{"$schema": "https://c3voc.de/schedule/schema.json", "generator": {"name": "pretalx", "version": "2026.1.2"}, "schedule": {"url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/schedule/", "version": "0.3", "base_url": "https://cfp.nluug.nl", "conference": {"acronym": "nluug-voorjaarsconferentie-2026", "title": "NLUUG Spring Conference 2026", "start": "2026-05-07", "end": "2026-05-07", "daysCount": 1, "timeslot_duration": "00:05", "time_zone_name": "Europe/Amsterdam", "colors": {"primary": "#1b998b"}, "rooms": [{"name": "Room 1", "slug": "18-room-1", "guid": "baee871f-7067-5723-8dd5-e423f1759410", "description": null, "capacity": null}, {"name": "Room 2", "slug": "19-room-2", "guid": "47ae1da6-6edb-5ce1-9648-bb7fe3f5c303", "description": null, "capacity": null}, {"name": "Room 3", "slug": "20-room-3", "guid": "3590bbc2-f883-5b92-8036-151f08b2aca9", "description": null, "capacity": null}], "tracks": [], "days": [{"index": 1, "date": "2026-05-07", "day_start": "2026-05-07T04:00:00+02:00", "day_end": "2026-05-08T03:59:00+02:00", "rooms": {"Room 1": [{"guid": "620a8c99-f153-5fa4-aae7-3387f5f8c281", "code": "QXWNBE", "id": 178, "logo": null, "date": "2026-05-07T09:00:00+02:00", "start": "09:00", "duration": "00:45", "room": "Room 1", "slug": "nluug-voorjaarsconferentie-2026-178-getting-started-with-ci-cd-using-forgejo-actions-and-why-this-is-important-af", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/QXWNBE/", "title": "Getting started with CI/CD using Forgejo Actions and why this is important AF", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Continuous Integration and Continuous Delivery (CI/CD) have become essential practices for modern software development\u2014but many teams still rely on centralized, proprietary platforms like GitHub or GitLab for all their build automation. In this talk, we introduce Forgejo Actions, a powerful, self-hostable CI/CD solution that is largely compatible with GitHub Actions. This makes it incredibly easy for beginners and experienced developers alike to get started with automated testing and delivery pipelines\u2014without surrendering control of their code or infrastructure.\r\n\r\nWe will walk through the core concepts of Forgejo CI/CD: the Forgejo server, the Docker-powered runners, workflow files, and practical examples to get newcomers up and running. In the second half, we zoom out and explain why this matters \"AF\": digital autonomy, reducing vendor lock-in, and avoiding dependency on increasingly centralized platforms. Migrating from GitHub Actions to Forgejo Actions is often surprisingly painless, giving developers the freedom to host their own pipelines while still syncing code to major platforms when needed.\r\n\r\nFinally, we'll explore how Forgejo connects to the broader ecosystem\u2014most notably Codeberg, the fast-growing European non-profit hosting platform with 200,000+ repositories and over 1,200 paying members (membership \u20ac24/year; \u20ac12 discounted). Together, Forgejo and Codeberg demonstrate that modern CI/CD doesn\u2019t need to depend on Big Tech.\r\n\r\nAttendees will walk away with a clear understanding of how to start implementing Forgejo-based CI/CD workflows today\u2014and why doing so is strategically vital for long-term developer independence.\r\n\r\nLinks:\r\n-  Forgejo: https://forgejo.org\r\n- Codeberg: https://codeberg.org\r\n- Codeberg e.V.: https://codeberg.org/Codeberg/org\r\n- Forgejo Actions docs: https://forgejo.org/docs/latest/admin/actions/\r\n- Submitter\u2019s involvement (LibrePlan CI/CD work): \r\n-- https://github.com/LibrePlan/libreplan\r\n-- https://www.libreplan.dev/", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "ZTZPGG", "name": "Jeroen Baten", "avatar": "https://cfp.nluug.nl/media/avatars/jeroen-baten-200x200_FVVvPXv.png", "biography": "Jeroen Baten is an open-source developer and IT coach with 25+ years of experience in Linux, CI/CD, and web application development. He contributes to the LibrePlan project, where he recently migrated all GitHub-based workflows to Forgejo Actions. He helps organizations adopt open-source tooling and build digitally autonomous development infrastructures.", "public_name": "Jeroen Baten", "guid": "c8456b36-63ad-5c87-a41f-28653563c929", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/ZTZPGG/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/QXWNBE/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/QXWNBE/", "attachments": [{"title": "Slidedeck in PDF format", "url": "/media/nluug-voorjaarsconferentie-2026/submissions/QXWNBE/resources/NLU_voSzxt9.pdf", "type": "related"}]}, {"guid": "08b0bdd2-9dca-52f9-9399-8f2231998d9f", "code": "YXXE8K", "id": 173, "logo": null, "date": "2026-05-07T09:50:00+02:00", "start": "09:50", "duration": "00:45", "room": "Room 1", "slug": "nluug-voorjaarsconferentie-2026-173-openkat-a-living-digital-twin-that-you-can-query-over-time", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/YXXE8K/", "title": "OpenKAT, a living digital twin that you can query over time.", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "OpenKAT is seen by many as 'just another scanner', and while that is 'also' true, its architecture and goals allow us to do things not many other tools allow users to do. In this talk, we'll explain how our scanning cycle works (and why that isn't the magic sauce), but more importantly how that feeds into the bitemporal normalized database on which all reporting, querying and deduction is build.\r\nWe'll show why OpenKAT gives you the ability to collect and maintain a digital twin of your infra, and how and why being able to proof the quality of that data fits into the upcoming legislative and  compliance frameworks.