From IP spoofing to GRE and VXLAN abuse, learn how attackers can quietly tunnel into your network and break your incident response trail.

In this BSides Vancouver Island 2025 talk, Shu‑Hao Tung walks through practical red team networking techniques that turn “just misconfigurations” in GRE, VXLAN, and routing protocols into reliable initial access and stealthy lateral movement paths. This session is ideal for red teamers, penetration testers, blue team defenders, network engineers, and tool builders working with on‑prem, hybrid, or cloud-connected environments. You’ll see how intranet IP spoofing can hide attacker paths from IR, how unencrypted stateless tunnels (GRE/VXLAN) and Internet exchanges can be abused for initial access, and how routing protocol issues (like OSPF on the wrong interfaces) can escalate to full domain compromise.

This session was recorded live at BSides Vancouver Island 2025 at the Victoria Conference Centre in Victoria, BC.

Subscribe to BSides Vancouver Island for more talks from local and global security practitioners, and to stay connected with the Vancouver Island security community. Join our Slack to stay up to date: https://communityinviter.com/apps/visrs/visrs. Watch more talks from the BSides Vancouver Island playlist to keep leveling up your defensive and offensive playbooks.

BSides Vancouver Island returns to the Victoria Conference Centre in Victoria, BC on Friday, September 25, 2026. Stay tuned for sponsorship, speaker, attendance, and volunteering opportunities.

Roberto Innocenti dell'associazione di volontari Power Progress Community il 14 Marzo 2025 ha presentato il percorso dall'ideazione alla realizzazione di prototipi di una scheda madre Open Hardware notebook e desktop basata CPU PowerPC,e progettata per GNU/Linux, il tutto con pochi mezzi.

Update: Mielu91m, the SAF mod author, is working on a fix.

Attempt to temporarily fix the "main menu bug" that stops SAF animations from working correctly. Using the "saf stop" command instead of a melee hit to stop animations.

Unfortunately, the "saf stop" command did not fix the "main menu bug".

Installation used: https://video.4d2.org/w/5aXBsXbEJGWLzVrvF9RtXF

Épisode 2 : Dépeindre la mort 💀​

Nous demandons

Précédemment : Diffusion d'une lettre canular dans les boites aux lettres d'Huez, dénonçant le mépris du maire face aux voix qui s'élèvent, pour une approche résiliente et démocratique de la montagne.

Erlang/OTP is an open source programming language designed for the development of concurrent and distributed systems. Created 40 years ago and open sourced in 1998, Erlang is used by Ericsson, Cisco, WhatsApp, Discord, and Klarna for mission critical applications as well as loved by a broad community of open source developers. With the advent of the Cyber Resilience Act (CRA), the Erlang/OTP team, jointly with the Erlang Ecosystem Foundation (EEF), began to prepare the project to meet CRA requirements.   In this presentation, Kiko will describe and dive into the various supply chain best practices implemented by the Erlang/OTP project: the creation of Source Software Bill-of-Materials (Source SBOMs), automated vulnerability scanning of dependencies using OSV, creation of OpenVEX statements, vulnerability handling in collaboration with the EEF as CNA, and contributions to towards other open source projects [[1],[2],[3]] to improve the security posture of the ecosystem. Moreover, Kiko will provide an insight into the lessons learned from implementing these measures in an open source project.

speakers: 'Kiko Fernandez-Reyes'

link: 'https://fosdem.org/2026/schedule/event/JFJV3R-story-of-the-erlang-journey-towards-cra-compliance/'

The Cyber Resilience Act (CRA) is reshaping expectations around open source software, introducing new requirements for security, traceability, and documentation. While maintainers are responsible for technical compliance, community managers play a critical but often overlooked role in helping projects adapt. This session is designed for community managers, project maintainers, stewards, and open source contributors interested in practical CRA readiness. The focus is on practical enablement by Community Managers, exploring how they can support compliance without assuming legal liability.

