New Zealand PHP Conference 2014
27 - 29 Aug 2014
at Victoria University
Talk comments
Hot-coding a realtime demo by writing code by hand and seeing it run successfully was impressive, and did successfully show how easy it was to get started with the tools.
Still not sure "why" anyone would want to do this - Ye olde chat widget is still the only example use that folk seem to be able to roll out - but it's an interesting thought experiment inside PHP nevertheless.
I was able to type along during the talk and did indeed get a local demo running in the same time, so that was fun. However, I was also able to test that the React framework, as demo-ed is not async at all, it's just another blocking loop. So, dunno what was supposed to be the point there...
A good number of practical, applicable tips.
The presentation veered around a little, but overall contained good value.
Yet another new PHP framework demo. Not much help for folk already building things or tied into existing codebases. An interesting toy.
Presenter/Presentation style and structure was good and clear though. Engaging and interesting to follow.
While some valid points were demonstrated, there wasn't a lot of take-away advice on practically avoiding the basic exploits.
The demos were yery well-prepared, clear, and worked well in real-time. That was great.
However, while the Talk was entitled 'Winning" - the only thing that happened was "Losing".
From the talk description:
"This presentation aims to arm you with the mindset, tools and resources to minimise the opportunities for attack, and the reduce the fallout when they succeed."
- the 'mindset' part was a success, by raising awareness of issues, but none of the rest was delivered. No tools, techniques, tests or mitigations were described. Not even any defensive programming tips, beyond "try not to let this sort of thing happen" I guess.
A bit of a shambles. A presentation of yet another half-baked framework just because it's new.
Good detail. We were promised deep tech and got it, but also were given some takeaway tips for hardening or at least bringing best-practice configs to our servers.
Informative, and well-researched. It was refreshing to hear someone who clearly *was* an expert in the relevant laws and processes talking about intellectual property, compared to bandwagoners and pundits.
Much too much off-topic intro, it seemed like the talk was more than halfway through before testing was even mentioned.
Very very hard to understand the speakers accent, which made listening very hard work.
Selenium was not covered at all, and there was no reference to actually writing tests or testing PHP applications - just a large dreary section on setting up a Travis environment.