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "UPEQF8", "name": "failbaitr", "avatar": null, "biography": null, "public_name": "failbaitr", "guid": "be275809-4c58-55b8-bb9f-ff56ac131dab", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/UPEQF8/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/YXXE8K/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/YXXE8K/", "attachments": []}, {"guid": "ba06c0ee-fb09-5f9b-8fe2-30d72bc1e0f6", "code": "MDTH3S", "id": 195, "logo": null, "date": "2026-05-07T12:00:00+02:00", "start": "12:00", "duration": "00:45", "room": "Room 1", "slug": "nluug-voorjaarsconferentie-2026-195-what-could-possibly-go-wrong-applying-the-hacker-mindset-to-kubernetes-and-genai", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/MDTH3S/", "title": "What could *possibly* go wrong? Applying the Hacker Mindset to Kubernetes and GenAI.", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "What do vulnerabilities in Kubernetes and GenAI have in common? And why is Jinja2 the problem? Together, we dive into the technical details of the Ingress Nightmare vulnerability and GenAI prompt injection. We discover the patterns that lead to those problems and discuss the lessons we learn to better secure our own systems.\r\n\r\nWhether you write code, automate infrastructure, design architectures, implement GenAI in your products or manage people who do this for you, this presentation will give you much to think about. You will start looking at your own systems and organisation with the Hacker Mindset. You will find yourself saying \"What could possibly go wrong?\" a lot!\r\n\r\nAll subjects are presented with full technical details to really understand and appreciate what is going on, with clear high-level explanations for people who do not live on the command line every day.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "A87YAA", "name": "Frank van Vliet", "avatar": "https://cfp.nluug.nl/media/avatars/A87YAA_8rMImGL.jpg", "biography": "Frank van Vliet has more than 20 years of hands-on experience in cybersecurity and is known as one of the best ethical hackers in the Netherlands. Frank started his impressive cybersecurity career as a security penetration tester and software auditor.\r\n\r\nFrank co-founded Certified Secure in 2007 and is currently the Chief Technology Officer (CTO), overseeing all Certified Secure trainings. Frank\u2019s famous slogan \u201cWhat could possibly go wrong\u201d, has kick-started the Hacker Mindset of thousands of trainees world-wide. If you are hiring senior engineers, chances are they have been trained by Frank.", "public_name": "Frank van Vliet", "guid": "06a638d9-0e04-569a-8338-8908652f6976", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/A87YAA/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/MDTH3S/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/MDTH3S/", "attachments": []}, {"guid": "bc373409-7eb5-5763-9b50-7f62c740764e", "code": "RRQUMG", "id": 188, "logo": null, "date": "2026-05-07T12:50:00+02:00", "start": "12:50", "duration": "00:45", "room": "Room 1", "slug": "nluug-voorjaarsconferentie-2026-188-linux-tpm2-praktische-toepassingen", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/RRQUMG/", "title": "Linux & TPM2 - praktische toepassingen", "subtitle": "", "track": null, "type": "Talk", "language": "nl", "abstract": "Op veel moderne servers, desktop pc's, laptops maar ook virtuele (cloud) servers is tegenwoordig een tpm2 device aanwezig.  Tpm is een internationale standaard voor een crypto processor, ontworpen om hardware te beveiligen door middel van ge\u00efntegreerde cryptografische sleutels en om cryptografische sleutels op een veilige plek op te slaan.\r\nHoewel de aandacht voor dit *\"Trusted Platform Module\"* is vergroot door de introductie van Windows 11, bestaat tpm al sinds 2003 (!) en wordt als standaard onderhouden door de Trusted Computing Group. Tpm is (dus) ook beschikbaar voor Linux en biedt interessante opties voor een veiliger gebruik van cryptografische sleutels of vertrouwelijke gegevens zoals bijvoorbeeld wachtwoorden.\r\nIn een wereld van toenemende *cyber dreigingen* zal worden toegelicht hoe tpm kan helpen om risico's te verminderen. Besproken zal worden:\r\n\r\n- wat is tpm...\r\n- ...en wat is het vooral *niet*\r\n- tpm devices\r\n- tpm en random number generator\r\n- tpm en opslag cryptografische gegevens zoals bijvoorbeeld OpenSSL sleutels\r\n- linux en tpm: beschikbare software en tools\r\n\r\nIn een *live demo* worden een aantal praktische toepassingen getoond waarin gebruik wordt gemaakt van tpm2:\r\n- Opslag (OpenSSL) sleutels\r\n- Veiliger opslag SSH priv\u00e9 sleutels\r\n- Veiliger opslag Wireguard VPN sleutels m.b.v. *systemd credentials* en tpm\r\n- Veiliger opslag applicatie configuraties (wachtwoorden!) m.b.v. *systemd credentials* en tpm\r\n- Verbeteren entropy voor betere cryptografische sleutels", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "WD3YDV", "name": "Winfried de Heiden", "avatar": "https://cfp.nluug.nl/media/avatars/WD3YDV_TtbBHFt.JPG", "biography": "Als Linux/Open Source consultant en trainer bij AT Computing heb ik een bijzondere belangstelling voor Linux, Open Source en Security. Behalve het geven van een security awareness trainigen richt ik mijn aandacht graag op de technische beveiliging van Linuxsystemen zoals bijvoorbeeld implementatie van CIS Level II, Identity Management of aanscherping van privileged access management.\r\n\r\nIn mijn dagelijkse praktijk als Linux consultant zie ik helaas maar al te vaak hoe *secrets* zoals priv\u00e9sleutels of wachtwoorden uit Linuxsystemen en -applicaties ontfutselt kunnen worden. Met behulp van TPM en standaard Linux tools (!) kan diefstal echter zinloos worden gemaakt omdat de gestolen *secrets* op andere computers onbruikbaar zijn. \r\n\r\nMet ruim 25 jaar Unix en Linux ervaring in grote organisaties wil ik deze kennis graag delen op de NLUUG conferentie!", "public_name": "Winfried de Heiden", "guid": "07b937fc-c56d-5afa-aec2-8fb99b4e4daa", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/WD3YDV/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/RRQUMG/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/RRQUMG/", "attachments": []}, {"guid": "f59d9e31-5a5b-5acb-a19b-73648ed5595b", "code": "RJAHMT", "id": 177, "logo": null, "date": "2026-05-07T14:00:00+02:00", "start": "14:00", "duration": "00:45", "room": "Room 1", "slug": "nluug-voorjaarsconferentie-2026-177-suricata-10-years-later", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/RJAHMT/", "title": "Suricata: 10 years later", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "In 2015 Victor Julien presented Suricata at NLUUG. A lot has happened since then, both in the project and in the world.