talk is anyone interested in learning more about the clang static analyzer and in analyzing their C/C++/ObjectiveC projects. The clang static analyzer works by symbolically executing a program, collecting the symbols and constraints for every path in the program, and reasoning about bug feasibility using a built-in solver called RangedConstraintManager. It was designed to be fast so that it can provide results for common mistakes (e.g., division by zero or use of uninitialized variables) even in complex programs. However, the speed comes at the expense of precision; it cannot handle some arithmetic operations (e.g, remainders) or bitwise expressions. In these cases, the analyzer discards the constraints and might report false bugs. The new option works by adding an extra step in the program analysis after the bug is found by the built-in solver but before reporting it to the user; the path and the constraints that trigger the bug are encoded in SMT and checked for satisfiability. I will present an evaluation of the crosscheck when analyzing twelve C/C++ open-source projects of various size (tmux, redis, openssl, twin, git, postgresql, sqlite3, curl, libWebM, memcached, xerces-c, and XNU). When analyzing these projects with bug validation enabled, the slowdown is negligible in cases where no bug is refuted (average 1.2% slowdown) and, when it finds false bugs, the bug validation gives a small speedup (average 6.2% speedup). On average, 12.2 bugs per program were refuted by the SMT solver, ranging from 1 bug refuted in redis to 51 being refuted in XNU. Finally, I will present a set of scripts provided by the CSA that can be used to set up an automated testing environment. The scripts are freely available and their presentation will follow the process described in https://github.com/mikhailramalho/analyzer-projects.

uk: вхід без авторизації

name: SMT-Based Refutation of Spurious Bug Reports in the Clang Static Analyzer


uk: Комп'ютерні науки

description: Solid is a new ecosystem for the Web, in which people store their own data instead of having to upload it to applications. This changes how we will build apps: we no longer have to harvest people's data, but ask permission to access people's data space. Solid was created by the inventor of the World Wide Web, Sir Tim Berners-Lee. Its mission is to reshape the web as we know it. Solid will foster a new breed of applications with capabilities above and beyond anything that exists today. Within the Solid ecosystem, people decide where they store their data. Photos they take, comments they write, contacts in their address book, calendar events, how many miles they run each day from their fitness tracker… these are all stored in their Solid pod. This Solid pod can be in their house or workplace, or with an online provider of their choice. Since they own their data, they are free to move it at any time, without interruption of service. People can give apps permission to read or write to parts of their Solid pod. So whenever they’re opening up a new app, they don’t have to fill out their details ever again. Things saved through one app are available in another: syncing is never needed, because data stays with people. This approach protects people's privacy and is also great for developers: we can build apps without harvesting massive amounts of data first.

uk: вхід без авторизації

name: Solid: taking back the Web through decentralization: App development as we know it will radically change


uk: Комп'ютерні науки

description: Solo5 is a microkernel friendly, sandboxed, re-targetable execution environment for unikernels, with a taste for minimalism. We will start with an overview of core Solo5 concepts and present the interfaces it offers to the unikernel/library operating system/application developer. Using existing library operating systems, such as MirageOS, we will demonstrate the developer experience for various Solo5 targets, going on to show how rigorously applying minimalist principles to interface design is used to our advantage, blurring traditional lines between unikernels, processes, kernels and hypervisors. We will conclude with some lessons learned during development of Solo5 thus far, and present ideas and challenges for future development. The target audiences for this talk are application developers with an interest in operating systems and unikernels, language runtime and toolchain developers interested in porting their language to a unikernel environment such as Solo5, and operating systems developers in general. No {uni,micro,separation,monolithic,}kernels or hypervisors will be harmed during this talk.

uk: вхід без авторизації

name: Solo5: A sandboxed, re-targetable execution environment for unikernels: A {unikernel,kernel} is just a {process,hypervisor} in disguise


uk: Комп'ютерні науки

description: How and why hack a Tesla and its Linux systems? What is possible, implemented and 'to-do'? Call for joining the new world of Electric Vehicle Hacking. Do you want to help to bring some Freedom to our cars? My 'Tesla Hacking' evolved to a broader project 'FreedomEV'. Building a community to encourage and build better and OpenSource sofware for in-vehicle entertainment and beyond... The current state of Tesla Hacking. Difficulties. Strategies. What has been done and what is possible? The creation of an opensource platform for hacking electric Linux-based vehicles. It started out with hacking my Tesla Model X. And is evolving now into a community project which seeks your cooperation to build new exciting features into Electric Vehicles. Welcome to the launch of FreedomEV! The FreedomEV project aims to give you full control over your own vehicle. Over it's security and full features and capabilities. The future possibilities are endless. We explore how we are doing this, why, and what is possible. Consider this a call for your participation as well. Currently only supporting Tesla Model S and X with ARM MCU, but looking to broaden vehicle support to include Intel based MCU's and Tesla Model 3 and possibly other manufacturers too?

