BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-bristol-2026//speaker//V3EQTD
BEGIN:VTIMEZONE
TZID:Europe/London
BEGIN:DAYLIGHT
DTSTART:20250821T000000
TZNAME:BST
TZOFFSETFROM:+0100
TZOFFSETTO:+0100
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T020000
RDATE:20261025T020000
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T020000
RDATE:20270328T020000
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Who Can Become Root? An SRE Guide to Access Drift and Privilege Es
 calation - Viola Lykova
DTSTART;TZID=Europe/London:20260821T100000
DTEND;TZID=Europe/London:20260821T104000
DTSTAMP:20260812T225859Z
UID:pretalx-bsides-bristol-2026-AYWBEV@pretalx.com
DESCRIPTION:Privilege escalation is not always a dramatic exploit\, and in
  production systems it is often less about one clever trick than about a c
 hain of ordinary operational decisions that were each made for a sensible 
 reason\, at a stressful moment\, and without anyone stepping back later to
  ask what those decisions allowed when combined.\n\nThis blue-team SRE tal
 k asks a simple but uncomfortable question: who can become root?\n\nWe wil
 l look at how temporary access\, old service accounts\, broad deploy permi
 ssions\, and emergency exceptions can accumulate into hidden access paths 
 that make people\, processes\, pipelines\, or services more powerful than 
 intended. Through a local\, isolated demo\, we will follow one flawed acce
 ss path from a boring starting point to an uncomfortable ending\, then rev
 erse the story from the defender’s side to ask what evidence\, containme
 nt\, and guardrails would have exposed it earlier.\n\nAttendees will leave
  with a practical access-path review worksheet they can use to move beyond
  asking "who has admin?" and start asking the more useful question: "who c
 an become admin?"
LOCATION:Track 2
URL:https://pretalx.com/bsides-bristol-2026/talk/AYWBEV/
END:VEVENT
END:VCALENDAR