Severless PHP Case : Agile Dashboard via GitLab Board API
0 likes591 views
本議程將分享如何利用 Serverless PHP，實作出敏捷儀表板 (Agile Dashboard) 定期報告的經驗。 過去每週我都會為三個技術團隊產生敏捷儀表板，以檢視團隊的敏捷健康度，並找出問題點。包括：Sprint 的團隊狀況、Sprint 的個人狀況、Burnup Chart、Cycle Time Chart 等。 流程上，團隊使用 GitLab Board 管理開發進度，各類事項的建置、進度與完成均在其上。為了配合產出合適的敏捷儀表板，我們也制定了一套「Label」管理辦法，可以為所有事項標示出必要的屬性，包括 Story points 等。如此，我只要透用 GitLab API 就可以隨時調出任何事項的異動狀態，並繪製出團隊所需要的報告。 技術上，為節省管理及維運成本，從工作排程 (例如每週一次)、程式部署 (Severless)，到報告下載點 (Cloud Storage)，均由雲端平台服務完成。
1 of 67
Download to read offline
Ad
Recommended
Progressive Deployment & NoDeploy
Progressive Deployment & NoDeployYi-Feng Tzeng 從 Progressive Deployment 面向敘談 DevOps 領域中的 Continuous Integration 及 Continuous Deployment，並提出 NoDeploy 瘋狂想法的可行性。
Dev(Sec)Ops - Architecture for Security and Compliance
Dev(Sec)Ops - Architecture for Security and ComplianceYi-Feng Tzeng 技術無邊，資安及法遵有邊。軟體架構師規畫架構時，有時會忽略資安及法規的重要性。面對各國各式的法令及商業契約遵循要求，現代軟體架構設計時也應當具備合理的因應措施，包括 2012 年《個人資料保護法》及今年號稱「史上最嚴格的個人資料保護法」的 《GDPR》等。此議程將探討軟體架構設計如何應對各種資安自動化及法遵的挑戰。
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...
Case Studies and Lessons Learned from SSL/TLS Certificate Verification Vulner...JPCERT Coordination Center Recently we’ve seen many vulnerabilities related to improper certificate validation. Those vulnerabilities come from developers’ ignorance or misunderstanding of basic knowledge of certificate validation or insufficient testing of validation code. This presentation starts with the basics of the certificate validation process, surveys several vulnerabilities in the real world, and concludes with lessons learned from real-world vulnerabilities.
This is presented on JavaOne2015.
Android Secure Coding
Android Secure CodingJPCERT Coordination Center The document discusses secure coding practices for Android app development. It begins with an introduction that notes the growing number of Android users and prevalence of Android vulnerabilities reported in news headlines. The document then covers various categories of Android app security issues and explores examples of specific vulnerabilities, including unintended activity exposure, local servers accessible to other apps, and unintended content provider exposure. Root causes and solutions are provided for each vulnerability along with references for developers. The goal is to help developers learn from real-world examples and avoid common vulnerabilities through secure coding techniques.
Under the Hood of Reactive Data Access (1/2)
Under the Hood of Reactive Data Access (1/2)VMware Tanzu SpringOne Platform 2017
Christoph Strobl, Pivotal; Mark Paluch, Pivotal
"A huge theme in Spring Framework 5.0 and its ecosystem projects is the native reactive support that empowers you to build end-to-end reactive applications. Reactive data access especially requires a reactive infrastructure. But how is this one different from the ones used before? How does it deal with I/O?
In this session, we will demystify what happens inside the driver and give you a better understanding of their capabilities. You will learn about the inner mechanics of reactive data access by walking through reactive drivers that are used in Spring Data."
OpenChain 2.0 specification in a nutshell
OpenChain 2.0 specification in a nutshellSZ Lin OpenChain, the ISO standard, defines effective open source compliance. This slide deck aims to let people get familiar with OpenChain specification from scratch.
OpenChain - The Industry Standard for Open Source Compliance
OpenChain - The Industry Standard for Open Source ComplianceSZ Lin OpenChain is a legal compliance process and standard for the implementation of open source software in the enterprise supply chain. It enables the upstream and downstream of the software supply to follow and share the open source compliance obligations accordingly; moreover, it can also help the enterprises to collaborate with the open source communities positively.
Marcin Grzejszczak - Contract Tests in the Enterprise
Marcin Grzejszczak - Contract Tests in the EnterpriseSegFaultConf Is your legacy application talking to a service that is never up and running on your shared testing environment? Does your company waste a lot of time and money on regression testing only to see that, yet again, someone has created a typo in the API? Enough is enough. Time to fix this problem using contract tests!
In this presentation you’ll see how to migrate a legacy application to work with stubs of external applications. We’ll show different ways of increasing your test reliability by writing adding contract tests of your API. You’ll see the difference between producer and consumer driven contracts.
SBA Live Academy: A Primer in Single Page Application Security by Thomas Konrad
SBA Live Academy: A Primer in Single Page Application Security by Thomas KonradSBA Research This presentation discusses security concerns and best practices for single page applications (SPAs). It begins with an overview of SPAs and popular frameworks like Angular and React. It then covers cross-site scripting (XSS) risks, with a focus on DOM-based XSS issues that are common in SPAs. The presentation provides examples of XSS vulnerabilities and recommendations for mitigation using input sanitization libraries and content security policy (CSP). It also addresses risks from outdated dependencies and provides checklists for secure SPA development.
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...SBA Research Zielgruppe: Admins, CIO
Schwerpunkt: technisch
Sprache: Deutsch
Abstract
**********
In Unternehmen werden Vertrauensbeziehungen zwischen Active Directory Forests angelegt. Ist damit die eigene Domäne in Gefahr? Der Talk zeigt exotischere Angriffe innerhalb von Active Directory und über Forest-Grenzen hinweg. Und warum wir durch Drucker dem Untergang geweiht sind.
About the Speaker:
*********************
Reinhard Kugler is Principal Security Consultant at SBA Research. He focuses on secure software engineering, infrastructure security and malware analysis. Currently his main activities concentrate on penetration testing.
DevSecOps for Developers: How To Start
DevSecOps for Developers: How To StartPatricia Aas How can you squeeze Security into DevOps? Security is often an understaffed function, so how can you leverage what you have in DevOps to improve your security posture?
Often the culture clash between Security and Development is even more prominent than between Development and Operations. Understanding the differences in how these functions work, and leveraging their similarities, will reveal processes already in place that can be used to improve security. This fine tuning of tools and processes can give you DevSecOps on a shoestring."
