PHP Framework

Am 24.06.26 steigt unser nächstes Codineers Rosenheim Meetup vor Ort in unserem Büro in Rosenheim oder Remote via Zoom. Meeting Link: [https://qaware-de.zoom.us/j/88063201327?pwd=1CYwSe7eGIBM3FJWygby1oixvzXUwg.1](https://qaware-de.zoom.us/j/88063201327?pwd=1CYwSe7eGIBM3FJWygby1oixvzXUwg.1) Meeting-ID: 880 6320 1327 Kenncode: tW8JTFtiSF **\#\# KI\-Agenten & Code im Security\-Check: Zwischen Hype\, Hack und SAIF 2\.0** Vom nützlichen Entwickler-Tool bis zum autonomen System: KI-Agenten übernehmen immer mehr Kontrolle. Sie generieren Pull Requests, führen eigenständig Code aus und handeln im Namen der User, oft komplett ohne menschliche Aufsicht. Doch wo endet der Hype und wo beginnen die echten Risiken? Was taugen die integrierten Sicherheitsfeatures aktueller Modelle, wenn sie auf die Realität der Softwareentwicklung treffen? Und wie groß ist der "Blastradius", wenn Agenten durch präparierte E-Mails manipuliert werden? Dieses Meetup liefert dir einen fundierten Security-Deep-Dive. Wir analysieren reale Vorfälle, prüfen die aktuellsten Anthropic-Modelle auf Herz und Nieren und stellen dir konkrete Design-Prinzipien (SAIF 2.0) vor, mit denen du deine KI-Systeme absicherst bevor sie live gehen. **\*\*\* Agenda \*\*\*** 17:30 Uhr \| Doors open\. Schnapp' dir Snacks & Getränke\. 17:45 Uhr \| Welcome & Intro 18:00 Uhr \| Zwischen Hype und Realität: Anthropic\-Modelle und "Project Glasswing" im Security\-Check \- Stefan Feuerstein 18:45 Uhr \| SAIF 2\.0 – Sicherheitsstrategien für die Ära autonomer KI\-Agenten \- Alexander Eimer 19:30 Uhr \| GetTogether **\*\*\* Unsere Vorträge \*\*\*** **Zwischen Hype und Realität: Anthropic-Modelle und "Project Glasswing" im Security-Check** In diesem Vortrag werfen wir einen kritischen Blick auf die aktuelle Leistungsfähigkeit der neuesten Anthropic-Modelle und schauen unter die Haube von Entwicklertools wie der Claude CLI. Im Zentrum steht dabei die Perspektive der IT-Security: wie sicher ist AI-Code? Was bringen die mitgelieferten "Sicherheitsfeatures"? Zudem wollen wir natürlich auch wissen, ob Mythos uns zeitnah unseren Job wegnimmt: Deswegen ziehen wir ein Fazit nach zwei Monaten Project Glasswing. Was ist Fakt, was Fiktion? **SAIF 2.0 – Sicherheitsstrategien für die Ära autonomer KI-Agenten** KI-Agenten sind längst im Produktiveinsatz: Sie generieren Millionen von Pull Requests, lösen Support-Tickets und verwalten die interne Unternehmenskommunikation. Sie sind keine bloßen Chatbots. Sie verfügen über Zugriffsrechte, führen eigenständig Code aus und handeln im Namen der User – komplett ohne menschliche Aufsicht. Doch diese Autonomie vergrößert den potenziellen Blastradius enorm. Die Beispiele aus der Praxis sprechen für sich: Eine einzige präparierte E-Mail verwandelte Microsoft 365 Copilot in ein Werkzeug zum Datendiebstahl. Ein simpler einzeiliger Prompt brachte den Chatbot eines Autohauses dazu, einem 1-Dollar-Verkauf zuzustimmen – vor den Augen von Millionen. Das sind keine kuriosen Einzelfälle, sondern das Resultat von Produkten, die ohne das nötige Sicherheitsfundament entwickelt wurden. Googles Secure AI Framework 2.0 (SAIF) ist die Antwort aus der Praxis. Es identifiziert 15 spezifische Risiken, ordnet sie den Komponenten eines KI-Systems zu und liefert konkrete Sicherheitsmaßnahmen. SAIF 2.0 erweitert diesen Rahmen gezielt für agentische Systeme: Es zeigt auf, wo sie versagen, warum die Risiken hier höher liegen und wie wir die Architektur grundlegend neu denken müssen. Dieser Vortrag analysiert die SAIF-Architektur anhand realer Vorfälle und schließt mit fünf entscheidenden Design-Prinzipien ab, die den Blastradius Ihrer Agenten minimieren, bevor sie live gehen. Wir sind Partner der [ROSIK](https://www.rosik.com/).

Our monthly PHP meetup. A virtual shindig courtesy of Zoom. Check back here for the details around 6:15 pm

**PLEASE READ THE FOLLOWING IMPORTANT NOTES:** 1. The dates listed for this series are about 95% reliable. We are finalizing our 2026 schedule, so minor adjustments are still underway. 2. Each class in this series has an attendance fee, on a first-come, first-served basis. 3. Each class, from BOTH a sign-up and fee perspective, is a separate entity. **Introduction:** **The breakdown of the six-class series is as follows:** **Class 1: TBD** **Class 2: TBD** **Class 3: TBD** **Class 4: TBD** **Class 5: TBD** **Class 6: TBD**

