Radio Liferay

Welcome to Radio Liferay, a peek into what is going on in Liferay from the people doing it themselves.

 

Latest Broadcast

Radio Liferay Episode 58: Jorge Ferrer continued

  Two episodes (or an eternity) ago, I spoke to Jorge Ferrer, Liferay's VP of Engineering. We didn't have enough time to finish the conversation, so we continued a while after - and then I buried the recording /o\. Anyway, apart from it being still from "before the release of the current version", it's still relevant stuff, I feel bad about missing to post it. Check for yourself - here it finally is.

As before, we're speaking about various internal and external topics and I've also been teasing him a bit.

We're talking about these (and more) topics

  • Microservices vs Monoliths
  • Shortly before the release many modules were moved around and renamed. We talk about the reasons and what this meant for the translations
  • What's the meaning of "Feature-Complete"?
  • A lot of Feedback starts to come in during the Beta Cycle
  • Nitpicking on the Beta Criteria: JBoss and Upgrade Routines
  • Lookahead on the next episode on Performance Tuning
  • Releaseplans (of course, I could have retrofitted an exact release date...)
  • What's it like to be hired into Liferay Engineering?
  • Is it forbidden to write Javadoc?

Follow @JorgeFerrer, @RadioLiferay and me (@olafk) on twitter.

You'll find this episode - and make sure that you don't miss any of the future episodes - by subscribing to  http://feeds.feedburner.com/RadioLiferay. You can also subscribe on itunes.: Just search for "Radio Liferay" or just "Liferay" in the podcast directory. Make sure to write a review for the podcast directory of your choice - or find everything about Radio Liferay on radioliferay.com.

Or just download the MP3 here

download audio file

Average (0 Votes)
The average rating is 0.0 stars out of 5.


Threaded Replies Author Date
Typo in https://liferay.com/carreers (rr in... Geert van der Ploeg September 21, 2016 2:44 AM
Oops - probably a leftover of my Carrera racing... Olaf Kock September 21, 2016 3:06 AM

Typo in https://liferay.com/carreers (rr in carreers)
Posted on 9/21/16 2:44 AM.
Oops - probably a leftover of my Carrera racing career. Corrected, thanks.
Posted on 9/21/16 3:06 AM in reply to Geert van der Ploeg.

Tell others

If you enjoy this podcast and are subscribing on itunes or any other aggregator: Please consider telling them how much you like it - just use their rating system. And consider leaving feedback and comments (at the shownotes, linked for each episode)

Older Episodes

« Back

Radio Liferay Episode 49: Tomáš Polešovský from Liferay's Security Team

  It's been a long time and finally... Radio Liferay is back with several episodes in the queue. Today, Tomáš Polešovský starts of by talking about Liferay's security team and -procedures as well as his work within that team. Tom has already been a guest on Radio Liferay's ancient episode 9

Here are some of the topics that we talked about:

  • The glorious glamorous days one has on the security team (consisting mostly of email, tickets, pullrequests)
    • Different ways to make Liferay more secure
    • Gathering feedback from community and customers
    • Monitoring Liferay Forums and full disclosure mailing lists (also about the various libraries that are used in Liferay)
    • Scan source code for problems
  • Liferay cooperates with external security researchers for penetration testing
  • Customers perform external audits as well.
  • An example of an actual audit report: 49 very alarming false positives vs. 1 real cornercase
  • The security issue fixing process
  • The first security episode with Sam Kong
  • Link to community security update page. CE updates always only against the latest GA version
  • Some low hanging fruits in secure Liferay administration (on the fly)
    • Disable "create new accounts" if you don't want random users to create new accounts (e.g. in an intranet)
    • JSONWS access
    • Disable Control Panel, add "My Account" to user's personal pages instead
    • The securing Liferay series and "additional Resources" here
  • What will happen with Liferay 7?
  • OAuth, and the related Radio Liferay episode 44 with Stian
  • SQRL (disclaimer: I misled Tom by mispronouncing this library - he's aware, but there's no implementation - yet - for Liferay)

Follow @RadioLiferay, @topolik (Tom) and @olafk (me) on twitter.

You'll find this episode - and make sure that you don't miss any of the future episodes - by subscribing to  http://feeds.feedburner.com/RadioLiferay. You can also subscribe on itunes.: Just search for "Radio Liferay" or just "Liferay" in the podcast directory. If you like this, make sure to write a review for the podcast directory of your choice - or leave your feedback on www.liferay.com/radio.

Or just download the MP3 here:

download audio file

Average (0 Votes)
The average rating is 0.0 stars out of 5.


No comments yet. Be the first.