Nsc42 security knights slayer of dragons 0-5_very_short_15m_share
Nsc42 security knights slayer of dragons 0-5_very_short_15m_shareNSC42 Ltd Security Architecture in DEVOPS
Title:
Security Architect, slayer of dragons defenders of the realms and protectors of the cybersecurity automation
Synopsis:
The talk will take the audience on a journey from the origin of the security architecture, the challenge of cloud security and the role of an architect in the dev-sec-ops world.
The talk explains the difference between traditional command and control governance and the solution to avoid starving automation and innovation with traditional security governance
We will explore:
Security Gates and why they do not always work in dev-ops
Automation how-tos:
How to deploy cybersecurity at scale
Why is important to know how to deal with people
Automation in the pipeline is the king
If time is available the talk will explore some additional lesson learned
rough length: compressed version 30 min normally 50 min or workshop format
Audience Take Away:
How to build a cybersecurity programme with architecture at the heart
how to do traditional security governance
how to mix governance and agile development as well as dev sec ops
how to extract patterns from existing design
the value of design principle patterns and why they are key to go fast.
how and when to use tools (SAST/DAST) and when to engineer
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...SBA Research Target Audience: Everyone involved in software development (developers, team leaders, CISOs in software-oriented companies)
Focus: technical
Talk language: English
Abstract
*********
Let’s face it: There is no such thing as a big-bang launch any more. We all want to be agile and react quickly to the wishes and demands of our customers in software development. The downside of this approach is that security has a hard time keeping pace, thereby often being completely neglected. That’s why we need to bridge the gap between security and agility. In this talk, we’ll have a look at how security can become an integral part of the development process, and more than just a penetration test at the end. We’ll see how we can overcome immediate pain and get strategic focus in software security.
About the Speaker:
*********************
Thomas Konrad is Principal Security Consultant at SBA Research and has been part of software security team since 2010. He focuses on secure software development, web application security, penetration testing, secure software design, architecture, and process, and trains software development teams in those areas.
PyConPL 2017 - with python: security
PyConPL 2017 - with python: securityPiotr Dyba Cyber-security is a critical part of all distributed applications. By understanding and implementing proper security measures, you guard your own resources against malicious attackers as well as provide a secure environment for all relevant parties.
This presentation is a gentle introduction to it.
Data Security and the Hard Outer Shell
Data Security and the Hard Outer ShellMatt Turner Matt Turner, CTO of Media & Entertainment at MarkLogic Corporation, discusses evolving security threats and the need to move beyond perimeter-based network security approaches. Current approaches focus outward on external threats but the threat landscape has changed, with nearly half of financial services breaches caused by insiders. MarkLogic argues for implementing security within systems rather than just at barriers and boundaries between systems. The presentation includes slides on MarkLogic's database platform and its flexibility, security and ability to ask questions of stored data.
Take a step forward from user to maintainer or developer in open source secur...
Take a step forward from user to maintainer or developer in open source secur...SZ Lin There are a variety of high-quality open source security-related tools available in penetration testing tools, forensics tools, hardening tools, fuzz tools, and network monitoring tools. These tools could be used freely; however, we might face some issues while using it. Therefore, it is essential to have the ability to maintain or develop these tools. In this slide, SZ Lin introduces Security Tools Packaging Team in Debian; this team aims to maintain collaboratively many security tools and merge back tools packaged by security-oriented Debian derivatives (e.g., Kali). Also, SZ shares the experience in discussing and collaborating with open source maintainers and developers in open source security-related tools.
Trusted Third Parties are NOT Trust Worthy!
Trusted Third Parties are NOT Trust Worthy!nettitude_labs The document summarizes a simulated attack on an organization via compromise of a trusted third party supplier. It demonstrates how threat actors used phishing to deliver malware, abused active directory trusts to move laterally between the supplier and target networks, and extracted credentials and customer data from the target organization's systems after gaining initial access through the third party. It stresses that such trusted third party attacks are a real risk and organizations need to carefully restrict access and monitor for signs of compromise when connecting suppliers to their internal networks and assets.
Abusing Glype Proxies - Attacks, Exploits and Defences
Abusing Glype Proxies - Attacks, Exploits and DefencesAditya K Sood Proxies play a critical privacy role by allowing anonymous web surfing and identity cloaking. Glype is an open source PHP proxy that is commonly used and provides anonymity. However, Glype proxies also have weaknesses that can allow attackers to exploit them. Misconfigured Glype proxies can leak users' sensitive information through log files and cookies. Attackers can also use Glype proxies to distribute malware by modifying the proxy software and using plugins. Strong authentication, disabling logs, and removing vulnerabilities are recommended to prevent abuse of Glype proxies.
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍Ray Song 在SHLUG 2016年9月月度技术分享会上做的展示。
距离9月6日主办方Legitimate Business Syndicate发布2016 DEF CON CTF Final Scores已久，仍然没有公布源代码，不得已根据libmaru、Riatre等的逆向结果，再粗糙分析了一些。
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610Cisco DevNet Join to explore concrete use cases implemented with the Administrative & Serviceability capabilities of Webex Teams (formally Cisco Spark) APIs.
We'll cover how to manage Webex Teams Users but also track Spaces activity through the recently added /events API resource. Moreover, we will dig into the possibilities offered by the xAPI for Webex Teams-registered devices: discover Company Branding, People counting, and how to initiate Video Calls to Webex Teams & SIP addresses.
This session is aimed at Webex Teams Administrators, Compliance Officers, and Cisco Collaboration Endpoints owners.
