In day one, you'll see and work with a practical example of going from no code to a deployed feature.

In day two, you'll learn various techniques for keeping an existing code base clean.

This workshop is an in-person, hands-on companion to the book 

Tools and techniques for writing and maintaining a code base that fits in your head.

Developers who have suffered through a few bad projects.

C# code examples are written in a style friendly to developers working in C#, Java, TypeScript, C++, etc. Hands-on exercises are in C# on .NET Core 3.1. You don’t have to be a professional C# developer, but you should at least feel comfortable trying your hand with C#. You can get assistance during exercises, but we will not have time to cover basics of installation, compilation, syntax, and such.

You'll need a development environment that enables you to work with C# on .NET Core 3.1, a Git client, and (for some exercises) SQL Server Express. If on Windows, Visual Studio Community Edition is a great fit. In general, free versions of those application will be sufficient.

2 Days

Code That Fits in Your Head

.NET

Architecture

This hands-on workshop provides practical guidance and recommendations. We will cover architecture, technologies, tools, and frameworks. We will examine strategies for organizing your projects, folders, and files. We will design a system that is simple to build and maintain - now and well into the future.

You will leave this workshop having developed the foundation and structure for your next enterprise application, along with the knowledge to take your enterprise application development to the next level.

Required workload - ASP.NET and web development

You can also use your preferred IDE, e.g. Visual Studio Code or JetBrains Rider.

Practical Clean Architecture with .NET 6  

Like most of the harder challenges we face in software development, increasing the security of software is a journey that takes careful planning, a lot of collaboration, and a healthy dose of iterating as you learn more. It’s the type of complex journey that goes more smoothly when you have a map.


In this workshop, we’ll look at what secure software roadmaps are, why they’re a useful tool to use as part of your overall software security approach, and how you can build one of your own.


Over the course of 2 days, you will go from a basic understanding of what makes a good application security program to having planned your own program roadmap- ready for you to go back to your company and implement.

Understanding what an application security program and roadmap are, why they are important and how they are structured

How to measure and understand your current maturity level including how to use OWASP SAMM and OWASP ASVS for measuring your existing programs or practices from a product and lifecycle perspective.

Setting realistic expectations and goals for your program

Defining what actions you can take to weave security through your software development lifecycle

Understanding how to measure progress as you implement your program

Anticipating and planning for common challenges we encounter when developing and implementing an application security program.


Software development leads who wish to support application security across their projects and teams.

Cyber security leaders and application security engineers looking to expand their approach to be more development aware

Those who wish to move towards application security in their organisation in a structured and measurable way.

A solid understanding of the concepts covered

A draft application security program roadmap that is tailored to your organisation and its current maturity level

Build your own application security program

Security

From creating a schema to represent the data contracts, implementing that schema against a data store and how to have a client work with the server, there's a lot of things to consider in the design.

So, let's get started! Over the course of this workshop, we'll learn the building blocks of the GraphQL language, create a server with TypeScript, work with data stores and create a web app to connect to it. With the basics done, it's time to expand with advanced GraphQL features such as real time through subscriptions, creating federated backends to integrate existing APIs and how to handle security.

Connecting GraphQL servers with data stores

Docker + VS Code Remote Containers extension

End to end GraphQL

As one of the essential skills in today's software development, TypeScript can be quite a handful to grasp, especially as it keeps growing to meet ever growing demands.

If you,

want to start with TypeScript but feel intimidated, or

you have already but feel a bit lost with daily struggles against the type checker, or

you feel TypeScript can be used just like Java or C# without much fuss, although

you find online code examples and answers cryptic and hard to comprehend

Then come along to this leisurely and fun workshop! There will be strange and familiar examples, some fun quizzes, plenty of
interaction, but not too much pressure.

We go in with strong intentions. The focus is laying a clear and sound foundation for our understanding, not going over every single feature or quirk of the language.

Specifically, we will,

How to quickly validate our types? How to read the cryptic error messages? How to shorten the feedback cycle for efficient development

Get a good taste of the power of TypeScript, and how we may hurt ourselves this way

We go over a few (just enough, not too many!) key language features, especially those that make TypeScript so different and so powerful, then drive them home with plenty of hands-on.

