Digital Product Deep Dive

How we match millions of saved searches against a continuous stream of new real estate listings
‍
Every day, realestate.com.au handles millions of searches. But we also need to do the opposite: match new real estate listings against millions of existing saved searches. This enables us to notify our users whenever a newly created listing matches their saved search, and thus help them find their dream home faster and easier.

Download Slides (.pdf)

Demystifying the pain of working with legacy, and strategies to make it easier
‍
We've all seen, heard and read about the multitude of approaches and patterns on how to reduce your legacy footprint. As we've all experience, these are long term propositions, and with no quick fix there is a need to have a strategy for caretaking your legacy system to avoid having a system that will end up holding you hostage.

Download Slides (.pdf)

Unlocking Simplicity: How Temporal Transformed Cash App's Code Complexity
‍
We have an easily explainable use case - Buy and Sell bitcoin from Liquidity providers by interacting with their APIs. But in order to achieve this we have a wide variety of kafka consumers, SQS job queues, DB updates and internal services to call. The code to make all of this work is spread all across one repo and it was getting impossible to fit in a team's head.

Download Slides (.pdf)

Weathering the storm, how to navigate failure in the cloud

Cloud computing has been a game-changer for businesses striving to enhance digital experiences. However, managing services at scale with modern cloud tech isn't always a cakewalk. Failure is inevitable and the way we prepare, react and learn from it will define the success or failure of our journey.

Cloud First

Observability for Developers
‍
Observability ( o11y ) is a practice that helps provide better insights into application behaviour, to enable the earlier identification and rectification of application defects. Most developers come across o11y when assigned a bug report from IT OPS with a log file attached, this log file usually contains any information that has been pumped to stdout() !! .... usually not that helpful.

Download Slides (.pdf)

Riding the Streams: Powering Stream Processing at Cash App with FLINK

Over the last 5 years, Cash App migrated from a monolith to a service oriented architecture. At present we have hundreds of services communicating via event streams. These services provide solutions across multiple areas like ML, financial reporting, data warehouse ingestion and materialised views.

Hydrosight - Secure Cloud-Native IoT solution
‍
Hydrosight Soil Monitor - a small battery powered device, which measures soil moisture, salinity and temperature, utilises NB-IoT networking and communicates with API straight from the underground.

Download Slides (.pdf)

Engineering Platforms Evolved

Multiple forces have converged recently to put internal technical platforms in the spotlight for digital businesses. This talk encapsulates key insights drawn from various teams who have delivered engineering platforms in diverse organisations and industries around the world.

Download Slides (.pdf)

Who tests their cloud code anyway?

If you are a developer, you know as well as me that testing your code is optional. And when we suddenly involve cloud computing, there are even more excuses not to test your applications and infrastructure.

Download Slides (.pdf)

SECURITY

OAuth Oops!

OAuth, OpenID and JWTs are complex standards and protocols and often poorly understood by development teams which can result in some seriously flawed implementations!

Download Slides (.pdf)

Hey ChatGPT, can you keep a secret? Encrypting PII in RAG Chatbots
‍
Large Language Models (LLMs) are trained on a vast amount of data, which they learn from and can answer questions about. However pre-trained LLMs are not able to provide answers to data outside their training set. RAG is a technique that augments the user’s query with additional relevant contextual data.

Download Slides (.pdf)

Guarding the Guardian: Fortifying AI LLMs against Malevolent Utilization on AWS
‍
Dive deep into a landmark case study that details the creation and implementation of an advanced security framework designed to protect GPT-4, one of the most powerful AI LLMs, from being leveraged for malicious endeavours, all grounded within the AWS infrastructure.

Download Slides (.pdf)

One password to rule them all (for a few minutes)
‍
Find out how One-Time-Passwords (OTPs) can be a game-changer for your user accounts. With recent data breaches making news in Australia, it's more crucial than ever to think beyond traditional passwords which could leave you vulnerable to data leaks.

View Slides

Programming Languages & Tools

Turning 'wat' into 'why'
‍
Programming languages are repeatedly touted to have strange edge cases. Bugbears. Footguns. Wats. The canonical 'wat' talk shows some of these for Ruby and JavaScript, but doesn’t go into any detail into the ‘why’

View Repo (git)

Hooked on Hooks in React
‍
If you're using React, there's a good chance you've been writing functional components with hooks for a while now. And I think most of us would agree that hooks make our components cleaner and more elegant. But hooks have a dark side too - they can be confusing and make code more difficult to reason about.

