Patricia Aas
where else to find them
website:https://patricia.no/
github:patricia-gallardo
bluesky:patigallardo.bsky.social
mastodon:@Patricia@social.vivaldi.net
linkedin:psmaas
what they talk about
all 14 in the filters
where they keep going back
- NDC TechTown6 editions2018–2023
- NDC Oslo4 editions2017–2025
- NDC Security Oslo2 editions2019–2020
all 12 in the filters
on a stage with
- Matt Butleronce
- Matt Milleronce
who talks about the same things
- Erlend Oftedal12 talks
- Aaron Bedra14 talks
- Sarah Allen19 talks
- Duffie Cooley18 talks
- Feross Aboukhadijeh22 talks
- Julia Evans14 talks
| title | conference | date |
|---|---|---|
| The fundamental misunderstanding in Team Topologies | NDC Oslo 2025 | 2025-05-19 |
Argues Team Topologies is wrongheaded: it tries to force microservices by reorganizing and deliberately limiting communication, citing a misread Conway's law… | ||
| Return Oriented Programming, an introduction | NDC TechTown 2023 | 2023-09-18 |
Explains how to get code execution on non-executable stacks by converting C shellcode into inline assembly then into a ROP chain, using 32-bit addresses to… | ||
| Return Oriented Programming, an introduction | NDC Security 2023 | 2023-01-16 |
Shows a working 32‑bit x86 exploit that builds shellcode for execve /bin/sh by implementing close, open and execve via syscall numbers in eax and int 0x80… | ||
| The floor is lava, trying to teach C++ | Meeting C++ 2022 | 2022-11-17 |
Two two‑day courses teach programmers from other languages a minimal, modern C++ workflow by building a small game that runs without no new or delete and… | ||
| The Floor is Lava, trying to teach C++ | NDC TechTown 2022 | 2022-08-29 |
A curriculum emerges from crowdsourced data: 40+ C++ features get classified by Twitter polls and visualized with reveal.js bubbles, showing most… | ||
| Classic Vulnerabilities | NDC Security 2022 | 2022-04-06 |
A 2000-era unlink heap exploit (Solar Designer) is reproduced against Chocolate Doom: crafted heap metadata corruption creates a write-what-where when freed, a… | ||
| Classic Vulnerabilities | ACCU 2022 | 2022-04-06 |
Examines decades-old, concrete exploits: an unlink heap primitive is reproduced against Chocolate Doom and a proof-of-concept merged to Chocolate Doom as a… | ||
| Introduction to memory exploitation | Meeting C++ 2021 | 2021-11-10 |
Claims that heap exploitation stays relevant and practical get demonstrated: coverage-guided fuzzing combined with AddressSanitizer reliably turns latent… | ||
| Dependency Management in C++ | NDC TechTown 2021 | 2021-08-30 |
Tests four C++ dependency approaches — conan, vcpkg, CPM, and plain fetch_content — by building a small cross‑platform demo (SFML window, fmt logging, Catch2… | ||
| Trying to build an Open Source browser in 2020 | NDC TechTown 2020 | 2020-08-31 |
Claim: a usable desktop browser is possible in 2020 with one developer and no budget by stitching OSS together. It uses Qt QML UI, Qt WebEngine (Chromium 80)… | ||
| Introduction to Election Security | NDC Security Oslo 2020 | 2020-01-22 |
Norway moves from un-audited machine-only counting to a manual preliminary count (used in two national elections) and a legal reframing of elections as… | ||
| Elections: Trust and Critical Infrastructure | NDC TechTown 2019 | 2019-09-02 |
Norway now requires a manual preliminary count of paper ballots and treats voting systems as national security under the new law, yet no national process… | ||
| The Anatomy of an Exploit | NDC TechTown 2019 | 2019-09-02 |
A step-by-step exploit walkthrough shows a vulnerable C program that reads with gets-based vuln and how overwriting a stack buffer changes local variables and… | ||
| Trying to learn C# | NDC Oslo 2019 | 2019-06-17 |