Let's be open-minded, let TypeScript lead us naturally to new ways of problem solving. With more exercises we observe such effects, push the envelope for ourselves and reinforce the new realisations.


With this workshop under the belt, you should feel calm and comfortable with TypeScript, and have the structure and techniques required to explore on your own the excitement it brings.

No TypeScript experience should be required to attend; but prior programming experience (in any language) is essential.

Intentional TypeScript

This hands-on workshop will take you through an end-to-end software lifecycle, starting with GitHub Issues and Projects for planning, GitHub Codespaces for a super efficient inner loop of development, and GitHub Actions to take your applications into production.

How to effectively plan and track your work using GitHub Issues

How to manage your projects within and across repositories in your organisation

The free and paid options for coding in the cloud, including the web editor and GitHub Codespaces

How and when to use GitHub Actions for non-CI/CD automation

Techniques and strategies for safe and effective software engineering using GitHub tooling

Techniques for effective collaboration in remote teams

Software engineers, team leads, and DevOps specialists, regardless of their level of GitHub adoption.

Any laptop with a keyboard and a browser.

In fact, you could probably get by with a tablet - it's a new world!

End-to-end DevOps with GitHub

DevOps

During the workshop, you use a sample repository and build it locally in Visual Studio. We then walk you through building the application, testing it in GitHub Actions, configuring the release, and passing the artifact to Octopus Deploy for deployment.

You get access to provisioning infrastructure in Azure, building a GitHub Actions workflow, and creating an Octopus Cloud instance. You use these tools to configure and prepare a build. Then you release and deploy a sample application from dev to test to production.

Building your .NET 6 multi-tier application using GitHub Actions

Setting up your application to pass packages to Octopus Deploy from GitHub

Infrastructure as Code (IaC) and how to add infrastructure in Octopus Deploy

Creating Azure Web Apps & SQL PaaS in Azure via IaC

Administration of GitHub Actions, Octopus Deploy, and Azure

Multi-Tenancy, channels, lifecycles, and spaces

Common deployment patterns including canary, blue/green, and red/black

Developers, Ops, and DevOps Engineers starting on their CI/CD journey

Software engineers looking for fresh ideas

Anyone using an older version of Octopus who wants a refresher

Free Azure or MSDN Subscription with access to create an Azure Service Principal (we advise against a corporate subscription)

Email address to spin up your free Octopus instance

Laptop with Windows and the following software:

DevOps in two days with IaC, Azure, GitHub Actions and Octopus Deploy

This hands-on workshop covers modern front end fundamentals, enabling you to create a layout and components without the need for any third-party code. You learn core accessibility concepts to make your project more accessible without having to write complex code, take shortcuts or deal with browser-specific implementations.

Once that is done, we then move on to testing our application, making sure that our accessibility improvements are there, watching for any unintended changes and making sure that the application works as it's supposed to. Through automated tools that can be implemented as part of a deployment pipeline, to manual tools to check on the fly, there are plenty of options to ensure the front end is being tested as thoroughly as the back end.

This workshop is aimed at anyone who works with front end code on a regular basis and needs to keep up to date with the constantly changing world of front end development. Even if you're just brushing up on your skills, this is the workshop for you.

Some experience with front end code desirable, a basic understanding of HTML and CSS. Some experience with JavaScript is also useful, but not essential.

Front End Web Fundamentals

Luckily, there has been much progress towards making our lives as developers a bit easier. This is done by allowing us to concentrate on writing code, instead of causing us headaches from all aspects around hosting, deployment, and management.

In this demo-rich session, we are going to build a real-time stock monitoring system using a serverless React App backed by the power of various Azure features. You will learn how to process documents from Azure Cosmos DB Change Feed, and then broadcast this newly received data to our client, all by using out-of-the-box Azure Functions bindings for Cosmos DB and SignalR.

