Chaos Computer Club - archive feed

Tales in a life of a product security engineer making Open Source software more secure one bit at time. In this session, I will talk about what does it mean to be a product security engineer and how SUSE security team audits can help Open Source community in having a better security posture. Tales in a life of a product security engineer making Open Source software more secure one bit at time. In...

When a 3,500 ton ship tries to be in the same place as an oil rig then it is safe to say that someone is going to have a bad day. Nobody was injured and no oil was spilled, so it didn't make the news and was just an insurance job - a very BIG insurance job. This talk explains the many mistakes that led to the accident occurring, and how much worse the outcome could have been. It is presented by an...

Before downloading a software release, we all know to verify the GPG signature before even trying to unpack that tarball. And when such a signature is not available, we all know to chastise the developer for not taking security seriously. But what happens with deployed web resources? How can these be verified before we trust them with our secure data? I would like to show a proof-of-concept of usi...

During the last years, the openSUSE infrastructure was improved a lot. But is it perfect now? Of course not - otherwise the Heroes would be bored, and I could not give this talk. And of course, where people work, funny[tm] things happen - please bring your own popcorn ;-) During the last years, the openSUSE infrastructure was improved a lot. But is it perfect now? Of course not - otherwise the Her...

A short talk on how to build, play and perform with a ukulele illustrated with geeky songs based on my love of physics and electronics. Advice for joining bands and getting free beer at a pub open mic night for the musically inept. I'll bring along my homemade electro uke made out of oak, enamel paint, and bruised thumbs. Although the talk will be brief, I can stay around afterwards to discuss cut...

This talk explores the softer side of electronics, from electronic embroidery and e-textiles to soft robotics and flexible PCB design. We will take a look at some of the exciting technologies in this field, including industrial machines that embroider traces to microcontrollers, open source soft robotics, 'pick and place' sewable LEDs, e-textiles in space, fabric speakers and the world of flexible...

Sudo is used by millions to control and log administrator access to systems, but using only the default configuration, there are plenty of blind spots. Using the latest features in sudo lets you watch some functions that previously were blind spots and you can also control access to them. There were several minor and major changes since the 1.9.0 release that I discussed in my previous FOSDEM talk...

Deploying images is ever evolving topic. Although much of the deployments today are concerned with containers, base systems for container host are somehow needed to be deployed as well. Let me present Saltboot, part of Uyuni stack. Saltboot is building on SaltStack to make image deployment secure and together with Uyuni provides complete image lifecycle and management - from image building, stagin...

A deep dive into the Windows boot process, its security mechanisms, and the security issues that have been found within the last 10 years, culminating in a single bug (found in August 2021, fixed in January 2022) that can bypass all such security mechanisms. about this event: https://c3voc.de

About four years ago I realised I was miserable and that I should probably do something about that, so I did what any self-respecting nerd would do and read a tonne of books to figure out how emotions worked (I did also go to therapy, but the books were more useful). Life isn't perfect now, but it's a lot better despite the ongoing war and pandemic. I'm going to give you an overview of some of the...

In this talk Emil will go over some of Jitsi's History, what use cases and larger forces drive its development and where it is headed. Looking forward to seeing you there! In this talk Emil will go over some of Jitsi's History, what use cases and larger forces drive its development and where it is headed. Looking forward to seeing you there! about this event: https://c3voc.de

I run Parkrun (some weeks), and am trying to run the alphabet. While running one week I realised that every parkrun course is the same. They are all basically one of a few mathematical objects, the integers or some pair, tuple or quadruple of integers. We will ask and see why? In this talk I will explore the broad and interesting idea of Topology and present them to a general audience through come...

Games controllers are boring. They have the same few buttons in the same place. It doesn't have to be this way. In this talk, I'll go through how I've made controllers that are different and unique. These controllers are quick and easy to make with a microcontroller and Circuit Python, and theycan use almost any input device, such as slider potentiometers, rotary encoders, IMUs and touch pads. We’...

The Open Build Service has new support to allow developing packages directly in git repositories. This means that entire source management would be handed over to some pagure, gitlab or gerrit instance as origin of trust. The talk will describe possible setups, workflows and development scenarios. Including an open discussion what should we aim for our main distributions. The Open Build Service ha...

An introduction to getting started designing and building your own audio DSP processors for guitar pedals, eurorack modules and other similar style projects using modern microcontrollers. Covering the very basics of digital audio, microcontrollers, audio codecs and PCB design, this talk will give a whistle stop tour of the process involved in making digital effects processors from conception to bu...

Imagine this: you're a Venezuelan student activist, and you're protesting to get your university the budget it so desperately needs and the powers that be mercilessly cut away. But then, your government disrupts phone coverage in the area to discourage protestors and potentially cover human rights violations. Scary, right? Hopefully you're not in this situation. But chances are your hacker brain w...

openSUSE Leap Micro is a new distribution based on SUSE Linux Enterprise Micro with the main purpose to be a host-os with minimal footprint which fits well the app-centric world. A small foot print, focus on the EDGE as well as data center, containerization and virtual machines, whatever flies your app. Leap Micro has a 6 months release cycle with support lasting until the next release or up to 4...

The demoscene is a strange geek subculture, dedicated to making great digital art and making computers doing things they were never designed to do. At EMF, we have the Field-FX village, which will spend the weekend showcasing the best of the demoscene. Come learn who we are and how you can get involved and easily start creating some awesome demos about this event: https://c3voc.de

Delighted to announce that the Ore-Some Xylophone will be making its UK debut at EMF 2022! Come and see the electromechanical xylophone that generates truly random compositions by measuring the radioactivity of a lump of uranium ore. You can turn the handwheel to move the lead shield and adjust the speed of the music. I like making things, often mechanical or electronic. My sculptures frequently h...

On an example of PMM (Percona Monitoring and Management) opensource project I would like to show how to use podman instead of docker in software development process. We would go throw the basic (how to configure it) and discuss the changes required in build scripts, environment and etc. This will cover docker (run, build), docker-compose and briefly minikube to be replaced or use podman. [presenta...

The speaker works for a small company in the UK who have developed a VTVL (Vertical Take-off, Vertical Landing) rocket, also known as a hopper or lander. This started as a student / hobby project and is now receiving funding from the European Space Agency (ESA.) There are lots of interesting technical problems involved in making a VTVL rocket work. You need to steer the rocket engine and control i...

PAMAL_Group is a European artistic group, composed of artists, media theorists, curators-restorers and engineers. Their artwork "3615 Love" will be installed at EMF 2022. PAMAL_Group creates its own works from digital artworks that have disappeared or been severely damaged due to the obsolescence of computer software and hardware. Its work seeks to reveal the vulnerability of an art that is highly...

YaST, the flagship installer and configuration tool of openSUSE is in constant development. Just as its unattended companion AutoYaST. Although the YaST Team at SUSE tries to communicate progress as often as possible in the YaST Blog, it has been almost two years since we presented the "Top 25 New Features in (Auto)YaST" at openSUSE Conference 2020. So it's time for another live update! We will re...

It's no news or secret that containers are good at providing multiple and different testing environments, or at offering a way of deploying apps and services that are completely decoupled from the host OS. E.g., spin up a distro X container, check if code compiles there (and dispose of it). How about the opposite? I.e., having one (or more!) stateful and persistent environment(s), tightly coupled...

We've all found ourself doomscrolling, and fighting against social network's barrage of extra things in our newsfeed and notifications to keep us there for longer. It's not good use of time, energy and mental bandwith, and hell in my case the habitual refreshing has started giving me RSI. I'll go through my three steps to stop Doomscrolling and get out of the social media refresh loop (or at least...