BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.romhack.io//romhack-camp-2026//speaker//F9CLXC
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-romhack-camp-2026-F9WCBL@cfp.romhack.io
DTSTART;TZID=CET:20261003T100000
DTEND;TZID=CET:20261003T104000
DESCRIPTION:Unlike mobile environments\, The Linux desktop paradigm wasn’
 t really designed with app-level security\, permissions and sandboxing in 
 mind. Despite this\, modern desktop environments try to shoehorn this in w
 ith systems such as Flatpak and desktop portals.\n\nWe went digging into G
 NOME ecosystem security\, investigating its core libraries (glib\, libsoup
 \, and gvfs) and sandboxing mechanisms (Flatpak\, bubblewrap\, dbus-proxy\
 , and desktop portals). During this journey into the GNOME world we uncove
 red numerous security issues\, resulting in more than 14 CVEs\, including 
 a full\, zero-precondition Flatpak sandbox escape.\n\nWe’ll take you alo
 ng our very same journey where you’ll discover how permissions and secur
 ity boundaries are enforced and rely on a web of libraries and tools\, som
 e of which seemingly unaware of their importance in the overall chain. Thi
 s way you’ll be able to see with your own eyes what issues arise in such
  a complex environment where a couple of small mistakes\, or colliding opi
 nions\, can lead to impactful vulnerabilities. We’ll also take a few det
 ours to show critical issues that we found in widely used open source prod
 uctivity software\, and how those vulnerabilities can have a severe impact
  also outside of the desktop paradigm.
DTSTAMP:20260921T191249Z
LOCATION:STAGE 1 (Section 9)
SUMMARY:GNOME and Beyond Dream Tour: Discover Linux desktop sandboxing and 
 more through its vulnerabilities - b0n0b0
URL:https://cfp.romhack.io/romhack-camp-2026/talk/F9WCBL/
END:VEVENT
END:VCALENDAR