The business of building and selling iOS apps just had its five-year anniversary. This time has been a journey, with a lot of lessons learned. The Gold-Rush days of striking it rich making a simple flashlight app are behind us, but mature apps continue to thrive. This talk will explore the evolution of Mobile apps, from simple utilities to sophisticated tools, and will extrapolate to what may come next.

In 2012 Facebook relaunched their iOS app to use native code. This was a big shift in architecting and implementing the Facebook app experience, the most widely used third party app on the entire iOS platform. Adam Ernst will speak about how the decision was made to switch to native code and how the company prepared to rewrite the app. He will share an inside look at the APIs and technical architecture Facebook uses to enable dozens of iOS developers to work on the same application. Automated testing is very important to Facebook, so Adam will also speak about how Facebook uses testing on iOS to keep the app reliable.

17:50 – 18:30

Hall 2, "Mobile Camp"

Open mapping refers to using open source software to display and interact with maps and using open source tools and data to make the maps themselves. You will hear about ways to make maps from common data as well as how to use them in both online and offline environments on Apple's iOS ecosystem. We will cover some basic types of geographic data, bringing them all together and designing a map, and working with Apple's closed, proprietary operating system in more flexible and open ways. You will learn about some of the challenges that map-enabled app developers face in a mobile environment and how various open source projects and standards can help solve those problems.

W3C makes formal standards out of things that everyone uses on the web, so they start working the same in different browsers. XMLHttpRequest, Geolocation, querySelector, DOM events, and many more: What are they doing, what is new, and how can you help make sure the results are what you would want.

Get a behind-the-scenes look at development on the GitHub API team.

Developers and businesses rely on the stability and consistency of the GitHub API for critical tasks. Changes to the API could break production deployments (or continuous integration, authentication, etc.) for thousands of businesses. And yet, GitHub.com continues to evolve, improving existing features, and adding new ones. The GitHub API needs to evolve as well. We'll explore the design philosophies and techniques that we use to provide a reliable API, while continuing to ship improvements every day.

APIs are proliferating on the web, providing app developers with ready access to a wide range of data and services, yet very few apps take advantage of more than one or two API providers. Arbitrary inconsistencies between APIs -- from authentication to input/output formats to details as small as timestamps or pagination -- mean every new API brings its own unnecessarily redundent learning curve, draining developer's most precious resource: time.

Temboo is part of an emerging class of services for managing and scaling API usage. By NORMALIZING access to APIs (as well as their associated documentation and credentials) these services do for development what PaaS and server virtualization have already done for app deployment and infrastructure. "Code virtualization", whereby all the tedious details of API access are abstracted away in standardized cloud-based processes, will free developers to spend their time writing only the code that actually makes their app unique. And that means more unique apps for everyone.

Responsive web design challenges web designers to apply a new mindset to their design processes, as well as to techniques they are using in design and coding. This talk provides an overview of various practical techniques, tips and tricks that you might want to be aware of when working on a new responsive design project.

There are lot of tools (CoffeeScript, Typescript, Dart, JSLint / JSHint etc.) that we can use to help us write better JavaScript, and many frameworks (Backbone, Ember, Angular etc.) that can help us structure large applications. But... what if you already have a large code base and are not able to re-write your whole application in a new way? What if your organisation does not want to depend on some open source or third party tool or framework? I am going to talk about some of the key things that most of these tools and frameworks do and how you can apply them to your existing or new project. Topics covered will include type checking, data hiding (public, private, static), inheritance, asynchronous code and performance.

The future of the Web is a dangerous Babylon: people talking to each other to do business, express their feelings, meet their friends, transcend their disabilities, organise revolutions, and economically empower themselves. Obviously, this must be stopped. Bruce will show you his top tips and tricks that you can employ to destroy the web.

Form follows function is a modern architectural principle that has been used to design and understand the workings of organisms and buildings. Computer networks are also an example of this principle. The classical networking topology (or form) inside an enterprise (and data center) has been the access-aggregation-core model that was designed to serve the needs of the applications then vogue in the enterprise. Enter the 21st century: companies like Google and Amazon, and applications based on cloud, big data and web 2.0 are redefining the fundamental morphology of data center networks. This talk introduces the fundamental form of modern data center networking and discusses how form follows function in this brave new world. The talk will range from the application needs of the modern data center and how they redefine the network requirements to the most common topology in modern data centers to the protocols used and new technologies.

The product security team is responsible for ensuring the security of all code Twitter ships. This means proactively finding and fixing vulnerabilities using automation, working closely with engineering teams throughout the company to design and implement secure systems, and building security features into the product. To make all this happen and execute at a fast pace, we practice an agile process and build tools to support rapid information transfer. First, we'll talk about our approach to using automation to ensure that we ship secure code by getting the right information to the right people at the right time. We will also discuss our security review process, which is focused on improving the pace of development and cooperative problem solving. Finally, we'll talk about how we develop security features for Twitter, including our recent improvements to login verification. At Twitter, our goal is to reach every person on the planet. Having a global reach means understanding and responding to many threats. We want to share the details of our team's organization and process that allows us to keep Twitter secure as we continue to rapidly scale.

While the need for application logging and proper forensics information has been important after a security incident, it is not frequently used in proactive security. This talk will explore the ways that application logging, data, and metrics can be taken advantage of to create effective defenses for web applications. We query Hadoop for actual threshold numbers used for detecting attacks, proactively monitor for phishing attacks based on our own web server logs, respond in real-time to cross-site scripting attacks by hooking JavaScript methods, among other security countermeasures mined from big data. This presentation will help you build new defense strategies for your applications based on the data you are able to collect.

An in-depth look at Facebook's easy-to-use internal multi-factor authentication deployment. We will discuss our motivations, how our solution works, technical and security trade-offs, deployment problems, and outstanding issues.

High speed NSM – Network Security Monitoring 1. Network security? What is so special about it? 2. The traditional way – IDS, IPS. 3. How is NSM different from everything else to date? The advantages of the full NSM system. 4. How does incident response look with the NSM? 5. What if I can't spend $1 million on the system? Introduction to the open source Security Onion. 6. Where do you find all the data? How about the SSL? 7. Design to scale. Large volume data issues and how to resolve them. 8. Why does the world need another IDS? What is this BRO thing about? 9. Using NSM-collected data in practice.

This talk describes the work developed by the Yandex Speech Group in the last two years. Beginning from scratch, large amounts of voice recordings were collected from the field of application, and the most popular open source speech projects were studied to get a thorough understanding of the problem and to gather ideas to build our own technology. This talk will present key experiments and their results, as well as our latest achievements in automatic speech recognition in Russian. Currently, the Yandex Speech Group provides three different services in Russian: maps, navigation, and general search, with a performance that is comparable to competitor products.

With the current state of human knowledge we can pinpoint a position on Earth from satellites with a precision of a few centimetres, and we can control life by inserting genes into plants to achieve specific behaviour. Yet, the same level of human knowledge doesn’t offer anything when it comes to describing 96% of the energy content of the Universe. Or, indeed, when we need an answer to the question why there is matter to make stars and planets from in the Universe at all. This talk will set the scene for how experiments conducted at the Large Hadron Collider may be able to fill the voids in our knowledge. An overview of a specific analysis will be given, which will walk you through the data reduction steps, from the recording of the proton-proton collisions in the collider to the final scientific result. Special emphasis will be placed on how multivariate classifiers have allowed us to massively expand our scientific program, as well as achieve the current precision of our measurements.