Node+JS Interactive: Full Schedule

October 10 -12 - Vancouver, BC
Click for Node+JS Interactive Information & Registration

11:00am PDT

Passwords Are Dead, Long Live Passwords! - Alejandro Oviedo

Passwords have been used as the main method of authentication since the WWW was born. Their biggest flaw is that their effectiveness depends on their entropy, and humans are a bad source of entropy. Progress has been made at this time as multiple factors for authentication are now more and more common. This talk is about the Web Authentication API that is being worked on, how it fits in the current ecosystem of web apps and why it's important for users.

Speakers

Alejandro Oviedo

Senior Javascript Engineer, Kinsta

Alejandro is a developer who loves learning new things. He is passionate about education, electronics, Open Source, and community-driven events.

passwords are dead long live passwords pdf

Wednesday October 10, 2018 11:00am - 11:30am PDT
West Ballroom B

Security

Experience Level Intermediate

11:40am PDT

N-API: The Next Generation Node.js API is Ready! - Michael Dawson, IBM & Arunesh Chandra, Microsoft

The Native module ecosystem for Node.js is an important factor in the rapid growth of Node.js. The N-API is now a supported feature and is designed to provide ABI stability across Node.js releases. This will reduce friction in upgrading to newer Node.js versions in production deployments. In addition, it will reduce the maintenance cost that module maintainers previously had to take on due to the fast pace of changes in the v8 APIs. This talk will provide a progress update on this community project, the roadmap, and why now is the right time to get involved.

Speakers

Arunesh Chandra

Sr. Program Manger @ChakraCore, Microsoft

Arunesh Chandra is working on growing Node.js by extending it to use the ChakraCore engine. He is also working on supporting new ideas in the community like N-API and VM Diversity for Node.js and bringing innovative diagnostic tooling like Time-Travel Debugging to Node developers.Past... Read More →

Michael Dawson

Node.js Community Lead, IBM

Michael Dawson is an active contributor to the Node.js project and chair of the Node.js Technical Steering Committee(TSC). He contributes to a broad range of community efforts including platform support, build infrastructure, N-API, Release, as well as tools to help the community... Read More →

Node+JSInteractive 2018 N API is ready pdf

Wednesday October 10, 2018 11:40am - 12:10pm PDT
West Ballroom B

Node.js Project

Experience Level Intermediate

12:20pm PDT

Server-Side Rendering with Docker - Owen Buckley, The Greenhouse I/O

Server-Side Rendering can be a valuable technique for delivering great user experiences quickly and for improving SEO, even for Single Page Applications. However, even with all the great tools available for implementing SSR, there are still challenges around implementing it, in particular around operational overhead and general technical complexity, all of which can be daunting.

In this presentation, we’ll take a look at how Docker can help soften some of the thornier parts of implementing SSR, while maintaining great User Experiences (UX) and just as importantly, promoting good Developer Experiences (DX).

Speakers

Owen Buckley

UI Architect, LendingClub

Owen Buckley is an energetic and enthusiastic (open source) software developer and entrepreneur specializing in web application architectures, developer tools, and building strong teams. He is most passionate about teaching others about technology and how it can help improve their... Read More →

Wednesday October 10, 2018 12:20pm - 12:50pm PDT
West Ballroom B

Testing Tools and Infrastructure

Experience Level Intermediate

2:20pm PDT

Automated Accessibility Testing - Dylan Barrell, Deque

In the last couple of years, the accessibility community has started to change. Awareness is picking up. Major tech and retail companies are talking about and investing in accessibility conferences. There's also more regulations around accessibility, such as the New European directives, the ACAAct, the Ontario AODA, Section 508 and the U.S. ADA. Just as the physical world should be accessible for people with disabilities, it's now time that the internet provides that same equality and opportunity.

In this talk, I will discuss and demo the axe JavaScript ecosystem: the automated, open source accessibility tool which will empower you to take accessibility into your own hands.

Speakers

Dylan Barrell

Chief Technology Officer, Deque

Dylan is Deque's Chief Technology Officer and has been focussed on accessibility for almost a decade. He created the first browser-based developer tool for accessibility and is motivated to make accessibility a standard part of the development process.In addition to his work experience... Read More →

Wednesday October 10, 2018 2:20pm - 2:50pm PDT
West Ballroom B

Accessibility

Experience Level Any

3:00pm PDT

Node.js Meets Docker - Shaun Warman, PayPal

As PayPal has journeyed to a cloud-native environment, Shaun has led the Node.js Docker effort in revamping the deployment architecture for all applications built on Node.js. Using Docker allows for immutable, composable Node.js deployments in a nice declarative fashion. In this session, we'll cover Docker image best practices, container startup, and process management, signal handling for graceful shutdowns, injecting environment variables and mounting files as well as new ways to version dependencies across environments to better Node.js build and deployments.

