Marta Rybczynska
where else to find them
what they talk about
all 6 in the filters
where they keep going back
- Open Source Summit Europe2 editions2022–2025
- CVE/FIRST VulnCon & Annual CNA Summit2 editions2024–2025
- Embedded Linux Conference Europe2 editions2013–2022
all 13 in the filters
on a stage with
all 13 in the filters
who talks about the same things
- Kees Cook23 talks
- Sergio Prado9 talks
- Greg Kroah-Hartman36 talks
- Jan Kiszka24 talks
- Ignat Korchagin36 talks
- Drew Moseley12 talks
| title | conference | date |
|---|---|---|
| What Have We Found in Git Repos? | Open Source Summit Europe 2025 | 2025-08-25 |
Public Git histories frequently reveal security fixes well before advisories: tooling that cloned and parsed repos across roughly 1,500 projects correlates… | ||
| Status of Embedded Linux | Open Source Summit Europe 2025 | 2025-08-25 |
Kernel moves include real-time preemption landing and lazy preemption work, a new option to write schedulers as BPF programs, multigrain VFS timestamps, and… | ||
| How and Why Do the Bad Guys Attack Embedded Products? | Open Source Summit Europe 2025 | 2025-08-25 |
Embedded devices are attacked via concrete, repeatable paths: a vacuum cleaner with the vacuum cleaner camera pin validated only in app exposes its video… | ||
| Panel: Open Source for Polish and European Sovereignty and Security | Capital Series Poland 2025 | 2025-06-11 |
Panel argues open source reduces dependency and enables control but faces a sustainability gap: governments find 20 years of backlog in maintenance and many… | ||
| Distribution Builders Meet VEX | CVE/FIRST VulnCon 2025 | 2025-04-07 |
Yocto Project builds generate CV metadata that is already close to VEX: the build system’s CV check detects package-level CVEs, honors per-recipe patch files… | ||
| Towards a Vulnerability Reporting Specification | CVE/FIRST VulnCon 2025 | 2025-04-07 |
A minimal, CRA-focused vulnerability reporting specification targets clear, auditable requirements rather than guidance prose: a two-page draft lists concrete… | ||
| The Year in Open Source Security | Open Source Summit Japan + AI_dev 2024 | 2024-10-28 |
A concise inventory of concrete 2024 events: NVD stalled on Feb 12 and leaves a backlog while CVE adoption moves to JSON v5 and new CNAs (Linux kernel, curl… | ||
| Patterns and Anti-Patterns in Embedded Development: What Security Incidents... | Embedded Open Source Summit 2024 | 2024-04-16 |
Stories of real failures and fixes from 2023: trains whose firmware contains GPS- and date-triggered locks that brick units after maintenance, discovered by… | ||
| Status of Embedded Linux | Embedded Linux Conference @ EOSS NA 2024 | 2024-04-16 |
Kernel 6.4–6.9 delivers concrete wins and breaking changes: per-field tracing via perf data type profiling that generates cache-line access heatmaps; a new… | ||
| Patterns and Anti-Patterns in Embedded Development: What Security Incidents... | Embedded Linux Conference @ EOSS NA 2024 | 2024-04-16 |
Covers concrete 2023 incidents: GPS-locked trains whose firmware embeds location/date conditions and per-unit build paths; leaked signing keys from an MSI… | ||
| Status of Embedded Linux | Embedded Open Source Summit 2024 | 2024-04-16 |
Kernel 6.4–6.8 adds concrete embedded features: perf data type profiling for per-field cache-hotspot measurement, deadline servers replacing coarse real‑time… | ||
| Effective Vulnerability Management for Over 400 Projects at the Eclipse Foundation | CVE/FIRST VulnCon 2024 & Annual CNA Summit | 2024-03-25 |
The Eclipse Foundation consolidates vulnerability intake across over 400 projects and 1,800 named committers by creating a centralized security team, a… | ||
| Through the Looking Glass: How Open Source Projects See Vulnerability Disclosure | Black Hat Europe 2023 | 2023-12-04 |
Open source projects typically reply in five concrete ways: fixed in release, not a security issue, needs testing, submit a patch, or we do not issue CVEs… | ||
| Yocto Project/OpenEmbedded Meets Security | Embedded Linux Conference (ELC) @ EOSS 2023 | 2023-06-27 |
Explains concrete Yocto/OpenEmbedded actions: enable inherit CVE check to scan NVD (note NVD moved to JSON/Git and CVE format 5.0), use meta-security and… | ||
| From a Security Expert's Diary: DOs and DON'Ts When Choosing Software for your... | Embedded Linux Conference Europe 2022 | 2022-09-14 |
Starts with concrete checks: verify SoC upstream drivers and device trees, match product support lifetime to distribution LTS, and prefer Yocto/OE layers that… | ||
| Debugging Embedded Linux | Open Source Summit Europe 2022 | 2022-09-13 |
Development spends most time debugging, so the proposed approach focuses on concrete experiments: define the problem, list plausible causes, design a single… | ||
| What should I know about secure boot and TEEs? | foss-north 2022 | 2022-04-20 |
Explains why secure boot must pair with TEEs to stop a malicious bootloader from spoofing a runtime: TPM (2007) is usually a separate chip and cannot do DMA so… | ||
| Secure boot, TEEs, different OSes and more | FOSDEM 2022 | 2022-02-05 |
Oniro implements a unified secure-boot and TEE approach across architectures by using UEFI on x86, U-Boot/EBBR on ARM and integrating OP-TEE to store UEFI… | ||
| Scanning for known vulnerabilities in an embedded distribution | FOSDEM 2022 | 2022-02-05 |
Oniro builds from source with Yocto/OpenEmbedded, targets IoT and supports multiple kernels, and runs roughly ~300 packages per product build; vulnerability… | ||
| Process-based abstractions for VM-based environments | FOSDEM 2022 | 2022-02-05 |
Inaugural secure enclave platforms operate at the single user process level (e.g. SGX), meaning a single address space with potentially multiple threads, with… | ||
| Securing a Yocto-based Distribution: The Case of AllScenariosOS | Open Source Summit + Embedded Linux Conference + OSPOCon 2021 | 2021-09-27 |
AllScenariosOS is a Yocto-based, source distribution that applies kernel hardening, image hardening, permission tightening and service removal and reports that… | ||
| From an Idea to a Patch in the Linux Mainline | Open Source Summit + Embedded Linux Conference + OSPOCon 2021 | 2021-09-27 |
Recent kernels show more than 10% first-time contributors per release and thousands of first patches land each year; the workflow here is: clone the main tree… | ||
| Into the Jungle - How to write a Linux kernel driver for any subsystem | foss-north 2021 | 2021-06-01 |
Shows how to pick a real example, vet it with license and checkpatch, and iterate until usable: an initial 13,000-line driver example is too big, a blog… | ||
| A Year in KDE from Outside | Akademy 2020 | 2020-09-04 |
Analysis covers Sept 2019–Aug 2020 using site-by-site counts and manual reading after automated keyword scraping fails; Phoronix averages an article about KDE… | ||
| Going Linux on Massive Multicore | Embedded Linux Conference Europe 2013 | 2013-10-24 |
Port of Linux targets a Kalray MPPA256 256-core chip running at 400 MHz and about 200–230 GFLOPS; developers deliver a GCC port, GDB port, Buildroot userland… | ||
| nothing matches | ||