Learns C# by rewriting an app already known, sets up a Linux dev stack (Mono / .NET Core), reads docs and watches videos but relies on iterative coding and… | ||
| The Anatomy of an Exploit | ACCU 2019 | 2019-04-10 |
Walks through a real C/x86_64 exploit: a deliberately vulnerable program using gets buffer overflow is compiled, debugged with gdb and objdump, and repeatedly… | ||
| Linux Security APIs and the Chromium Sandbox | NDC Security Oslo 2019 | 2019-04-04 |
Chromium’s multiprocess layout is mapped to concrete Linux primitives: the browser forks/clones child processes and uses clone + user/pid/net namespaces to… | ||
| DevSecOps for Developers: How To Start | NDC Security Oslo 2019 | 2019-04-04 |
Claims that building security into DevOps improves both delivery and security (citation: Accelerate) and gives pragmatic steps for a lone security person… | ||
| Reading other peoples code | NDC Copenhagen 2019 | 2019-03-27 |
Starts by cloning the repo, putting it in git, building and running tests to get a debugger and logs, then uses grep for strings and set breakpoint on onclick… | ||
| Lightning Talk: C++ Is Like JavaScript | C++ on Sea 2019 | 2019-02-04 |
Argues that modern C++ reproduces JavaScript patterns by combining std::any for dynamic values, std::function for first-class behavior, and a tiny… | ||
| Reading other peoples code | NDC London 2019 | 2019-01-30 |
She gives a concrete, iterative plan for tackling huge codebases (Vivaldi + Chromium cited as ~600,000 files): start by cloning, building and running tests… | ||
| Isolating GPU access in its own process | NDC TechTown 2018 | 2018-09-27 |
Chromium moves all GPU calls into a separate GPU process and uses IPC over shared memory with a command buffer ring and IPC channels to serialize GLES2 calls… | ||
| Linux Security APIs and the Chromium Sandbox | NDC TechTown 2018 | 2018-09-27 |
Chromium builds its Linux sandbox by forking/cloning a single browser binary into a small set of processes (browser, zygote/zygote child, GPU, and one renderer… | ||
| Make It Fixable: Preparing for Security Vulnerability Reports | CppCon 2018 | 2018-09-23 |
Companies must provide a clear contact channel for vulnerability reports and plan to actually deliver fixes: build systems, signing, and a reliable auto-update… | ||
| Software Security | CppCon 2018 | 2018-09-23 |
Panelists argue that C++ remains powerful but not safe by default, and most real fixes are procedural: set up a security hotline, use continuous deployment and… | ||
| Reading other peoples code | NDC Sydney 2018 | 2018-09-17 |
Covers ten concrete techniques for understanding huge codebases (she mentions Chromium ~600k files and Vivaldi) and gives actionable steps: get the repo… | ||
| Secure Programming Practices in C++ | NDC Oslo 2018 | 2018-06-11 |
C++ has a smaller, safer subset to prefer and the talk shows concrete failure modes and fixes: the optimizer can remove credentials from memory (the… | ||
| Deconstructing Privilege | NDC Oslo 2018 | 2018-06-11 |
Privilege means being spared a specific hardship and can be an invisible advantage; the useful goal is to move from obliviousness to Conscious Incompetence so… | ||
| Isolating GPU access in its own process | foss-north 2018 | 2018-04-23 |
Chromium moves all GPU access into a separate process and implements an IPC-heavy client‑server system that serializes GL calls into a shared command buffer… | ||
| Make It Fixable | NDC London 2018 | 2018-01-15 |
Claims that perfect security is impossible illustrated by Meltdown/Spectre and left-pad; practical defenses focus on being able to ship fixes and on having a… | ||
| Linux Security and How Web Browser Sandboxes Really Work | NDC Oslo 2017 | 2017-06-14 |
Explains how Chromium-based browsers build a Linux sandbox by combining user+PID+net namespaces with capability dropping so renderer processes think they are… | ||
| nothing matches | ||