DEVNET-3610
https://www.ciscolive.com/us/learn/sessions/session-catalog/?search=DEVNET-3610
重新想像：如何做技術選型決策 / Rethinking : Technical Decision
重新想像：如何做技術選型決策 / Rethinking : Technical DecisionYi-Feng Tzeng 《技術管理者論壇：商業與技術的平衡》
【主題】重新想像：如何做技術選型決策
技術選型是個既『成熟』又『新鮮』的老話題。成熟的是網路充斥著各種資訊；新鮮的是技術每年推陳出新，總會帶來新變化。本場次會以全新有趣又直擊靈魂的問題引導方式，與大家一同深入技術選型的眾多領域。
這趟旅程未必有答案，畢竟複雜的問題沒有唯一解，但我提出的問題會嘗試讓你與自己對話，就請跟著我一起試著顛覆既有的認知，並重新回到更深處的思考本質。
議題包括但不限於，
➊ 只著眼於「技術」的技術選型，常以失敗告終，為何？
➋ 老技術不好嗎？新技術不行嗎？永遠會面對的兩難議題。
➌ Agile & DevOps 對技術選型與管理的影響，以及為何有些技術人討厭與排斥？
➍ 引入 Cache 不好嗎？套用 Microservices 不好嗎？轉為 Sharding 不好嗎？資料庫怎麼選？選型的本質探討。
➎ 技術人討厭 OKR？或許我們換個角度，不僅會樂於採用還可讓解決問題的實力大增。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版Yi-Feng Tzeng 國外企業不論大小對開源技術的採用意願極高，採用成熟度高的開源技術一來可以加快研發速度，二來也會大幅降低營運成本。但台灣企業對開源技術的認知程度較低，擔心穩定性、安全性與支援性等問題，但甚少花時間去了解，當你用正確的心態去看待開源，且有妥善的管理機制去管理它，開源技術將是企業的重大助力。
加強版新增了幾個案例，以及 GDPR/CCPA 相關的解決方案。
Testing in Production, Deploy on Fridays
Testing in Production, Deploy on FridaysYi-Feng Tzeng 本議題是去年 ModernWeb'19 「Progressive Deployment & NoDeploy」的延伸。雖然已提倡 Testing in Production 多年，但至今願意或敢於實踐的團隊並不多，背後原因多是與文化及態度有些關係。
此次主要分享推廣過程中遇到的苦與甜，以及自己親力操刀幾項達成 Testing in Production, Deploy on Fridays 成就的產品。
COSCUP 2020 Day 2 - Opening Keynote
COSCUP 2020 Day 2 - Opening KeynoteYi-Feng Tzeng COSCUP 2020 開源人年會第二日，開場 Keynote。
從痴心回到初心，讓大家快速瞭解 COSCUP，並依此脈絡介紹各今年議程軌的概觀，引領大眾快速知道可以選擇哪些議程軌加入。
COSCUP 2020 Day 1 - Opening Keynote
COSCUP 2020 Day 1 - Opening KeynoteYi-Feng Tzeng COSCUP 2020 開源人年會第一日，開場 Keynote。
以開源回到初心，讓大家快速瞭解 COSCUP，並依此脈絡介紹各今年議程軌的概觀，引領大眾快速知道可以選擇哪些議程軌加入。
給資安工程師開源授權觀念
給資安工程師開源授權觀念Yi-Feng Tzeng 特別整理給需要專研資訊安全工程師的開源授權重要觀念。開源授權帶來許多商業及法律的挑戰，對於資安工程師若能夠充份瞭解，將有助於研究，以及認知如何做到自我保護。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊Yi-Feng Tzeng 國外企業不論大小對開源技術的採用意願極高，採用成熟度高的開源技術一來可以加快研發速度，二來也會大幅降低營運成本。但台灣企業對開源技術的認知程度較低，擔心穩定性、安全性與支援性等問題，但甚少花時間去了解，當你用正確的心態去看待開源，且有妥善的管理機制去管理它，開源技術將是企業的重大助力。
淺談量子機器學習 - 當機器學習遇見量子計算
淺談量子機器學習 - 當機器學習遇見量子計算Yi-Feng Tzeng 量子機器學習 (Quantum Machine Learning) 旨在融和量子計算及機器學習方法，為跨越兩領域的新興研究學科。量子計算與機器學習各為很深的研究領域，在探索量子機器學習之前，必須對此兩者有基本的瞭解。在此領域，我仍是一名持續學習的實習生，在本次演講將與大家一同交流，探討量子機器學習會如何影響資料科學及經典機器學習。
A Modern Web Architecture for (GDPR) Compliance
A Modern Web Architecture for (GDPR) ComplianceYi-Feng Tzeng 技術無邊，法遵有邊。多數軟體架構師規畫架構時，往往忽略法令及契約的重要性。面對各國各式的法令及商業契約遵循要求，現代軟體架構設計時也應當具備合理的因應措施，包括 2012 年《個人資料保護法》及今年號稱「史上最嚴格的個人資料保護法」的 《GDPR》等。此議程將探討軟體架構設計如何應對各種法遵及契約的挑戰。
量子技術 (2018 03-31)
量子技術 (2018 03-31)Yi-Feng Tzeng 量子技術 / 量子電腦 / 量子通訊 / 量子資訊 / 量子計算 / 量子計算機 / 量子傳輸 / 數位貨幣 / 虛擬貨幣 / 加密貨幣 / 比特幣
More Related Content
What's hot (12)
SBA Live Academy: A Primer in Single Page Application Security by Thomas Konrad
SBA Live Academy: A Primer in Single Page Application Security by Thomas KonradSBA Research This presentation discusses security concerns and best practices for single page applications (SPAs). It begins with an overview of SPAs and popular frameworks like Angular and React. It then covers cross-site scripting (XSS) risks, with a focus on DOM-based XSS issues that are common in SPAs. The presentation provides examples of XSS vulnerabilities and recommendations for mitigation using input sanitization libraries and content security policy (CSP). It also addresses risks from outdated dependencies and provides checklists for secure SPA development.
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...
SBA Live Academy - Angriffe auf Windows Domains und Delegation by Reinhard Ku...SBA Research Zielgruppe: Admins, CIO
Schwerpunkt: technisch
Sprache: Deutsch
Abstract
**********
In Unternehmen werden Vertrauensbeziehungen zwischen Active Directory Forests angelegt. Ist damit die eigene Domäne in Gefahr? Der Talk zeigt exotischere Angriffe innerhalb von Active Directory und über Forest-Grenzen hinweg. Und warum wir durch Drucker dem Untergang geweiht sind.
About the Speaker:
*********************
Reinhard Kugler is Principal Security Consultant at SBA Research. He focuses on secure software engineering, infrastructure security and malware analysis. Currently his main activities concentrate on penetration testing.
DevSecOps for Developers: How To Start
DevSecOps for Developers: How To StartPatricia Aas How can you squeeze Security into DevOps? Security is often an understaffed function, so how can you leverage what you have in DevOps to improve your security posture?
Often the culture clash between Security and Development is even more prominent than between Development and Operations. Understanding the differences in how these functions work, and leveraging their similarities, will reveal processes already in place that can be used to improve security. This fine tuning of tools and processes can give you DevSecOps on a shoestring."
