"Well well well, if it isn’t the consequences of my own actions"
Justin Steven details "Well well well, if it isn’t the consequences of my own actions".
Summary
BSides Canberra 2025 talk by Justin Steven on a 2020 fwupd/LVFS security research incident. Registered a dangling legacy AWS S3 bucket used by Linux Vendor Firmware Service clients, combined with CVE-2020-10759 PGP signature-verification bypass in fwupd before 1.4.0 that could enable malicious firmware metadata delivery.
Related talks
CrikeyCon X·23 min
Security researchers examine technical aspects of Justin Steven - 2025 - Well well well, if it isn’t the consequences of my own actions.
BSides Lisbon·20 min
Luís Fontes
Luís Fontes examines [BSL2022] Are your github actions secure?.
CyberRisk TV·15 min
Neha Duggal
Neha Duggal analyzes Who Is Responsible for an AI Agent's Actions?.