\r\n\r\nSuricata is a widely used open source (GPLv2) network security engine, mostly used as an IDS and IPS.\r\n\r\nThis talk go over the improvements in Suricata in the last 10 years and how network security remains critically important. It will cover new deployment and integration methods for Suricata like the firewall mode and the Suricata as a library effort. \r\n\r\nThe talk will also go into the challenges of running a Open Source project in an independent organization (OISF) and hopes to have some feedback on the future of open source projects like Suricata in a world that is getting more complex.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "BFVEQP", "name": "Victor Julien", "avatar": "https://cfp.nluug.nl/media/avatars/BFVEQP_NCZc5yV.jpg", "biography": "Victor Julien is a Dutch developer who has been developing open source security software for over 20 years. As the original creator and current lead developer of Suricata he has been doing Open Source development professionally for over 15 years. For OISF Victor is leading an international development team and frequently speaks about Suricata at conferences including Suricata's own annual conference Suricon.\r\n\r\nVictor is living and working in Amsterdam, the Netherlands.", "public_name": "Victor Julien", "guid": "c7069cd5-b115-59d6-92c9-46ec0ab98d57", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/BFVEQP/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/RJAHMT/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/RJAHMT/", "attachments": []}], "Room 2": [{"guid": "8a890d61-b9ba-5c80-a8c4-4eec6fb34524", "code": "QMRQVR", "id": 181, "logo": null, "date": "2026-05-07T07:30:00+02:00", "start": "07:30", "duration": "01:00", "room": "Room 2", "slug": "nluug-voorjaarsconferentie-2026-181-outside-in-guide-to-engaging-with-public-policy", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/QMRQVR/", "title": "Outside In Guide to Engaging with Public Policy", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Our modern way of life depends on open source more than ever before. Public policy is tasked with establishing protections that support just these types of ecosystems. Yet these two key groups lack a common venue and understanding to ensure they are both successful. As governments worldwide draft rules affecting the world around us, the responsibility falls to all of us to bridge that gap or accept that the negative consequences of decisions made without benefit of high-trust dialogs. \r\n\r\nThis session provides practical frameworks for effective policy engagement, tailored to technical community members. You\u2019ll better understand policymaker motivations and hear examples of using standards versus dynamic mechanisms like reference implementations and transparency may serve better. Drawing on examples from collaboration with NCSC-NL and working on precursor standards to ETSI 303 645, Beau will discuss collaboration in context of European cyber policy like the latest Network and Information Security Directive (NIS2) and the Cyber Resilience Act (CRA). Open source proved that radical collaboration can build the internet; now we need to prove we can translate that model to shape the policies that govern it.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "WBCNFK", "name": "Beau Woods", "avatar": "https://cfp.nluug.nl/media/avatars/WBCNFK_dp826Ne.jpeg", "biography": "Curious Troublemaker. Occasionally useful. Persistent tinkerer turned boundary spanner, uniting the hacker community with public policymakers and safety-critical industries. Helped stand up I Am The Cavalry, Hackers on the Hill, ICS Village, Aerospace Village, Biohacking Village: Device Lab, and Policy @ DEF CON. Has advised Congress, the White House, and governments around the world (and yes, they actually listened sometimes).", "public_name": "Beau Woods", "guid": "0c981a29-6111-556d-b8ef-045cc5c7b8af", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/WBCNFK/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/QMRQVR/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/QMRQVR/", "attachments": []}, {"guid": "a499b256-604f-59a8-8a5b-6378fcb1076d", "code": "MEMRTY", "id": 196, "logo": null, "date": "2026-05-07T09:00:00+02:00", "start": "09:00", "duration": "00:45", "room": "Room 2", "slug": "nluug-voorjaarsconferentie-2026-196-postmarketos-freeing-yourself-from-big-tech-with-a-proper-linux-distribution-doing-it-the-right-way", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/MEMRTY/", "title": "postmarketOS, freeing yourself from big tech with a proper Linux distribution doing it \"the right way\"", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Phones are all around us. They're not just there to call your friends and family with anymore, but dominate our lives and they are the main way most people on this planet access the world wide web. However, currently that \"gateway to the internet\" is controlled by 2 American big tech companies: Google and Apple. Especially nowadays it shouldn't need explaining how that's a bad thing.