Speakers

Shaun Warman

Staff Software Engineer, PayPal

A Staff Software Engineer at PayPal working out of Austin, Texas on the node.js core team. Most recently working on nodejs application deployment architecture using Docker. You can find me speaking internally at PayPal and around the Austin meetup scene.

JSInteractive ShaunWarman pdf

JSInteractive ShaunWarman pptx

Wednesday October 10, 2018 3:00pm - 3:30pm PDT
West Ballroom B

Testing Tools and Infrastructure

Experience Level Intermediate

3:40pm PDT

Automated Performance Testing With WebDriver - Christian Bromann, Sauce Labs

This talk will look into solutions to automatically capture and assert the performance as part of your functional tests using WebDriver and Chrome DevTools technologies. By looking into the workflow of a browser driver, you will learn not only how a WebDriver actually automates web pages, you will also get insights on how you need to tweak this setup to start capturing live tracing data from the browser.

Analyzing the performance of a web application is hard and can’t be done by just looking at the raw captured data. Therefore you will learn how tracing data is structured and which Node.js tools you can use to compute the important user experience metrics out of it. With this knowledge, you will be able to ensure that your PWA stays within your defined performance budget every time you run your end-to-end test in CI/CD.

Speakers

Christian Bromann

Staff Software Engineer, Sauce Labs

Christian Bromann is a member of the Open Source Program Office at Sauce Labs and is working on various open source projects related to test automation and Node.js. He represents the company as Advisory Committee representative at the W3C and the WebdriverIO project as core contributor... Read More →

Automated Web Performance Testing with WebDriver pdf

Wednesday October 10, 2018 3:40pm - 4:10pm PDT
West Ballroom B

Testing Tools and Infrastructure

Experience Level Intermediate

4:40pm PDT

Bringing JavaScript Back to Life - Joyee Cheung, Igalia

Have you ever wondered how your JavaScript objects are laid out in the memory? This talk will give you a tour of llnode, a project under the Node.js Foundation that is directly based on this knowledge. It will cover the new JavaScript API of the project that allows you to bring JavaScript objects back to life from a terminated process, and how llnode restores JavaScript objects from raw process memory under the hood.

Speakers

Joyee Cheung

Software Engineer, Igalia

Joyee currently works on the compilers team at Igalia remotely from Hangzhou, China. She is a member of the Node.js Technical Steering Committee and regularly contributes to Node.js core.

Wednesday October 10, 2018 4:40pm - 5:10pm PDT
West Ballroom B

Node.js Project

Experience Level Intermediate

5:20pm PDT

Fail Faster: Adding Circuit Breakers to your APIs - Craig Freeman, Kenzan

Node.js is known for it’s ability to provide fast responses, which makes it a perfect candidate for an orchestration layer. API failures happen to the best of us and the trick is to be prepared for them. Circuit breakers are a way to prevent upstream dependency issues from cascading down to your other microservices by providing a mechanism for fast fault detection. When this happens, the circuit breakers will trip, causing subsequent requests to the dependencies to respond with a failure status code before another request can be made. This allows you to handle your failed requests quicker, which results in a better overall user experience until the breaker can reset. This talk covers the relationship of circuit breakers to a typical microservices ecosystem as well as demonstrates the pros and cons of this approach.

Speakers

Craig Freeman

Technical Architect, Kenzan

Craig Freeman is a front-end architect for Kenzan, a software engineering, and digital consulting firm. He's been developing for the web in various capacities since 1998. He specializes in scalable and well-tested UI development for anything from small marketing sites to enterprise... Read More →

Fail Faster Adding Circuit Breakers to your APIs pdf

Wednesday October 10, 2018 5:20pm - 5:50pm PDT
West Ballroom B

Application Development and APIs

Experience Level Intermediate

9:00am PDT

Scaling Webpack to Thousands of Concurrent Builds - Charlie Robbins, GoDaddy

Building JavaScript for the web is easier than it's ever been with babel, webpack & rollup doing all the heavy lifting for individual builds – but what if you need a lot of builds across multiple environments like development, test, and production? Introduced at Node.js Interactive 2016 Warehouse.ai is an open-source distributed build system supporting webpack, babel, and browserify that aims to make Serverless front-end deployments & rollback easy.

This talk will cover the challenges (and solutions) for Warehouse to scale webpack & npm install to thousands of daily builds with high bursts of concurrency during peak hours.