Talk (60 min)

Going real-time using Azure CosmosDB and React

Cloud

JavaScript

Serverless

Our messages represent value, so we can't just slip them in a bottle, toss them into the ocean, and hope they arrive at their destination. Instead, we need a messaging backbone that can provide resilience and stability. Therefore, we implement proven messaging patterns, to ensure they are handled with the care they deserve.

In this session we will have a look at Azure Service Bus, and what role it takes in such designs. Through various demos, we will showcase its implementation with a wide variety of messaging patterns. As a result we come to understand how secure and reliable communication help us solve complex messaging challenges.

Come and learn about handling transactions involving different systems, implementing data consistency across them, and controlling intermittent and critical failures.

Don't throw your messages in a bottle; Implement messaging patterns

Our favorite games were always cloud-based and multi-player (so everyone could join), and involved either drawing or custom input from the players. Naturally, I wanted to see if I could build my own version of these "Jackbox"-style games!

- We'll play the game! Audience participation highly encouraged!
- I'll deconstruct the architecture of the game, tying relevant game actions to their respective serverless components
- Explore the benefits and caveats of building games with a serverless architecture

By the end of this talk, the audience should be able to play the game, understand how each part works, and even be inspired to create their own!

Building a Quick Serverless Game with MongoDB Atlas and Realm

Oregon Trail is often regarded as one of the first great computer games, as well as being the originator of a franchise that is still running to this day. It was effectively also one of the first instances of both Shareware and a Commercial home release of(depending on the version).

My interest though, isn't just in historical computer games, it's also .NET and Functional Programming. I want to use this as a worked example of one of my passions - Functional Programming in C#! The challenge I've set myself is to redevelop Oregon Trail into C# using the following restrictions:

* Near 100% unit test coverage
* No variables can change state once set
* No statements (for, foreach, if, where, etc.) unless there literally is no way of avoiding them

I'll also be demonstrating a few of the tricks Functional Programming can offer, like Higher-order functions, functional flows with simple Monads and Tail Recursion. There should also be a bit of retro computing fun, while we're at it.

Down the Oregon Trail with Functional C#

Software Design

Functional Programming

Gaming

Methodology

Microsoft

 Come learn about scaling applications in .NET to over a dozen different platforms and channels while building for accessibility to even the playing field. Gain an understanding of voice and conversational platforms, real-time communication technology, computer vision, and best practices for sharing code and going from PoC to product.

Try your shot at landing a win in Call of Duty, Halo, Fall Guys, Minecraft, and more using your voice or write a block of code using Visual Studio and your face, then leave with a working knowledge of other ways you can use .NET and the tools you're familiar with.

Making Every Game and App More Accessible with .NET and AI

Embedded

Mobile

In this talk attendees will learn about Alda, a unique programming language that can be used for creating songs and mimicking instruments on the computer.

Attendees will leave this talk with an understanding of Alda and learn how to:
mimic certain instruments
mimic voices to be included in songs and melodies
create beats and melodies
make their own songs in different genres
change the tempo of their own songs

Automating Audio with Alda

Agile

Big Data

This clearly depicts that Computer Vision is very essential and productive for many industry verticals. Despite its importance for businesses, it requires a handful of resources to detect or classify an object from the given media or image.

But would you like to learn how can you overcome this problem and implement object detection in your solutions?

Easy peasy! ML.NET solves this problem for you and we're going to see how you can now detect images using the latest ML.NET Model Builder without having to worry about your slower machine and I will brief you why's that!

In addition to this, we'll also learn about the tools it take to label your images as well as some other cool examples and some use-cases of ML.NET. All in all, it's going to be fun for folks who belong to the great .NET world!

Beyond Sentiment Analysis: Object Detection with ML.NET

Machine Learning

This process may increase security, but the friction can decrease conversion and the user experience in general. Android and iOS have APIs to combat this, so why not the web? In this talk we'll take a look at autocomplete and the WebOTP API to see how the web platform can help us build secure flows and a better experience all round.

Web APIs for delightful two factor auth experiences

Join us to learn the basics of security vulnerabilities and evasive coding maneuvers that can make your software more secure, every time. Geared for developers of all skill levels, this code-centric talk will be present code samples and essential fundamentals that apply to every language.