We'll show how Community Managers can: - Communicate CRA-relevant processes to contributors, downstream adopters, and vendors - Structure documentation, governance pages, and onboarding materials for clarity and discoverability - Protect newcomers from unnecessary compliance burden, keeping contribution welcoming and accessible - Support maintainers, triaging non-technical questions, coordinating workflows, and preventing burnout Facilitate cross-project collaboration, shared tooling, and evidence collection practices - Manage vulnerability communication to maintain trust and transparency

The objective is for attendees to leave with practical strategies, templates, and examples that make CRA compliance manageable while keeping open source communities healthy and contributor-friendly. This session is ideal for community managers, project stewards, maintainers, and anyone interested in the human side of CRA readiness in FOSS projects. Attendees will leave with key takeaways: - Understand CRA's indirect impact on community management and a checklist of how tos - Learn concrete ways to keep projects welcoming despite increased compliance expectations - Explore templates and workflow ideas that reduce friction for contributors and maintainers alike - See examples of cross-project coordination and documentation practices that support CRA readiness

This session emphasizes practical, community-driven solutions focusing on doing and not debating legal strategy making CRA compliance achievable and sustainable for FOSS communities.

speakers: 'Cynthia Lo

link: 'https://fosdem.org/2026/schedule/event/PAU8DZ-building_cra-ready_open_source_communities_the_critical_role_of_community_manage/'

Tracing complex systems often requires insights from both the kernel and userspace. While tools like Linux's ftrace excel at kernel-level observability and LTTng provides low-overhead userspace tracing, unifying these disparate data sources for a holistic view remains a challenge: using LTTng for kernel tracing requires an out-of-tree kernel module, which can be a barrier for many users.

This talk introduces bt2-ftrace-to-ctf - a new open-source project designed to bridge this gap. Our solution processes a trace.dat file from ftrace (kernel part) and a LTTng UST for userspace, then aligns and rewrites the trace in the Common Trace Format (CTF), as used by LTTng. The resulting output is directly consumable by tools like Trace Compass, enabling comprehensive, synchronized analysis of system behavior across all layers without the need for custom kernel modules.

The project consists of two key components:

In the talk, we will give an overview on the tool and discuss challenges during its implementation.

Project: https://github.com/siemens/bt2-ftrace-to-ctf (MIT, LGPL-2.1-or-later)

speakers: 'Felix Moessbauer'

link: 'https://fosdem.org/2026/schedule/event/WJSJZZ-bt2-ftrace-to-ctf/'

This panel brings together experts to discuss the practical realities of implementing the CRA steward role, as defined by the regulation, and how organisations are approaching its execution. Panelists will explore how the concept of CRA stewards is being interpreted, what responsibilities are emerging in practice, and the challenges organisations face in preparing for this new function. They will also highlight which elements remain unclear, what support or guidance is still needed, and how future work at the level of EC and broader ecosystem can help refine and operationalise the steward role effectively. The panel aims to offer concrete insights for organisations navigating this evolving responsibility.

speakers: 'Kate Stewart

link: 'https://fosdem.org/2026/schedule/event/FEJGDD-panel_from_minimum_compliance_to_meaningful_stewardship/'

The basic concept of Secure Boot is now well established (and widely used in Linux for nearly 15) years. Most people now decline to take ownership of their systems (by replacing the CA keys in the UEFI db variable) and instead pivot trust away from the UEFI variables to the MoK (Machine Owner Key) ones instead, which can be updated from the operating system. Thus if you want to secure boot your own kernel, you usually create a signing key and load that into MoK.

This talk will go quickly over the history, how you take ownership, what problems you encounter, how you create and install your own signing keys in MoK and how the kernel imports all these keys into the keyring system and uses them (verifying module signatures and IMA signed policy) including the differences betwen the machine and secondary_trusted keyrings. We'll also discuss some of the more recent innovations, like adding SBAT to the rather problematic UEFI revocation story and how it works.

speakers: 'James Bottomley'

link: 'https://fosdem.org/2026/schedule/event/XVLRTK-a_modern_look_at_secure_boot/'

A new RFC for Netfilter/nftables arrived recently in the netfilter-devel mailing list [1], introducing flexible math operation support for network packet fields. This could solve some migration problems from iptables to nftables and in addition empower other use-cases.

This demo will quickly show how it works with simple real-world scenarios.

[1] https://lore.kernel.org/netfilter-devel/[email protected]/

speakers: 'Fernando Fernandez Mancera'

link: 'https://fosdem.org/2026/schedule/event/QBDBLC-nft-math-expression/'