February 24-26, 2027
Montreal, Canada
Top 20 sessions
Artificial IntelligencePython
Working with natural language has always been complex. LLMs have made it more accessible, but production applications still face significant challenges, especially when dealing with multiple languages. This talk covers common pitfalls in multilingual audio and text workflows, along with practical approaches for selecting, evaluating, and combining speech-to-text and language models.
Cloud ComputingSecurity
Kubernetes est aujourd’hui la plateforme d’orchestration de conteneurs la plus utilisée dans le monde (cloud public, hybride, on-prem).
Sa complexité et son adoption massive en font une cible privilégiée pour les attaquants.
De nombreuses compromissions récentes montrent que les mauvaises configurations sont la première source de vulnérabilités, bien avant les failles logicielles.
Sa complexité et son adoption massive en font une cible privilégiée pour les attaquants.
De nombreuses compromissions récentes montrent que les mauvaises configurations sont la première source de vulnérabilités, bien avant les failles logicielles.
PerformancePHP
Achieving optimal performance and reliability requires more than monitoring, it demands observability. Discover how metrics, logging, tracing, and continuous profiling empower you to understand, debug, and optimize your application. We'll explore each pillar and demonstrate how to instrument your PHP application for actionable insights. Examples will leave you equipped to make your PHP applications observable, resilient, and performant.
DatabasesPHP
In this presentation we will look at how to deal with time zones. This will particularly be relevant due to the changes in Canada with Daylight Saving Time.
We will see how it is hard to make assumptions on how they work, and explain how they came into existence. We'll focus mostly on how to handle them from within PHP, as well as how we (should) store them in databases. We'll also have a quick look at date manipulation when querying data.
We will see how it is hard to make assumptions on how they work, and explain how they came into existence. We'll focus mostly on how to handle them from within PHP, as well as how we (should) store them in databases. We'll also have a quick look at date manipulation when querying data.
Tests & QualityArtificial Intelligence
AI coding agents fail on ambiguity, not syntax. BDD solved that years ago with executable specifications in business language. This talk maps a decade of BDD practice onto spec-driven development with agents: scenarios an agent implements against, used as the acceptance gate, and how to catch false green when the agent writes its own tests. Examples come from real projects and from building an open-source ERP. The workflow fits any language.
PHPSecurity
You asked for an ID before you opened the door. Who checks which rooms they open next? Authentication alone gets you almost nothing. Once a request is trusted, whole classes of failures open up: unauthorised reads, privilege grants, wrong balances, forgotten endpoints still answering, control panels wide open. I will walk you through the vulnerability and teach you the defence. Let's look at both halves and get authorisation right.
JavaScriptTests & Quality
Unit tests? Integration tests? Mocks? Stubs? Fakes? How does this apply to the web? Let's look at all the ways you can test a web app and demo all the tools you'd use. We'll live-code most tests to show you exactly what makes a good testing strategy. You'll leave with a GitHub repo you can use to keep learning or fork and use in your own PWAs.
PHPTests & Quality
Hopefully by now, you know that testing is important, and you've integrated PHPUnit into your workflow. So now what?
In this "testing 202" course, we'll explore some features of PHPUnit you may not be using (but should), some techniques you may not have thought of, and answer the question "so what are traits actually good for?"
In this "testing 202" course, we'll explore some features of PHPUnit you may not be using (but should), some techniques you may not have thought of, and answer the question "so what are traits actually good for?"
Architecture & Design PatternsHTML & CSS
Browsers give you exactly one chance to ask a user for permission to do something. If the user declines, the only way to give access to the camera, microphone or geolocation again is hidden deep in the browser's settings (i.e. it's not gonna happen).
Once again, HTML comes to the rescue of JS. A new set of HTML elements let users give explicit permission, right from the page. We'll explore their features, their restrictions and how to use them
Once again, HTML comes to the rescue of JS. A new set of HTML elements let users give explicit permission, right from the page. We'll explore their features, their restrictions and how to use them
Artificial IntelligenceHuman Intelligence
AI-native engineering changes more than how developers write code. This talk explores the operating model behind it: shared intelligence, context as code, reusable skills, model routing, evals, traceability, and earned autonomy. We will look at how planning, governance, and human judgment fit together as agents take on more of the SDLC. You will leave with a framework for designing the transition.