Defensive Coding Bootcamp

Process

Limited by the constraints of the 737’s original design and their desire to minimize training needed by pilots to fly the new aircraft, Boeing made multiple critical compromises in the aircraft’s design. 346 deaths and $20 billion USD later, we have all been reminded of the importance of rigorous design processes and the need to engineer systems for the realities of the end users and their environment. 

This talk dives into the motivations for the design compromises, the human factors considerations that were disregarded, and how a Fortune 100 company’s prioritization of profit over good design practice led to its stunning fall from grace. The lessons learned are directly applicable to all kinds of developers, from web designers to mission-critical infrastructure engineers.

The Boeing 737 MAX: When Humans and Technology Don't Mix

In this talk, Rowdy will go over common mistakes and show solutions to improve your website for persons with disabilities by using semantic HTML and ARIA attributes.

He will also discuss practical examples to make websites more enjoyable and usable for every user, based on their current situation.

A web for anyone, anywhere, anytime

People

When we launched Flexischools, I was relatively inexperienced - I did my best to follow the guidance I could find online, but I frequently found myself struggling to incorporate the burgeoning growth in complexity of its feature-set into an increasingly tightly coupled code-base with a very small team of developers.

In 2015, I discovered DDD, and when reading the Blue Book, I felt a light bulb going off on every page. When we launched our second product, LanternPay, I vowed not to make the same mistakes.

LanternPay is a healthcare & disability claiming & payments platform supporting hundreds of thousands of Australian care providers and recipients to ensure prompt and equitable access to care.

In this talk, I'll reflect on the comparative experience of launching, operating & scaling both products and the impact DDD had on the technology & the business.

How to use DDD when you're launching a new product into a new market and there are no domain experts to consult?

Why it's not a good idea to use the same object/table to store both the size of a school uniform t-shirt and the presence of a slice of cheese on a sandwich

How to make the business case for a major multi-service refactor when your DDD-inspired domain understanding evolves mid-project

Learning to Love DDD - a Tale of Two Products

Microservices

A more accurate terms is “scattered”, and this talk will provide guidelines for managing scattered teams.

Remotely Operated - Managing Scattered Teams

Work skills

Screen readers, external keyboards, extreme text size settings, and speech interfaces.
Good, bad, and unusable experiences across a bunch of apps. Names will be named, some may be shamed. Will yours be in the mix?
Get a glimpse at the different ways people are using your app.

Mobile app accessibility

Tools

This session will show you the origins and thought process behind the Bicep design, how easy it is to learn, why it is a great alterrnative to traditional ARM templates, and some really cool things you may not have realised it can do that will elevate your infrastructure creation in the cloud. This session will have benefits to beginners and advanced practicitioners alike.

Bicep - Deploy to Azure cloud without it being a pain in the Arm

Cloud Native

But, refactoring is an inherently risky process. It's very easy to break things in any complex system, especially if the test coverage is less than ideal. Worse, it's possible to ruin users' experience by accidentally fixing bugs that their workflows had come to rely on. To combat this we need to ensure that our refactor doesn't change the existing behaviour in any way, while also leaving us free to add new functionality.

We're going to have a look at how to decide when we actually should refactor, and how we can use tests to ensure we maintain the existing behaviour. We'll have a look at our options for testing JSX, and the pros and cons of snapshot tests. And we'll finish up with a demo, putting it all together.

Refactoring Components

Testing

This talk will show how Kubernetes and gRPC, two popular open source projects based on experience Google has gained running microservices at scale

gRPC is a platform-neutral RPC framework, based on HTTP/2 and Protobuf, used to build highly performant and scalable APIs. gRPC benefits from new features introduced in HTTP/2 like framing, bidirectional streaming, header compression, multiplexing, and flow control. gRPC is not just a blueprint for high performance RPC, but also provides a methodology to generate services and clients in multiple languages. This talk is based on our experience by contributing to the network intelligence center’s Simulator, which itself used gRPC for all intra-server communication.

