SPEAKER · CHRIS CON 2026

Tomas Lindqvist

Security Researcher · Norwind Labs

Tomas researches software supply-chain security at Norwind Labs and maintains tooling for dependency auditing. He has responsibly disclosed more typosquats than he'd like to count.

SESSIONS · 2

13:45–14:30

TUE · DEC 1

RIVER HALL

Lessons from the Lockfile: Defending Your Dependency Chain

Security·Deep Dive (45 min)

Modern apps ship more third-party code than first-party code, and attackers noticed. This deep dive dissects three real-world dependency compromises — how they got in, how they were caught, and the checks that would have stopped them. Covers lockfile hygiene, provenance attestation, and a pragmatic review process for the packages that matter.

15:00–15:45

TUE · DEC 1

MAIN STAGE

AI in Production: Beyond the Demo

AI & ML·Panel (45 min)·with Aisha Bello, Hannah Weiss

Everyone has an AI demo; far fewer have an AI feature that survives real users. This panel brings together three practitioners shipping LLM-powered products to talk honestly about evaluation, cost, guardrails, and what changed in their engineering practice. Moderated, with plenty of time for audience questions.