[annonces] Talk reproductible builds - Chris Lamb (Debian Project Leader) - Mercredi 9/01 18h @ ISTIC

["Mathieu Goessens (Breizh-Entropy)" <>]

Bonjour,

En prélude du Festival Des Libertés Numériques (fdln.insa-rennes.fr),
l'ISTIC (istic.univ-rennes1.fr) et l'association Actux (actux.eu.org)
ont le plaisir de vous convier à une conférence *le mercredi 9 Janvier à
partir de 18h30 à l'ISTIC* au sujet des builds reproductibles, animée
par Chris Lamb, actuel Debian Project Leader :

You think you're not a target? A tale of three developers...
============================================================

If you develop or distribute software of any kind, you are
vulnerable to whole categories of attacks upon yourself or your
loved ones. This includes blackmail, extortion or "just" simple
malware injection…  By targeting software developers such as
yourself, malicious actors, including nefarious governments, can
infect and attack thousands — if not millions — of end users!

How can we avert this? The idea behind "reproducible" builds is to
allow verification that no flaws have been introduced during build
processes; this prevents against the installation of backdoor-
introducing malware on developers' machines, ensuring attempts at
extortion and other forms of subterfuge are quickly uncovered and
thus ultimately futile.

Through a story of three different developers, this talk will engage
you on this growing threat to you and how it affects everyone
involved in the production lifecycle of software development, as
well as how reproducible builds can help prevent against it.

Debian, openSUSE, Tails, Tor, Bitcoin, F-droid and coreboot/libreboot
are examples of projects that have adopted reproducible builds or are
pushing hard for their adoption.

About the speaker :
===================

Currently Project Leader of the Debian GNU/Linux project and a
member of Board of Directors for the Open Source Initiative,
Chris is a freelance computer programmer, author of dozens of
free-software projects and contributor to 100s of others.

He has been official Debian Developer since 2008 and is
currently highly active in the Reproducible Builds sub-project.
In his spare time he is an avid classical musician.

Informations pratiques :
========================

Rendez-vous le *mercredi 9 Janvier à partir de 18h30 à l'ISTIC*
(Université de Rennes 1 campus Beaulieu) – Amphi P - Bâtiment 12D
263, avenue du Général Leclerc, 35042 Rennes

Bus C4/C6(/40/41) ; arrêt "les préales" ou "Tournebride"
Plan : https://osm.org/go/eri2dpt3A-?m=&way=381248508

Gratuit ; accès dans la limite des places disponibles ; intervention en
anglais si vous ne l'aviez pas deviné ;-)

Cet événement vous est proposé en introduction du Festival Des Libertés
Numériques organisé par l'INSA, les Universités Rennes 1 & Rennes 2,
l'IMT Atlantique [...] et qui proposera, du 25/01 au 09/02, près de 50
événements autour des problématiques de vie privée, de sécurité en ligne
etc, à Rennes et autour. Plus d'informations sur le site du festival :
https://fdln.insa-rennes.fr

En espérant vous y voir nombreux-ses,
L'équipe organisatrice

-- 
Mathieu Goessens
Hackerspace Breizh-Entropy