As a long-time web developer I felt this way too, but then something unexpected happened: I joined the dark side, and spent five years of my career working on--*gasp*--iOS and Android applications.

Now, like an explorer returning from a multi-year safari--I have so much to share! In this talk I'll discuss how native development has improved the way I write code for the web, and how you can incorporate the best native app performance and testing tips into your web workflows.

Ever since CF10, the mechanism to update CF has been a single-click operation in the CF Admin--or at least, that's how it's supposed to be. But sometimes things go amiss, and you can be left with CF not coming up, or the admin not opening, or something in your app failing to work right which you may not notice for even days or weeks.

And the same is true when it comes to updating the Java/JVM that CF uses: there are several things you can easily do "wrong" that will have CF not starting. And even if you do it "right", there may be something amiss (because you missed an important step) that might not bite you for some days--when someone tries to make an https call out of CF. And you may wonder, "what version of Java can I use with my version of CF?"

The good news is that there are answers and a few key best practices to follow in updating CF, the JVM, and wsconfig, which if followed can ensure that each is a quick and painless task. In this session, veteran CF troubleshooter Charlie Arehart will walk through all this, based on his decade-plus experience in helping people troubleshoot such problems daily. The session will apply both to those using the Admin or command line for such update mechanisms.

In this session, join Josh Patterson who will show you Vroom Performance Suite, a db monitoring tool built by performance engineers for performance engineers. It offers substantial performance information both in real-time and based on historical snapshots. And who wants to be watching a monitor all day? So it also offers real-time alerts. And when it comes time to dig in, it offers help with tracking and assessing db indexing, analysis of expensive queries, and execution plan insights. Hopefully it will also offer you better sleep at night.

Does that mean you should give up ColdFusion? Of course not. But it never hurts to have additional tools to bring to bear on a given problem, and a better understanding of other tools can help inform how you approach what you do today, regardless of what tools you use to do it.

In this session, OutSystems Developer Advocate G. Andrew Duthie will provide an overview of Low-Code, an approach to application development that emphasizes a visual approach to developing screens and logic. He'll show what it brings to the table and demonstrate how OutSystems implements Low-Code, and he will provide a broader look at the Low-Code (and No-Code) landscape, including other players to be aware of in this area.

Bring your curiosity and your questions, and yes, you should even bring your skepticism. All are welcome!

Integrated is a great tool released by Eric Peterson, inspired by Jeffrey Way's Integrated for Laravel. Laravel has a lot of amazing tools, and Integrated for CFML is a port of one of them.

Integrated lets you write tests in a user friendly way, allowing you to do something as simple as this for a test, interacting with your entire website, not just a UNIT of code.

- Visit this page
- See if this text is on the page
- Type this into this text field
- Type that into this text field
- Button the form
- Look for an error message on the page.

Learn how this tool can allow you wrap your site in full integration tests in minutes, and give you the jump start you need with your testing, while making it fun.

By creating integration tests, vs unit tests, you don't have to rewrite all your code into testable units to begin, your code is ready, are you?

## 5 Main Points

- Learn how easy it is to add test coverage today without rewriting all your code
- Automate your app testing without pressing F5 all day long
- Make tests easy for your dev team, and meaningful for your client with meaningful test result pages
- Learn a power Domain Specific Language (DSL) for writing your tests that makes sense to developers, new and experienced
- Have fun writing tests, and sleep better at night knowing you have test coverage in your app.

You've probably heard someone say that if you're rolling your own crypto, you're probably doing it wrong, but what ARE you supposed to do? There's so much information out there about encryption, hashes, iterations, salts, and entropy that it's hard to decipher and sometimes even harder to convince your boss why it's worth spending time on.

Let's take a practical look into the world of password storage by starting with the most basic approach and what's wrong with it. We'll work through many of the common techniques and explain how they fall short.

We'll talk about the tools crackers use such as brute force, lookups, and rainbow tables to explain how the baddies wrench your users' secrets from your stolen databases using several recent high-profile attacks as examples. How can you protect against a thread you don't even understand?

• Why YOUR site is worth making secure
• How hashing differs from encryption
• What password policy creates the best entropy
• What the heck is a rainbow table and does it have a pot of gold at the end?
• What libraries you can start using today to do it "right"?

In this session, we will take a look at why your SQL may not run the way you intended. We will look well beyond just the select statement and look deeper into how SQL runs. We will go over what the DBA's keep to themselves as well as other metrics. We will also look at some debugging techniques to help find problems when they happen.