uk: вхід без авторизації

name: Tesla Hacking to FreedomEV!: Bringing Freedom to electric vehicle software


uk: Комп'ютерні науки

description: Internet has become an integral part of our lives and everything we do online leaves a trail of data. This data is being collected, analyzed, sold and aggregated to cast profiles about us by companies across the globe. In the physical world, if a stranger was to follow you everywhere you go, keep a log of who you talk to and meet with, read your mails and then share all this information with others, wouldn’t you be concerned? But somehow in the digital world we do not seem to worry too much about the same scenarios. One of the main reasons for this is lack of awareness about how most Internet companies are making money these days. In fact, as a consequence of the business model of brokering personal data, a surveillance capitalism emerges. With the advent of SaaS, website and app owners usually outsource functionality like analytics, recommendations, A/B tests to be managed by third parties, with legitimate business purposes. While these use-cases might seem legit, the way data is collected to solve the legit use-cases are bound to harm the user’s privacy. You end up sharing sensitive user data with the companies you may have never heard of. They can not only link the webpages you visit but also have the ability to de-anonymize you by knowing your name, email, address, passport number etc. Once this information leaves your machine, it is out of your control. From it, a detailed profile about you is created, which is then available to a whole bunch of parties, which may or may not live to any ethical standards. With accurate enough profiles, companies and data brokers can simulate the behaviors and decision making of the world's population. They don't even need everyone's interactions because they can infer the whole population behavior from just a few examples of each cluster. This is why privacy is everyone’s concern so we need to raise awareness: - The general public needs to know how every move that they make in the online world is being tracked, shared and used. - Developers need to consider how their users and customers' data deserves to be treated with respect and care, not sold unknowingly to faceless companies. But how do you transmit this complex reality to the broader audience outside our community? What data is being shared unconsciously? Who are these data collectors? What is the impact of our blocking mechanisms as users? This is precisely the problem both Local Sheriff and Trackula tackle. In this joint talk, we will showcase how two groups of people independently built Browser Extensions to answer these questions. Local Sheriff - informs the user about which PII is shared, and with which companies? Trackula  - from a less technical perspective and through a more visual UX focuses on raising awareness to non technical users.

uk: вхід без авторизації

name: Watching Them Watching Us WebExtensions Exposing Privacy Leaks


uk: Комп'ютерні науки

description: What are spatial reference systems and how to convert between them? What are various ways of creating transformation representation in Boost.Geometry and how to use them to convert between polygons on the surface of a globe and flat surface of a map? We discuss solutions to those questions highlighting some of the latest developments in Boost Geometry, the library that is currently being used to provide GIS support to MySQL. The implemented solutions allows to define transformations both in compile-time and run-time with known tradeoffs: execution time vs compilation time, run-time flexibility vs compile-time error reporting, etc. Last but not least we discuss similarities and differences between Boost.Geometry and Proj4 libraries.

uk: вхід без авторизації

name: Spatial Reference Systems Transformations with Boost.Geometry


uk: Комп'ютерні науки

description: Proven in production use for decades, GCC (the GNU Compiler Collection) offers C, C++, Fortran, and other compilers for a multitude of target systems. Over the last few years, we -- formerly known as "CodeSourcery", now a group in "Mentor, a Siemens Business" -- added support for the directive-based OpenACC programming model. Requiring only few changes to your existing source code, OpenACC allows for easy parallelization and code offloading to accelerators such as GPUs. We will present a short introduction of GCC and OpenACC, implementation status, examples, and performance results. "OpenACC is a user-driven directive-based performance-portable parallel programming model designed for scientists and engineers interested in porting their codes to a wide-variety of heterogeneous HPC hardware platforms and architectures with significantly less programming effort than required with a low-level model."

uk: вхід без авторизації

name: Speeding up Programs with OpenACC in GCC: ... using the compute power of GPUs and other accelerators