Achievements

Pablo under a tree

Contributions

Here is a “living” list, certainly not exhaustive, of the contributions and interactions born from these moments of exchanges during our conferences.

2024:
- code - Quentin JEROME, during his talk about Kunaï, has received a feature request about logs rotation. He announced, only 15 days after, that this feature has been implemented!
- code - Quentin implemented a second proposal done during the event, by @regiteric this time, about Community ID - Congrats Quentin 👏 and thanks for the notifications 🙏
- code - Yves Rutschle, after attending #pts22 Mickaël Salaün’s talk about Landlock, has added Landlock support to his project sslh in version 2.1.0. Thanks Yves and congrats for this implementation!
2023:
- idea/code - Alexandre Dulaunoy from CIRCL, decided to add OpenWRT images to CIRCL’s Hashlookup service and Free Software according to a suggestion given by Eloïse Brocas during the Q/A session of the Hashlookup talk.
2022:
- code - Eric Leblond, after attending #pts22 Mickaël Salaün’s talk about Landlock, has added Landlock support to the Suricata code base. Thanks Eric for the code (+ merge requests) and for sharing the information!
- speaker comeback - After starting their speaker journey (~) in our conference respectively during #RMLLSec2016 and #RMLLSec2017, Ivan Kwiatkowski came this year to deliver a brilliant Keynote and Romain Thomas to show us the huge progress of the LIEF capabilities, his security FLOSS project started 5 years earlier. We couldn’t be prouder than to see these two young yet so experienced security researchers return to the scene of their debut. Hats off!
- IRL conference speaker debut - On the starter side, we are very pleased to have hosted the first IRL Security conference talk given by Claire Vacherot, Pierre Milioni and Hugo Vincent. Respectively for: Building on top of Scapy, Dissecting NTLM EPA & building a MitM proxy and Finding Java deserialization gadgets with CodeQL!
2019:
- code - After attending Snyff (from Pentestlab) talk about JWT security during #PTS19, Clément Oudot fixed an issue about “None” algorithm verification in JWT in LemonLDAP::NG, the WebSSO product of which he is the lead developer :)
2018:
- code - After putting RetDec developers and Radare2 devs in touch during 2018 edition of Pass the SALT, RetDec developers demontrates at r2con 2019 initial RetDec integration into Radare2.
2017:
- code - Use of the Lief library in MISP by Raphaël Vinot (developer of the MISP project at CIRCL.LU among other things) after attending the Lief talk by Romain Thomas (Quarkslab) during the Security track.
- sharing - Peter Czanik will try to use Syslog-NG and MISP together after a discussion with Raphaël Vinot during the speakers’ dinner.
2016:
- sharing - Let’s Encrypt through J.C. Jones provides the information that they use Qubes as the secure platform to do all ops on Let’s encrypt PKI. Great use case for a great product.
2015:
- code - Paul Kocialkowski, developer of Replicant (Android full free) and embedded theme speaker, attended on Monday Lunar conference on reproducible builds in the Security track. On Wednesday, he started the development of the reproducible build support for the Replicant boot loader with the help of Lunar! Or how an initiative presented in the Security track can impact the Embedded area.
2014:
- articles / presentations - encounter between Ange Albertini (reverser, jedi of file formats) and Philippe Teuwen (co Security track chairman). This gave a lot of work in common and exchanges in particular through the journal PoC or GTFO (The International Journal of Proof-of-Concept or Get The Fuck Out).
2013:
- code - Clément Oudot’s contribution on LemonLDAP-NG implementing the support of Mozilla Persona / BrowserID following a presentation by François Marier (Mozilla) on Persona
- code - development of a new feature in Syslog-NG following the presentation of Xavier Mertens on the investigation through notably logs.
2012:
- code - development of a Nmap script by Henri Doreau to verify the existence of the vulnerability presented this year by Eric Leblond on Checkpoint and Netfilter firewalls. Henri also presented this year in the Security track and met Eric on this occasion.
2011:
- presentation - first meeting IRL between Eric Leblond, Netfilter and Suricata developer, and Paul Rascagnères, reverser and threat analyst, who then gave in 2014 a talk together at hack.lu conference.

Speakers

Feedback from speakers

aaron

Speakers who came

You will find below some of the speakers who came to Pass the SALT or/and to the RMLL Security tracks year after year. Note that it is not a comprehensive list of the speakers who came to PTS and RMLL Sec tracks, just a short list of them. The talks are not exhaustive neither, just given as examples of talks given by these speakers.

Thank so much for the trust from all of them (listed or not)!

All talks are available on:
- our archives web site: all slides and raw video files for both Pass the SALT and RMLL Security tracks,
- our Ubicast video portal: Pass the SALT talks videos only, powered by a full featured video player.