- Important details of the npm Registry HTTP API.
- How to scale compute bound Node.js worker systems in production with NSQ & kubernetes.
- How to handle complex user-defined webpack configs.
- How to make webpack builds reproducible over time for safe rollback.

Speakers

Charlie Robbins

Senior Director, Engineering, Charlie Robbins

Charlie is a Senior Director of Engineering at GoDaddy where he is leading convergence around JavaScript and Node.js across several products through the UX Platform team. Charlie was previously the founder and CEO of Nodejitsu (acquired by GoDaddy in 2015). An open source enthusiast... Read More →

Thursday October 11, 2018 9:00am - 9:30am PDT
West Ballroom B

Testing Tools and Infrastructure

Experience Level Intermediate

9:40am PDT

Finding Your Voice: Building Screenless Interfaces with Node.js - Nara Kasbergen, NPR

OK Google, ask Alexa to check if Siri can recommend Cortana a movie to watch with Bixby. Voice assistants are one of the biggest emerging technologies in 2018. At NPR, our interest in voice-based interfaces is obvious: they're a natural fit for our audio-first content. But given that it's still such a new field, the development process is anything but straightforward. What's a Lambda, and do you have to use it? How does the Alexa platform differ from, say, Google Home, and can you develop one app for both? In this talk, we'll run through these confusing, high-level questions, and then go over some real-world code samples for a Node.js API that powers a voice-based UI. Finally, we'll discuss the mistakes we made, the things we wish we'd done differently, and the things we wish we'd known up front as we set out on our journey to build a next-generation voice UI framework in-house at NPR.

Speakers

Nara Kasbergen Kwon

Sr. Manager, Engineering, HashiCorp

Nara Kasbergen is a senior engineering manager at HashiCorp, where her team develops the Cloud Development Kit for Terraform (CDKTF), an open source library which allows practitioners to use familiar programming languages to provision cloud infrastructure, giving them access to the... Read More →

Finding Your Voice Building Screenless Interfaces with Node.js pdf

Thursday October 11, 2018 9:40am - 10:10am PDT
West Ballroom B

IoT

Experience Level Intermediate

10:20am PDT

Please Wait... Loading: A Tale of Two Loaders - Myles Borins, Google

Modules were first standardized in ECMAScript 6 in 2015. As of December 2017, you can now use ESModules (ESM) in 3 out of 4 of the major browsers. Node.js has traditionally shipped an implementation of Common.js (CJS), you use it in your Node.js code today via require. There are vast differences between the two module systems that make it quite difficult to utilize Common.js code in an ESModule and vice versa. Implementing modules correctly in Node.js will have a significant impact on the future of JavaScript, the wrong decisions could cause fractures in the ecosystem. This talk will dive into some of the more nefarious edge cases and the ways the Node.js project has navigated them. The talk will also look into joint efforts with the Web platform as we attempt to find a single pattern that can work on both the client and server.

Speakers

Myles Borins

Developer Advocate, Google

Myles Borins is a developer, musician, artist, and maker They work for Google as a developer advocate serving the Node.js ecosystem Myles cares about the open web and healthy communities

Thursday October 11, 2018 10:20am - 10:50am PDT
West Ballroom B

Standards

Experience Level Intermediate

11:20am PDT

From Parentheses to Perception: How Your Code Becomes Someone Else's Reality - Jenna Zeigen, Slack

We, humans, create software for other humans to use and enjoy. But how does code become neurons firing in someone else’s brain? This talk will take us on the journey this information takes, from the mind of the programmer to the mind of a web app user. We’ll follow the ideas starting as code, going through HTML, CSS, and JavaScript interpreters and compilers and becoming pixels in a browser through the browser’s rendering process. The saga continues with how a human will view these pixels, first becoming neural signals that then paint a meaningful, interactive picture in their mind that they perceive as reality.

Speakers

Jenna Zeigen

Senior Frontend Engineer, Slack

One morning, Jenna awoke to find that she had transformed into a programmer. She's been psyched about coding ever since. When she's not teaching pixels to party or using JavaScript to help you find the important things in Slack, Jenna enjoys climbing, coffee, cognitive science, and... Read More →

at node js interactive pdf

Thursday October 11, 2018 11:20am - 11:50am PDT
West Ballroom B

Application Development and APIs

Experience Level Intermediate

12:00pm PDT

Node Generator: Realizing Rapid Low-Code Prototyping of Node-RED Connectors - Kazuhito Yokoi, Hitachi, Ltd.