Nsc42 security knights slayer of dragons 0-5_very_short_15m_share
Nsc42 security knights slayer of dragons 0-5_very_short_15m_shareNSC42 Ltd Security Architecture in DEVOPS
Title:
Security Architect, slayer of dragons defenders of the realms and protectors of the cybersecurity automation
Synopsis:
The talk will take the audience on a journey from the origin of the security architecture, the challenge of cloud security and the role of an architect in the dev-sec-ops world.
The talk explains the difference between traditional command and control governance and the solution to avoid starving automation and innovation with traditional security governance
We will explore:
Security Gates and why they do not always work in dev-ops
Automation how-tos:
How to deploy cybersecurity at scale
Why is important to know how to deal with people
Automation in the pipeline is the king
If time is available the talk will explore some additional lesson learned
rough length: compressed version 30 min normally 50 min or workshop format
Audience Take Away:
How to build a cybersecurity programme with architecture at the heart
how to do traditional security governance
how to mix governance and agile development as well as dev sec ops
how to extract patterns from existing design
the value of design principle patterns and why they are key to go fast.
how and when to use tools (SAST/DAST) and when to engineer
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...
SBA Live Academy: Software Security – Towards a Mature Lifecycle and DevSecOp...SBA Research Target Audience: Everyone involved in software development (developers, team leaders, CISOs in software-oriented companies)
Focus: technical
Talk language: English
Abstract
*********
Let’s face it: There is no such thing as a big-bang launch any more. We all want to be agile and react quickly to the wishes and demands of our customers in software development. The downside of this approach is that security has a hard time keeping pace, thereby often being completely neglected. That’s why we need to bridge the gap between security and agility. In this talk, we’ll have a look at how security can become an integral part of the development process, and more than just a penetration test at the end. We’ll see how we can overcome immediate pain and get strategic focus in software security.
About the Speaker:
*********************
Thomas Konrad is Principal Security Consultant at SBA Research and has been part of software security team since 2010. He focuses on secure software development, web application security, penetration testing, secure software design, architecture, and process, and trains software development teams in those areas.
PyConPL 2017 - with python: security
PyConPL 2017 - with python: securityPiotr Dyba Cyber-security is a critical part of all distributed applications. By understanding and implementing proper security measures, you guard your own resources against malicious attackers as well as provide a secure environment for all relevant parties.
This presentation is a gentle introduction to it.
Data Security and the Hard Outer Shell
Data Security and the Hard Outer ShellMatt Turner Matt Turner, CTO of Media & Entertainment at MarkLogic Corporation, discusses evolving security threats and the need to move beyond perimeter-based network security approaches. Current approaches focus outward on external threats but the threat landscape has changed, with nearly half of financial services breaches caused by insiders. MarkLogic argues for implementing security within systems rather than just at barriers and boundaries between systems. The presentation includes slides on MarkLogic's database platform and its flexibility, security and ability to ask questions of stored data.
Take a step forward from user to maintainer or developer in open source secur...
Take a step forward from user to maintainer or developer in open source secur...SZ Lin There are a variety of high-quality open source security-related tools available in penetration testing tools, forensics tools, hardening tools, fuzz tools, and network monitoring tools. These tools could be used freely; however, we might face some issues while using it. Therefore, it is essential to have the ability to maintain or develop these tools. In this slide, SZ Lin introduces Security Tools Packaging Team in Debian; this team aims to maintain collaboratively many security tools and merge back tools packaged by security-oriented Debian derivatives (e.g., Kali). Also, SZ shares the experience in discussing and collaborating with open source maintainers and developers in open source security-related tools.
Trusted Third Parties are NOT Trust Worthy!
Trusted Third Parties are NOT Trust Worthy!nettitude_labs The document summarizes a simulated attack on an organization via compromise of a trusted third party supplier. It demonstrates how threat actors used phishing to deliver malware, abused active directory trusts to move laterally between the supplier and target networks, and extracted credentials and customer data from the target organization's systems after gaining initial access through the third party. It stresses that such trusted third party attacks are a real risk and organizations need to carefully restrict access and monitor for signs of compromise when connecting suppliers to their internal networks and assets.
Abusing Glype Proxies - Attacks, Exploits and Defences
Abusing Glype Proxies - Attacks, Exploits and DefencesAditya K Sood Proxies play a critical privacy role by allowing anonymous web surfing and identity cloaking. Glype is an open source PHP proxy that is commonly used and provides anonymity. However, Glype proxies also have weaknesses that can allow attackers to exploit them. Misconfigured Glype proxies can leak users' sensitive information through log files and cookies. Attackers can also use Glype proxies to distribute malware by modifying the proxy software and using plugins. Strong authentication, disabling logs, and removing vulnerabilities are recommended to prevent abuse of Glype proxies.
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍
Cyber Grand Challenge及DEFCON 24 CTF决赛介绍Ray Song 在SHLUG 2016年9月月度技术分享会上做的展示。
距离9月6日主办方Legitimate Business Syndicate发布2016 DEF CON CTF Final Scores已久，仍然没有公布源代码，不得已根据libmaru、Riatre等的逆向结果，再粗糙分析了一些。
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610
Webex APIs for Admins - Cisco Live Orlando 2018 - DEVNET-3610Cisco DevNet Join to explore concrete use cases implemented with the Administrative & Serviceability capabilities of Webex Teams (formally Cisco Spark) APIs.
We'll cover how to manage Webex Teams Users but also track Spaces activity through the recently added /events API resource. Moreover, we will dig into the possibilities offered by the xAPI for Webex Teams-registered devices: discover Company Branding, People counting, and how to initiate Video Calls to Webex Teams & SIP addresses.
This session is aimed at Webex Teams Administrators, Compliance Officers, and Cisco Collaboration Endpoints owners.
