Francisco Amato
termsecurityevents
Co-founder of Ekoparty and of Infobyte, and the author of Evilgrade - the framework that demonstrated how software update mechanisms could be abused to deliver attacker-supplied code to a victim who was doing exactly what security advice told them to do.
Evilgrade landed at the point where the industry was telling everyone to keep software updated, and showed that an update channel without signature verification is a distribution system for whoever controls the network path. The work is a good example of research from the region setting an international agenda: update integrity is now assumed, and part of the reason is that someone built the tool that made the failure undeniable.
Also known as: evilgrade, infobyte, ekoparty founder