\r\nEnter *postmarketOS*, a Linux distribution \"doing it the right way\". We're not controlled by a company, we do not force proprietary and internet connected services or even an online account at all upon the user and we actively try to work against the giant amount of e-waste that the current phone landscape is producing. We do this by using \"regular\" Linux with tools and UI's you already know and love from the desktop and porting phones away from their outdated kernels and proprietary drivers to the *mainline* Linux kernel and FOSS drivers like Mesa.\r\n\r\nThis talk will introduce the OS and show how far we've gotten in the almost 10 years it exists now, and the goals we're currently working towards.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "G7KNDH", "name": "Bart Ribbers", "avatar": "https://cfp.nluug.nl/media/avatars/G7KNDH_SMJYlwx.jpg", "biography": "Bart is a Flutter software developer in his daily life and a core team member of postmarketOS and package maintainer for Alpine Linux. He is interested in anything Linux desktop and phone related and is active in the KDE community. He maintains the KDE stack, including Plasma Desktop and Mobile, for both postmarketOS and Alpine Linux and likes talking about this with a lot of passion. He can often be found at events like FOSDEM and KDE's Akademy.", "public_name": "Bart Ribbers", "guid": "9f78577d-653f-5854-be84-218c78422570", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/G7KNDH/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/MEMRTY/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/MEMRTY/", "attachments": []}, {"guid": "d14eb45e-8fea-5c66-814a-5c217f9d1767", "code": "VUEEXQ", "id": 172, "logo": null, "date": "2026-05-07T09:50:00+02:00", "start": "09:50", "duration": "00:45", "room": "Room 2", "slug": "nluug-voorjaarsconferentie-2026-172-digital-sovereignty-in-action-migrating-virtual-servers-without-a-vendor-lock-in", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/VUEEXQ/", "title": "Digital Sovereignty in Action: Migrating Virtual Servers Without a Vendor Lock-In", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Digital sovereignty is commonly discussed in political or economic terms. This presentation treats it as a technical and architectural challenge that emerges from concrete implementation choices.\r\n\r\nThrough a case study, migrating virtual machines between a single cloud provider, we show how portability constraints (boot firmware, licenses and export restrictions),  arise even within a single  seemingly homogeneous environment, and how these constraints can lead to a vendor lock-in.\r\n\r\nBuilding on this foundational work, we extended the OS migration platform to include multiple cloud providers. The focus is on enabling seamless migration and orchestration between providers while respecting your local compliance, performance, and sovereignty requirements.\r\n\r\nBy installing our existing open source migration platform on your server, you can migrate your server away from US hyperscalers by a single submit-click today.     \r\n\r\nOn our roadmap for this project we create a selection tool, to select the best cloud provider. We highlight the key metrics and trade-offs that must guide platform selection. We are using the methods from the academic world (MultiCriteria-Desicion Making, MCDM) to indentity importance of: interoperability, energy efficiency, legal jurisdiction, costs, and operational complexity. Our analysis identifies patterns that allow organizations to make informed, scalable choices rather than relying on vendor defaults.\r\n\r\nThe presentation concludes with a forward-looking view: a practical framework for designing a multi-provider, open-source-ready VM strategy. This approach helps European organizations retain flexibility, reduce hidden lock-ins, and align cloud choices with strategic and ethical objectives.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "Y9DNF3", "name": "Mike Krom (DigitalNomadSky)", "avatar": "https://cfp.nluug.nl/media/avatars/Y9DNF3_rxXK6Wt.png", "biography": "Architect for SME-businesses to automate processes. Currently involved with AI projects to automate the production of doorframes, record keeping of governmental debt-consultants, and automated Energy-label creation.", "public_name": "Mike Krom (DigitalNomadSky)", "guid": "6b482bbf-c0c6-5e20-b947-ed2341bdac65", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/Y9DNF3/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/VUEEXQ/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/VUEEXQ/", "attachments": []}, {"guid": "034a056f-a13b-5274-a6b8-52fc4573974f", "code": "SEEHMQ", "id": 183, "logo": null, "date": "2026-05-07T12:00:00+02:00", "start": "12:00", "duration": "00:45", "room": "Room 2", "slug": "nluug-voorjaarsconferentie-2026-183-platform-en-leveranciers-onafhankelijke-cloud-met-haven", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/SEEHMQ/", "title": "Platform- en leveranciers onafhankelijke Cloud met Haven", "subtitle": "", "track": null, "type": "Talk", "language": "nl", "abstract": "Een bevlogen verhaal over de praktijk van ecosysteem gestuurd samenwerken aan Haven waarbij we de kracht van digitalisering inzetten voor het maatschappelijk belang. Haven is een open oplossing voor platform- en leveranciersonafhankelijke Cloud diensten. Haven is een speerpunt in de nationale digitale strategie en een bouwsteen in het overheid brede programma Generieke Digitale Infrastructuur. Haven biedt uniforme inrichting van Cloud technologie en biedt organisaties een toepasbaar exit plan.