DEVNET-3610
https://www.ciscolive.com/us/learn/sessions/session-catalog/?search=DEVNET-3610
More from Yi-Feng Tzeng (20)
重新想像：如何做技術選型決策 / Rethinking : Technical Decision
重新想像：如何做技術選型決策 / Rethinking : Technical DecisionYi-Feng Tzeng 《技術管理者論壇：商業與技術的平衡》
【主題】重新想像：如何做技術選型決策
技術選型是個既『成熟』又『新鮮』的老話題。成熟的是網路充斥著各種資訊；新鮮的是技術每年推陳出新，總會帶來新變化。本場次會以全新有趣又直擊靈魂的問題引導方式，與大家一同深入技術選型的眾多領域。
這趟旅程未必有答案，畢竟複雜的問題沒有唯一解，但我提出的問題會嘗試讓你與自己對話，就請跟著我一起試著顛覆既有的認知，並重新回到更深處的思考本質。
議題包括但不限於，
➊ 只著眼於「技術」的技術選型，常以失敗告終，為何？
➋ 老技術不好嗎？新技術不行嗎？永遠會面對的兩難議題。
➌ Agile & DevOps 對技術選型與管理的影響，以及為何有些技術人討厭與排斥？
➍ 引入 Cache 不好嗎？套用 Microservices 不好嗎？轉為 Sharding 不好嗎？資料庫怎麼選？選型的本質探討。
➎ 技術人討厭 OKR？或許我們換個角度，不僅會樂於採用還可讓解決問題的實力大增。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊-加強版Yi-Feng Tzeng 國外企業不論大小對開源技術的採用意願極高，採用成熟度高的開源技術一來可以加快研發速度，二來也會大幅降低營運成本。但台灣企業對開源技術的認知程度較低，擔心穩定性、安全性與支援性等問題，但甚少花時間去了解，當你用正確的心態去看待開源，且有妥善的管理機制去管理它，開源技術將是企業的重大助力。
加強版新增了幾個案例，以及 GDPR/CCPA 相關的解決方案。
Testing in Production, Deploy on Fridays
Testing in Production, Deploy on FridaysYi-Feng Tzeng 本議題是去年 ModernWeb'19 「Progressive Deployment & NoDeploy」的延伸。雖然已提倡 Testing in Production 多年，但至今願意或敢於實踐的團隊並不多，背後原因多是與文化及態度有些關係。
此次主要分享推廣過程中遇到的苦與甜，以及自己親力操刀幾項達成 Testing in Production, Deploy on Fridays 成就的產品。
COSCUP 2020 Day 2 - Opening Keynote
COSCUP 2020 Day 2 - Opening KeynoteYi-Feng Tzeng COSCUP 2020 開源人年會第二日，開場 Keynote。
從痴心回到初心，讓大家快速瞭解 COSCUP，並依此脈絡介紹各今年議程軌的概觀，引領大眾快速知道可以選擇哪些議程軌加入。
COSCUP 2020 Day 1 - Opening Keynote
COSCUP 2020 Day 1 - Opening KeynoteYi-Feng Tzeng COSCUP 2020 開源人年會第一日，開場 Keynote。
以開源回到初心，讓大家快速瞭解 COSCUP，並依此脈絡介紹各今年議程軌的概觀，引領大眾快速知道可以選擇哪些議程軌加入。
給資安工程師開源授權觀念
給資安工程師開源授權觀念Yi-Feng Tzeng 特別整理給需要專研資訊安全工程師的開源授權重要觀念。開源授權帶來許多商業及法律的挑戰，對於資安工程師若能夠充份瞭解，將有助於研究，以及認知如何做到自我保護。
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊
擁抱開源：企業應如何善用開源技術，才能得其利而防其弊Yi-Feng Tzeng 國外企業不論大小對開源技術的採用意願極高，採用成熟度高的開源技術一來可以加快研發速度，二來也會大幅降低營運成本。但台灣企業對開源技術的認知程度較低，擔心穩定性、安全性與支援性等問題，但甚少花時間去了解，當你用正確的心態去看待開源，且有妥善的管理機制去管理它，開源技術將是企業的重大助力。
淺談量子機器學習 - 當機器學習遇見量子計算
淺談量子機器學習 - 當機器學習遇見量子計算Yi-Feng Tzeng 量子機器學習 (Quantum Machine Learning) 旨在融和量子計算及機器學習方法，為跨越兩領域的新興研究學科。量子計算與機器學習各為很深的研究領域，在探索量子機器學習之前，必須對此兩者有基本的瞭解。在此領域，我仍是一名持續學習的實習生，在本次演講將與大家一同交流，探討量子機器學習會如何影響資料科學及經典機器學習。
A Modern Web Architecture for (GDPR) Compliance
A Modern Web Architecture for (GDPR) ComplianceYi-Feng Tzeng 技術無邊，法遵有邊。多數軟體架構師規畫架構時，往往忽略法令及契約的重要性。面對各國各式的法令及商業契約遵循要求，現代軟體架構設計時也應當具備合理的因應措施，包括 2012 年《個人資料保護法》及今年號稱「史上最嚴格的個人資料保護法」的 《GDPR》等。此議程將探討軟體架構設計如何應對各種法遵及契約的挑戰。
量子技術 (2018 03-31)
量子技術 (2018 03-31)Yi-Feng Tzeng 量子技術 / 量子電腦 / 量子通訊 / 量子資訊 / 量子計算 / 量子計算機 / 量子傳輸 / 數位貨幣 / 虛擬貨幣 / 加密貨幣 / 比特幣
Swoole Love PHP
Swoole Love PHPYi-Feng Tzeng 今天公司內訓的簡報摘錄。
研究 Swoole 多年，也確實在上線環境正式運行很久且穩定，所以與同事分享點滴與技巧。
除了一點範例程式外，分享著重的是【架構】差異，延伸出去再與 Nginx/PHP, Node 及 Go 進行一些比較。
主要是提出幾個問題，希望引發思考：
➊ 很多人都說 Swoole 快，是哪裡快？(其實我覺得網路上的資訊不夠全面，講得也不一定為真)
➋ 猜想 Nginx/PHP, Swoole, Node, Go 基礎效能比較？還能最佳化嗎？何處著手？
➌ 其他。
邏輯優化的灰色面：針對網頁應用的時序攻擊 (2018臺灣資安大會: 軟體安全論壇)
邏輯優化的灰色面：針對網頁應用的時序攻擊 (2018臺灣資安大會: 軟體安全論壇)Yi-Feng Tzeng This document discusses timing attacks against web applications. It begins by referencing a previous conference presentation on timing attacks and front-end performance vulnerabilities. It then demonstrates how subtle differences in response times can reveal privileged information, like whether a username is valid. The document advocates adding random delays to responses to mitigate these timing attack vectors. It provides several examples of timing attacks in practice and potential mitigation techniques to obscure timing patterns and prevent secret information leakage.