**PLEASE READ THE FOLLOWING IMPORTANT NOTES:** 1. The dates listed for this series are about 95% reliable. We are finalizing our 2026 schedule, so minor adjustments are still underway. 2. Each class in this series has an attendance fee, on a first-come, first-served basis. 3. Each class, from BOTH a sign-up and fee perspective, is a separate entity. **Introduction:** **The breakdown of the six-class series is as follows:** **Class 1: TBD** **Class 2: TBD** **Class 3: TBD** **Class 4: TBD** **Class 5: TBD** **Class 6: TBD**

**Important time note:** Please plan on arriving between 5:30 and 6:00 as the elevators lock after 6 and you'll need to message us and we'll need to come get you. The building address is 4450 Bridge Park The entrance is 6620 Mooney St, Suite 400 You will need to scan your ID at the door to get a visitor badge. **Abstract** *Customize the IDE: Building Extensions for Visual Studio Code* Visual Studio Code is one of the most widely used development environments today, and much of its flexibility comes from its extension ecosystem. Extensions allow developers to customize the editor with new features, integrations, and workflow improvements tailored to their needs. In this session, we’ll cover what extensions are and the different types available, including full extensions written in TypeScript or JavaScript, along with lighter-weight extensions such as color themes, language packs, language support, code snippets, and keymaps. We’ll also look at practical reasons a developer might create an extension, from automating repetitive tasks to adding custom tooling. The session includes a hands-on walkthrough of creating a new extension, testing it locally, and understanding the basic project structure. We’ll close with a brief overview of how extensions are packaged and published to the Visual Studio Marketplace and other distribution options. **YouTube Link** TBD

**Improving Office in Franklinton** Physical location: Improving Office 330 Rush Alley Suite #150 Columbus, OH 43215 Schedule: 6:00 p.m.: Socialize, eat, and drink. Improving will be providing pizza and beverages. 6:30 to 8:00 pm. Main meeting and presentation(s). Topic: This month Chris Pazsint will be talking about Agentic Coding. How does one use CLI Based Agents, and Agentic IDEs such as Cursor, Kiro, Antigravity? How to include agentic coding plugins for IDEs you already love such as Visual Studio Code. We meet on the last Monday of each Month. Presentations are given by members and friends of this group. If you would like to do a presentation (small or large) on a python topic, please contact Central OH Python at centralohpython@gmail.com

**PLEASE READ THE FOLLOWING IMPORTANT NOTES:** 1. The dates for this series are simply placeholders at the moment. We are working on our 2026 schedule, and adjustments are forthcoming. 2. Each class in this series has an attendance fee. 3. Each class, from BOTH a sign-up and fee perspective, is a separate entity. 4. As the Etch toolset evolves, so too will the class outline below. **Introduction:** Our Site Building with Etch class provides detailed instructions on the philosophy of the Etch development framework, as well as in-depth, hands-on instruction on using the Etch environment and associated tools. Anyone familiar with Kevin Geary and the Digital Gravy set of products will tell you that they offer ground-breaking approaches to professional WordPress site development. As we write this, the Etch toolset and environment are rapidly taking shape, with weekly quantum leaps forward in WordPress development methodologies. As early investors in the Etch product offering and its development process, we are actively testing and evaluating the toolset as it takes shape. We are beyond excited to see how WordPress site development is being modernized, and can't wait to bring this course set to you. It will be a paradigm shift in page and site development within WordPress, as well as moving your development mindset light-years forward. Join us as we explore Etch and dive deep into development approaches that will genuinely elevate your craft as a website developer and agency provider. Scalable, responsive, compliant websites are now within easy reach, and Etch provides both the platform and toolset to take you there. **The breakdown of the 10-class series is as follows:** * Class 01 - TBD * Class 02 - TBD * Class 03 - TBD * Class 04 - TBD * Class 05 - TBD * Class 06 - TBD * Class 07 - TBD * Class 08 - TBD * Class 09 - TBD * Class 10 - TBD Throughout the class sessions listed above, we cover the following key areas of web development with Etch: * **Introduction to Etch Interface:** * Familiarization with the toolset's layout and understanding how to navigate and interact with its various components. * **Visual Site Building:** * Techniques for creating layouts using Etch's interface, incorporating sections, divs, containers, and elements to build semantically correct page structures. * **Styling and Design:** * Utilizing Etch's styling approach to customize elements, apply global CSS classes for consistent design, and leverage features like Flexbox and CSS Grid for responsive layouts. * **Dynamic Content and Custom Fields:** * Integrating dynamic content from custom post types and custom field plugins (like ACF, Meta Box, and even built-in fields) to build data-driven websites. * **Component Building:** * Creating and managing reusable components for headers, footers, post type layouts, and other site-wide elements. * **Performance Optimization:** * Understanding how Etch contributes to fast-loading websites and implementing performance best practices. * **Advanced Features:** * Depending on the class level, it might delve into advanced topics such as conditional logic, interactions, and custom code integration to enable more complex functionality. The series aims to equip participants with the skills to efficiently build, customize, and maintain WordPress websites using Etch, catering to both beginners and experienced web developers alike.

**Latest Dojo Location!** **Knotty Pine Brewing** 1765 W 3rd Ave, Columbus, OH 43212 We're going to try a new dojo location for a few weeks and see how it works Dojos are informal Python group study sessions where everyone interested in Python gathers to learn about Python, help others with Python, or just hang out. Everyone is welcome from Python beginners to experts. Bringing a laptop is encouraged (we'll have extension cords and power strips). If there's something you want to learn leave a comment on this invite so we can plan ahead. We're looking for speakers for our Monthly Meetups! Fill out the form if you are interested in presenting to the Python Community. https://forms.gle/ehSfUAC2WgR34Crq9