ApacheCon EU 2014

Apache Subversion is one of the most widespread version control systems currently in use. Whilst it has many useful features — and several well-known deficiencies — one of the most often repeated criticisms against it is that it is not "distributed" (or, more properly, "decentralised"), since is has a central repository and does not provide local branches and similar features of most popular DVCS. In this presentation, we'll discuss the Subversion developers' plans for introducing some of these features into Subversion.

Simple software wins every time, but it can be very hard to create. Based on concrete examples from past projects, we'll show how high one can put the bar in terms of simplicity, and how you need to be ready to throw away your work, even many times, to come up with something simple enough. There's no magic recipe for simple software, but our "tales from the trenches” should help you identify the key drivers that help us progress on this hard journey.

Nowadays, it is quite common to have build infrastructure that, on every change in a repository, builds your software and runs all your tests. However this is where most development teams stop. This talk demonstrates how you can consistently deploy systems from development to testing, staging and production.
With Bndtools we semantically version bundles in the Eclipse IDE. The continuous build is setup to automatically deploy to a bundle repository and create snapshots of changed bundles compared to a baselined version that is available in a release repository. By hooking up these repositories to Apache ACE, such updates can instantly be deployed to systems in different configurations, allowing you to deploy new features to QA systems, beta users and finally roll them out to all other customers.
We’ll also go into real life scenarios and pitfalls we have encountered setting this up.

Open Development is often mentioned in open source circles nowadays, as a way to make projects really open, sustainable and meritocratic rather than based on people's titles or hierarchical ranking.
Does this model have its place in the enterprise? Can we apply the open source governance models to enterprise projects, where you'd usually expect a strictly hierarchical decision making process?
The open collaboration methods used by the some development groups at Adobe demonstrate that this is not only possible, but brings measurable benefits in terms of agility, employee satisfaction and quality of the final product.
This talk describes the key elements that make this possible, and provides pointers to developers or project leaders to start using such a model in their own projects.

Apache BatchEE is an implementation of the JSR-352 JBatch specification.

BatchEE is based on the original reference implementation but includes many bug-fixes and improvements.
In addition to the jbatch core module we also added many useful helpers which do make batch programming a breeze.
We did also add a few ways to control your batch jobs, e.g. via JAX-RS, a simple GUI or even as stand-alone command line client. That way you can use BatchEE in JavaEE 5, 6 and 7 environments and even in Java SE.

After an introduction to writing JBatch batches in general we will showcase fancy features of BatchEE and we surely have some best-practice tips to share.

In this talk I would like to present few recently discovered security vulnerabilities in the Apache Struts 2 web framework and based on that try to increase developers' awareness of the overall application security. In my opinion, nowadays developers don’t care about the security too much, they depend on what the framework gives them. Quite often, they even don’t check security bulletins to see if a new vulnerability wasn’t discovered recently in his/her famous framework. I would like show few web attacks and explain how it was possible to harm an application or even entire server, how to prevent such kind of attacks in the future and so on. Examples will base on the Apache Struts 2, but almost all the same problems were pointed out in the Spring MVC or in the Apache Wicket. Each framework has its own weaknesses :-)