Friends of OpenJDK at Uber

Uber Tech is partnering with Java User Group Amsterdam to host their second mini conference with Friends of OpenJDK. Come and join in at the Uber Amsterdam HQ and learn from experts in their fields.

This meetup will be hosted by Uber Tech, in their office at Uber, Burgerweeshuispad 301, Amsterdam.

Uber requests all our fullnames, email address, and phone number, for security reasons. Some may object to this and in that case, feel free to deregister from the meetup, although we'll very much miss having you. It will be a great event as always and the Uber office is a super cool place, plus they're actively hiring, so please come for that reason too. The place to send these details to is amsterdamjug@googlegroups.com, i.e., drop a quick mail there with your fullname (first and lastname), email address, and phone number, we'll pass this on to Uber, who will not make use of these details in any way, i.e., you won't get spammed.
Thanks and apologies for the inconvenience.

Note:

• This event is targeted to be suitable to more experienced / senior Java engineers. Especially if you're a more senior engineer, you're very warmly invited to attend.
• Also note that Uber is actively searching for a Sr Staff Engineer, JVM in Amsterdam, ideally with 10+ years of engineering experience, plus will assist with relocation and visa related requirements, if needed. Job description here: https://www.uber.com/global/en/careers/list/146831/

Agenda

17:00 - Doors Open and Food

17:45 - Intro to Uber Tech Amsterdam, JUG Amsterdam, and Foojay.io

18:00 - "Large-Scale Upgrades: Lessons Learnt", Pavel Belouso, Staff Software Engineer, JVM Platfrom, Developer Platform, Uber

18:30 - Break

18:45 - "Are We Ready For The Next Cyber Security Crisis Like Log4Shell?", Soroosh Khodami, Solution Architect, Code Nomads

19:15 - Break

19:30 - "Scotty I Need Warp Speed: Ways to Improve the JVM Startup/Warmup", Gerrit Grunwald, Azul

20:00 - Doors Close

Abstracts

"Large-Scale Upgrades: Lessons Learnt", Pavel Belouso, Staff Software Engineer, JVM Platfrom, Developer Platform, Uber

This presentation details the challenges and strategies involved in major dependency migrations, specifically focusing on shifts like Java version bumps, Spring Boot 2 to 3, and the transition from JUnit 4 to 5.

We will emphasize the critical lessons that technical debt accrues exponentially: the longer the delay, the higher the cost and complexity of the upgrade.

Finally, we'll compare the upgrade paths, team coordination, and tooling implications when performing these migrations within both monorepo and polyrepo architectural paradigms.

"Are We Ready For The Next Cyber Security Crisis Like Log4Shell?", Soroosh Khodami, Solution Architect, Code Nomads

We'll explore critical cybersecurity challenges in today's software ecosystem, where vulnerabilities like Log4J, Spring4Shell, and the XZ Backdoor have created significant risks.

Learn from Soroosh Khodami, a hands-on solution architect with experience in security platform services for enterprises like Rabobank, as he shares practical strategies for securing software development processes applicable to organizations of all sizes.

Discover how basic SQL Injection threats can extend beyond database access, understand the dangers of supply chain attacks, and identify effective practices to secure CI/CD processes.

Explore the concepts of Shift-Left Security and DevSecOps, learn how Software Bill of Materials (SBOM) can help prepare for future security crises, and understand the implications of EU supply chain security regulations like DORA/CRA for developers.

"Scotty I Need Warp Speed: Ways to Improve the JVM Startup/Warmup", Gerrit Grunwald, Azul

When running Java in the Cloud, the JVM startup time can become a limitation. Especially when you look at spinning up new instances of an app as response to changes in load, the warmup time can be a problem.

A couple of years ago, you only had CDS that could help you with the startup, but meanwhile there are a couple of solutions that can help you to let you JVM start super fast.

These days we have AppCDS, CRaC, Native Image, Leyden, InstantOn, Ready Now, JITServer and Cloud Native Compiler, which are all solutions that help to reduce the startup time of a JVM. Each of those is not a Silver Bullet, so you have to choose the right solution for your problem.

This session will give you a short overview of the different solutions to increase your JVM startup performance and will try to give you some hints on how to choose the right solution for your application.