denzalovera / devcon

Notes taken from Devcon Iloilo 2017

09/30/17

Devcon

BigData

* [email protected]
* @haifacarina

fullstack - Symfony

1. when to use Symfony
   • general needs
   • specific functions

question:

• what are the current needs of my proj.
• what skills do i need to use the framework
• is the framework scalabl*
• learn best practices.
• MVC
• Unit Teting

ROOTCON

dev to hacker @semprix

• ethical hacker - pentester ** permission ** respect ** report (dont leave backdoor) ** disclosure

• types of hackers: ** whitehat - infosec, ethical ** blackhat - known as cracker, has malicious intent ** grayhat - not a pentester, but hacks w/o permission ** elit hacker - leetspeak, 31337. well respected hackers ** script kiddie - amatuer or non expert hacker, wannabe hacker

• infosec career: salary: > 370,000 median - software developer > 273,000 median - sysad > 480,000 median - info sec

• starting your infosec carreer:

  don't be a douche education: > networking - tcp/ip system administration, programming backgrounds: > systems administration > networking > Development build your own lab: > vmware - server > vps systems presence in a community: > join a sec meet-up > find a mentor > contribute to the community read books: what it takes to be a hacker: > high level of passion > creativity > never give up > grasp a wide range of subjects

  what is ROOTCON: > community of info sec and & hacking

    @rootcon
  

ai

1. ai
2. machine learning
3. deep learning

• tools:

  ionic android studio phoneGap swift

• internet of things ?
• Language: ** text to Language ** messenger bot ** translation ** google and facebook translate
• search:

  google search, ranking

• vision:

• apps using ai:

  spotify, netflix, facebook

• tools:

  c++ python tensorflow

ROOTCON bug hunting 101: hacking sec. issues for fun and profit

• @Bugcrowd, twitter: @shipcod3
• ROOTCON Goon
• metasploit

1. Bug Bounty

   sec researcher iot

2. bug crowd:

   report bugs etc. https://bugcrowd.com/programs - bug hunting (security vul.)

3. bug hunting methodologies JASON HADDIX haddix/tbhm how to shot web by jason haddix (vid from bugcrowd tutorial) Methodology for bug hunting on new bounties > Brett buerhaus cross site scripting - XSS nmap - check for valid services tools for bug hunting pawncast.io

wordpress

wordpress workflow - may 27, 2003 43M+ downloads powers 28% of the websites on the internet

1. how to be a better wp developer:

   1. use version control
   2. use a local dev. environment
   3. be verbose - comment and document code.

2. wordpress vvv workflow:

   • vbox
   • vagrant and vagrant plugin ** vagrant host updater ** vagrant-trigger
   • vvv - varying vagrant vagrants
   • vvv base and vvv dashboard
   • vagrant up!

3. wordpress site development timeline

   create a checklist > domain, domain detail and hosting website requirements > sitemap - website structure, links etc. > prototype - wireframe, html > CODE the prototype etc. > LAUNCH - unit testing, security...

4. contact: > www.meetup.com/WordPress-Iloilo > www.fb.com/WordPressIloilo

Java - Vaadin

book of vaadin vaadin philippines - vaadin training module > netbeans and mysql iot

---

linkedin.com/in/joemar-matulac-887a1312 safesat.com.ph IX8Y07 > Wave 6LoWPAN Thread Bluetooth WiFi Celluar NFCNeul LoR

creativity. innovation. humanity > invent, build, optimise, operate, innovate, enjoy

panel of questions

> n/a