Tutorials: March 2-3, 2015
Conference: March 4-6, 2015

Speaker: David Pollak

Creator of Lift, the Scala web framework. Creator of Visi, the Spark engine.
I'm currently founder and CEO of Telegram, Simply Beautiful CMS. Telegram lets anyone who can use Word or a text editor create a beautiful web site, blog, or any other web presence. Telegram is for me so I can blog. Telegram is for my kids' school so the web site is up to date. Telegram is for restaurants so they can publish their daily menu from Dropbox. Telegram is for open source projects like Lift to publish a web site. Here's a resumé. In 2006, I was an early adopter of Scala and I founded the Lift web framework project. I wrote Beginning Scala. I continue to contribute to Lift and run the Scala Lift Off conference. From 2002-2004, I was Vice President of Engineering and CTO at Cenzic. I helped to define the web application security category and my team built Cenzic's Hailstorm technology. I was CTO of CMP Media's NetGuide Live. It was a fun ride being in San Francisco during the infancy of the web. I founded Athena Design and wrote Mesa for NextStep (now available for OS X). I also wrote much of Mesa 2 for OS/2 and Dan Kulp maintained it for years. Mesa was the first real-time spreadsheet. I received a JD from Boston University School of Law in 1991 and was admitted to the Rhode Island Bar in 1992. I receive a BA in Psychology and Economics from Rhode Island College in 1987. I co-authored 64 Doctor with Eric Berkowitz.

Find David Pollak at

http://blog.goodstuff.im/
https://twitter.com/dpp
https://www.linkedin.com/in/dpollak
https://plus.google.com/111634091045361305819
http://lanyrd.com/profile/dpp/

Talk: Securing "Platform as a Service" with Docker and Weave

Location:
Duration: 10:20am - 11:10am
Track: Docker, containers and application portability

Cloud services are rarely "read-only." We build cloud services to that users can interact with the data in the cloud. And the more complex the user interaction, the more likely that we will create a Turing complete query/configuration system. And sometimes we just allow users to upload traditional code like JavaScript, etc. But any Turing complete grammar means that there are all manner of security issues from running code in infinite loops to nastier issues including accessing other users' data.

 

Containers provide an excellent abstraction for securing the execution of untrusted code. Containers provide simple levers to isolate data, constrain CPU, memory, and network access, and simple is generally better when securing a system. Please join David Pollak as he explores using Docker to isolate user code processes and the use of HAProxy and Nginx to make the isolated user code appear to unified with a whole web application.

Slide: https://qconlondon2015.telegr.am/#/
Source code: https://github.com/dpp/qcon_london_2015

Other talks from the same track

Docker Open Space
QCon Open Space Facilitator
Richard Kasperowski
How to Train your Docker Cloud
Senior Software Engineer at Cloudsoft
Andrew Kennedy
Docker vs PaaS; May the Best Container Win
CEO of CloudCredo
Colin Humphreys
Docker vs PaaS; May the Best Container Win
COO, CloudCredo
Paula Kennedy
Docker clustering - batteries included
Core maintainer of Docker.
Jessie Frazelle
Docker, Fig & Flocker
Founder of ClusterHQ, makers of Flocker - data for Docker
Luke Marsden

David Pollak Elsewhere

GitHub

Tracks

Covering innovative topics

Wednesday, 4 March

  • Architecture Improvements

    Next gen architecture, Arch over the full lifecycle, Bleeding edge tech in legacy, Cognitive biases in architecture, Evolving Architecture.

  • Big Data Frameworks, Architectures, and Data Science

    As big data tools and architectures continue to evolve, how do you architect and select technologies that work now but are also future-proof?

  • DevOps and Continuous Delivery: Code Beyond the Dev Team

    As infrastructure becomes as malleable as code, a unified approach from reqs to ops is needed to deliver promised breakthroughs.

  • Engineering Culture

    The best teams and companies talk about how to create amazing engineering cultures.

  • Java - Not Dead Yet

    Java is evolving to meet developer and business needs, from lambdas in Java 8 to built-in support for money types rumoured for Java 9.

  • Mind Matters at Work

    How theories from neuroscience and psychology can help us better understand IT professionals and discover what really motivates them.

Thursday, 5 March

  • Docker, containers and application portability

    People building stuff for and with containers showing why application portability is important, and what can be done with expanding ecosystems.

  • Evolving agile

    Reflecting on and learning from successes and failures in applying agile approaches since the creation of the Agile Manifesto and exploring ways of applying agile practices to increase business value.

  • HTML and JS Today

    The state of the art in web technologies. What is important to know and why?

  • Internet of Things

    What software devs need to know to design and build for instrumented environments and reactive things, what new issues and questions it raises.

  • Modern CS in the Real World

    How modern CS helps you tackle today's problems.

  • Reactive Architecture

    How to create reactive systems is more than simply learning a framework. Thinking in a reactive way helps you to design responsive architectures.

  • The Go Language

    The Go Language - Concurrency, Performance, Systems Programming.

Friday, 6 March

  • Architectures You've Always Wondered About

    Get a rare look behind the scenes and get to see the architectures of the most well-known sites with the least known architectures.

  • Low latency trading

    The 'race to zero' continues. Join us to learn about the latest tecniques being deployed to optimise order routing and execution.

  • Open source in finance

    Financial services have changed from OS as cost-saving to a competitive weapon. See open source projects that are disrupting the finance industry.

  • Product Mastery

    Come have fun with fellow PMs and BAs as you learn about Value Management. We'll even tell you dark tales of Snarks, Hippos and other obstacles.

  • Taming Microservices

    Tackling the challenges of microservices in practice.

  • Taming Mobile

    Mobile is no longer the Next Big Thing but a requirement for your business. Hear from those who have implemented successful mobile systems.

LAST YEARS TRACKS or LAST YEARS SCHEDULE

Conference for Professional Software Developers

Follow QCon

Contact

Menu

QCons around the World

Qcon