/r/BarCampGR
BarCamp GR is an annual two-day weekend unconference in Grand Rapids, MI.
BarCamp GR is an annual two-day weekend unconference in Grand Rapids, MI.
Register! It's free, really! And it lets us print up a nametag for you in advance.
You can participate! If you're not sure if it's for you, it probably is. Go. Read.
In this subreddit, post your topic ideas. That means anything you're interested in, whether it's something you could talk about, or something you'd like to see someone else talk about. If someone's already posted a topic you're interested in, vote it up so they realize someone else is interested in it, too!
Later, during and after the event, people who've posted talks can use this space to post links to things related to their talk; perhaps they have a slide deck they used, or perhaps there was some website they wanted interested people to be able to reference.
/r/BarCampGR
Apologies if this isn't the appropriate subreddit (there weren't a r/barcamp to check), but I've been wondering what happened to/with BarCamp(s) in general?
They were one of the best that I've attended, and miss them.
See https://barcampgr.org/ info and registration.
See you there!
Geeks, makers, and programmers lend me your feeds! The eleventh annual BarCampGR will be on Friday, August 26 and Saturday, August 27, 2016 at Calvin College’s DeVos Communications Center.
To register and attend for free, visit: http://barcampgr.org/register/
What is BarCampGR?
BarCampGR is about meeting interesting people, talking about what you want to talk about, and listening to what you're interested in. Subjects of discussion have ranged from web programming and digital photography to computer vision and turkey basting. (No, there wasn't a talk on having a computer visually monitor your turkey, but if you've tried it, you're welcome to report on your experiences!) You see, the talks are not set beforehand. It's you, the attendees, who give BarCampGR direction and content.
What's the format?
Presentations are 25 minutes long, with five minutes in between. You're welcome to sit in on a presentation or hang around in the lounge and talk; it's all the same with us. If you run a presentation, we don't care how you run it - so long as you don't get us in trouble! Give a monologue, a Q&A or a round table; it's your topic, your presentation, your audience. If people didn't want to spend 25 minutes on your topic, they wouldn't be there. Please be considerate when signing up for multiple talks at the start of the conference. If you see slots lingering open later on, feel free to fill them in then.
Don't know what to talk about?
Certainly you have some relatively unique experiences. What do you do for a hobby? What's something you managed to fix that you're proud of? It doesn't matter if the height of your accomplishment is changing your car's oil or if you've war-driven half of the Grand Rapids area; if people are interested, they will show up at your talk. If they aren’t interested, they will probably attend one of the other talks during that time.
But I'm not an expert!
Sure you are! If you know the first thing about a subject, you know more than people who don't. And, yes, people who know more than you will probably attend your presentation. Interact with them; you both have something to learn from each other. Chances are, if you're both really interested in a subject, you'll find yourselves looking for each other in the lounge later.
But perhaps you're...
Shy?
That's fine. Come on in, take a look around and get a feel for things. It's a two-day event; come by on Friday, sit in on the presentations which interest you or hang around in the lounge and network with other people. Perhaps you'll be inspired to talk about something later or on Saturday. You never really know.
If you'd like to be able to listen, but don't know if you'll have anything to say, you can still...
Help Out
On the days of the event itself, we typically need greeters, people to babysit the facility overnight (some folks stay overnight), people to respond to technical issues such as "why won't the projector work with my laptop" and "could someone turn down the lights so we could see the screen?"
We also have a Slack organization again this year, slack.barcampgr.org. Use it to ask for certain subjects to be covered (#topic-requests). Use it to offer subjects that you can talk about. During the event, use it to have live discussions about things with people who aren't immediately present. After the event, use it to post supplemental materials and ask followup questions. We have a lot of other ways you can keep up to date on BarCampGR news and updates via the following social media outlets:
Slack (Replaces IRC)
Also, if you'd like to help us organize BarCampGR, then sign up for the BarCampGR Organizers' Email Group and jump right into the conversation, or join the Slack team.
T-Shirts will be available online for purchase, details will be sent out once that’s ready. Don’t worry, we'll have other free swag at BarCampGR this year.
LOCATION DeVos Communications Center at Calvin College
SCHEDULE
Friday, August 26, 2016
5:00-6:00 PM - Check-in and setup
6:00-7:00 PM - Dinner
7:00 PM - Kick things off with opening session
7:30-9:30 PM - Sessions every 1/2 hour
10:00 PM - After party
Overnight
10:00 PM-whenever the next morning - Camping, all-night hacking, etc.
There will be plenty of room to crash on Friday night, so bring a sleeping bag. Better yet, bring a tent for the geek base camp. You can also reserve clean, close accommodations at Calvin College’s Prince conference Center .
Saturday, August 27, 2016
9:00-10:00 AM - Continental Breakfast
10:00 AM-12:00 PM - Sessions every 1/2 hour
12:00-1:00 PM - Lunch
1:00-2:00 PM - 5 minute Lightning Talks
2:00-4:00 PM - Sessions every 1/2 hour
4:00-4:30 PM - Closing session
4:30-5:30 PM - Cleanup
Note, despite the 'bar' in BarCampGR, the event doesn't take place in a bar, only the (optional) Friday after-party does.
