BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-canberra-2025//talk//P9TEDX
BEGIN:VTIMEZONE
TZID:AEST
BEGIN:STANDARD
DTSTART:20000326T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3;UNTIL=20050326T170000Z
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:STANDARD
DTSTART:20060402T040000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060401T170000Z
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:STANDARD
DTSTART:20070325T040000
RRULE:FREQ=YEARLY;BYDAY=4SU;BYMONTH=3;UNTIL=20070324T170000Z
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:STANDARD
DTSTART:20080406T040000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000827T030000
RRULE:FREQ=YEARLY;BYDAY=4SU;BYMONTH=8;UNTIL=20000826T170000Z
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20011028T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20071027T170000Z
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20081005T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=10
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-canberra-2025-P9TEDX@pretalx.com
DTSTART;TZID=AEST:20250926T113000
DTEND;TZID=AEST:20250926T122500
DESCRIPTION:One from the vaults. In 2020\, Justin had a serendipitous encou
 nter with a dangling legacy AWS S3 bucket once owned by the Linux Vendor F
 irmware Service (LVFS). "What if I registered it\," he thought. "What's th
 e worst that could happen?" This is the story of how he wedged himself bet
 ween 100\,000 Linux machines and their firmware updates\, stumbled upon a 
 bypass in fwupd's PGP-based firmware update signature checking\, traced th
 e flaw back to its root cause\, and ultimately returned the bucket to its 
 original owner.
DTSTAMP:20260604T010034Z
LOCATION:Main Track
SUMMARY:"Well well well\, if it isn’t the consequences of my own actions"
  - the time I got in the middle of 100\,000 Linux machines and their fwupd
 /LVFS firmware updates 🙈 - Justin Steven
URL:https://pretalx.com/bsides-canberra-2025/talk/P9TEDX/
END:VEVENT
END:VCALENDAR
