~/talks

Ignat Korchagin

what they talk about

all 6 in the filters

where they keep going back

all 16 in the filters

on a stage with

never shared a talk

who talks about the same things

titleconferencedate
sshlogin: securely authenticating to remote Linux systems via ...NDC Security 20262026-03-02
Proposal to reuse existing SSH keys for text-only emergency logins by turning SSH keypairs into an ECDH-based challenge that produces a short base64 OTP (demo…
Talk on
TPMs and the Linux Kernel: unlocking a better path to hardware securityLinux Plumbers Conference 20252025-12-11
Proposal adds a new kernel key type that uses TPM2 CreatePrimary in counter mode to derive reproducible per-application keys rather than storing wrapped blobs…
Talk on
Linux User Namespaces: A Blessing and a CurseOpen Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 20252025-12-08
Explains how unprivileged user namespaces let an unprivileged account map to root inside a namespace (useful for rootless containers) but also expose kernel…
Talk on
What is Linux kernel keystore and why you should use it in your next appBuild Stuff 20252025-12-03
Linux kernel keystore stores keys as kernel objects inside session keyring and other ring types, accessible by add_key or requested on demand with request_key…
Talk on
TPMs and the Linux Kernel: unlocking a better path to hardware securityØredev 20252025-11-05
Claims that the kernel exposes TPMs to apps via the keystore and crypto API, avoiding Intel/IBM TSS and root-owned device files, and that a request_key plugin…
Talk on
An engineer's guide to Linux Kernel upgradesfoss-north 20252025-04-14
Linux kernel patch releases arrive weekly and a recent 6.6 branch shows 87 weekly patch releases with ~20% containing over 100 fixes, ~33% over 200 and eight…
Talk on
What is Linux kernel keystore and why you should use it in your next applicationfoss-north 20252025-04-14
Explains that Linux’s kernel key retention service stores keys as kernel objects (use keyctl and request_key) so cryptographic material never sits long in a…
Talk on
Linux user namespaces: a blessing and a curseIncontro DevOps Italia 20252025-03-14
Explains that unprivileged Linux user namespaces let unprivileged processes map to root and sandbox apps (rootless containers, Chrome tab sandboxes, systemd…
Talk on
TPMs and the Linux Kernel: unlocking a better path to hardware securityNDC Security 20252025-01-20
A Python request_key plugin demonstrates reproducible, per‑application keys derived from the TPM seed and application metadata, removing the need to store…
Talk on
Linux user namespaces: a blessing and a curseNDC TechTown 20242024-09-09
Unprivileged user namespaces let an ordinary UID map to root inside a namespace and then create mount, pid and network namespaces to run rootless containers…
Talk on
TPMs and the Linux Kernel: unlocking a better path to hardware securityNDC TechTown 20242024-09-09
TPM adoption is low because apps must juggle resource managers, competing TSS stacks and privileged device access; this work shows a concrete path: use the…
Talk on
TPMs & The Linux Kernel: Unlocking A Better Path To Hardware SecurityHardwear.io USA 20242024-05-31
Proposes using the Linux kernel key store to let applications use TPM-held keys without reimplementing TSS stacks, implements a Python request_key plugin that…
Talk on
Sandboxing in Linux with zero lines of codeNDC Security 20242024-01-09
Claims a way to sandbox any Linux binary without changing its source by injecting seccomp policies at runtime; demonstrates a toolkit with a shared library…
Talk on
An engineer's guide to Linux Kernel upgradesNDC TechTown 20232023-09-18
Linux kernel bugfix branches produce weekly bugfix releases; on 5.15 there are ~132 weekly updates with ~50% exceeding 100 commits, 23 >200 and 10 spikes >500…
Talk on
What is Linux kernel keystore and why you should use it in your next applicationNDC TechTown 20232023-09-18
Linux provides a kernel key retention service that stores keys outside process memory and exposes them via syscalls: ADD_KEY to add blobs and request_key to…
Talk on
An SRE Guide to Linux Kernel UpgradesSREcon23 Asia/Pacific2023-06-14
Explains that Linux kernel bugfix releases arrive weekly and often matter: on the 5.15 branch there are 116 bugfix releases with 59 over 100 commits, 21 over…
Talk on
What Is Linux Kernel Keystore and Why You Should Use It in Your Next...SREcon23 Asia/Pacific2023-06-14
Linux kernel keystore stores cryptographic material as kernel objects so keys never touch user space and key lifetime binds to keyrings…
Talk on
What is Linux kernel keystore and why you should use it in your next applicationNDC Security 20232023-01-16
Linux exposes a kernel keystore that holds keys as kernel objects, with session/process/thread keyrings that auto-destroy keys on logout or crash, and key…
Talk on
An SRE Guide to Linux Kernel UpgradesSREcon22 Europe/Middle East/Africa2022-10-25
The kernel stable branch produces ~75 bugfix releases (example: 5.15 had 75), over half of them contain >100 commits and 55 of 74 releases carry CVE fixes…
Talk on
An SRE guide to Linux Kernel upgradesSREday London 20222022-09-15
Argues that Linux kernel updates are safer and more urgent than they look and that delaying them increases risk faster than time saved, citing 68 weekly 5.15…
Talk on
Speeding Up Linux Disk EncryptionVault '202020-02-24
A runtime patch removes DM‑crypt’s multiple offload queues and adds a DM-crypt queue bypass flag plus an AES-NI proxy module that forces inline, synchronous…
Talk on
Go as a Scripting Language in LinuxGopherCon UK 20192019-08-21
Claim: Go is usable as a practical Linux scripting language by pairing a small interpreter shim with kernel-level registration. Demonstration shows go run…
Talk on
Go as a scripting language in LinuxdotGo 20192019-03-25
Claim: Go can be a practical scripting language if specific problems are solved — go run refuses a shebang so exit codes and kernel-level execution break…
Talk on
Managing Server Secrets at Scale with a Vaultless Password ManagerSREcon17 Asia/Australia2017-05-22
Cloudflare describes using firmware flash to store a single 256‑byte master seed in UEFI variables and a deterministic KDF + DRBG pipeline to derive per-server…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.