View Slides

Conquering complexity: refactoring JavaScript projects

One of the most common issues in JavaScript code bases is that our code is too complex. As projects and their requirements evolve, complexity creeps in. Excess complexity slows progress, frustrating us as we try to keep large chunks of a program in our heads just to understand what is happening.

View Repo (git)

DATA, INTELLIGENCE & the DEveloper

Craft events mindfully - navigating the event driven journey with caution (EDA)
‍
There has been a shift towards event driven systems since REST and micro-services. Like any other architecture, embarking on an event driven journey, requires plenty of decisions and trade-offs to be made. Prematurely building for the future can lead to under utilisation and over-engineering, while focusing solely on the present may result in accruing technical debt and increased costs.

Download Slides (.pdf)

Streamlit in Snowflake, the Good, the Bad and the Ugly!
‍
Features, benefits and potential "gotchas" that your organisation should consider before fully adopting Streamlit in Snowflake. There'll be a live demo as well to spice things up!

Download Slides (.pdf)

Zero Trust Internal Apps Programmable
Cail Young

In this talk, we will explore how we solved the wicked problem of exposing critical internal applications for a remote-first organisation without just throwing VPNs at the problem. Spoiler alert. mTLS. So much mTLS. Attendees will come away with a blueprint for solving this problem at their own organisations, and perhaps a new joke or two.

Download Slides (.pdf)

Enterprise Grade Accessibility for Everybody
Erin Zimmer

At Atlassian, we take accessibility seriously enough that we have entire teams dedicated to it. There are experts on hand to provide feedback on designs, and answer questions about implementation details. There's a team that runs audits of new features before they're launched. It's honestly pretty good.

Download Slides (.pdf)

View Interactive Slides

AI Powered Attackers The New Arms Race
‍Ibrahim Sukari

Attackers are harnessing AI to launch faster, more convincing campaigns, while defenders are deploying AI to detect, adapt, and fight back. In this lightning talk, we’ll showcase how both sides are escalating the cyber arms race and highlight one key principle every organisation should adopt to stay ahead in a world where machines are shaping the battlefield.

Download Slides (.pdf)

Scalable Data Products
‍Ignatius Soputro

When implementing a data product methodology, you may find that it can become unscalable when the number of data products in your organisation grows to hundreds if not more. Using Jinja template on your Terraform plus the help of our friendly neighbourhood Python, we can make provisioning data products more scalable. If you find the same challenge with provisioning data products at scale, you may find some ideas from this express talk.

Download Slides (.pdf)

Building End-to-End Data Lineage with Kafka, Flink, and Spark
‍Jaehyeon Kim

Attendees will leave with a clear understanding of how to implement data lineage in their streaming architectures. This enables better data governance, faster root cause analysis, and increased trust in data. This practical guide is essential for data engineers, developers and architects looking to gain true visibility into their data pipelines.

Download Slides (.pdf)

Local First: Collaboration Beyond Cloud
Kritiketan Sharma

For years, we’ve defaulted to centralised servers and, more recently, leaned heavily on server-side components to power our web apps. But this dependence has a cost: apps that break without constant internet connectivity, sluggish performance under heavy load, and user frustration when things don’t just work.

Download Slides (.pdf)

Common Security Pitfalls
‍Lachlan Ashcroft

Explore critical security pitfalls commonly encountered in software development. The talk covers essential aspects, including planning, defensive programming, supply chain security, secret management, and PII handling. Attendees will gain practical insights on how to enhance their applications' security through real-world examples and actionable mitigations.

Download Slides (.pdf)

Sorry professor, my AI deleted my homework...
Matt De Bono

With AI companies and tech bros constantly hyping up how profound and world-altering AI is, it can be easy to forget some of the more absurd, useless, and downright hilarious things the AI era has provided. Reminisce about the AI agent that deleted a company's entire database, revel in watching AIs swear the seahorse emoji definitely exists, and some other great stories for the ages.

Download Slides (.pdf)

4 Pillars of Agentic AI Security
Toby Allen

As Large Language Models evolve into autonomous agents capable of executing complex workflows, the attack surface expands exponentially. It is no longer enough to guard against prompt injection; we must now secure the actions the AI takes. This talk introduces a comprehensive framework for securing Agentic AI, moving beyond basic guardrails to architectural resilience.

Download Slides (.pdf)

Speaker Slides

Digital Product Deep Dive

Cloud First

SECURITY

Programming Languages & Tools

DATA, INTELLIGENCE & the DEveloper