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "CCSXCG", "name": "Jacco Brouwer", "avatar": "https://cfp.nluug.nl/media/avatars/CCSXCG_BFoceOp.png", "biography": "Jacco Brouwer is werkzaam voor de Vereniging Nederlandse Gemeenten als beleidsco\u00f6rdinator Cloud en Digitalisering, lid van het NDS Aanjaagteam op Cloud en de programmeringstafel Infrastructuur van het programma pGDI. Jacco tevens initiatiefnemer van de publieke Incubator GROEI waarmee VNG gemeentelijke samenwerking en innovatie vanuit een startup filosofie begeleiden bij de opschaling naar breed en collectief gebruik onder gemeenten en collega overheden.", "public_name": "Jacco Brouwer", "guid": "9d8be2c2-2ffa-587a-80c6-a1a5650bd5a0", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/CCSXCG/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/SEEHMQ/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/SEEHMQ/", "attachments": []}, {"guid": "516caf83-820d-5a8c-bac9-08df68250207", "code": "KSBJZM", "id": 186, "logo": null, "date": "2026-05-07T12:50:00+02:00", "start": "12:50", "duration": "00:45", "room": "Room 2", "slug": "nluug-voorjaarsconferentie-2026-186-building-a-data-lakehouse-in-the-european-cloud", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/KSBJZM/", "title": "Building a data lakehouse in the European cloud", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "It's 2026 and all of a sudden your regular solution to build a data pipeline in Azure or AWS seems to have gone out of favour pretty fast. We want to store our data outside of the reach of the next autocrat.\r\nBut what are the alternatives? In this session we'll discuss how you can build a data lakehouse in the European cloud. And we want more: we want PySpark, notebooks and data visualization. Is that all possible?\r\n\r\nFor this data lakehouse solution we start with Kubernetes and object storage. You'll be surprised how many European cloud providers offer these products. Now we'll use Nessie as catalog and Trino as query engine. With Iceberg, our open table format, we can already create our first table.\r\n\r\nNext we'll run Jupyter Hub for shared notebooks. And now we can cooperate on writing PySpark code. \r\nGreat, but can we still use (local) PowerBI for data visualisation?\r\n\r\nYes, but that actually turns out a bit harder and for some reason expensive. We'll look at the alternatives for that.\r\n\r\nThis presentation is also suitable for visitors who are not data engineers or who have little knowledge of Kubernetes.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "EDRLML", "name": "Marcel-Jan Krijgsman", "avatar": "https://cfp.nluug.nl/media/avatars/EDRLML_fHzBwn4.JPG", "biography": "Marcel-Jan Krijgsman is a senior data engineer with 27 years experience in data. Learning Python when switching his career to data engineering 9 years ago, these days it's part of his daily life. Whether he retrieves data from his weighing scale to store in a database, or updating his cycling dashboard on an e-ink display.", "public_name": "Marcel-Jan Krijgsman", "guid": "44bc6471-cda1-5d17-9145-a6de6dfa0c17", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/EDRLML/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/KSBJZM/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/KSBJZM/", "attachments": []}, {"guid": "60bc1e61-0e07-5ca8-bd02-853d3a179f1f", "code": "3RTNED", "id": 174, "logo": null, "date": "2026-05-07T14:00:00+02:00", "start": "14:00", "duration": "00:45", "room": "Room 2", "slug": "nluug-voorjaarsconferentie-2026-174-praktijkervaringen-met-de-verkiezingssoftware-abacus", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/3RTNED/", "title": "Praktijkervaringen met de verkiezingssoftware Abacus", "subtitle": "", "track": null, "type": "Talk", "language": "nl", "abstract": "De Kiesraad werkt aan Abacus, de open source software voor verkiezingsuitslagen en zetelverdeling. Abacus is bij 14 gemeenten tijdens de gemeenteraadsverkiezingen in 2026 gebruikt om resultaten te digitaliseren en op te tellen. Wat zijn de praktijkervaringen, hoe kijken de gebruikers ernaar? De software wordt open source ontwikkeld, de repo is publiek op https://github.com/kiesraad/abacus en iedereen kan PR's indienen - zowel de gebruikers als mensen van buiten. Deze openheid is een randvoorwaarde, maar je moet ook het land in en de feedback vanuit gebruikers en de community ophalen. Hoe pakt de Kiesraad dit aan en wat leren we hiervan? Het ontwikkelteam blikt terug op het ontwikkelproces en de eerste toepassing van Abacus en laat zien hoe je mee kunt helpen.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "KBGVMA", "name": "Niels Hatzmann", "avatar": "https://cfp.nluug.nl/media/avatars/profiel_kIJ51mC.jpg", "biography": "Niels Hatzmann werkt voor de Kiesraad in het team dat Abacus bouwt, de nieuwe uitslagensoftware. Eerder was hij als projectleider en documentatiespecialist betrokken bij het programma Realisatie Digitale Ondersteuning van het Ministerie van VWS en werkte hij als onderzoeker samen met Stratix aan adviezen op het gebied van digitale infrastructuur.", "public_name": "Niels Hatzmann", "guid": "1383b75e-0a60-5555-b145-bd66988b13ec", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/KBGVMA/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/3RTNED/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/3RTNED/", "attachments": []}, {"guid": "75b6a2bd-cc20-5c9c-8288-f50c80472f6d", "code": "NGNFFP", "id": 193, "logo": null, "date": "2026-05-07T14:50:00+02:00", "start": "14:50", "duration": "00:45", "room": "Room 2", "slug": "nluug-voorjaarsconferentie-2026-193-what-is-it-like-to-work-for-a-hyperscalar", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/NGNFFP/", "title": "What is it like to work for a Hyperscalar?", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Having worked for Google Switzerland in Z\u00fcrich for 15 years, former NLUUG chair JC van Winkel returns to the Netherlands. What is it that makes Google Switzerland such an attractive employer for (former) NLUUG board members (Jos Visser and Bram Moolenaar started at Google 4 years before JC)?  