Wednesday, November 18, 2020

RECAP: Adobe ColdFusion Summit 2020 - Day 2

 This will continue my mostly stream-of-consciousness review of Day 2 ot ColdFusion Summit 2020 online conference.


DAY 2 (For me at least) 

At 613 AM CST, there are 2412 Total Attendees with 311 now attending. 

Times are still listed as IST, so I have no idea what time what is showing today. Guess I need to do some time zone calcs. :-/


1. Become an Application SUPER-HERO - Reduce the impact of technical debt and keep applications performing as they should -  05:00 PM - 05:50 PM (IST, GMT+5:30) - David Tattersal

I came in well after this one started. This schedule display is really disappointing. Sorry, David, but I'll have to watch the recording of this one. 


Well, I guess this was the "actual" end of Day 1. There's a large break now until the next sessions, so I guess it's time to start my morning here. Coffee and shower. Be back in a bit...


NOTE: Just found https://www.worldtimebuddy.com/. It's showing me a running conversion from IST to CST, so maybe that'll help with scheduling. If nothing else, it easily shows that IST is 11 1/2 hours ahead of me here, so that definitely makes it easier to translate this schedule. A 9PM IST session is a 930AM CST session. Guess I'll be back in a few hours for the actual start of Day 2. 


-----------------------------------------------------------------------------------------


ACTUAL DAY 2 START:

Going into the first "official" session of the day.


1. CSS Crash Course for CSS Haters or Novices - Jessica Keener  @mistersender Twitter/Github


The lower the specificity, the better CSS will work. 

Star Wars illustrations of CSS Specificity Rules is AWESOME!

Doesn't recommend inline style's or !important tag.  NUCLEAR OPTION

CSS => #style vs .style vs style

Semantics - Naming stuff is hard.

Problems with CSS:

- Specificity

- Difficult to locate styles

- Poor context. Where is stuff?

- Difficult to maintain specificity

IT CSS == Inverted Triangle of CSS - @csswizardry (Harry Roberts)

*** BEM method - Block | Element | Modifier - Solves the problems of specificity, context and consistency.

ex card__title--modifier => 

Use Source maps.

GoogleFu: "Flexbox and Grid", "lobotomized owl selecter"


NOTE: Using https://www.mmhmm.app/ for preso. Only available for Mac. But Windows Beta coming soon according to their site. 


Recommended "CSS Secrets: Better Solutions to Everyday Web Design Problems" by Lea Verou



NOTE: As of 10:29 am CST == Total Attendees : 2717 Now Attending : 636


2. Isolation is a Good Thing (For Your Local Development Environments) - Dan Skaggs

This is a talk about using Docker in ColdFusion. 

By default, CF running in a Docker Container, is very isolated (pretty useless). 

- To allow browsing, set up config to talk to webserver inside container. Open/Alias ports. 

    -  This allows access to the Admin panel. 

    - NOTE: In production, you may not want to expose the Admin interface. 

- To serve our code:

    Need to map a folder. CF Docker image, by default, expects to see code inside the image in /app folder. 

- Stop the Docker then map the "volumes" in the docker-compose.yml.

- For CF2021, must install needed packages. 

- When things go wrong..... log files. Must be mapped to an on-disk folder. 


--- I stopped writing notes as Dan talked. More info about setting up databases and data connections. 

I need to learn more about Docker. 


3. Securing ColdFusion Applications - Pete Freitag

I've watched Pete give similar presentations before. They're always full of good information. Pete is a very sharp guy, and any dev will definitely benefit from learning more about security. 


Mature code bases - fun to secure. 


Security often isn't addressed until after a breach. 


First step to securing your old code is to just delete the old code. 


Don't use homemade version control. index_2.cfm is a bad way to version. Version Control is not a fad.


Find obsolete code by looking for files that haven't been modified in the last year. Linux also has the ability to display Last Access of some files. 


Patch your servers. Make sure you're running a supported version of your software. 

Core Support for CF2016 ends Feb 2021!

Also look at OS and Java. 


Follow the Lockdown Guide.


Equifax Breach is a great example of why you should check your software and components. 


Continuous Security ->>> 

  You need version control. 

  Use source inspection security tools. 

  

New functions in CF2021. 

InitSAMLAuthRequest

InitSAMLLogoutRequest

ProcessSAMLResponse


NEVER TRUST A MIME!


Bank of Insecurity is AWESOME!


4. ColdFusion + ReactJS (Round 2): Taking front-end interactivity further - Minh Vo

http://draftstudios.com/demo/

5. Get your Front End Rolling with Vue and InertiaJS - Eric Peterson

These last two sessions dealt with a lot more front-end than I've used. Great info. Both Minh and Eric are very knowledgable educators. These sessions were engaging and 


6. Panel Discussion - Future of ColdFusion

Rakshith Naresh 

Brian Sappey 

Dan Wilson 

Tim Cunningham


The future of ColdFusion definitely lies in The Cloud with more REST functionality. 



After the end of the final Panel:

Total Attendees : 3019

Now Attending : 456


There isn't going to be a closing session, so it looks like it's just ending. 


note from chat:

Charlie Arehart46 sec ago

In case Dan doesn't clarify it, we should note that in CF2021 there is now an alternative to the full gui installer, in the new Express/zip installer. But it doesn't take away from the point he's making about the value of Docker to not even have to "install it" at all, and to be "within Docker" and easily removed/rebuilt/updated via yaml, etc.


==================================================

https://teratech.com/state-of-the-CF-Union-2020-partial-Results


No comments:

Post a Comment