Modern Web Architecture Design Journey
Modern Web Architecture Design JourneyYi-Feng Tzeng 1. 軟體架構模式的演化
2. 軟體架構演化對開發模式的影響
3. 軟體架構的技術債
4. 預先策想的軟體架構
恰如其分的 MySQL 設計技巧 [Modern Web 2016]
恰如其分的 MySQL 設計技巧 [Modern Web 2016]Yi-Feng Tzeng 「有流量再說」是很多老闆及工程師面對未來風險的態度。當風險來得又快又急時，技術轉換債及架構轉換債問題突現，措手不及的團隊只好加班趕工，有時甚至必須長期中斷服務，進而影響營運及商譽。但若過度遵循計畫式設計 (Planned Design)，因無法事先對未來場景需求有全面瞭解，反而可能導致設計錯誤。本議程將與您一同討論「恰如其分的設計」技巧。
談 Uber 從 PostgreSQL 轉用 MySQL 的技術爭議
談 Uber 從 PostgreSQL 轉用 MySQL 的技術爭議Yi-Feng Tzeng ➀ Uber 為什麼從 PostgreSQL 轉用 MySQL？
➁ PostgreSQL 專家怎麼說？MySQL 專家怎麼回擊？
➂ 他們說的有沒有道理？
資料庫索引數據結構及主鍵設計(b+tree)(part 1)
資料庫索引數據結構及主鍵設計(b+tree)(part 1)Yi-Feng Tzeng * UUID / GUID？
* 主鍵使用 UUID 真的比較好？
* 常見索引數據結構。
* 什麼是索引頁分裂？
* 案例探討。
題目很宅也看似簡單，但若弄通，RDBMS 到 NoSQL 再到 NewSQL 的核心概念之一就通了。對於一般人而言，也會打破過去舊有索引的概念。
軟體接案自由職業者 (Freelancer) 意想不到的風險
軟體接案自由職業者 (Freelancer) 意想不到的風險Yi-Feng Tzeng 接案自由職業者看來自由浪漫，但背後總有代價。接案有很多隱性系統及操作性風險，在這場演講讓我們除了聊聊各位接案自由職業者的辛苦歷程，更來談談你可能從未意想過的潛在風險。
Enterprise Architecture Case in PHP (MUZIK Online)
Enterprise Architecture Case in PHP (MUZIK Online)Yi-Feng Tzeng Architecture is the definition of your use cases or business.
I will talk about why and what I implement in PHP ecosystem, and it's real case.
Redis, another step on the road
Redis, another step on the roadYi-Feng Tzeng Introduction to Redis 3.0, and it’s features and improvements. What’s difference between Redis / Memcached / Aerospike ? The strong sides of Redis, and away from the weak sides.
本議程介紹 Redis 3.0 及其歷史，探討 Redis 的特性與改進。並一併分析 Redis / Memcached / Aerospike 三者之間的差異，有助於未來面對業務場景需求提供瞭解與判斷。最後，分享 Redis 適用之場景，及其不適用場景下的備案或整合方案。議程適於 Redis 初學者、對 Redis 想深入瞭解者，及曾經莫名被 Redis 雷擊或坑殺者。
Ad
Recently uploaded (20)
AI Agents in Logistics and Supply Chain Applications Benefits and Implementation
AI Agents in Logistics and Supply Chain Applications Benefits and ImplementationChristine Shepherd AI agents are reshaping logistics and supply chain operations by enabling automation, predictive insights, and real-time decision-making across key functions such as demand forecasting, inventory management, procurement, transportation, and warehouse operations. Powered by technologies like machine learning, NLP, computer vision, and robotic process automation, these agents deliver significant benefits including cost reduction, improved efficiency, greater visibility, and enhanced adaptability to market changes. While practical use cases show measurable gains in areas like dynamic routing and real-time inventory tracking, successful implementation requires careful integration with existing systems, quality data, and strategic scaling. Despite challenges such as data integration and change management, AI agents offer a strong competitive edge, with widespread industry adoption expected by 2025.
“How Qualcomm Is Powering AI-driven Multimedia at the Edge,” a Presentation f...
“How Qualcomm Is Powering AI-driven Multimedia at the Edge,” a Presentation f...Edge AI and Vision Alliance For the full video of this presentation, please visit: https://www.edge-ai-vision.com/2025/06/how-qualcomm-is-powering-ai-driven-multimedia-at-the-edge-a-presentation-from-qualcomm/
Ning Bi, Vice President of Engineering at Qualcomm Technologies, presents the “How Qualcomm Is Powering AI-driven Multimedia at the Edge” tutorial at the May 2025 Embedded Vision Summit.
In this talk, Bi explores the evolution of multimedia processing at the edge, from simple early use cases such as audio and video processing powered by algorithm-centric approaches to modern sophisticated capabilities such as digital human avatars that are transmitted over the communication channel, powered by data-driven AI. He explains how Qualcomm is applying AI and generative AI technologies on the edge to enrich computer vision for new and high-quality visual solutions. He also shows how Qualcomm enables a broad range of OEMs, ODMs and third-party developers to harness innovative technologies via initiatives such as the Qualcomm AI Hub, which provides a library of optimized machine learning models to enable developers to quickly incorporate AI into their applications.
Bridging the divide: A conversation on tariffs today in the book industry - T...
Bridging the divide: A conversation on tariffs today in the book industry - T...BookNet Canada A collaboration-focused conversation on the recently imposed US and Canadian tariffs where speakers shared insights into the current legislative landscape, ongoing advocacy efforts, and recommended next steps. This event was presented in partnership with the Book Industry Study Group.
Link to accompanying resource: https://bnctechforum.ca/sessions/bridging-the-divide-a-conversation-on-tariffs-today-in-the-book-industry/
Presented by BookNet Canada and the Book Industry Study Group on May 29, 2025 with support from the Department of Canadian Heritage.
Domino IQ – Was Sie erwartet, erste Schritte und Anwendungsfälle
Domino IQ – Was Sie erwartet, erste Schritte und Anwendungsfällepanagenda Webinar Recording: https://www.panagenda.com/webinars/domino-iq-was-sie-erwartet-erste-schritte-und-anwendungsfalle/
HCL Domino iQ Server – Vom Ideenportal zur implementierten Funktion. Entdecken Sie, was es ist, was es nicht ist, und erkunden Sie die Chancen und Herausforderungen, die es bietet.