What is it like to work for such a large tech company? Wat is different compared to other, smaller companies? And what has changed in the past 15 years?", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "SRLNAE", "name": "JC van Winkel", "avatar": "https://cfp.nluug.nl/media/avatars/SRLNAE_iXWEw0N.png", "biography": "1984-1990 Software Engineer bij KPMG\r\n1990-2010 docent/cursusontwikkelaar bij AT Computing\r\n2010-2026 Site Rilaibility Engineer bij Google Z\u00fcrich\r\n\r\n1995-2007 Bestuurslid NLUUG, waarvan 2000-2006 als voorzitter", "public_name": "JC van Winkel", "guid": "3b59d69d-5612-521d-bd34-85874e8347ab", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/SRLNAE/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/NGNFFP/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/NGNFFP/", "attachments": [{"title": "Slides and notes.", "url": "/media/nluug-voorjaarsconferentie-2026/submissions/NGNFFP/resources/Wor_TGXSYga.pdf", "type": "related"}]}], "Room 3": [{"guid": "5abe1745-536e-56fc-8ea4-d8f8c11a3c98", "code": "VJLAEK", "id": 194, "logo": null, "date": "2026-05-07T09:00:00+02:00", "start": "09:00", "duration": "00:45", "room": "Room 3", "slug": "nluug-voorjaarsconferentie-2026-194-crystal-ball-vulnerability-prediction-a-wizard-s-guide-to-foreseeing-the-unseen", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/VJLAEK/", "title": "Crystal Ball Vulnerability Prediction: A Wizard\u2019s Guide to Foreseeing the Unseen", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "As a **neuro-divergent practitioner of the arcane**, I wield a rare and potent magic: *pattern recognition*. Once, I channelled this power solely into the art of programming. But lo! My craft has since expanded into the **shadowy realm of security**, where, with a fair degree of precision, I can peer into the future itself.\r\n\r\nYou doubt me? Ah, but I have a tool to focus my visions: a **crystal ball**.\r\n\r\nWhen I unroll the parchment of a security fix\u2014be it for software, firmware, or some other enchanted artifact\u2014I feed its secrets into my orb. There, the mists part to reveal deeper truths:\r\n- Where more vulnerabilities lurk (*both kin and stranger*),\r\n- Which other creations of the same artisan may falter,\r\n- And, most crucially, whether this vendor\u2019s name shall soon darken the scrolls again.\r\n\r\n*\"But how does this sorcery work?\"* you ask, eyes alight with curiosity.\r\nAh, patience, seeker! In this session, those gathered (whether in hall or through *scrying glass*) may earn a glimpse behind the curtain.\r\n\r\n**A warning, though:**\r\nLike all magic, this craft is a double-edged blade. Evil wizards already stalk the digital shadows, and we must outpace them. Our duty?\r\n- To **unmask the vulnerable**,\r\n- To **expose the flaws**,\r\n- And, unlike those who merely slap on bandages (or *\"patches,\"* as the mundanes call them), **forge solutions that endure**.\r\n\r\n*\"What kind of solutions?\"* you wonder.\r\nOh, eager apprentice! All shall be revealed.\r\nBut know this: **we must be swifter, sharper, and bolder than the darkness**.\r\nThe fate of the realm depends on it.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "SMESQW", "name": "Arjen Lentz", "avatar": "https://cfp.nluug.nl/media/avatars/SMESQW_lyxqqYz.jpg", "biography": "**Arjen Lentz** started programming as a teenager in the early \u201980s, using a **PDP-8** at the local computer club and an **Acorn BBC/B** at home, where he also tinkered with electronics. These were the days when computers did nothing unless you coded them yourself, so he explored `(dis)assembly`, **bulletin boards**, and **modems**. However, recognising the limited legal career opportunities in those areas, he shifted his focus to **C programming as a profession**, making use of his data communications and low-level programming skills.\r\n\r\nBeyond custom projects for clients, Arjen wrote and refactored significant portions of code for the **BBS** and **FidoNet** community. His work included:\r\n- The **Xenia Mailer** (based on *The-Box* by his friend **Jac Kersing**),\r\n- The **Xenia Email reader and editor**,\r\n- A fresh implementation of **Zmodem** to improve connections over unreliable satellite links, preventing costly protocol deadlocks (along the way, he identified a *key design flaw* in the protocol that caused those deadlocks),\r\n- The **Hydra bidirectional file transfer protocol**, designed to make the most of the bandwidth offered by high-speed **V.32bis modems**.\r\n\r\nWhen **OS/2** arrived, Arjen embraced it eagerly, as **(Double)DOS** could only do so much. **OS/2 Warp** (GUI quirks aside) was a solid environment, as was the **Watcom C/C++ compiler**. Later, [Slackware Linux](https://www.slackware.com/) arrived by post from **Walnut Creek** on CDs. Code from that era occasionally appears on [github.com/lentzdev](https://github.com/lentzdev), mostly for nostalgia but sometimes still useful.\r\n\r\nAround the turn of the millennium, Arjen moved to **Australia**, attracted by the space, climate, and new opportunities. Some time afterward, he joined **MySQL** as **employee #25**, working remotely for the ambitious startup. Some may remember him from this period, particularly for his talk at the **NLUUG Voorjaarsconferentie 2003**, where **Bram Molenaar** chaired the programme. Arjen\u2019s afternoon presentation explained how MySQL managed to build a profitable business while giving away its software for free.\r\n\r\nAfter his time at MySQL, Arjen ran his own *training and consulting business* for 11 years before selling it and returning to the security field as a **CISO**. It turned out he had simply been ahead of his time: the market for **security skills** had yet to mature. Now, we all know that market is thriving, and **coding experience** is a fantastic additional asset, as is an understanding of how businesses work.\r\n\r\nToday, while Arjen occasionally codes, he serves as **Senior Technical Architect** at [Ravinn](https://ravinn.com), a **Queensland-based boutique cybersecurity company**. He has a particular interest in *fundamentally improving security*. Last year, Arjen found and fixed a security bug in `sudo`.