BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//talks.openalt.cz//openalt-2026//speaker//BADT8T
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-openalt-2026-3SZHPW@talks.openalt.cz
DTSTART;TZID=CET:20261108T153000
DTEND;TZID=CET:20261108T155500
DESCRIPTION:Security products are typically tested against a range of curre
 ntly known weaknesses and good design practices. While a dedicated evaluat
 ion laboratory (e.g.\, a FIPS 140 or CC lab) will typically perform the te
 sting with a high level of expertise and specialized equipment\, such test
 ing is typically done only once\, does not publicly disclose all testing d
 etails\, and is thus not independently replicable by the product end-user.
  Independent researchers offer vital alternative analysis\, but their resu
 lts are scattered across blogs and papers\, hard to discover\, and frequen
 tly vulnerable to censorship or removal.\n\nThis talk introduces the **[`s
 crutiny.cloud`](https://scrutiny.cloud)** project\, aimed at solving the f
 ollowing problems:\n\n1. **End-user verifiability** (knowing what was test
 ed\, how\, and ideally having the possibility to replicate it)\,\n2. **Dis
 coverability** (how to find relevant testing information produced by other
 s)\,\n3. **Censorship problem** (vendors refusing to disclose reported vul
 nerabilities)\,\n4. **Spam/trust problem** (inherently associated with per
 missionless systems)\, and\n5. **Data interpretation problem** (extracting
  actionable information from a diverse range of partial metadata data poin
 ts).\n\nThe idea is to use existing open analysis tools (some provided by 
 us\, but not limited to those) to produce signed metadata from testing\, t
 hen upload and share it via **[`scrutiny.cloud`](https://scrutiny.cloud)**
 \, a thin metadata overlay built atop the open **[nostr](https://github.co
 m/nostr-protocol/nostr)** protocol. The uploaded metadata can later be dis
 covered and interpreted by humans and/or LLMs. As all metadata blobs are s
 igned by their producers\, filtering input information to include only tru
 stworthy entities is already a native feature inherited from the **[nostr]
 (https://github.com/nostr-protocol/nostr)** protocol.
DTSTAMP:20261030T161243Z
LOCATION:A113
SUMMARY:scrutiny.cloud: Open\, transparent\, end-user verifiable and LLM-re
 ady security testing framework - Petr Svenda\, Ali Al-Sorehi
URL:https://talks.openalt.cz/openalt-2026/talk/3SZHPW/
END:VEVENT
END:VCALENDAR