PHPSecurity
In October 2026, a pair of critical vulnerabilities in PHP, termed "PHP2Shell," were disclosed. As a PHP 8.5 Release Manager, Daniel Scherzer had a front-row seat to the announcement of the PHP2Shell vulnerabilities and the distribution of their fixes. Join him for an in-depth account of what PHP2Shell is, the discovery and remediation process, how the fixes were built and disseminated, and much much more.
PHPEcommerce
Learn how our applications can charge AI agents via an HTTP request using the Machine Payments Protocol (MPP). We'll explain 402 payment challenges, compare payment rails, and in a live demo, turn a Laravel API route into a paid endpoint, with just one line of middleware.
We'll cover charging credit cards and stablecoins, avoiding double charges, and explore how production-ready this protocol is today in different parts of the world.
We'll cover charging credit cards and stablecoins, avoiding double charges, and explore how production-ready this protocol is today in different parts of the world.
Artificial IntelligencePython
In June 2026, OpenCV released version 5.0, its first major release since 2018. This talk uses live demos to explore its core features and newest additions. From Hough transforms and image stitching to object detection and facial recognition, attendees will see what OpenCV can do and how to apply it in their own projects.
PHP
Join PHP core developer and veteran release manager Daniel Scherzer for a deep dive into the new features, syntax updates, deprecations, and surprises coming in PHP 8.6. Whether you're maintaining legacy apps or building bleeding-edge libraries, this talk will help you upgrade to the newest version of PHP 8.5 with confidence. Features include improvements to the URL handling extension, partial function application, a new Duration class, and more.
Cloud ComputingArtificial Intelligence
Agent harnesses are easy to run on your machine. Giving them a secure place to work on their own is harder. Using Modal Sandboxes, this talk walks through the move from local agents to isolated, sandboxes with controlled access to code, tools, secrets, and networks. You will learn the building blocks for running harnesses as persistent engineering collaborators instead of as personal assistants.
Java & JVM languagesSecurity
In our wallet, third-party services received digitally signed requests, so it was easy to assume that a valid signature meant the request was safe. It wasn’t. A signed request could still be replayed, retried after a timeout, arrive with clock skew, or leave important fields outside the signature. This talk looks at those failure cases and the practical use of nonces, idempotency, key rotation, and replay protection to handle them safely.
Architecture & Design Patterns.NET
Pub/sub is a great start - but production systems need more. Explore the Outbox, sagas, scatter-gather, competing consumers, retries, back pressure and idempotency. Through practical scenarios, you’ll learn which pattern addresses which distributed-systems problem and leave able to recognise failure and scaling challenges in your own systems and choose an appropriate messaging pattern to address them.
Architecture & Design Patterns.NET
Message brokers promise scalability and reliability - but ordering complicates both. Partitions, retries, competing consumers and redelivery can all disrupt message order. We’ll explore how popular brokers handle ordering, why strict ordering conflicts with scalability, and patterns for handling out-of-order messages. You’ll leave able to decide when ordering is necessary and design systems that remain correct when it breaks.
Architecture & Design PatternsJava & JVM languages
Java enums are usually introduced as a way to represent fixed sets of constants, but Effective Java also recommends a single-element enum as a safe way to implement a singleton. In this talk, I look at what happens when that pattern is used for small Java services, how it differs from classic singletons and DI-managed components, and where it starts to become a bad fit once state, dependencies, lifecycle, or testing requirements grow.
Architecture & Design PatternsHuman Intelligence
Design systems are sold as technical projects (tokens, components, doc). My conviction as React design systems dev, is different: a design system is a structure combined with a history of decisions. Through a real-life story, this talk identifies three symptoms and two root causes of failure. The conclusion highlights the need for an explicit decision-making mandate, more urgent by the rise of AI, which can sometimes lose context.
© 2010-2026 ConFoo. All rights reserved. Code of Conduct
Cookie Consent
To provide the best experiences, the usage of cookies are necessary. Some are essential for the proper functioning of the site, while others help us better cater to your interests.