\r\n\r\nArjen doesn\u2019t blog much these days but scribbles his opinions on:\r\n- [LinkedIn](https://linkedin.com/in/arjenlentz)\r\n- Mastodon: [@arjenlentz@mastodon.social](https://mastodon.social/@arjenlentz) and [@art461@infosec.exchange](https://infosec.exchange/@art461)\r\n\r\nHe is dedicated to **open source**, most recently acting as **treasurer** for the **[Everything Open 2026](https://2026.everythingopen.au)** conference in **Canberra**.", "public_name": "Arjen Lentz", "guid": "946dbfea-25ea-557c-8878-1b48a636a51e", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/SMESQW/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/VJLAEK/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/VJLAEK/", "attachments": []}, {"guid": "01d6379f-c71f-5f5f-b479-59b41a3b9701", "code": "C999YA", "id": 169, "logo": null, "date": "2026-05-07T09:50:00+02:00", "start": "09:50", "duration": "00:45", "room": "Room 3", "slug": "nluug-voorjaarsconferentie-2026-169-the-cascade-dnssec-signing-solution", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/C999YA/", "title": "The Cascade DNSSEC Signing Solution", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Cascade is the new DNSSEC signing solution by NLnet Labs slated to replace OpenDNSSEC. It manages keys on disk or on HSMs, has sensible defaults, provides review hooks which allow us to use our preferred verification solutions, very decent logging, and it is designed to be easy to interact with and to communicate sensibly what it is doing.\r\n\r\nIn this talk I present Cascade, discuss some of its features, and I will of course demo signing a zone with it. \r\n\r\nIf you've been putting off DNSSEC-signing your zones, now's the chance to embark on that project!", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "3ZNVKA", "name": "Jan-Piet Mens", "avatar": "https://cfp.nluug.nl/media/avatars/3ZNVKA_SBgFINH.jpg", "biography": "Jan-Piet is an independent Unix/Linux consultant and sysadmin who's worked with Unix-systems since 1985.\r\n\r\nJP does odd bits of coding, and works extensively with the Domain Name System and as such, he authored the book Alternative DNS Servers as well as a variety of other technical publications.  He contributed several modules and the documentation system to the Ansible project and dreamed up the Open Source (MQTT-based) OwnTracks project. JP blogs at [jpmens.net](https://jpmens.net)", "public_name": "Jan-Piet Mens", "guid": "d8b84ace-f9fc-5a50-ae6c-596551994ac8", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/3ZNVKA/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/C999YA/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/C999YA/", "attachments": []}, {"guid": "df331b51-46d3-587c-b985-7d28357c92f6", "code": "FNHNKC", "id": 182, "logo": null, "date": "2026-05-07T12:00:00+02:00", "start": "12:00", "duration": "00:45", "room": "Room 3", "slug": "nluug-voorjaarsconferentie-2026-182-jpeg-xl-a-deep-dive", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/FNHNKC/", "title": "JPEG XL: a deep dive", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Standardized in 2022, thirty years after the original 1992 JPEG format, the JPEG XL format brings many improvements and new features that are missing in the 'old JPEG': better compression, a lossless mode, support for alpha transparency (and many other kinds of 'extra channels'), HDR, layered images, and animation, for example. Browser support for JPEG XL has recently gained momentum: both Chromium and Firefox are adding JPEG XL support, while Safari already supports it since 2023.\r\n\r\nIn this talk we'll dive deep into the actual codec design. How can JPEG XL reversibly recompress existing JPEG files while reducing their size by 20%? How does it achieve better lossless compression than PNG? How does it take advantage of modern processors (SIMD, multi-threading)? What was the design philosophy and which trade-offs were made in the design of this codec?\r\nThose are some of the questions that will be answered.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "K38XUP", "name": "Jon Sneyers", "avatar": "https://cfp.nluug.nl/media/avatars/K38XUP_eNiKW4N.jpg", "biography": "Dr. Jon Sneyers is a Staff Researcher at Cloudinary, a company providing cloud-based image and video management services to a million web developers at thousands of companies. His research focuses on image processing and image compression. He is the co-creator of the FLIF and JPEG XL image formats, an active participant in the JPEG committee and an editor of the ISO/IEC 18181 standard (JPEG XL) and the ISO/IEC 29170-3 standard (Subjective quality assessment of high-fidelity images, JPEG AIC-3).", "public_name": "Jon Sneyers", "guid": "82a7034e-e0e6-5199-a779-768646a38358", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/K38XUP/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/FNHNKC/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/FNHNKC/", "attachments": []}, {"guid": "f2984c74-e858-574b-a078-76ad20dbe5a8", "code": "C3GG97", "id": 180, "logo": null, "date": "2026-05-07T12:50:00+02:00", "start": "12:50", "duration": "00:45", "room": "Room 3", "slug": "nluug-voorjaarsconferentie-2026-180-asteroidos-linux-on-your-smartwatch", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/C3GG97/", "title": "AsteroidOS - Linux on your smartwatch", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Smartwatches are cool, can be convinient, and at times useful too. But, most options either run propietary software, often requiring accounts on top of that, or are simple systems running on microcontrollers. This is where AsteroidOS differs. It's a full Linux computer running on your wrist, able to run fully local with connections being optional, yet having many of the features you'd expect of a modern smartwatch. And as a Linux computer, it has the potential to be even more. There is good reason \"Free your wrist\" is the slogan of AsteroidOS. \r\n\r\nIn this presentation I'll like to tell you a bit about this smartwatch distro, both on the user- as the technical side, and show some cool stuff you can do with it. And of course, I'll have a few different watches to show, altrough the total amount of supported watches is much bigger.