This talk will demonstrate the core concepts of gRPC and Kubernetes, and show you how to combine these two technologies to create scalable and performant microservices rooted in lessons learned from Google’s experience.
If you're interested in a dead simple way to add gRPC load balancing to your Kubernetes services, regardless of what language it's written in, this talk is surely going to be beneficial.
gRPC is relatively new, but its fast-growing ecosystem and community will definitely make an impact in microservice development. Since gRPC is an open standard, all mainstream programming languages support it, it will help viewers to understand how ideal it is for working in a microservice environment.


Scalable Microservices with gRPC & Kubernetes

Enter KafkaJS. Using Kafka is a tool to ensure fluid communication across all of your microservices. To implement it with your JavaScript applications, you can use KafkaJS. In this talk, the attendees will learn how to use Kafka in the context of a JavaScript microservices architecture.

Data Metamorphosis With KafkaJS

A New Dimension: 3D in CSS

While Dapr promises a lot of features, one feature stands out due to increase of interest in Event Driven Architectures.

Our focus in this session will be about the Publish-Susbcribe functionality: what it is, how it works, and how it can make the life of developers easier for Event Driven Systems.

One Step Deeper in Dapr's Pub/Sub

In this live-code session I will uncover some common errors I see when setting up applications to work with AAD, and dive that next level down to give you an understanding of why they occur, and how to fix them.

By the end of the session you'll understand
- What an AAD Application is,
- What an AAD Service Principal is,
- MSAL vs ADAL
- The difference between AAD V1 and V2 endpoints
- How AAD represents OAuth2 scopes,
- Why scopes aren't permissions, and how roles can help

Demystifying OAuth, JWTs and Azure AD

This slightly opinionated talk will look back at the history of web development and the current state of play and emerging trends in web application development and what is driving some of these.

Finally we will step back from the mayhem and consider what we need to think and what questions to ask when determining what tech stack to use.

Always crashing in the same car - the state of front-end web development in 2022

Lazy Blazor WebAssembly

Continuous Delivery

This session will take you through an end-to-end software lifecycle, from planning with Issues, coding in the cloud with Codespaces, mature CI/CD with GitHub Actions, and much more.

End to End DevOps with GitHub

If we look at the data, however, from the language we use, the practices we recommend, the posts we make and the frameworks we share - we are still stuck in a world focused on "secure code" when in reality the code itself is only part of the picture when it comes to protecting our data, systems and people.
In this talk, we will examine why we are stuck focused on secure code and how we can move towards secure development instead. Laura will provide practical actions you can take throughout your SDLC, spanning from initial ideas to ongoing systems maintenance and support that you can apply today, whether as an individual team member or across a more complex project.
Let's say goodbye to our dreams of secure code once and for all and embrace the idea of secure systems development.

So long, Secure Coding

10 Tips to becoming an Azure Architect

In this session I will share practical tips, resources and frameworks that I've developed and used in my previous tech leadership, HR and most recently training specialist roles to help you implement best practices regardless of the technology stack you are using.

Building skills and creating communities

It can be time-consuming, nerve-wracking, and tedious. You probably don't enjoy doing it, and that can lead to bad hires and painful experiences. Kris has participated in more than 250 interviews at AWS - as both an interviewer and a hiring manager - and has finally come to embrace the process. She'll provide practical tips you can use to conduct more effective interviews, saving you time and making the whole process a lot more enjoyable.

Interviewing Like a Boss

This is an introduction to coding using freely available tools your kids can start using right now in the browser. Ari will walk them through the basics, set them exercises and help them learn the same fundamental concepts that we all use in our professional development careers today.

This session is suitable for any kids who can use a browser and type, although parental assistance may be needed for younger children. The only prerequisites are a laptop and an appetite to slay ogres with code.

Coding for Kids

This talk shares lessons from the trenches and real world stories from dealing with billions of breached records whilst running the Have I Been Pwned data breach service. You’ll see how previous breaches occurred, who was behind them and how we need to adapt to prevent them in the future. You’ll also see how the breach landscape is changing, in particular how hacktivists are being “called to arms” and are using breached personal data in the war in Ukraine. It’s a look at the data breach landscape like you’ve never seen it before.