See you there!
--BarCampGR 2016 Organizers
I just saw a post on Calvin's Instagram about this great event!
I am really interested to hear about what you guys actually talked about. Is there any way you could share some fo the insights or thinks you talked about?
Friendly Code–a Code for America Brigade–is a group of developers, designers, data geeks, GIS experts, and interested citizens who help Grand Rapids' government and civic organizations adopt open web technologies.
Join the discussion at BarCamp to learn more and help us brainstorm civic hacking ideas for Grand Rapids: http://www.meetup.com/friendlycode/events/224407323/
The intent is to talk about the need for file/object-based solutions at large scales, basic clustering design, replication versus erasure coding, and an outline of how Ceph works and it's features.
Microsoft Kinect, LIDAR, laser scanners, photogrammetry. There are lots of ways of doing 3D scanning. So far, I have yet to find one that works reliably with large objects, on the scale of the outside of a building. This talk will present some of the different techniques, how they work, and some of the challenges associated with building technology for scanning large objects. Knowledge on this subject from the audience would be very very welcome.
OpenSCAD is a programming-based parametric 3D CAD system. You build parts by combining shape commands such as cube(), sphere(), etc. using various transformations and CSG operations such as union() or difference().
FreeCAD is an open source cross-platform 3D modelling program which has become surprisingly good over the last few years. This talk will be about modelling a basic part in FreeCAD in a way that it can be 3D printed.
(I did a talk on this in 2014 and it was pretty popular. I figure I can try and model up a different part.)
I'm no expert, but I have had a 3D printer now for over a year and it's gone through a number of iterations and modifications to work around challenges and problems I've encountered. This talk will be about the problems I've encountered and the things I've learned along the way about machines, materials, and part design for 3D printing.
I will present something board-and-card-game-related again this year. Previously I did the "get a game printed" talk and the Rationality presentation. Any thoughts or requests? I could talk about genres and mechanics, or design topics, or my workflow for prototyping cards in Photoshop...
There's way too much technical detail to go into to teach IPv6 from the ground level up. Come in, ask the questions you have, get honest, pragmatic answers.
Good for home or business...
Backups. That one thing you should have, but probably don't.
Bareos is a free, enterprise-grade backup software system that works fine on multiple operating systems.
"Enterprise-grade" is a buzzword that means two things: It's powerful, and it's complicated. Understand it. Learn it. Love it.
I use CentOS+QEMU/KVM for virtual machines. Nice and cheap. Good stuff. Works fine. And live migration is awesome. See how live migration works, and how to do it. Learn which shared filesystems work well and which don't, why, and what the workarounds are...
Gluster is a distributed filesystem with support for data redundancy and online growth. I use it both as a place to stick VM images, and as a place to store backups. Gluster has both a FUSE interface and a native access library called libgfapi. Learn the ups and downs of it all.
probably won't get many people, but i will have an intro to knitting panel at some point :D
Test post to see if Slack is pulling /r/barcampgr's RSS feed properly.
I did two related talks this weekend.
Polymer: http://polymer-project.org/ (Honestly, the documentation is kinda meh.) My projects: https://github.com/astronouth7303/foto https://github.com/astronouth7303/backtick-listing
Promises/A+: http://promisesaplus.com/ HTML5 Rocks: http://www.html5rocks.com/en/tutorials/es6/promises/
Here's my own notes, so sorry they aren't polished at all, but you should be able to take most of the terms and google them or look them up on OWASP
I am not an expert
resources:
https://www.owasp.org/
default apache, nginx server configs at http://initializr.com and http://html5boilerplate.com
email enumeration
email disclosure
phishing
validate url redirects (return_to on login param)
logins
brute force
openid complex
social auth
need to know protocol and library you're using
sessions
fixation
invalidate after pwd reset
pwd reset link should only work once, and expire
user input
xss
escape everything
whitelist
don't blacklist
know your libraries (markdown)
lots of different places in your app
putting values in JS vars is dangerous too, even with " escaped, since HTML is parsed first < will break out
stored xss, reflected xss
csrf
require POST, have token
logout csrf
require post or url param for it too
http headers
cookies httpOnly
js can't access them (in case of XSS)
multilayer protection against multilayer attacks
X-Frame-Options - clickjacking
DENY
SAMEORIGIN
ALLOW-FROM uri
local path disclosure in error pages
referrer leakage
on pwd reset page, 3rd-party JS can steal the secret hash and use it and change pwd
need to invalidate/change hash as part of form render/submit
app logic
sql injection
use a library! use params!
permission checks
etc
outdated software
keep upgrading it
SSL/TLS config
HTTP Strict Transport Security
IE9 json mimetype http://blog.watchfire.com/wfblog/2011/10/json-based-xss-exploitation.html
We'll cover everything from what geocaching is to advanced topics such as custom caches and hiding your own caches.
The images for my talk on brewing hard cider can be found here:
Here are the notes I used:
https://docs.google.com/document/d/1zefHdQ2EslVe2of9rpqkHKDkNo0xBkYranapdc8m3fM/edit?usp=sharing
Feel free to contact me with any additional questions!
Elizabeth Day
Any interest?
I'm interested in this topic. Can anyone speak on it?