Wichtige Erkenntnisse
- Was sind Large Language Models (LLMs) und wie stehen sie im Zusammenhang mit Domino iQ
- Wesentliche Voraussetzungen für die Bereitstellung des Domino iQ Servers
- Schritt-für-Schritt-Anleitung zur Einrichtung Ihres Domino iQ Servers
- Teilen und diskutieren Sie Gedanken und Ideen, um das Potenzial von Domino iQ zu maximieren
Trends Artificial Intelligence - Mary Meeker
Trends Artificial Intelligence - Mary MeekerClive Dickens Mary Meeker’s 2024 AI report highlights a seismic shift in productivity, creativity, and business value driven by generative AI. She charts the rapid adoption of tools like ChatGPT and Midjourney, likening today’s moment to the dawn of the internet. The report emphasizes AI’s impact on knowledge work, software development, and personalized services—while also cautioning about data quality, ethical use, and the human-AI partnership. In short, Meeker sees AI as a transformative force accelerating innovation and redefining how we live and work.
Data Virtualization: Bringing the Power of FME to Any Application
Data Virtualization: Bringing the Power of FME to Any ApplicationSafe Software Imagine building web applications or dashboards on top of all your systems. With FME’s new Data Virtualization feature, you can deliver the full CRUD (create, read, update, and delete) capabilities on top of all your data that exploit the full power of FME’s all data, any AI capabilities. Data Virtualization enables you to build OpenAPI compliant API endpoints using FME Form’s no-code development platform.
In this webinar, you’ll see how easy it is to turn complex data into real-time, usable REST API based services. We’ll walk through a real example of building a map-based app using FME’s Data Virtualization, and show you how to get started in your own environment – no dev team required.
What you’ll take away:
-How to build live applications and dashboards with federated data
-Ways to control what’s exposed: filter, transform, and secure responses
-How to scale access with caching, asynchronous web call support, with API endpoint level security.
-Where this fits in your stack: from web apps, to AI, to automation
Whether you’re building internal tools, public portals, or powering automation – this webinar is your starting point to real-time data delivery.
Soulmaite review - Find Real AI soulmate review
Soulmaite review - Find Real AI soulmate reviewSoulmaite Looking for an honest take on Soulmaite? This Soulmaite review covers everything you need to know—from features and pricing to how well it performs as a real AI soulmate. We share how users interact with adult chat features, AI girlfriend 18+ options, and nude AI chat experiences. Whether you're curious about AI roleplay porn or free AI NSFW chat with no sign-up, this review breaks it down clearly and informatively.
Dancing with AI - A Developer's Journey.pptx
Dancing with AI - A Developer's Journey.pptxElliott Richmond In this talk, Elliott explores how developers can embrace AI not as a threat, but as a collaborative partner.
We’ll examine the shift from routine coding to creative leadership, highlighting the new developer superpowers of vision, integration, and innovation.
We'll touch on security, legacy code, and the future of democratized development.
Whether you're AI-curious or already a prompt engineering, this session will help you find your rhythm in the new dance of modern development.
Jeremy Millul - A Talented Software Developer
Jeremy Millul - A Talented Software DeveloperJeremy Millul Jeremy Millul is a talented software developer based in NYC, known for leading impactful projects such as a Community Engagement Platform and a Hiking Trail Finder. Using React, MongoDB, and geolocation tools, Jeremy delivers intuitive applications that foster engagement and usability. A graduate of NYU’s Computer Science program, he brings creativity and technical expertise to every project, ensuring seamless user experiences and meaningful results in software development.
FCF- Getting Started in Cybersecurity 3.0
FCF- Getting Started in Cybersecurity 3.0RodrigoMori7 FCF- Getting Started in Cybersecurity 3.0/ Fortinet
Developing Schemas with FME and Excel - Peak of Data & AI 2025
Developing Schemas with FME and Excel - Peak of Data & AI 2025Safe Software When working with other team members who may not know the Esri GIS platform or may not be database professionals; discussing schema development or changes can be difficult. I have been using Excel to help illustrate and discuss schema design/changes during meetings and it has proven a useful tool to help illustrate how a schema will be built. With just a few extra columns, that Excel file can be sent to FME to create new feature classes/tables. This presentation will go thru the steps needed to accomplish this task and provide some lessons learned and tips/tricks that I use to speed the process.
Introduction to Typescript - GDG On Campus EUE
Introduction to Typescript - GDG On Campus EUEGoogle Developer Group On Campus European Universities in Egypt Interested in leveling up your JavaScript skills? Join us for our Introduction to TypeScript workshop.
Learn how TypeScript can improve your code with dynamic typing, better tooling, and cleaner architecture. Whether you're a beginner or have some experience with JavaScript, this session will give you a solid foundation in TypeScript and how to integrate it into your projects.
Workshop content:
- What is TypeScript?
- What is the problem with JavaScript?
- Why TypeScript is the solution
- Coding demo
Creating an Accessible Future-How AI-powered Accessibility Testing is Shaping...
Creating an Accessible Future-How AI-powered Accessibility Testing is Shaping...Impelsys Inc. Web accessibility is a fundamental principle that strives to make the internet inclusive for all. According to the World Health Organization, over a billion people worldwide live with some form of disability. These individuals face significant challenges when navigating the digital landscape, making the quest for accessible web content more critical than ever.
Enter Artificial Intelligence (AI), a technological marvel with the potential to reshape the way we approach web accessibility. AI offers innovative solutions that can automate processes, enhance user experiences, and ultimately revolutionize web accessibility. In this blog post, we’ll explore how AI is making waves in the world of web accessibility.
FME Beyond Data Processing Creating A Dartboard Accuracy App
FME Beyond Data Processing Creating A Dartboard Accuracy AppSafe Software At Nordend, we want to push the boundaries of FME and explore its potential for more creative applications. In our office, we have a dartboard, and while improving our dart-throwing skills was an option, we took a different approach: What if we could use FME to calculate where we should aim to achieve the highest possible score, based on our accuracy? Using FME’s Geometry User parameter, we designed a custom solution. When launching the FME Flow app, the map is now a dartboard. The centre of the map is always fixed on the same area of the world, where we pinned a PNG picture of a dartboard as a basemap through a self-created WMS. This visual setup allowed us to draw polygons—each with three points—where our darts landed, using the Geometry parameter. These polygons get processed through an FME workspace, which translates the coordinates from the map into exact X and Y positions on the dartboard. With this accurate data, we calculate all sorts of statistics: rolling averages, best scores, and even standard deviations. The results get displayed on a dashboard in FME Flow, giving us insights into how we could maximize our scores, based purely on where we actually tend to throw. Join us for a live demonstration of the app! The takeaway? FME isn’t just a powerful data processing tool; with a bit of imagination, it can be used for far more creative and unconventional applications. This project demonstrates that the only limit to what FME can do is the creativity you bring to it.