Lessons From Billions of Breached Records

Learning about synchronization contexts and how they differ between console, ASP .NET, ASP .NET Core, or desktop applications

Implementing custom primitives for better code control

Implementing custom tasks or synchronization contexts


Windows 10 running on x86_64 architecture

WinDBG + configured symbols + configured SOS for all .NET environments

Part II: Understanding async machinery down to a single detail

Talk 1: 210 x 297 - UX Design for the Physical World - Rebecca Platt


We know the importance of UX, and there is a lot of information out there about good design principles - when on a digital screen. But what about one of the most prevalent interfaces that we all encounter? Whether it's the contract for your mortgage or bills from suppliers, printed documents are still one of the major ways in which we interact with our users. This talk covers design issues and tips unique to the UX of the physical printed world.
(210 x 297 are the dimensions of an A4 page in mm.)

Talk 2: Avoiding DNS Pain - Kieran Jacobsen


In every organisation DNS is a critical system, but it rarely gets the attention that it deserves. We rely on DNS for the smooth operation of our businesses; if your customers can’t reach your website or email you, then your business is effectively cut-off.

Organisations will keep disaster recovery plans and business continuity procedures for their corporate websites, mail servers and internal systems; but how many of these plans and procedures include DNS?

Over the past few years, attacks against DNS have been on the rise. These attacks may be direct attacks against DNS server software; but they can also come from compromised credentials or DNS zone misconfigurations such as dangling DNS entries.

In this session, I am going to walk through performing a DNS maturity assessment and how you can improve the management of DNS with tools like DNSControl.

NDC { Melbourne }

Agenda

10:20 - 11:20 (UTC+10)

End to End DevOps with GitHub

Damian Brady

So long, Secure Coding

Laura Bell

Web APIs for delightful two factor auth experiences

Phil Nash

Going real-time using Azure CosmosDB and React

Olena Borzenko

Making Every Game and App More Accessible with .NET and AI

Alex Dunn

11:40 - 12:40 (UTC+10)

Building skills and creating communities

Donna Edwards

One Step Deeper in Dapr's Pub/Sub

Emad Alashi

Data Metamorphosis With KafkaJS

Joel Lord

Demystifying OAuth, JWTs and Azure AD

Graeme Foster

Automating Audio with Alda

Herve Aniglo

13:40 - 14:40 (UTC+10)

Always crashing in the same car - the state of front-end web development in 2022

William Tulloch

Scalable Microservices with gRPC & Kubernetes

Sanket Singh

Refactoring Components

Erin Zimmer

Interviewing Like a Boss

Kris Howard

A New Dimension: 3D in CSS

Amit Sheen

15:00 - 16:00 (UTC+10)

10 Tips to becoming an Azure Architect

Adam Cogan SSW

Lazy Blazor WebAssembly

William Liebenberg

Building a Quick Serverless Game with MongoDB Atlas and Realm

Adrienne Braganza Tacke

Down the Oregon Trail with Functional C#

Simon Painter

16:20 - 17:20 (UTC+10)

A web for anyone, anywhere, anytime

Rowdy Rabouw

Beyond Sentiment Analysis: Object Detection with ML.NET

Arafat Tehsin

Bicep - Deploy to Azure cloud without it being a pain in the Arm

Paul Glavich

Mobile app accessibility

Allison Ravenhall

Don't throw your messages in a bottle; Implement messaging patterns

Eldert Grootenboer

Olena Borzenko

Coding for Kids

Ari Hunt

Troy Hunt

17:40 - 18:40 (UTC+10)

Defensive Coding Bootcamp

Heather Downing

Remotely Operated - Managing Scattered Teams

Anjuan Simmons

Learning to Love DDD - a Tale of Two Products

Chris Simon

The Boeing 737 MAX: When Humans and Technology Don't Mix

Kyle Kotowick

Coding for Kids

Ari Hunt

Troy Hunt