Chaos Computer Club - archive feed

E-signatures in your country are insecure. They have been hacked 10 years ago. Everyone knew that but no one wanted to talk about it since there is no easy fix. We decided to create a PoC and poke the government with it. This is a story on what happened. ⭐ PoCs included ⭐ Electronically signed documents were a great relief to organizing our daily life during the pandemic. They have actually been...

Ever wondered what happens behind the scenes when you click buy on that domain for a new side project that'll definitely happen (you will get to it eventually, right)? Well this is the talk for you! We'll cover all the extremely cursed details of how exactly one sells and manages a domain, the standards for this (or lack thereof), and some pointers for how you could get started managing your own d...

People have been modeling different parts of Earth's systems for decades, on different scales and with different goals from short term weather forecasting through actuarial risk prediction to long term climate models. In this talk I'll explore some of the typical models, methods, data formats, infrastructure layouts and design assumptions that go into such models, and discuss some low hanging frui...

Warning (but don't be afraid): this talk contains an overarching theory of the workings of Internet governance (with an emphasis on human rights)! The rules of the road for the Internet infrastructure are designed in different governance bodies, such as the Internet Engineering Taskforce (IETF), the Internet Corporation for Assigned Names and Numbers (ICANN), and in Regional Internet Registries (R...

A number of people have built wonderful and useful tools to make the life of KiCad users easier. cpresser and Kliment are here to give you a tour of a number of the most useful addons, and show you what they're good for and how they can improve your life. We will go through a number of tools that people have built into the KiCad ecosystem - you may have used some of them, but a surprising number o...

A multi-disciplinary lecture and follow up discussion about sustainability from the hacker perspective. It will combine the state of the art scientific knowledge and evidence with observations on the cultural dynamics of the hacker community. It is the continuation of the series started at OHM 2013, SH2017, Balccon 2019 and Bornhack 2019 Climate change, habitat and biodiversity loss, environmental...

Most security implementations leak information, mechanical security is no different. It takes sharp eyes, a soft touch, and a good hearing to distinguish between information and noise. In this talk we will go in depth on how locks works, and how we can persuade them to disclose their secrets, and open them without damage. The Open Organization of Lockpickers (Toool) is a group of nerds obsessed wi...

In March 2022 the Global NOG Alliance (GNA) started the Keep Ukraine Connected task force to help network operators in Ukraine during and after the invasion. These are our experiences. A simple idea turned into an interesting logistics puzzle with a steep learning curve into customs rules. What started as a simple idea ("Our goal is to help network operator groups, I'm sure there is more that we c...

Utilizing collaborative security to collect data on attacks we were able to detect Log4J in a quite unusual but effective manner. We'll show you how CrowdSec enables the entire infosec community to stand together by detecting attempts to exploit a critical 0day, reporting them centrally thereby enabling anyone to protect themselves shortly after the vulnerability was made public. The unusual part...

Building on the very well attended DNA presentations ("DNA: The Code Of Life") at SHA2017, this talk will cover: * A brief recap what DNA is and how it works * It is surprisingly digital! * How reading DNA is within 'pro-sumer' reach now * (I might bring a live demo for after the talk) * An overview of DNA editing technologies (offline, and online: on living organisms) * Including the famous CRISP...

Thanks to DNSSEC and DANE, it is possible to automatically verify user@domain.name identities by checking with domain.name servers. The real problem however, is integration with existing protocols, instead of inventing something completely new and perhaps web-only. The purpose of our work on Realm Crossover mechanisms has been to design generic solutions that extend many different application prot...

Have you ever forgotten a passphrase or lost a hardware token? Lost access to enough Bitcoin to buy a pizza or two? Encryption is fundamental to securing our liberties, but key and password management remain difficult even for professionals, let alone the general public. This talk presents Passcrow, an Open Source project attempting to address one of crypto's largest usability issues: password and...

This is a submission for a keynote talk at MCH2022. The Internet is both a familiar, comfortable place as well as a bottomless rabbit hole you can lose yourself in. The Internet has always been like this from its inception, the difference now is the scale and consequences are almost immeasurable - and it tests the limits of human imagination. When you look into the mirror of the Internet what you...

Lightning talks are a 5 to 10 minute quick talk on an interesting subject. They can be with or without slides, and with or without proper preparation. if you weren't accepted in the main CfP, this is also a great opportunity to give an abridged version of your talk. These sessions will be available to sign up to later on, with details on the wiki. Lightning talks are a 5 to 10 minute quick talk on...

What do big tech, synthesizers, the crucifixion and Matthäus Passion have in common? Find the answer in the tech performance The Silicon Passion. We’ve all embraced big tech —but is it a warm hug or a strangulation? Bear witness to a debate of biblical proportions between tech nerds, technology and its users. In The Silicon Passion SETUP, in collaboration with de Transmissie (David Schwarz en Derk...

⚠️ Warning! This talk may contain hackers. There may be hackers in the room. There may be hackers surrounding the room. There may be hackers recording this. There may be hackers listening in. There may be hackers that exfiltrate data. There may be hackers wearing shirts. There may be hackers carrying spying devices. OH NO! There are hackers EVERYWHERE! What can we do now, except having a party? Th...

Ich möchte einen Workshop organisieren! Aber wie? In diesem Petit Foo stelle ich verschiedene Möglichkeiten vor um einen Workshop zu organisieren und gebe Tipps worauf man bei der Durchführung achten sollte. about this event: https://www.chaospott.de

Ein Spiel, das zeigt, wie viel im Leben auf Glück basiert about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/WFAAQJ/

Eine App, die reisen leichter macht about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/EGUGBQ/

Die datenschutzsichere Sicherheitskamera about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/RQ9FHA/

Pflanzen spielerisch kennenlernen about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/CASDPC/

Der angenehmste Wecker der Welt about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/YDFDRD/

Webseite, auf der Schulbücher, Aufgaben und alles weitere gesammelt werden about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/Z9SF39/

Plattform, auf der Schüler*innen gesammelt Fragen stellen und beantworten können about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/FNMTT9/

Eine Einkauflisten-App, die gemeinsam verwaltet werden kann about this event: https://pretalx.c3voc.de/jugend-hackt-rhein-neckar-2022/talk/Z3ZNNF/