MCP vs A2A vs ACP: Choosing the Right Protocol | Bluebash
MCP vs A2A vs ACP: Choosing the Right Protocol | BluebashBluebash Understand the differences between MCP vs A2A vs ACP agent communication protocols and how they impact AI agent interactions. Get expert insights to choose the right protocol for your system. To learn more, click here: https://www.bluebash.co/blog/mcp-vs-a2a-vs-acp-agent-communication-protocols/
Boosting MySQL with Vector Search -THE VECTOR SEARCH CONFERENCE 2025 .pdf
Boosting MySQL with Vector Search -THE VECTOR SEARCH CONFERENCE 2025 .pdfAlkin Tezuysal As the demand for vector databases and Generative AI continues to rise, integrating vector storage and search capabilities into traditional databases has become increasingly important. This session introduces the *MyVector Plugin*, a project that brings native vector storage and similarity search to MySQL. Unlike PostgreSQL, which offers interfaces for adding new data types and index methods, MySQL lacks such extensibility. However, by utilizing MySQL's server component plugin and UDF, the *MyVector Plugin* successfully adds a fully functional vector search feature within the existing MySQL + InnoDB infrastructure, eliminating the need for a separate vector database. The session explains the technical aspects of integrating vector support into MySQL, the challenges posed by its architecture, and real-world use cases that showcase the advantages of combining vector search with MySQL's robust features. Attendees will leave with practical insights on how to add vector search capabilities to their MySQL systems.
Down the Rabbit Hole – Solving 5 Training Roadblocks
Down the Rabbit Hole – Solving 5 Training RoadblocksRustici Software Feeling stuck in the Matrix of your training technologies? You’re not alone. Managing your training catalog, wrangling LMSs and delivering content across different tools and audiences can feel like dodging digital bullets. At some point, you hit a fork in the road: Keep patching things up as issues pop up… or follow the rabbit hole to the root of the problems.
Good news, we’ve already been down that rabbit hole. Peter Overton and Cameron Gray of Rustici Software are here to share what we found. In this webinar, we’ll break down 5 training roadblocks in delivery and management and show you how they’re easier to fix than you might think.
“How Qualcomm Is Powering AI-driven Multimedia at the Edge,” a Presentation f...
“How Qualcomm Is Powering AI-driven Multimedia at the Edge,” a Presentation f...Edge AI and Vision Alliance
Introduction to Typescript - GDG On Campus EUE
Introduction to Typescript - GDG On Campus EUEGoogle Developer Group On Campus European Universities in Egypt
Ad
Severless PHP Case : Agile Dashboard via GitLab Board API
- 1. 曾義峰 (Ant) [email protected] 2020-07-25 Severless PHP Case Agile Dashboard via GitLab Board API
- 2. 2/67 LeadBest Consulting Group» 首席執行顧問 TGONetworks» 台北分會學籍委員 » 資安技術社群 CHROOT 成員 13 年互聯網研發經驗， 4 年顧問資歷。 具備銀行安全交易系統、電子票證系統、清分清算系統、機載娛樂系統、 數位廣告 (Adtech) 平台、古典樂線上平台及高效能電腦集群入口平台等 開發經驗。
- 3. 3/67Credit : http://90sheji.com/png/wanshouji.html Pay for what I use (pay-as-you-go) Granular scaling Personalization (vs. SaaS)
- 5. 5/67Credit : The Emergent Cloud Securiyt Toolchain for CI CD (2018-04).pdf
- 8. 8/67Credit : Cloud Native Security 101 (2019-02-02).pdf
- 9. 9/67Credit : Cloud Native Security 101 (2019-02-02).pdf
- 11. 11/67Credit : Monitoring Serverless Architectures (2017-06-21) - p9
- 12. 12/67 Serverless != No Server Serverless != No Server Serverless != NoOps ”Serverless” 非指不再涉及伺服器。 ”Serverless” 意味著開發人員不再需為 ” Server” 煩惱太多。
- 13. 13/67 Serverless != No Server Serverless != No Server Serverless != NoOps ”Serverless” 非指不再涉及伺服器。 ”Serverless” 意味著開發人員不再需為 ” Server” 煩惱太多。 Serverless == LessOps
- 14. 14/67 如果說 Agile + IaaS 孵化了 DevOps ， 那麼， Agile + BaaS + FaaS 則孕育了 Serverless 。
- 16. 16/67
- 17. 17/67
- 18. 18/67
- 19. 19/67
- 20. 20/67 Why Excel ? Stakeholders & MVP (GUI friendly)
- 21. 21/67
- 22. 22/67
- 23. 23/67
- 24. 24/67
- 25. 25/67
- 26. 26/67
- 27. 27/67
- 28. 28/67
- 33. 33/67 Cold Start
- 34. 34/67 Cold Start ( 冷啟動 ) Credit : https://azure.microsoft.com/en-us/blog/understanding-serverless-cold-start/
- 35. 35/67Credit : Cloud Native Security 101 (2019-02-02).pdf
- 41. 41/67 PHP runtime for Serverless
- 46. 46/67 雲架構
- 47. 47/67 CloudWatch Simple Email Service Simple Notification Service Simple Storage Service Lambda Step Functions Lambda Lambda
- 48. 48/67 CloudWatch Simple Email Service Simple Notification Service Simple Storage Service Lambda Step Functions Lambda Lambda 解析
- 49. 49/67 Lambda
- 53. 53/67 CloudWatch Simple Storage Service Lambda Step Functions Lambda Lambda
- 54. 54/67 CloudWatch Simple Email Service Simple Storage Service Lambda Step Functions Lambda Lambda
- 55. 55/67 CloudWatch Simple Email Service Simple Notification Service Simple Storage Service Lambda Step Functions Lambda Lambda
- 57. 57/67 經驗與分享
- 59. 59/67Credit : Oracle Performance Triangle
- 60. 60/67 Lower latency ? 嘗試移除沒利用到的 PHP Extensions 。
- 61. 61/67Credit : Anticorrupting the Enterprise - Serverlessconf NYC 2017 (2019-01-06).pdf
- 62. 62/67Credit : Anticorrupting the Enterprise - Serverlessconf NYC 2017 (2019-01-06).pdf 需視你的情況而定
- 65. 65/67Credit : http://90sheji.com/png/wanshouji.html Lower Cost Granular scaling LessOps Observability
- 66. 66/67Credit : http://90sheji.com/png/wanshouji.html Pay for what I use (pay-as-you-go) Granular scaling Personalization (vs. SaaS)