Node-RED is a popular visual programming tool for industrial IoT use cases like environment monitoring, device connections, and edge computing. In 2016, Node-RED became a project of JS Foundation to develop in the open community. Currently, Node-RED has been used in productions for both edge and cloud. Because of low-code development, Node-RED is suitable for rapid prototyping in PoC phase. But developing connectors (Node-RED nodes) is a time-consuming task because it requires HTML and JavaScript skills. To solve the problem, Hitachi developed "Node Generator" in Node-RED projects. Once developers define API specification using Swagger known as the standard format for REST API, the tool can automatically generate connectors. The tool will reduce the time in PoC phase dramatically. In this session, he talks about the details of the tool and demonstration to show benefits for developers.

Speakers

Kazuhito Yokoi

Software Engineer, Hitachi, Ltd.

Kazuhito Yokoi is a member of the Node-RED project under the OpenJS Foundation. To improve the code quality and add new features, he joined the Node-RED project in 2017 and has added over 300 commits and 10,000 lines of code.In his job, he supports a railway brake manufacturer and... Read More →

nodejsinteractive nodegenerator pdf

nodegenerator iss demo mp4

Thursday October 11, 2018 12:00pm - 12:30pm PDT
West Ballroom B

IoT

Experience Level Beginner

2:00pm PDT

Panel: Building a Secure Ecosystem for Node.js - Moderated by Liran Tal, Nielsen

Over the last year, the Node.js security working group has been working to build trust and make the ecosystem safer through a number of initiatives. During this panel discussion, members of the working group, security researchers, and companies deploying Node.js will discuss some of the key challenges and progress to make the Node.js platform and ecosystem safer. We’ll cover it all including security reporting, internal triaging processes, CVE assignment, and current and future initiatives to strengthen security measures in the ecosystem.

Moderators

Liran Tal

Developer Advocate, Snyk

Known for his open source and JavaScript security initiatives, Liran Tal is an award-winning software developer, security researcher, and community leader in the JavaScript community. He's an internationally recognized GitHub Star, acknowledged for his open source advocacy, and has... Read More →

Speakers

Michael Dawson

Node.js Community Lead, IBM

Stephanie Evans

Content Manager for Back-end Web Development, LinkedIn

Stephanie Evans is the Content Manager for Back-end Web Development at LinkedIn Learning/Lynda.com, where she oversees Node.js courses that range from helping developers build their first server to testing, securing, deploying, and maintaining Node apps. She’s worked in education... Read More →

Vladimir de Turckheim

Software Engineer, Sqreen

V. works as a software engineer at Sqreen where he builds a tool to secure web applications. He used to be a professional security auditor and a web developer in agencies. He is one of the most active members of the Node.js Security Working Group where he handles the security... Read More →

Thursday October 11, 2018 2:00pm - 2:30pm PDT
West Ballroom B

Security

Experience Level Beginner

2:40pm PDT

Building a Threat Model & How npm Fits Into It - Adam Baldwin, npm

Who might want to attack your application? If they tried, how would they succeed? Answering these questions is an important exercise that helps you understand how to keep your application secure, so you can sleep at night.

In this talk, Adam will teach you what threat modeling is and how to build threat models for your organization and applications. Because npm is such a critical part of how your developers build JavaScript applications, Adam will show you how npm fits into your threat model and how to use npm's tools to keep your JavaScript secure.

Speakers

Adam Baldwin

Sr. Product Manager, Supply Chain Security, GitHub

Adam Baldwin is a Senior Product Manager focused on supply chain security at GitHub. A security focused leader with over 25 years of experience, Adam has spent his career building companies, breaking into companies, managing teams, designing products, and talking about security non-stop. Previously... Read More →

Thursday October 11, 2018 2:40pm - 3:10pm PDT
West Ballroom B

Security

Experience Level Any

3:20pm PDT

Node.js Applicative DoS Through MongoDB Injection - Vladimir de Turckheim, Sqreen

Applicative Denial of Service is mostly known through Regexp abuse. Most people do not know that other applicative DoS can be exploited through diverse means. In this talk, we will see how a malicious user can obtain a MongoDB injection and use it to prevent an application from responding.

Intro: Applicative DoS
I. From SQL injections to NoSQL injections
II. Exploiting a NoSQL injection to obtain a DoS
III. Protecting an application from MongoDB applicative DoS

When speaking about security in the Node.js world, most efforts have been in direction of the choice of packages. However, most security issues are not coming from third-party modules but from misuse of them.

This talk aims at showing how fragile an application can be and how one should protect it.

Speakers

Vladimir de Turckheim

Software Engineer, Sqreen

nosqliappdos key

Thursday October 11, 2018 3:20pm - 3:50pm PDT
West Ballroom B

Security

Experience Level Intermediate