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "FDGYVP", "name": "Jessica Tran", "avatar": "https://cfp.nluug.nl/media/avatars/FDGYVP_7fMGLfX.jpg", "biography": "Jessica Tran is sinds een jaar of 6 oud met computers bezig, en al jaren Linux gebruiker. Ze is opgeleid tot software engineer, maar gezien ze meer plezier had in security & sysadmin taken heeft ze de overstap gemaakt en werkt ze tegenwoordig als Security & Compliance Officer bij team.blue. Tevens spreekt ze zich op privetitel uit over privacy en digitale sovereigniteit. In haar vrije tijd houd ze zich bezig met privacy, security, gamen, mensachtige-AI & HRI en eigenlijk alles omtrent computers. Daarnaast heeft ze een grote liefde voor honden en paarden, en het verzamelen van CDs.\r\n\r\nJessica is te vinden op haar persoonlijke website https://cambionn.nl of op Mastodon als @Cambion@mastodon.nl (https://mastodon.nl/@Cambion).", "public_name": "Jessica Tran", "guid": "31743792-6b99-5132-b98b-387f4cb6e643", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/FDGYVP/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/C3GG97/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/C3GG97/", "attachments": []}, {"guid": "207fb9af-8cbf-539e-961e-b0737818d561", "code": "LLWRZM", "id": 190, "logo": null, "date": "2026-05-07T14:00:00+02:00", "start": "14:00", "duration": "00:45", "room": "Room 3", "slug": "nluug-voorjaarsconferentie-2026-190-the-cve-illusion-behind-the-metadata-curtain", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/LLWRZM/", "title": "The CVE Illusion: Behind the Metadata Curtain", "subtitle": "", "track": null, "type": "Talk", "language": "en", "abstract": "Vulnerabilities are the \"bread and butter\" of security, yet the ecosystem providing this data is more opaque and more fragile than we realize. We track CVE numbers like stock prices, but do we understand the machinery behind them?\r\nAs the volume of reported vulnerabilities explodes and new registries emerge, we face a critical question: What happens if the feed stops?\r\nThis session looks beyond the surface and examines the layers of the global vulnerability ecosystem. We will move beyond the four-digit ID to explore the \"metadata soup\" that powers our scanners and risk assessments.\r\nKey takeaways include:\r\n\u2022\tThe CVE Anatomy: A deep dive into the inner workings, history, and uncertain future of the CVE Program.\r\n\u2022\tMetadata Clarified: A breakdown of what vulnerability metadata actually tells us, who generates it, and more importantly when it lies or misleads us.\r\n\u2022\tThe Registry Wars: Navigating the rise of new vulnerability databases and what this fragmentation means for open-source security.\r\n\u2022\tActionable Intelligence: How to separate high-signal data from the noise and build a more resilient security posture.\r\nWhether you're a maintainer, a researcher, or a defender, it\u2019s time we stop taking CVEs for granted and treated as gospel and start understanding the data that drives our industry.", "description": null, "recording_license": "", "do_not_record": false, "persons": [{"code": "9BG7UK", "name": "Katie Noble", "avatar": "https://cfp.nluug.nl/media/avatars/9BG7UK_AjG9PrN.jpeg", "biography": "Bio: Katie Trimble-Noble\r\nDirector, PSIRT and Bug Bounty\u00a0\r\nKatie serves as a CVE Program Board, Bug Bounty Community of Interest Founder, and Hacking Policy Council Founding member. She is a passionate defensive cybersecurity community activist, she is regularly involved is community driven projects and is most happy when she is able to effect positive progress in cyber defense. In her day job Katie Noble serves as a Director of PSIRT, specializing in Global Secretarial Policy and Industry Engagement and Bug Bounty, at a fortune 50 Technology Company. Prior to joining private sector, Katie spent over 15 years in the US Government. Most recently as the Section Chief of Vulnerability Management and Coordination at the Department of Homeland Security, Cyber and Infrastructure Security Agency (CISA). Her team is credited with the coordination and public disclosure of 20,000+ cybersecurity vulnerabilities within a two-year period. During her government tenure, in roles spanning Intelligence Analyst for the National Intelligence Community to Senior Policy Advisor for White House led National Security Council Cyber programs, Katie\u2019s work directly impacted decision making for government agencies in the United States, United Kingdom, Canada, and Australia.", "public_name": "Katie Noble", "guid": "df7f20bc-5542-50a4-9742-1c388d2ae4d1", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/9BG7UK/"}, {"code": "RM9PBR", "name": "Jeroen van der Ham-de Vos", "avatar": "https://cfp.nluug.nl/media/avatars/RM9PBR_93Ku2j9.png", "biography": "Jeroen van der Ham-de Vos (he/him) is associate professor of Cyber Security Vulnerability Management at the University of Twente. His research currently focuses on vulnerability prioritisation and management, incdent response, the many developments in coordinated vulnerability disclosure and ethics of cybersecurity and computer science.\r\nJeroen has worked at the National Cyber Security Centre-NL from 2015 until 2023 as a cybersecurity researcher. There he coordinated the NCSC Research Agenda, was the national expert on Coordinated Vulnerability Disclosure, and was part of crisis teams such as with Wannacry or Log4J.", "public_name": "Jeroen van der Ham-de Vos", "guid": "28f74225-d68d-571d-a0db-fc49cf8a330c", "url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/speaker/RM9PBR/"}], "links": [], "feedback_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/LLWRZM/feedback/", "origin_url": "https://cfp.nluug.nl/nluug-voorjaarsconferentie-2026/talk/LLWRZM/", "attachments": []}]}}]}}}