月別アーカイブ: 2017年4月

Dutch PHP Conference 2017

We are glad to announce that we’ll be organizing the 11th edition of the Dutch PHP Conference, which will be held in Amsterdam from June 29th to July 1st 2017. Thursday 29th will be the tutorial day and June 30th and July 1st will be the main conference days. DPC brings together the best speakers and PHP, Javascript and front-end talent from Europe and beyond for three days of high-level technical sessions. Our schedule is already online and features a variety of talks on PHP, DevOps, Security & privacy, microservices, JavaScript, databases and much more; so come along to our two main conference days on June 30 and July 1 in Amsterdam.

In-depth tutorial sessions
The tutorial day on Thursday June 29 at the same venue gives an opportunity for a smaller number of attendees to spend some time with an expert, going in-depth on particular topics - topics like Docker, domain modelling, Mob programming, ES6, Drupal8, Progressive Web Apps and more are all on offer. These are small groups so that presenters can respond to individual questions, and as a result places are limited.

More information about the Dutch PHP Conference at www.phpconference.nl.

ConFoo Vancouver 2017 Calling for Papers

Want to get your web development ideas in front of a live audience? The call for papers for the ConFoo Vancouver 2017 web developer conference is open! If you have a burning desire to hold forth about PHP, databases, JavaScript, or any other web development topics, we want to see your proposals. The window is open only from April 10 to May 8, 2017, so hurry. An added benefit: If your proposal is selected and you live outside of the Vancouver area, we will cover your travel and hotel.

You’ll have 45 minutes for the talk, with 35 minutes for your topic and 10 minutes for Q&A. We can’t wait to see your proposals!

Until the talks are picked, the price for the tickets will be at its lowest. Once the talks are announced, prices will go up. Check out the last conference to get an idea of what to expect.

JVN: Microsoft OLE2Link オブジェクトに含まれる遠隔データへのリンクに対する不適切な処理

Microsoft OLE2Link オブジェクトの処理において、遠隔のサーバにあるリソースは、サーバが提示する MIME type にしたがった処理が行われます。この挙動を使用して任意のコードが実行される可能性があります。続きを読む

JVN: GIGABYTE BRIX のファームウェア保護機能に複数の脆弱性

GIGABYTE BRIX プラットフォームには、ファームウェアの書込みを保護する <code>BIOSWE</code>、<code>BLE</code>、<code>SMM_BWP</code>、<code>PRx</code> ビットが適切に設定されていない問題およびファームウェアアップデートが署名されていない問題が存在します。これらの問題を使用することで、ファームウェアレベルでルートキットを実行したり、システムへの永続的なサービス運用妨害 (DoS) 攻撃を実行したりすることが可能です。続きを読む